This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json) Hash identifier: 1i7AdjlMjJtBa9UpFMXz5wwEiOsotrRbQeYxYe2MbGQ= Subject key identifier: 68:F3:FE:A6:1F:8C:13:4D:22:A4:6A:71:E5:F8:09:E5:CF:1E:CC:9B Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Certificate serial: 019B3AFE46568197E20E2E4FFE44510DDD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 09:01:41 +0000 Manifest this update: Sat 20 Dec 2025 09:01:41 +0000 Manifest next update: Sun 21 Dec 2025 09:01:41 +0000 Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=) 2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: qx1Xlxgdk6DGgnOMHYWrZ2WO6KZlUCKjMHf+QKLxlQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:46:56:81:97:e2:0e:2e:4f:fe:44:51:0d:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Validity Not Before: Dec 20 09:01:41 2025 GMT Not After : Dec 21 09:01:41 2025 GMT Subject: CN=68f3fea61f8c134d22a46a71e5f809e5cf1ecc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:38:0d:43:ae:ba:e3:48:a8:0b:2f:f7:68: dc:71:fb:46:53:3d:c1:e0:dd:3c:cb:98:a6:74:69: 64:8d:a3:d5:7b:85:8b:89:eb:74:e2:dc:42:fa:e6: 9b:c3:d7:af:81:65:2e:c8:42:b2:41:04:c2:48:5e: 2f:02:ca:af:ec:ec:2d:37:11:72:e3:4c:77:03:e3: 5f:27:85:d1:dd:4b:f6:8b:00:33:e0:66:ed:78:cb: c4:f0:56:a0:63:aa:fd:41:6b:c3:17:45:02:7d:d0: 1d:a4:38:00:76:19:8c:a1:b8:9f:c5:7e:6d:07:4d: ed:82:8d:65:87:4d:98:7e:71:27:dc:f1:77:02:d0: 16:64:a4:b9:ee:31:e4:9a:0b:28:3c:8a:07:c7:44: de:7e:e4:bf:ce:08:3a:88:43:cc:c5:67:ab:73:bd: 2b:18:a8:d9:a1:7a:dc:e1:b1:2b:12:c6:a7:d1:4a: 4d:f4:16:df:ae:af:61:bf:79:75:f8:bc:bf:21:e6: b7:47:9e:12:ca:99:bc:e6:b6:df:6f:55:c1:46:55: a9:e2:4a:b9:e2:55:9e:59:bc:54:c9:74:63:d0:95: d4:b8:9d:04:69:a0:4c:aa:1f:12:3c:b2:3f:90:c9: dd:5a:43:c1:53:7e:af:30:49:7a:16:55:1c:e6:a5: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F3:FE:A6:1F:8C:13:4D:22:A4:6A:71:E5:F8:09:E5:CF:1E:CC:9B X509v3 Authority Key Identifier: keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:86:f7:5e:2a:8b:6e:f7:57:1c:48:a9:0c:03:db:98:fd:db: 7c:f5:d2:6c:54:36:f7:79:1d:fe:df:62:2b:74:1b:0c:37:c4: 23:14:0f:eb:95:94:02:69:6e:44:7a:02:d3:f2:d0:f8:6d:b1: 91:72:97:7f:df:ca:93:ce:79:9c:2e:41:8e:a0:5d:41:37:34: cf:53:67:64:9c:43:97:ea:60:e3:11:75:83:37:09:dd:31:5d: 2c:40:32:37:86:b1:d6:28:20:2f:8f:eb:3b:54:99:d8:cf:73: 49:1d:f6:27:30:6a:c7:4f:63:0b:77:4f:31:d9:24:99:b2:cf: 85:79:46:39:c4:55:75:31:63:0b:b2:21:9f:55:db:5f:82:99: 9c:46:01:66:6f:d2:95:f3:2a:5d:ee:8a:5b:e4:b4:13:73:20: d1:21:a9:dc:11:93:1e:c3:af:42:4a:e8:b6:8d:aa:d3:66:2f: 88:15:4d:7b:45:20:54:6f:a9:40:4f:ee:74:e8:76:3f:25:d2: b3:62:07:35:98:3e:51:97:6d:63:69:96:98:1a:4b:08:b7:dc: 01:b6:e1:08:db:af:0b:5b:c0:b2:96:bd:73:6a:a8:1e:05:db: dd:96:36:d3:52:7a:d9:85:59:95:ff:80:73:29:ec:a9:1b:09: fc:36:46:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kZWgZfiDi5P/kRRDd03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk YzRhYzYwHhcNMjUxMjIwMDkwMTQxWhcNMjUxMjIxMDkwMTQxWjAzMTEwLwYDVQQD Eyg2OGYzZmVhNjFmOGMxMzRkMjJhNDZhNzFlNWY4MDllNWNmMWVjYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww04DUOuuuNIqAsv92jccftGUz3B 4N08y5imdGlkjaPVe4WLiet04txC+uabw9evgWUuyEKyQQTCSF4vAsqv7OwtNxFy 40x3A+NfJ4XR3Uv2iwAz4GbteMvE8FagY6r9QWvDF0UCfdAdpDgAdhmMobifxX5t B03tgo1lh02YfnEn3PF3AtAWZKS57jHkmgsoPIoHx0TefuS/zgg6iEPMxWerc70r GKjZoXrc4bErEsan0UpN9Bbfrq9hv3l1+Ly/Iea3R54Sypm85rbfb1XBRlWp4kq5 4lWeWbxUyXRj0JXUuJ0EaaBMqh8SPLI/kMndWkPBU36vMEl6FlUc5qXv7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjz/qYfjBNNIqRqceX4CeXPHsybMB8GA1UdIwQY MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt NzczYzBiM2M4OTM1LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1 LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIb3XiqL bvdXHEipDAPbmP3bfPXSbFQ293kd/t9iK3QbDDfEIxQP65WUAmluRHoC0/LQ+G2x kXKXf9/Kk855nC5BjqBdQTc0z1NnZJxDl+pg4xF1gzcJ3TFdLEAyN4ax1iggL4/r O1SZ2M9zSR32JzBqx09jC3dPMdkkmbLPhXlGOcRVdTFjC7Ihn1XbX4KZnEYBZm/S lfMqXe6KW+S0E3Mg0SGp3BGTHsOvQkroto2q02YviBVNe0UgVG+pQE/udOh2PyXS s2IHNZg+UZdtY2mWmBpLCLfcAbbhCNuvC1vAspa9c2qoHgXb3ZY201J62YVZlf+A cynsqRsJ/DZGyw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:25:22 2025 by rpki-client