This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json) Hash identifier: q9r4bomJNFGBCJpH+YMEPL6UU3YfA5he0P5h0gDZvbI= Subject key identifier: 8D:64:FB:5B:93:9C:A2:C2:26:93:B2:99:61:21:EC:57:B6:C7:92:87 Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c Certificate serial: 019B1080E8A62F78FC043FAB1572779453A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 03:00:42 +0000 Manifest this update: Fri 12 Dec 2025 03:00:42 +0000 Manifest next update: Sat 13 Dec 2025 03:00:42 +0000 Files and hashes: 1: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (hash: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=) 2: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (hash: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=) 3: Ymnq870-hTRbzxW7QHa4AoItEis.roa (hash: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=) 4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: gciL4UqiPaAT/tsp3EzgzzdXVXIsNw7dS0tNYuOpCig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:e8:a6:2f:78:fc:04:3f:ab:15:72:77:94:53:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c Validity Not Before: Dec 12 03:00:42 2025 GMT Not After : Dec 13 03:00:42 2025 GMT Subject: CN=8d64fb5b939ca2c22693b2996121ec57b6c79287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:c4:59:3a:a5:e7:30:96:67:1d:32:d2:9c: 31:ac:23:55:64:9a:07:05:09:e6:de:74:ad:d0:09: 25:e2:f5:ab:e4:ba:d7:d3:14:cc:1a:cf:5c:d7:2d: 2b:8d:39:af:59:75:cc:46:9d:e1:a9:05:e5:f9:41: c6:32:7b:49:c8:20:3b:04:2f:2d:87:74:6f:3b:94: 0b:e7:63:49:d6:9e:9c:88:0e:27:e0:63:8d:e7:ad: 46:34:a6:13:e3:8e:cf:e6:57:b3:64:a4:3c:65:e3: 6e:6f:38:36:51:1b:cd:df:07:f3:70:9f:35:de:49: a9:7a:68:de:37:81:86:71:85:32:a4:d9:24:e1:82: 2e:5d:f0:06:f0:90:29:43:5e:54:76:e4:1d:79:4e: aa:54:16:73:fa:72:9b:c7:29:64:7b:9b:e3:5b:72: 37:2b:f3:8b:27:2c:b6:ba:c2:c1:4b:37:90:dc:4c: 59:03:85:54:62:45:8b:c6:b8:96:e5:c5:ce:4e:26: b1:b6:27:4c:ea:d8:63:7c:61:ef:f5:85:f1:0b:c1: 26:e1:5f:cf:5d:17:2e:3e:31:eb:ea:3b:09:c6:97: a4:62:d1:39:3a:cd:c1:cf:79:6d:3f:48:c3:71:22: a2:fc:d8:78:0b:ae:92:97:4d:e9:d0:2c:5c:45:71: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:64:FB:5B:93:9C:A2:C2:26:93:B2:99:61:21:EC:57:B6:C7:92:87 X509v3 Authority Key Identifier: keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:74:7a:e0:a9:0e:c5:b7:f4:54:cd:01:ca:af:3c:dc:b3:d5: cb:30:e2:78:80:5f:59:a2:e8:13:f6:6b:13:d8:3e:4e:b3:80: b3:7c:c2:3d:51:f6:1a:49:17:7d:b2:21:20:bf:2f:06:99:5f: 6c:1f:e8:6b:09:d5:07:ae:bd:52:e4:65:a1:7b:a2:40:f9:1c: b3:3b:0e:1b:e5:0c:ee:43:b2:93:9b:5f:2d:2c:47:de:05:84: cb:0f:d0:37:e0:af:8b:d8:5a:99:11:20:e0:02:d2:b1:4d:c6: d2:76:ed:f1:c5:d4:1c:af:7b:b4:3f:c8:56:75:80:20:85:c6: 05:14:16:9f:d2:f0:63:70:be:ca:7c:2c:a3:86:a9:4b:f8:14: 80:3c:bf:e6:6d:a7:22:c4:ab:5c:7e:e3:b0:d0:27:dc:7b:7d: ae:87:3b:1a:e4:97:48:c5:d0:37:34:d3:43:4b:b7:b3:b3:f6: 2b:62:53:3c:e8:d9:06:36:28:6a:e4:57:91:99:01:d1:36:f9: 36:2c:c9:a6:e4:9c:08:50:4d:bc:14:1c:1a:d9:be:a8:42:c9: 55:59:72:71:b9:14:70:65:e0:54:5c:60:6c:61:6b:de:a5:a9: 7a:86:b4:d3:82:64:2d:68:5d:ad:ff:ae:59:20:d0:12:c2:81: 24:f6:72:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgOimL3j8BD+rFXJ3lFOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz ZTA2MWMwHhcNMjUxMjEyMDMwMDQyWhcNMjUxMjEzMDMwMDQyWjAzMTEwLwYDVQQD Eyg4ZDY0ZmI1YjkzOWNhMmMyMjY5M2IyOTk2MTIxZWM1N2I2Yzc5Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfrEWTql5zCWZx0y0pwxrCNVZJoH BQnm3nSt0Akl4vWr5LrX0xTMGs9c1y0rjTmvWXXMRp3hqQXl+UHGMntJyCA7BC8t h3RvO5QL52NJ1p6ciA4n4GON561GNKYT447P5lezZKQ8ZeNubzg2URvN3wfzcJ81 3kmpemjeN4GGcYUypNkk4YIuXfAG8JApQ15UduQdeU6qVBZz+nKbxylke5vjW3I3 K/OLJyy2usLBSzeQ3ExZA4VUYkWLxriW5cXOTiaxtidM6thjfGHv9YXxC8Em4V/P XRcuPjHr6jsJxpekYtE5Os3Bz3ltP0jDcSKi/Nh4C66Sl03p0CxcRXFPCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1k+1uTnKLCJpOymWEh7Fe2x5KHMB8GA1UdIwQY MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt YmVlZWJlZGZmYzk1LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1 LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHR64KkO xbf0VM0Byq883LPVyzDieIBfWaLoE/ZrE9g+TrOAs3zCPVH2GkkXfbIhIL8vBplf bB/oawnVB669UuRloXuiQPkcszsOG+UM7kOyk5tfLSxH3gWEyw/QN+Cvi9hamREg 4ALSsU3G0nbt8cXUHK97tD/IVnWAIIXGBRQWn9LwY3C+ynwso4apS/gUgDy/5m2n IsSrXH7jsNAn3Ht9roc7GuSXSMXQNzTTQ0u3s7P2K2JTPOjZBjYoauRXkZkB0Tb5 NizJpuScCFBNvBQcGtm+qELJVVlycbkUcGXgVFxgbGFr3qWpeoa004JkLWhdrf+u WSDQEsKBJPZyIg== -----END CERTIFICATE-----Generated at Fri Dec 12 07:58:49 2025 by rpki-client