This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft File: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft (raw, json) Hash identifier: 4m5YmRiSQNrp550uTq9SXacBCtA7VIlXBWIOwroQaq8= Subject key identifier: 86:B1:C5:3B:75:E3:4E:FD:A3:6F:05:50:4C:A1:73:20:D2:65:03:12 Authority key identifier: C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 Certificate issuer: /CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45 Certificate serial: 019B5A51A92BC06AEFD952007F587BFCAC63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft Manifest number: 0195 Signing time: Fri 26 Dec 2025 11:00:59 +0000 Manifest this update: Fri 26 Dec 2025 11:00:59 +0000 Manifest next update: Sat 27 Dec 2025 11:00:59 +0000 Files and hashes: 1: V6kqum_Jf9Ha9a7KMi40nzQHnZU.roa (hash: j6p3nEZhSZ7XPphSK/sX7nj13tsrJF7Mp7GMxj36D0k=) 2: x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl (hash: ZUmVHHVW8+jtDOfYZbDaWLAvLBmqwwkxas0Sn0frgy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a9:2b:c0:6a:ef:d9:52:00:7f:58:7b:fc:ac:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74f8824d48f43f66e54ba4a42e6d10ed15a4e45 Validity Not Before: Dec 26 11:00:59 2025 GMT Not After : Dec 27 11:00:59 2025 GMT Subject: CN=86b1c53b75e34efda36f05504ca17320d2650312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:e9:47:17:8d:a9:17:b0:0f:16:dc:2e:7a: 99:4c:fb:c5:c5:83:25:05:19:ce:7d:ea:34:7d:20: 2f:4b:63:d6:8d:6f:24:ac:32:51:c8:bb:d6:fc:0c: bf:75:e7:1c:66:41:8b:5c:f6:51:a9:ba:8d:bc:ac: c3:7a:12:86:b8:f3:18:a8:ff:03:cb:d5:7c:c8:cd: 7e:2b:20:56:2e:bb:74:53:b2:05:b6:01:6d:50:99: ab:86:2b:df:e3:01:a5:fa:e4:b7:73:ec:bf:34:8b: 15:4d:28:2e:ee:29:f7:0b:e9:6a:4d:4e:4e:6b:d0: aa:e2:72:1e:a1:39:36:9c:9c:26:3f:75:e1:51:1b: 9f:df:d6:7d:cd:8d:de:c7:59:c6:79:7e:c8:b6:a4: 8a:aa:b7:e1:c8:12:9d:8e:26:89:94:f9:9c:01:13: 22:6b:10:76:f0:fb:bb:d6:38:bc:2d:64:67:9f:b9: ec:99:62:ee:e5:6c:fa:c1:34:8f:62:de:77:f6:57: f6:cc:0a:f3:13:a8:b8:ea:42:22:16:eb:79:ce:32: 09:26:49:eb:92:f0:ab:85:00:7d:10:19:b2:a0:3b: b4:87:8f:85:20:3d:b2:76:cc:d7:6a:0b:aa:b1:5f: 03:77:fb:f9:b8:ca:0f:63:cc:46:b0:5b:e2:6a:88: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B1:C5:3B:75:E3:4E:FD:A3:6F:05:50:4C:A1:73:20:D2:65:03:12 X509v3 Authority Key Identifier: keyid:C7:4F:88:24:D4:8F:43:F6:6E:54:BA:4A:42:E6:D1:0E:D1:5A:4E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/94eafc-56de-43b4-a8da-ac767d4c4c8f/1/x0-IJNSPQ_ZuVLpKQubRDtFaTkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d8:fa:fa:27:31:43:3b:62:90:c0:42:58:81:e2:7f:11:76: 