This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json) Hash identifier: DXDcMt14DmPO7y+0aqRbbVwvnvss34dNvjU33IUBtH4= Subject key identifier: 49:27:1E:B2:F6:FC:27:C8:62:D3:57:B6:6B:2C:10:0B:07:DA:FA:7C Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d Certificate serial: 019B1C85F84D45B311FA04B886890BD63CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft Manifest number: 06B5 Signing time: Sun 14 Dec 2025 11:01:40 +0000 Manifest this update: Sun 14 Dec 2025 11:01:40 +0000 Manifest next update: Mon 15 Dec 2025 11:01:40 +0000 Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=) 2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: mO2KDFvhmn31oz9mvxBQI3Blhnz5/Cl7pyr0m3kZ5Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:f8:4d:45:b3:11:fa:04:b8:86:89:0b:d6:3c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5947a414a8830515656d738a78382890160377d Validity Not Before: Dec 14 11:01:40 2025 GMT Not After : Dec 15 11:01:40 2025 GMT Subject: CN=49271eb2f6fc27c862d357b66b2c100b07dafa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:7d:a5:3e:bc:c9:f8:54:3e:cc:f0:46:2c: d9:20:64:3b:18:5e:2d:83:86:54:9c:81:e9:21:63: 69:ad:b2:60:18:35:ab:a6:cf:ae:62:fd:e9:b0:53: 67:7b:41:36:4c:c5:74:ae:20:f2:9c:8c:2c:53:f7: 42:71:6e:bf:f5:6c:49:16:d4:4c:d9:59:83:9e:35: 93:72:2d:02:ae:62:c2:b1:dc:b1:e1:58:a4:5f:97: d4:7d:46:51:76:97:19:f3:c3:c3:f4:6c:16:b1:9f: be:90:7d:f2:0a:0e:b7:37:3e:0e:8a:51:c8:44:07: 50:12:25:a5:47:b3:8d:66:2b:82:be:58:96:b0:e0: 97:e7:cc:4d:c1:24:91:9a:ae:92:37:b0:7b:4d:e4: a2:62:7e:3d:78:1b:10:b8:79:c5:13:31:0e:b2:f9: d2:22:0b:64:24:b0:2b:90:2d:1a:b2:59:6f:69:6e: 74:39:36:03:73:b8:95:bd:82:e9:4e:7f:49:f6:86: 70:ec:cb:48:44:e5:2f:c9:cf:fc:b6:79:42:0d:90: 7b:49:ae:ba:9f:cf:ab:88:bb:74:fb:9e:20:2e:79: 6b:db:1f:c9:d0:5a:34:d7:cf:d3:56:52:71:7e:77: c5:83:c7:f8:c1:ba:e8:c4:31:c4:80:9e:5a:25:69: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:27:1E:B2:F6:FC:27:C8:62:D3:57:B6:6B:2C:10:0B:07:DA:FA:7C X509v3 Authority Key Identifier: keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:26:38:68:17:95:01:4a:4f:cd:d8:77:de:30:aa:da:66:ac: 08:73:50:91:94:d2:0a:f4:14:01:83:34:11:30:4f:21:80:1e: c8:dc:2f:8f:bd:b2:7f:a4:06:1c:e3:a2:6c:59:3e:1f:be:4d: 1e:e6:6e:e2:14:ef:9b:78:86:d4:ef:37:f4:dd:aa:31:b2:4a: c0:67:6e:7b:67:00:3c:39:4b:fb:32:01:5c:75:fe:6c:08:14: 88:21:61:ea:31:f8:05:fc:6e:d4:40:1e:a0:db:fa:93:e9:f6: 6e:c7:0e:c4:02:dd:17:5b:b5:75:72:9f:4a:02:55:85:1a:4a: b3:1c:64:d4:e5:16:aa:bb:25:db:75:1d:fa:b6:a0:dd:e9:8f: db:a7:f2:56:6d:24:61:ac:a4:1f:6d:77:cf:a0:22:bf:27:44: 68:1b:e0:b9:10:78:95:3c:34:c1:4c:23:12:5a:99:53:ba:8a: 2e:27:4f:38:5d:e3:50:d5:d7:d8:49:76:24:4b:30:c2:6d:e9: 4a:0f:58:7c:70:ba:dc:c4:f4:40:3f:d3:a1:28:2f:d5:65:d8: 41:cb:81:af:6f:3f:c0:8f:16:8a:bd:33:b8:1b:de:03:6a:36: 72:01:9a:d6:b9:a9:9d:90:68:b2:bc:2d:c3:70:1a:8c:d9:c7: b9:a5:a2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschfhNRbMR+gS4hokL1jzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTQ3YTQxNGE4ODMwNTE1NjU2ZDczOGE3ODM4Mjg5MDE2 MDM3N2QwHhcNMjUxMjE0MTEwMTQwWhcNMjUxMjE1MTEwMTQwWjAzMTEwLwYDVQQD Eyg0OTI3MWViMmY2ZmMyN2M4NjJkMzU3YjY2YjJjMTAwYjA3ZGFmYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8l9pT68yfhUPszwRizZIGQ7GF4t g4ZUnIHpIWNprbJgGDWrps+uYv3psFNne0E2TMV0riDynIwsU/dCcW6/9WxJFtRM 2VmDnjWTci0CrmLCsdyx4VikX5fUfUZRdpcZ88PD9GwWsZ++kH3yCg63Nz4OilHI RAdQEiWlR7ONZiuCvliWsOCX58xNwSSRmq6SN7B7TeSiYn49eBsQuHnFEzEOsvnS IgtkJLArkC0asllvaW50OTYDc7iVvYLpTn9J9oZw7MtIROUvyc/8tnlCDZB7Sa66 n8+riLt0+54gLnlr2x/J0Fo018/TVlJxfnfFg8f4wbroxDHEgJ5aJWkF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEknHrL2/CfIYtNXtmssEAsH2vp8MB8GA1UdIwQY MBaAFMWUekFKiDBRVlbXOKeDgokBYDd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2Yt MGU1NDk0YWY1ODQwLzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2YtMGU1NDk0YWY1ODQw LzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSY4aBeV AUpPzdh33jCq2masCHNQkZTSCvQUAYM0ETBPIYAeyNwvj72yf6QGHOOibFk+H75N HuZu4hTvm3iG1O839N2qMbJKwGdue2cAPDlL+zIBXHX+bAgUiCFh6jH4Bfxu1EAe oNv6k+n2bscOxALdF1u1dXKfSgJVhRpKsxxk1OUWqrsl23Ud+rag3emP26fyVm0k YaykH213z6AivydEaBvguRB4lTw0wUwjElqZU7qKLidPOF3jUNXX2El2JEswwm3p Sg9YfHC63MT0QD/ToSgv1WXYQcuBr28/wI8Wir0zuBveA2o2cgGa1rmpnZBosrwt w3AajNnHuaWiTA== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:39 2025 by rpki-client