This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json) Hash identifier: Egos9TcvOoCokUiDLfp3b3ZV0q64pZlM2s9aWZqH3y4= Subject key identifier: 70:05:2B:1B:66:15:42:A6:F7:D9:3E:E9:D2:93:BC:88:38:FB:CC:DD Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Certificate serial: 019B19BB6D6328AC7E02E56DCC418C408C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft Manifest number: 17A0 Signing time: Sat 13 Dec 2025 22:01:12 +0000 Manifest this update: Sat 13 Dec 2025 22:01:12 +0000 Manifest next update: Sun 14 Dec 2025 22:01:12 +0000 Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=) 2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=) 3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=) 4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=) 5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=) 6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: uN2DLlWCUehghjA4z9sv+eu+dEZIKsWSlQC0LfRHoDo=) 7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=) 8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:6d:63:28:ac:7e:02:e5:6d:cc:41:8c:40:8c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Validity Not Before: Dec 13 22:01:12 2025 GMT Not After : Dec 14 22:01:12 2025 GMT Subject: CN=70052b1b661542a6f7d93ee9d293bc8838fbccdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:50:5c:0e:51:f3:c7:9c:55:dc:7d:82:42: dc:63:01:a8:79:28:79:c7:e9:4b:b8:cb:7c:fd:e0: ff:5d:f6:2e:ca:66:73:18:02:68:58:a6:a6:de:3b: 6d:8d:99:ea:3f:2a:23:cf:3d:48:84:19:f5:85:c4: fd:23:95:9c:a1:f0:f4:a6:44:9a:7b:74:43:94:0f: 4a:b6:c5:53:e6:bf:a5:ea:f7:57:86:72:8d:44:d6: cf:f8:16:d6:cc:0d:61:34:2e:9d:6a:d2:39:2d:ec: e3:11:f6:99:0c:4f:ed:9d:b8:48:4e:51:88:a9:cd: 54:01:fc:67:d3:9f:c9:82:02:5c:7b:56:fa:df:cd: 70:70:c4:c9:c2:bb:c2:c4:ed:59:da:b7:70:c0:fc: b5:b5:e3:bb:92:a1:d6:71:f3:01:a6:c4:ba:97:1f: 2f:ae:0b:5b:b7:70:0c:89:4c:1a:4c:d1:96:5e:dd: 61:45:bd:cb:01:c8:2d:74:c6:aa:b9:68:d7:3f:a6: 1d:87:c0:64:d1:ec:f5:7f:67:17:6f:f7:9e:af:9f: fb:8b:ea:b6:a9:98:c9:1f:96:62:d9:f6:12:1d:7b: 77:c4:4f:b6:26:a3:41:10:43:30:23:1b:be:db:a9: 05:c9:d0:69:e4:7b:08:c8:2b:a1:df:79:92:57:56: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:05:2B:1B:66:15:42:A6:F7:D9:3E:E9:D2:93:BC:88:38:FB:CC:DD X509v3 Authority Key Identifier: keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d6:c9:92:7c:a9:c2:35:b6:14:f4:28:e1:c2:42:23:85:7b: e1:c7:3d:6e:b1:a7:9a:a2:09:5e:54:fe:09:12:02:17:9a:54: 01:b8:3d:a6:36:3f:c6:04:4a:07:9f:98:a1:b1:a1:5e:d3:92: 2c:fe:0e:c0:fb:1c:0f:e3:d8:83:72:20:1c:da:27:cd:72:e1: f9:ad:50:46:ef:60:9a:56:c5:97:1f:a6:cd:38:ce:6c:40:f2: 39:a5:ac:b7:7e:b8:a3:b9:72:95:ff:40:69:ca:b5:9a:78:8c: 07:fc:8d:ae:c9:35:85:e3:c2:83:8d:94:6e:58:ac:dd:09:f9: 8a:a2:e6:06:c8:e0:c9:be:88:3c:7c:6a:c1:9a:7f:99:e2:08: 3a:e0:ed:82:2e:65:5c:07:bd:32:84:f5:45:f7:dd:f7:a6:17: f8:51:f9:0a:51:95:86:d6:25:95:14:f7:cf:a7:6c:95:47:37: 32:fe:5e:04:6f:53:2b:86:69:d6:73:e6:6e:74:51:c3:32:b2: 09:e6:d3:81:c2:13:e4:82:39:69:ac:a5:ca:72:26:25:4b:50: 6e:3c:83:7e:4a:28:22:98:fd:9b:3a:97:35:1a:6e:68:a1:55: 0b:d6:39:51:2c:a8:6f:7b:c3:3d:65:3c:35:a4:f5:ad:1c:77: 50:90:ab:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu21jKKx+AuVtzEGMQIwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm OTM2OTUwHhcNMjUxMjEzMjIwMTEyWhcNMjUxMjE0MjIwMTEyWjAzMTEwLwYDVQQD Eyg3MDA1MmIxYjY2MTU0MmE2ZjdkOTNlZTlkMjkzYmM4ODM4ZmJjY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qtQXA5R88ecVdx9gkLcYwGoeSh5 x+lLuMt8/eD/XfYuymZzGAJoWKam3jttjZnqPyojzz1IhBn1hcT9I5WcofD0pkSa e3RDlA9KtsVT5r+l6vdXhnKNRNbP+BbWzA1hNC6datI5LezjEfaZDE/tnbhITlGI qc1UAfxn05/JggJce1b6381wcMTJwrvCxO1Z2rdwwPy1teO7kqHWcfMBpsS6lx8v rgtbt3AMiUwaTNGWXt1hRb3LAcgtdMaquWjXP6Ydh8Bk0ez1f2cXb/eer5/7i+q2 qZjJH5Zi2fYSHXt3xE+2JqNBEEMwIxu+26kFydBp5HsIyCuh33mSV1ZYUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAFKxtmFUKm99k+6dKTvIg4+8zdMB8GA1UdIwQY MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONbJknyp wjW2FPQo4cJCI4V74cc9brGnmqIJXlT+CRICF5pUAbg9pjY/xgRKB5+YobGhXtOS LP4OwPscD+PYg3IgHNonzXLh+a1QRu9gmlbFlx+mzTjObEDyOaWst364o7lylf9A acq1mniMB/yNrsk1hePCg42Ublis3Qn5iqLmBsjgyb6IPHxqwZp/meIIOuDtgi5l XAe9MoT1Rffd96YX+FH5ClGVhtYllRT3z6dslUc3Mv5eBG9TK4Zp1nPmbnRRwzKy CebTgcIT5II5aaylynImJUtQbjyDfkooIpj9mzqXNRpuaKFVC9Y5USyob3vDPWU8 NaT1rRx3UJCrGA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:02 2025 by rpki-client