This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json) Hash identifier: jfBZbWG1MXni7Vp3HduSdX3phxAUgTqWLMV6UDIbm9A= Subject key identifier: 4C:AA:37:5E:2A:00:FA:B8:BA:4C:25:D2:60:BE:4B:66:24:31:2C:43 Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17 Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517 Certificate serial: 019B0F37551BBF7DBC536A72D42C3302A111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 21:00:43 +0000 Manifest this update: Thu 11 Dec 2025 21:00:43 +0000 Manifest next update: Fri 12 Dec 2025 21:00:43 +0000 Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=) 2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: cVlpiym5+QuAP3k3RxJhIg45NTlxkqUpmOY+4n7hl/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:55:1b:bf:7d:bc:53:6a:72:d4:2c:33:02:a1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517 Validity Not Before: Dec 11 21:00:43 2025 GMT Not After : Dec 12 21:00:43 2025 GMT Subject: CN=4caa375e2a00fab8ba4c25d260be4b6624312c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:70:8d:b7:4d:ee:5e:cc:f8:96:c5:95:5e: 0e:57:e0:d5:18:bc:70:f1:c3:5b:7f:94:cf:bd:32: 70:9c:cc:78:43:f7:42:0e:7d:ab:5a:e1:8d:64:2c: 0f:d2:94:6c:a5:80:99:96:df:a0:c8:51:b4:93:b2: e1:9d:39:be:3c:16:6b:f8:83:3d:90:5b:1f:4d:66: 37:d3:b8:e5:e2:ee:9b:54:d2:2b:10:39:65:5b:eb: 81:f2:a3:e2:37:49:fa:1b:e1:de:36:32:b8:56:58: 63:11:2a:d7:0d:28:c1:ee:97:98:14:84:ad:91:a0: 14:a1:96:6a:a8:17:77:41:83:28:f5:ab:21:21:89: 22:0c:ff:f6:e0:2a:6b:a2:cd:31:83:c0:b4:a3:7f: f5:5e:ba:fb:b7:44:13:fd:b8:ed:25:b2:b1:df:e4: 1c:0d:bf:8d:e0:81:7a:d5:43:62:3e:6c:64:15:c4: a8:4b:f8:8b:32:56:7f:6f:56:5a:b9:84:bb:89:a8: 26:f9:a9:a7:c6:d8:64:f4:c1:ac:b2:b0:ac:bb:0c: 4b:0b:58:75:52:d1:9f:29:80:f8:3a:b8:be:64:36: c6:43:7e:f3:0a:f7:48:f2:65:3f:7d:4d:f5:f0:98: c8:94:5e:2a:65:bd:9e:bc:3e:1d:99:09:82:2b:04: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AA:37:5E:2A:00:FA:B8:BA:4C:25:D2:60:BE:4B:66:24:31:2C:43 X509v3 Authority Key Identifier: keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:34:33:bc:99:8a:fb:68:36:b4:9e:c7:5c:c7:1d:86:8d:ec: 89:b1:44:ec:53:10:58:b5:48:eb:96:38:60:28:c1:ab:75:8f: dd:a5:c9:ee:13:2b:1f:94:33:4a:d3:c9:2a:2c:1f:d1:d4:c8: c8:5e:fa:3c:80:1c:c4:bc:02:7f:3f:dc:c2:c2:8f:97:79:26: 51:5b:c9:a7:49:ab:e7:0e:1b:d7:4f:0a:e2:87:3f:1b:e1:1c: 8f:a7:fb:64:1a:c9:10:a8:46:1e:66:dd:24:ae:42:02:71:c9: 87:45:b2:3f:81:78:b9:0e:6c:86:aa:1f:25:76:df:4a:72:89: 51:07:00:e1:90:f8:5e:38:5b:72:1a:42:b5:f4:d9:57:1e:e0: 49:29:e4:b5:a0:1e:2c:83:45:95:60:58:b6:f9:84:f9:8a:c5: 1e:0f:4e:9e:8a:73:82:c4:a4:1d:47:a3:5f:a5:89:2a:57:b5: a8:8d:c5:93:2d:07:e3:7d:a5:81:db:83:57:13:4d:e4:32:ab: 41:81:11:a5:d2:6e:c4:6a:10:d7:30:04:bc:b1:1b:40:73:5f: 28:3f:0b:60:5e:cc:c5:6a:4e:fa:c9:7a:07:27:d5:91:fa:e8: 7d:de:58:21:33:85:99:f0:de:18:ab:ac:2a:e9:52:4c:23:31: db:51:80:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1Ubv328U2py1CwzAqERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMGMyN2Y4NTU4MWUyZTdiZGUwYzk4ZmJkNTRiZTFkNDk2 NzA1MTcwHhcNMjUxMjExMjEwMDQzWhcNMjUxMjEyMjEwMDQzWjAzMTEwLwYDVQQD Eyg0Y2FhMzc1ZTJhMDBmYWI4YmE0YzI1ZDI2MGJlNGI2NjI0MzEyYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxONwjbdN7l7M+JbFlV4OV+DVGLxw 8cNbf5TPvTJwnMx4Q/dCDn2rWuGNZCwP0pRspYCZlt+gyFG0k7LhnTm+PBZr+IM9 kFsfTWY307jl4u6bVNIrEDllW+uB8qPiN0n6G+HeNjK4VlhjESrXDSjB7peYFISt kaAUoZZqqBd3QYMo9ashIYkiDP/24Cpros0xg8C0o3/1Xrr7t0QT/bjtJbKx3+Qc Db+N4IF61UNiPmxkFcSoS/iLMlZ/b1ZauYS7iagm+amnxthk9MGssrCsuwxLC1h1 UtGfKYD4Ori+ZDbGQ37zCvdI8mU/fU318JjIlF4qZb2evD4dmQmCKwT8FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyqN14qAPq4ukwl0mC+S2YkMSxDMB8GA1UdIwQY MBaAFF0MJ/hVgeLnveDJj71Uvh1JZwUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMt MzQxZjUxNzNmY2Y3LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMtMzQxZjUxNzNmY2Y3 LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzQzvJmK +2g2tJ7HXMcdho3sibFE7FMQWLVI65Y4YCjBq3WP3aXJ7hMrH5QzStPJKiwf0dTI yF76PIAcxLwCfz/cwsKPl3kmUVvJp0mr5w4b108K4oc/G+Ecj6f7ZBrJEKhGHmbd JK5CAnHJh0WyP4F4uQ5shqofJXbfSnKJUQcA4ZD4XjhbchpCtfTZVx7gSSnktaAe LINFlWBYtvmE+YrFHg9OnopzgsSkHUejX6WJKle1qI3Fky0H432lgduDVxNN5DKr QYERpdJuxGoQ1zAEvLEbQHNfKD8LYF7MxWpO+sl6ByfVkfrofd5YITOFmfDeGKus KulSTCMx21GAKQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:38 2025 by rpki-client