67:51:15:aa:d1:28:32:6f:81:4c:f2:fd:2a:4b:a7:77:92:0d: cb:82:72:a0:56:3e:c9:08:cd:31:a8:d0:dc:a8:00:2e:9e:7b: ec:b0:ec:fe:76:47:b6:08:ed:cf:4d:bd:7b:19:76:8f:e3:83: 1b:e9:df:5e:82:9a:f0:31:80:6f:45:76:c9:2d:6f:03:31:19: 4a:49:85:17:79:26:7d:50:ef:20:05:32:e2:e3:7b:c5:5b:aa: 81:01:c7:ac:ef:f6:ff:4a:ad:0a:d4:22:97:f1:94:81:53:c6: 9f:44:da:6b:41:ad:e9:c3:b7:5b:58:d5:a9:3e:a1:39:3f:3a: f3:8b:a5:65:34:8d:ab:9a:13:f2:25:df:45:71:82:b2:42:54: 47:da:20:f5:30:c6:7d:d6:cf:e6:8d:84:bc:cc:80:92:06:0b: 83:70:42:d3:64:37:96:55:ef:5d:24:25:03:9b:3a:9f:72:d9: b6:ea:21:21:3f:90:65:b3:59:6e:ca:c2:cc:8a:05:ef:1e:f8: 49:34:f8:78:77:7f:3c:c7:62:08:25:4b:a8:29:53:fc:e7:e5: 9c:83:3a:4a:0d:f3:de:83:db:31:a5:6a:d7:39:b8:e1:0e:f8: 0d:46:e4:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUakrwGrv2VIAf1h7/KxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGY4ODI0ZDQ4ZjQzZjY2ZTU0YmE0YTQyZTZkMTBlZDE1 YTRlNDUwHhcNMjUxMjI2MTEwMDU5WhcNMjUxMjI3MTEwMDU5WjAzMTEwLwYDVQQD Eyg4NmIxYzUzYjc1ZTM0ZWZkYTM2ZjA1NTA0Y2ExNzMyMGQyNjUwMzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlErpRxeNqRewDxbcLnqZTPvFxYMl BRnOfeo0fSAvS2PWjW8krDJRyLvW/Ay/deccZkGLXPZRqbqNvKzDehKGuPMYqP8D y9V8yM1+KyBWLrt0U7IFtgFtUJmrhivf4wGl+uS3c+y/NIsVTSgu7in3C+lqTU5O a9Cq4nIeoTk2nJwmP3XhURuf39Z9zY3ex1nGeX7ItqSKqrfhyBKdjiaJlPmcARMi axB28Pu71ji8LWRnn7nsmWLu5Wz6wTSPYt539lf2zArzE6i46kIiFut5zjIJJknr kvCrhQB9EBmyoDu0h4+FID2ydszXaguqsV8Dd/v5uMoPY8xGsFviaohyfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaxxTt14079o28FUEyhcyDSZQMSMB8GA1UdIwQY MBaAFMdPiCTUj0P2blS6SkLm0Q7RWk5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85NGVhZmMtNTZkZS00M2I0LWE4ZGEt YWM3NjdkNGM0YzhmLzEveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85NGVhZmMtNTZkZS00M2I0LWE4ZGEtYWM3NjdkNGM0Yzhm LzEveDAtSUpOU1BRX1p1VkxwS1F1YlJEdEZhVGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9j6+icx QztikMBCWIHifxF2Z1EVqtEoMm+BTPL9Kkund5INy4JyoFY+yQjNMajQ3KgALp57 7LDs/nZHtgjtz029exl2j+ODG+nfXoKa8DGAb0V2yS1vAzEZSkmFF3kmfVDvIAUy 4uN7xVuqgQHHrO/2/0qtCtQil/GUgVPGn0Taa0Gt6cO3W1jVqT6hOT8684ulZTSN q5oT8iXfRXGCskJUR9og9TDGfdbP5o2EvMyAkgYLg3BC02Q3llXvXSQlA5s6n3LZ tuohIT+QZbNZbsrCzIoF7x74STT4eHd/PMdiCCVLqClT/OflnIM6Sg3z3oPbMaVq 1zm44Q74DUbkgA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:49 2025 by rpki-client