This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json) Hash identifier: Xr1W6l6uHSqn/GbbUxZciAhgLpry09Gb+FawP7xyuY0= Subject key identifier: 49:EA:EC:DB:CF:5F:CE:D8:B1:DD:2E:BE:1B:18:84:1E:79:7D:F1:88 Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Certificate serial: 019B281B7F811A85D380FDDE7150E63392F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft Manifest number: 0AEA Signing time: Tue 16 Dec 2025 17:00:49 +0000 Manifest this update: Tue 16 Dec 2025 17:00:49 +0000 Manifest next update: Wed 17 Dec 2025 17:00:49 +0000 Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: 0xqlYUULkHvaLwolyEjt9Evk4ZksTdpZjBuaOdHUjjE=) 2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=) 3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:7f:81:1a:85:d3:80:fd:de:71:50:e6:33:92:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Validity Not Before: Dec 16 17:00:49 2025 GMT Not After : Dec 17 17:00:49 2025 GMT Subject: CN=49eaecdbcf5fced8b1dd2ebe1b18841e797df188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:cf:5e:2b:1d:18:5a:09:7f:2e:3b:66:ac: 5b:2a:89:80:88:d5:1b:ed:f8:f9:1e:f2:68:71:aa: 7c:50:cd:03:a9:f3:74:ae:b8:02:b7:01:a5:84:f2: f5:53:4d:24:d2:0e:6f:6c:a6:ac:21:e6:48:64:5c: 24:44:a8:a1:25:19:99:f3:6d:b0:6d:2f:10:6c:aa: 61:72:2b:d4:53:d5:43:a9:2f:04:c4:47:f0:bf:e5: c8:42:e3:c5:61:f4:a7:e0:cf:12:55:4c:9a:11:e6: 74:4a:e5:a4:98:d2:df:a2:48:7a:8b:bf:be:28:ca: f8:ff:48:0b:39:2d:dd:e0:4c:e2:b6:7d:3f:84:f0: 99:d0:42:55:0c:da:62:27:0d:68:6a:57:72:9a:26: 75:05:19:8c:b0:ad:c8:42:d2:c5:e4:81:34:64:1b: 98:46:7b:80:94:b7:10:42:0d:d3:29:df:59:81:d2: e8:14:14:c0:c8:a3:e9:a4:b9:4f:ba:5c:39:87:0e: 46:87:10:d2:b9:ea:03:a6:9e:9b:71:f1:28:66:65: f1:6b:48:8d:3b:8b:70:09:01:54:ba:53:6f:31:d4: 53:c0:83:c8:50:e0:d6:33:03:c9:cf:d2:dc:21:86: eb:71:4d:ee:dd:bd:a1:18:8b:b2:cd:f5:5d:3c:00: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EA:EC:DB:CF:5F:CE:D8:B1:DD:2E:BE:1B:18:84:1E:79:7D:F1:88 X509v3 Authority Key Identifier: keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a4:0c:27:ec:bb:c0:71:94:4a:87:8c:5b:f6:3c:47:cf:57: 6f:1f:ba:8d:d5:c2:67:76:49:77:f9:a6:b6:30:9f:08:bc:4a: 24:54:3b:b3:51:ec:2a:c0:e9:c8:64:d7:ca:8b:e8:7f:e4:07: cd:52:30:f0:b1:df:f0:4e:47:74:94:83:13:28:ce:c6:1c:72: 8d:70:d6:11:37:27:13:00:25:ed:a0:20:a3:45:43:9d:0d:ca: 31:6b:32:11:b0:37:3c:0f:51:f8:c1:70:7d:47:d9:fc:fd:df: fb:15:a3:7e:9c:33:9b:63:a4:f3:cd:19:22:9f:73:b5:30:6d: 50:f6:75:44:2b:f6:a2:ff:52:60:16:86:8d:f7:05:60:a4:14: c2:78:fc:aa:0d:e4:7e:43:d9:12:c3:2b:2a:1f:cf:b0:a6:6c: ca:bb:2b:75:a3:44:da:a6:7b:64:10:19:08:db:79:4c:da:5f: 8d:94:15:1f:15:51:f2:c0:9f:51:6d:5a:8d:60:35:c8:13:de: 7e:b0:14:e3:30:d0:ba:16:2b:eb:2d:ab:05:7b:8a:5c:d5:dc: 34:a8:f7:67:30:b9:4e:cd:98:72:04:24:d5:91:82:08:54:8c: 18:f8:b1:e2:aa:de:d4:a1:8e:0d:5d:8d:60:26:f4:7b:a9:11: cf:5d:db:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG3+BGoXTgP3ecVDmM5L4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4 OTE0YTIwHhcNMjUxMjE2MTcwMDQ5WhcNMjUxMjE3MTcwMDQ5WjAzMTEwLwYDVQQD Eyg0OWVhZWNkYmNmNWZjZWQ4YjFkZDJlYmUxYjE4ODQxZTc5N2RmMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TnPXisdGFoJfy47ZqxbKomAiNUb 7fj5HvJocap8UM0DqfN0rrgCtwGlhPL1U00k0g5vbKasIeZIZFwkRKihJRmZ822w bS8QbKphcivUU9VDqS8ExEfwv+XIQuPFYfSn4M8SVUyaEeZ0SuWkmNLfokh6i7++ KMr4/0gLOS3d4Ezitn0/hPCZ0EJVDNpiJw1oaldymiZ1BRmMsK3IQtLF5IE0ZBuY RnuAlLcQQg3TKd9ZgdLoFBTAyKPppLlPulw5hw5GhxDSueoDpp6bcfEoZmXxa0iN O4twCQFUulNvMdRTwIPIUODWMwPJz9LcIYbrcU3u3b2hGIuyzfVdPADvlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnq7NvPX87Ysd0uvhsYhB55ffGIMB8GA1UdIwQY MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt NGNlNGQ4ZmVhNmVmLzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKQMJ+y7 wHGUSoeMW/Y8R89Xbx+6jdXCZ3ZJd/mmtjCfCLxKJFQ7s1HsKsDpyGTXyovof+QH zVIw8LHf8E5HdJSDEyjOxhxyjXDWETcnEwAl7aAgo0VDnQ3KMWsyEbA3PA9R+MFw fUfZ/P3f+xWjfpwzm2Ok880ZIp9ztTBtUPZ1RCv2ov9SYBaGjfcFYKQUwnj8qg3k fkPZEsMrKh/PsKZsyrsrdaNE2qZ7ZBAZCNt5TNpfjZQVHxVR8sCfUW1ajWA1yBPe frAU4zDQuhYr6y2rBXuKXNXcNKj3ZzC5Ts2YcgQk1ZGCCFSMGPix4qre1KGODV2N YCb0e6kRz13b9g== -----END CERTIFICATE-----Generated at Wed Dec 17 03:46:43 2025 by rpki-client