This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json) Hash identifier: +kjy5Nvm2JaXgyHvrTfovdeBl/cwA9ivcKAI4zgL2Fs= Subject key identifier: D7:42:5C:F7:C9:F7:C8:F4:73:80:A8:06:25:CB:10:DD:4A:7E:DB:4E Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7 Certificate serial: 019B5AF6B4F046D3980823711C8C5A9E8840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft Manifest number: 0660 Signing time: Fri 26 Dec 2025 14:01:16 +0000 Manifest this update: Fri 26 Dec 2025 14:01:16 +0000 Manifest next update: Sat 27 Dec 2025 14:01:16 +0000 Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=) 2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=) 3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: aovfVhgYY6eigVHx1pECKJrf6tBm5r/oaw7Rqu1JL7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:b4:f0:46:d3:98:08:23:71:1c:8c:5a:9e:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7 Validity Not Before: Dec 26 14:01:16 2025 GMT Not After : Dec 27 14:01:16 2025 GMT Subject: CN=d7425cf7c9f7c8f47380a80625cb10dd4a7edb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:5e:6d:d6:61:ac:e6:13:ab:bf:3e:d2:f3: a2:d6:2b:29:fc:16:01:70:ad:d5:12:47:2d:13:75: 64:8b:71:b0:e6:f1:39:9e:49:14:3f:15:13:be:64: 12:76:c1:bc:c9:ab:24:15:8d:7f:db:c3:7f:33:dc: 64:14:6c:cb:e1:90:00:25:21:0e:bf:ac:86:87:83: 23:ea:6c:06:6f:4b:2a:0c:6d:c1:79:72:8b:b9:f5: d9:6c:9e:0a:8b:28:9f:26:53:fe:ab:28:ce:dc:02: ba:97:82:bc:63:fb:06:23:5f:a0:5d:92:e2:78:54: 9f:05:8c:54:2a:cc:60:73:f5:64:7a:e9:6b:e1:8d: 2f:d4:eb:bb:f4:26:a8:8a:a9:fd:b9:25:ea:4d:20: 10:3f:54:b7:91:00:21:6f:6b:96:bc:c3:be:30:32: aa:a3:86:16:66:ee:b4:5f:3d:14:15:a6:50:d5:d1: 0b:ce:aa:5f:1e:ce:2a:25:81:2b:69:4d:63:25:5e: ac:51:87:73:37:14:56:e1:f5:b4:a8:39:e0:e2:11: 4e:a9:89:1c:48:50:fc:dd:86:7d:d8:aa:35:f9:39: 9d:31:df:ea:82:51:ab:03:6b:39:15:66:98:6c:82: 42:3d:75:8c:56:32:9c:41:17:f4:4f:21:d8:de:ac: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:42:5C:F7:C9:F7:C8:F4:73:80:A8:06:25:CB:10:DD:4A:7E:DB:4E X509v3 Authority Key Identifier: keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:9b:ff:87:e7:d5:be:a0:3c:41:ed:d7:a6:40:bb:30:d8: 22:75:ad:7f:8e:8e:31:cb:85:68:7a:55:ea:02:d1:e5:8f:0b: 3e:eb:d4:df:45:94:5f:a5:52:77:85:5a:74:67:d4:23:7d:8f: 39:8c:25:21:54:1a:24:32:2b:c5:68:de:c3:19:55:cb:51:4c: 25:ec:38:a0:f7:66:56:d5:dd:bb:6e:04:d8:82:ea:27:6e:c8: 7e:4a:09:77:38:90:4a:f5:81:3a:82:f6:c1:71:1c:1d:71:c9: 62:be:f7:d0:09:5b:f8:8f:04:0e:88:5e:88:d7:31:55:25:c5: be:29:83:a3:cd:f4:65:69:52:0a:cf:af:cd:2b:fc:cc:f2:5c: 56:0c:a2:56:3f:95:d7:9f:23:da:d0:16:2e:7d:f6:d2:50:85: c4:9c:60:70:73:a1:b9:6e:66:65:93:11:18:c0:0e:d9:0f:70: 69:3c:95:94:30:2c:45:be:1d:da:ba:40:68:be:3c:cb:80:98: 25:07:85:f9:c4:a8:74:db:1f:ce:b9:04:57:2f:e7:0c:76:fd: a6:e9:44:ba:8b:09:c0:59:8a:8b:36:fc:d6:e6:a4:e5:fe:a1: b7:5e:fd:be:f7:e8:3a:22:67:76:5d:38:ee:03:e9:bb:db:4c: 29:e1:4b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9rTwRtOYCCNxHIxanohAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMGEwZDM5NmY3NjkzNjkzNjVmMmI5ODNjNTMxYWZlY2E5 NzEwYTcwHhcNMjUxMjI2MTQwMTE2WhcNMjUxMjI3MTQwMTE2WjAzMTEwLwYDVQQD EyhkNzQyNWNmN2M5ZjdjOGY0NzM4MGE4MDYyNWNiMTBkZDRhN2VkYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMdebdZhrOYTq78+0vOi1isp/BYB cK3VEkctE3Vki3Gw5vE5nkkUPxUTvmQSdsG8yaskFY1/28N/M9xkFGzL4ZAAJSEO v6yGh4Mj6mwGb0sqDG3BeXKLufXZbJ4KiyifJlP+qyjO3AK6l4K8Y/sGI1+gXZLi eFSfBYxUKsxgc/Vkeulr4Y0v1Ou79Caoiqn9uSXqTSAQP1S3kQAhb2uWvMO+MDKq o4YWZu60Xz0UFaZQ1dELzqpfHs4qJYEraU1jJV6sUYdzNxRW4fW0qDng4hFOqYkc SFD83YZ92Ko1+TmdMd/qglGrA2s5FWaYbIJCPXWMVjKcQRf0TyHY3qz1AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdCXPfJ98j0c4CoBiXLEN1KfttOMB8GA1UdIwQY MBaAFF0KDTlvdpNpNl8rmDxTGv7KlxCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUt NDQyMDEwYjU3OWVmLzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUtNDQyMDEwYjU3OWVm LzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpKb/4fn 1b6gPEHt16ZAuzDYInWtf46OMcuFaHpV6gLR5Y8LPuvU30WUX6VSd4VadGfUI32P OYwlIVQaJDIrxWjewxlVy1FMJew4oPdmVtXdu24E2ILqJ27IfkoJdziQSvWBOoL2 wXEcHXHJYr730Alb+I8EDoheiNcxVSXFvimDo830ZWlSCs+vzSv8zPJcVgyiVj+V 158j2tAWLn320lCFxJxgcHOhuW5mZZMRGMAO2Q9waTyVlDAsRb4d2rpAaL48y4CY JQeF+cSodNsfzrkEVy/nDHb9pulEuosJwFmKizb81uak5f6ht179vvfoOiJndl04 7gPpu9tMKeFLgw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:25 2025 by rpki-client