This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json) Hash identifier: SA1ajYDKCSDSS7Aq1OmgAwbysZBexY2lOUr1jr4wusA= Subject key identifier: CE:48:25:1B:37:F4:AF:8F:BF:92:83:F3:10:49:FE:D4:2E:37:04:5A Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Certificate serial: 019B4882FCF8CD2F2B279B04AFE5B4DF2C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft Manifest number: 1798 Signing time: Tue 23 Dec 2025 00:01:42 +0000 Manifest this update: Tue 23 Dec 2025 00:01:42 +0000 Manifest next update: Wed 24 Dec 2025 00:01:42 +0000 Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=) 2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: g9ywKafYk759N3SpSrst26YKploeLFDPGJ2H4mB0ut4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:fc:f8:cd:2f:2b:27:9b:04:af:e5:b4:df:2c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Validity Not Before: Dec 23 00:01:42 2025 GMT Not After : Dec 24 00:01:42 2025 GMT Subject: CN=ce48251b37f4af8fbf9283f31049fed42e37045a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:25:cc:e5:a4:1a:f9:01:47:0c:27:04:58: 51:b1:1f:85:94:65:6d:47:c7:84:9d:44:9f:34:c1: b1:56:4d:85:19:8c:d8:f1:8e:f6:28:c9:3e:e9:e4: 6b:25:74:52:09:38:a2:9e:31:2b:82:b7:b5:cc:86: 21:02:27:64:3a:25:7b:17:6e:67:73:12:3a:27:8c: f2:77:42:98:d0:79:b5:8a:5e:e0:33:67:90:21:dd: bc:cf:80:dc:69:99:9c:85:fd:25:2f:c5:fd:16:b6: b2:21:88:1b:86:eb:fe:8d:4d:9b:b4:1d:7a:a3:f4: bb:c4:31:41:d5:b2:cc:7c:91:ff:ee:34:89:af:e9: 6c:39:17:88:74:af:7c:36:c6:e9:bb:d8:22:d4:54: cf:ee:bc:39:f7:2d:2f:47:02:6d:c5:78:3e:cb:1a: 6a:a1:59:e3:17:4e:08:40:82:8e:5c:56:dd:40:42: 7c:d3:5c:fc:e8:b5:be:94:e5:55:94:41:79:7d:95: a4:6e:8f:90:f2:62:f7:e7:46:3d:07:1b:ca:a4:94: e8:37:75:ab:5b:a2:b1:be:08:34:87:36:6a:67:b3: ea:67:10:4c:42:47:d1:64:a8:a9:4e:90:15:16:60: 6d:b4:f0:f1:91:69:15:17:6b:7c:41:55:5b:e3:eb: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:48:25:1B:37:F4:AF:8F:BF:92:83:F3:10:49:FE:D4:2E:37:04:5A X509v3 Authority Key Identifier: keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9a:96:3a:60:a1:ac:c3:ec:0e:16:a7:31:05:2e:c1:38:64: 91:38:ee:fc:ce:e7:08:20:a4:87:f8:b4:f5:84:96:3c:1b:8a: 21:eb:31:0c:23:4d:ac:cb:3c:68:66:74:dd:f3:d8:3f:f2:71: 94:62:ae:6a:80:f6:72:69:a4:35:d8:c1:c3:82:ed:90:6b:b1: e1:8f:3f:c2:98:b6:ad:0c:f2:78:3a:4e:53:7d:94:2a:b7:fb: 1e:7a:a6:ba:dc:d9:f1:e5:de:e2:16:f0:2d:70:92:0a:45:d2: 4e:7f:0d:2e:21:28:85:92:db:f9:b5:72:03:38:75:fa:9b:ea: 9a:63:9a:f5:53:ac:74:e2:8f:e1:3a:74:9c:3a:e1:ab:dd:8a: bd:9c:11:7a:5c:47:a4:43:d3:f3:ad:0c:c5:c6:55:0c:f3:4e: 42:9a:31:a9:3f:e2:e9:2e:d6:86:1a:ec:42:bb:6f:72:ec:53: bb:c2:2a:8a:95:28:56:2e:b5:2b:6b:d0:cc:3b:8a:0a:d6:12: 78:d7:b3:3a:e9:a0:2d:2e:fc:6f:d9:9a:20:94:e1:42:9a:0b: 1a:48:48:40:f8:07:fc:41:21:3b:74:07:08:19:e3:3c:d2:04: e1:7b:20:f8:22:47:54:0e:3c:0d:bf:c2:37:88:6b:ff:6f:35: 41:9d:f4:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgvz4zS8rJ5sEr+W03yyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk YzRhYzYwHhcNMjUxMjIzMDAwMTQyWhcNMjUxMjI0MDAwMTQyWjAzMTEwLwYDVQQD EyhjZTQ4MjUxYjM3ZjRhZjhmYmY5MjgzZjMxMDQ5ZmVkNDJlMzcwNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+YlzOWkGvkBRwwnBFhRsR+FlGVt R8eEnUSfNMGxVk2FGYzY8Y72KMk+6eRrJXRSCTiinjErgre1zIYhAidkOiV7F25n cxI6J4zyd0KY0Hm1il7gM2eQId28z4DcaZmchf0lL8X9FrayIYgbhuv+jU2btB16 o/S7xDFB1bLMfJH/7jSJr+lsOReIdK98Nsbpu9gi1FTP7rw59y0vRwJtxXg+yxpq oVnjF04IQIKOXFbdQEJ801z86LW+lOVVlEF5fZWkbo+Q8mL350Y9BxvKpJToN3Wr W6Kxvgg0hzZqZ7PqZxBMQkfRZKipTpAVFmBttPDxkWkVF2t8QVVb4+vw5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5IJRs39K+Pv5KD8xBJ/tQuNwRaMB8GA1UdIwQY MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt NzczYzBiM2M4OTM1LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1 LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5qWOmCh rMPsDhanMQUuwThkkTju/M7nCCCkh/i09YSWPBuKIesxDCNNrMs8aGZ03fPYP/Jx lGKuaoD2cmmkNdjBw4LtkGux4Y8/wpi2rQzyeDpOU32UKrf7HnqmutzZ8eXe4hbw LXCSCkXSTn8NLiEohZLb+bVyAzh1+pvqmmOa9VOsdOKP4Tp0nDrhq92KvZwRelxH pEPT860MxcZVDPNOQpoxqT/i6S7WhhrsQrtvcuxTu8IqipUoVi61K2vQzDuKCtYS eNezOumgLS78b9maIJThQpoLGkhIQPgH/EEhO3QHCBnjPNIE4Xsg+CJHVA48Db/C N4hr/281QZ30Lw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:49:14 2025 by rpki-client