This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json) Hash identifier: h4WuBeEVCOFJ0uXyVOv40/lAoFVx+CUvabXAtKF0+Ko= Subject key identifier: 96:9A:8E:C5:C9:37:81:97:E3:27:6C:D6:DB:16:96:07:90:8D:B2:47 Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93 Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793 Certificate serial: 019B1ACDE19F704791E49888B3927F4A3449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 03:00:58 +0000 Manifest this update: Sun 14 Dec 2025 03:00:58 +0000 Manifest next update: Mon 15 Dec 2025 03:00:58 +0000 Files and hashes: 1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=) 2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: Wq4I2SyfFVht1kDisFUhhCdfI/UAxArv3rVOulBj2wM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:e1:9f:70:47:91:e4:98:88:b3:92:7f:4a:34:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793 Validity Not Before: Dec 14 03:00:58 2025 GMT Not After : Dec 15 03:00:58 2025 GMT Subject: CN=969a8ec5c9378197e3276cd6db169607908db247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:4e:76:f9:61:67:20:cd:22:84:61:10:fa: 0d:53:66:de:44:81:60:f6:4d:c1:ab:30:d4:fb:97: 98:58:0e:8f:2a:c9:1d:f7:23:c7:aa:a5:7a:a3:88: ee:3b:cc:6a:65:23:96:1d:65:f4:89:17:e9:26:55: 36:06:86:16:a0:ff:f0:8d:91:1c:2a:a5:ff:7c:fd: 59:b5:0d:2e:18:ad:5f:fd:be:56:ff:38:8c:04:95: ed:66:92:db:c4:dc:30:f2:44:4c:92:6b:48:7b:59: 7b:ec:ab:bc:7b:ea:b5:b7:ee:02:c0:9f:5d:f6:c3: a9:b5:75:63:26:75:70:10:2b:64:ba:f6:5c:8c:40: f8:7c:f9:1a:1c:50:2c:2d:98:19:f8:fd:84:40:ef: 53:ba:65:d4:0a:4b:f0:66:e8:6b:8e:35:62:ce:11: 41:da:8d:f3:ff:e2:a6:08:62:f2:cc:4f:69:33:42: 1d:1f:ff:20:f2:3d:94:c8:e0:1f:b3:c2:91:31:e1: ab:c7:4e:1a:50:a1:a6:6c:3f:5e:0a:22:44:ca:8f: ac:97:10:ee:10:38:84:3b:2e:ee:c2:b5:71:c6:31: 6f:94:9a:99:b1:f2:64:0d:16:8a:6c:03:0c:02:70: 00:c5:e1:ec:2c:0e:55:b0:d7:64:03:46:8b:0e:e2: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:8E:C5:C9:37:81:97:E3:27:6C:D6:DB:16:96:07:90:8D:B2:47 X509v3 Authority Key Identifier: keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:44:cc:36:41:3e:b7:75:9c:69:77:8c:3d:e3:15:f4:fa:36: 98:8d:e0:83:b2:68:66:2e:73:d0:e4:9f:eb:3b:67:72:8c:d6: 53:19:26:16:0b:fc:ea:50:64:c6:1a:49:f2:e5:1c:59:6e:7a: ba:fe:2f:f0:77:62:a4:ee:db:5b:fc:00:18:3b:48:63:28:85: b2:15:3f:b2:87:80:ea:80:de:8e:ce:df:19:03:4f:29:2a:b7: 72:7c:55:fc:e0:8e:0a:35:b5:10:60:65:45:b0:cf:47:c6:2e: fd:34:ec:cb:8b:92:15:6f:06:74:8c:33:2a:71:06:79:37:1f: ed:50:be:72:6e:9a:43:1e:01:f7:f1:fd:36:a5:40:2d:14:95: f0:97:39:68:c1:b8:77:33:b0:f0:f7:75:83:00:7d:82:ed:4e: 6a:45:30:30:90:29:09:43:53:13:e1:f1:21:49:b1:19:f2:49: 1b:2b:60:d3:e8:8b:5c:d0:df:20:b6:ab:db:d5:65:2b:86:b3: 17:4f:5b:6b:a7:eb:5c:a9:0a:91:b9:09:cd:51:50:7c:39:54: 29:30:66:22:43:93:0a:60:49:0d:cc:f1:c0:f9:8c:f1:09:e3: 45:3f:f0:21:1e:9f:69:98:e9:db:49:17:0c:a6:6c:cc:f7:1d: 54:77:0b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazeGfcEeR5JiIs5J/SjRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTZlMjJmNGUyMzk2NWY2YzRhMDI1YzZjOTJlZmMwYjY2 MmU3OTMwHhcNMjUxMjE0MDMwMDU4WhcNMjUxMjE1MDMwMDU4WjAzMTEwLwYDVQQD Eyg5NjlhOGVjNWM5Mzc4MTk3ZTMyNzZjZDZkYjE2OTYwNzkwOGRiMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLROdvlhZyDNIoRhEPoNU2beRIFg 9k3BqzDU+5eYWA6PKskd9yPHqqV6o4juO8xqZSOWHWX0iRfpJlU2BoYWoP/wjZEc KqX/fP1ZtQ0uGK1f/b5W/ziMBJXtZpLbxNww8kRMkmtIe1l77Ku8e+q1t+4CwJ9d 9sOptXVjJnVwECtkuvZcjED4fPkaHFAsLZgZ+P2EQO9TumXUCkvwZuhrjjVizhFB 2o3z/+KmCGLyzE9pM0IdH/8g8j2UyOAfs8KRMeGrx04aUKGmbD9eCiJEyo+slxDu EDiEOy7uwrVxxjFvlJqZsfJkDRaKbAMMAnAAxeHsLA5VsNdkA0aLDuLwlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaajsXJN4GX4yds1tsWlgeQjbJHMB8GA1UdIwQY MBaAFMam4i9OI5ZfbEoCXGyS78C2YueTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMzM0ZWQtMzZiZC00MTcwLWI0ZDYt MDZhZjZkYmEzNGY3LzEveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kMzM0ZWQtMzZiZC00MTcwLWI0ZDYtMDZhZjZkYmEzNGY3 LzEveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUTMNkE+ t3WcaXeMPeMV9Po2mI3gg7JoZi5z0OSf6ztncozWUxkmFgv86lBkxhpJ8uUcWW56 uv4v8HdipO7bW/wAGDtIYyiFshU/soeA6oDejs7fGQNPKSq3cnxV/OCOCjW1EGBl RbDPR8Yu/TTsy4uSFW8GdIwzKnEGeTcf7VC+cm6aQx4B9/H9NqVALRSV8Jc5aMG4 dzOw8Pd1gwB9gu1OakUwMJApCUNTE+HxIUmxGfJJGytg0+iLXNDfILar29VlK4az F09ba6frXKkKkbkJzVFQfDlUKTBmIkOTCmBJDczxwPmM8QnjRT/wIR6faZjp20kX DKZszPcdVHcL4A== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:08 2025 by rpki-client