This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json) Hash identifier: 63sZQwUhmVuLbCcgWrAt3Th3cO4X4afh8ZsBKLOgS3Y= Subject key identifier: 23:9C:CA:BF:DB:7A:E0:CD:0D:6F:4C:08:BC:F4:AE:02:B1:0F:32:A2 Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7 Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7 Certificate serial: 019B35D773CA77FD54A2B0437E2D3E820ACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 09:01:10 +0000 Manifest this update: Fri 19 Dec 2025 09:01:10 +0000 Manifest next update: Sat 20 Dec 2025 09:01:10 +0000 Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=) 2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: Yj9xmkFGmcnq20gLJ87tIzEfdN8VdD3WspeUSvEmMZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:73:ca:77:fd:54:a2:b0:43:7e:2d:3e:82:0a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7 Validity Not Before: Dec 19 09:01:10 2025 GMT Not After : Dec 20 09:01:10 2025 GMT Subject: CN=239ccabfdb7ae0cd0d6f4c08bcf4ae02b10f32a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7f:98:0d:bb:db:ff:84:bd:5b:2e:70:0c:9c: 80:f6:9d:44:72:1c:3d:9a:20:1c:e0:8a:d4:3c:59: ce:ef:0a:16:df:dd:dd:d9:1e:d9:e6:e5:95:b4:66: 9f:ac:45:3a:b4:92:af:6e:0d:0f:0d:03:94:a0:ff: 0d:18:b3:af:43:ea:6d:50:a8:b3:af:42:57:82:07: 7a:5a:8f:7c:d0:a8:e7:5b:6f:74:cd:72:32:7c:29: f3:e6:5a:23:05:9a:fc:a8:06:9d:6d:b8:f2:74:fa: be:64:66:82:40:d3:e7:43:c2:e8:c5:39:e2:0a:62: 25:20:16:7a:85:d5:7f:a3:bc:1f:4a:7c:e9:61:e8: 37:c7:b7:ca:fd:a8:5a:fe:45:c0:0a:71:82:95:37: d5:57:2d:15:3e:55:dd:ce:ff:f2:09:35:f9:7c:be: 5f:47:68:15:60:a4:6d:ec:bd:9d:e3:17:8e:8d:ca: a7:d0:26:c7:90:ac:17:76:f5:ec:03:f4:60:e4:b8: 8d:21:ea:44:a4:6b:4b:76:2d:29:70:5a:2d:f9:fa: a3:f0:97:4d:a0:0a:56:c1:9f:3a:74:c9:bb:21:22: 7f:4b:cc:5c:b9:5d:a6:f2:45:06:db:17:52:0a:f3: 3b:38:28:93:19:6b:fc:25:89:66:a1:3f:9e:54:f9: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9C:CA:BF:DB:7A:E0:CD:0D:6F:4C:08:BC:F4:AE:02:B1:0F:32:A2 X509v3 Authority Key Identifier: keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:21:8f:2f:5c:3e:2f:bf:6f:08:4b:13:c1:53:a0:bf:83:9c: be:26:d0:fd:56:f8:e0:cf:e4:9e:d1:69:54:91:96:0c:8e:c9: c8:95:ef:78:49:08:1b:75:a2:61:20:b9:0b:01:1a:98:9f:a1: 90:dd:10:d0:f7:53:14:90:b7:ff:ec:5e:10:8c:f1:ef:cb:c4: c4:4b:35:ec:54:21:ff:f2:ec:b5:7f:84:da:2b:32:ed:47:ce: cd:07:a5:50:77:4e:41:03:5c:71:d9:6d:87:65:7b:91:81:d2: f7:63:e9:15:b5:33:9c:a9:6c:58:55:ca:e5:b1:75:40:7f:08: 0f:00:25:ea:b3:18:e6:ad:42:19:2b:85:e0:ca:29:3b:b2:bc: 20:b9:58:96:5a:c0:c0:66:a5:cc:cc:0c:c4:78:01:30:d7:3f: 66:d8:1e:0c:cc:7b:ea:41:cc:b4:85:c0:cd:20:f2:68:30:2c: 33:2b:84:fc:3d:ab:93:c0:8b:35:48:04:77:16:dc:a6:84:84: 31:0a:81:ec:4f:e6:cb:d9:8c:b3:f7:5c:f8:ad:fa:95:9e:31: ab:68:79:ab:93:be:35:0d:91:0f:c7:71:61:c2:b9:32:c3:9d: 39:03:9a:f0:03:fe:94:c2:45:39:e6:29:a3:19:3b:77:4c:20: d2:d6:17:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs113PKd/1UorBDfi0+ggrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZkOTQyMzdlZmQyMDBkZDBiMTE2ZTFmNmY5YjdiY2E2 NTljYTcwHhcNMjUxMjE5MDkwMTEwWhcNMjUxMjIwMDkwMTEwWjAzMTEwLwYDVQQD EygyMzljY2FiZmRiN2FlMGNkMGQ2ZjRjMDhiY2Y0YWUwMmIxMGYzMmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+n+YDbvb/4S9Wy5wDJyA9p1Echw9 miAc4IrUPFnO7woW393d2R7Z5uWVtGafrEU6tJKvbg0PDQOUoP8NGLOvQ+ptUKiz r0JXggd6Wo980KjnW290zXIyfCnz5lojBZr8qAadbbjydPq+ZGaCQNPnQ8LoxTni CmIlIBZ6hdV/o7wfSnzpYeg3x7fK/aha/kXACnGClTfVVy0VPlXdzv/yCTX5fL5f R2gVYKRt7L2d4xeOjcqn0CbHkKwXdvXsA/Rg5LiNIepEpGtLdi0pcFot+fqj8JdN oApWwZ86dMm7ISJ/S8xcuV2m8kUG2xdSCvM7OCiTGWv8JYlmoT+eVPk6UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOcyr/beuDNDW9MCLz0rgKxDzKiMB8GA1UdIwQY MBaAFMbP2UI379IA3QsRbh9vm3vKZZynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEt ZGM4ODRmMWJlM2U1LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEtZGM4ODRmMWJlM2U1 LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSGPL1w+ L79vCEsTwVOgv4OcvibQ/Vb44M/kntFpVJGWDI7JyJXveEkIG3WiYSC5CwEamJ+h kN0Q0PdTFJC3/+xeEIzx78vExEs17FQh//LstX+E2isy7UfOzQelUHdOQQNccdlt h2V7kYHS92PpFbUznKlsWFXK5bF1QH8IDwAl6rMY5q1CGSuF4MopO7K8ILlYllrA wGalzMwMxHgBMNc/ZtgeDMx76kHMtIXAzSDyaDAsMyuE/D2rk8CLNUgEdxbcpoSE MQqB7E/my9mMs/dc+K36lZ4xq2h5q5O+NQ2RD8dxYcK5MsOdOQOa8AP+lMJFOeYp oxk7d0wg0tYXpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:55:04 2025 by rpki-client