This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json) Hash identifier: Vh5vKTQCsLNf/nTCczYuUXZ2JsDEU56tfxfJ97vSbIg= Subject key identifier: 7B:1E:D5:75:2E:ED:F3:55:86:59:BC:D6:55:5A:AD:91:C6:74:86:EE Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Certificate serial: 019B0EC9617A61A4DDE9CABBF5322992D9E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft Manifest number: 0434 Signing time: Thu 11 Dec 2025 19:00:37 +0000 Manifest this update: Thu 11 Dec 2025 19:00:37 +0000 Manifest next update: Fri 12 Dec 2025 19:00:37 +0000 Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: fsvIRWcy+PLxwYU4R/K0Sy4RNFrIG7N7ZyerPJpl8Ps=) 2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:61:7a:61:a4:dd:e9:ca:bb:f5:32:29:92:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Validity Not Before: Dec 11 19:00:37 2025 GMT Not After : Dec 12 19:00:37 2025 GMT Subject: CN=7b1ed5752eedf3558659bcd6555aad91c67486ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:5b:af:97:63:e0:a4:7e:c3:8f:c6:ad:3f: 50:b2:d6:48:a7:b7:b2:80:5d:a6:a2:db:ad:15:34: 16:de:54:a0:36:f5:e6:db:d6:d5:81:e8:ad:91:4c: df:35:52:56:16:e0:97:45:90:26:de:cc:52:62:32: b9:92:47:4f:e5:3f:05:e8:79:04:bb:1d:0e:06:a3: 24:b9:44:29:4b:7c:20:a7:1a:dd:29:f0:12:de:25: 69:ae:c0:3c:71:7f:f4:33:d9:8d:22:ee:97:cf:3b: 14:75:ce:c7:a8:01:97:03:43:82:b3:5e:04:4d:59: e1:c3:ff:e8:18:20:d5:14:44:97:1d:a9:c7:c3:b3: e8:d2:6e:7f:13:2e:59:fd:95:3e:7c:17:2e:75:2c: 2b:2c:d8:5d:be:0a:ab:0e:d8:8b:a1:a0:c9:34:08: 15:fe:0b:c6:80:90:a6:4e:fd:85:95:ff:44:bd:13: 98:40:f4:60:0c:69:4a:34:d7:b8:96:8e:c8:89:d6: 54:95:b4:b6:d2:90:6b:c6:96:ee:47:48:02:65:95: 7a:53:ae:9a:0f:04:3c:0a:58:73:29:f9:1b:66:ba: 0e:fa:52:5e:ab:06:12:51:c7:71:e2:c4:37:8c:ad: 57:2e:10:b2:c7:66:7f:e9:71:9f:28:18:24:9f:6c: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1E:D5:75:2E:ED:F3:55:86:59:BC:D6:55:5A:AD:91:C6:74:86:EE X509v3 Authority Key Identifier: keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1c:3c:3a:e3:87:24:b0:bd:a1:25:92:79:76:d2:01:42:be: 7e:4e:84:1f:c9:09:ff:0f:73:2a:42:52:62:6b:b0:b4:24:39: 30:5c:04:e8:51:12:8b:67:90:30:f2:09:80:79:ca:9b:d0:38: 9c:98:f8:1f:08:11:54:32:26:20:56:f9:08:ec:ae:ce:14:ad: 16:3c:f5:da:f7:18:56:bf:b2:76:78:de:16:03:be:92:47:86: 94:33:62:90:e2:d8:a9:a4:8e:f8:3f:3f:6f:9e:bf:fb:57:f9: fc:b1:6d:36:5c:e5:26:6c:00:54:7a:8c:06:8c:6f:d2:80:25: 59:c6:23:86:e7:eb:dc:45:fc:73:3c:1c:3b:71:14:4b:7d:fd: f3:f3:38:f3:6f:a1:5e:9f:f1:36:08:d8:9d:1e:3a:29:82:c2: a6:71:44:31:5e:8f:b5:22:a5:95:3c:6f:d9:8e:07:09:13:8f: c5:bd:81:a0:02:24:d8:bb:8d:7a:0c:af:66:b9:ad:26:66:21: bb:d8:09:87:a6:eb:bc:01:a4:c4:f2:78:81:e2:d1:62:cd:b1: 60:22:2a:4f:a8:39:9b:d7:4f:1d:b5:94:ab:01:50:5f:2b:8e: 5f:5e:2d:31:7b:75:7e:26:6d:aa:02:b9:ba:92:a5:eb:e9:c9: f9:5d:16:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyWF6YaTd6cq79TIpktngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTlmZmZhZjA5MjQ5YjIwY2Y3ZjU2N2MzY2NiOTk1OGI0 ZjMxMTAwHhcNMjUxMjExMTkwMDM3WhcNMjUxMjEyMTkwMDM3WjAzMTEwLwYDVQQD Eyg3YjFlZDU3NTJlZWRmMzU1ODY1OWJjZDY1NTVhYWQ5MWM2NzQ4NmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogxbr5dj4KR+w4/GrT9QstZIp7ey gF2motutFTQW3lSgNvXm29bVgeitkUzfNVJWFuCXRZAm3sxSYjK5kkdP5T8F6HkE ux0OBqMkuUQpS3wgpxrdKfAS3iVprsA8cX/0M9mNIu6XzzsUdc7HqAGXA0OCs14E TVnhw//oGCDVFESXHanHw7Po0m5/Ey5Z/ZU+fBcudSwrLNhdvgqrDtiLoaDJNAgV /gvGgJCmTv2Flf9EvROYQPRgDGlKNNe4lo7IidZUlbS20pBrxpbuR0gCZZV6U66a DwQ8ClhzKfkbZroO+lJeqwYSUcdx4sQ3jK1XLhCyx2Z/6XGfKBgkn2zkXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHse1XUu7fNVhlm81lVarZHGdIbuMB8GA1UdIwQY MBaAFF6p//rwkkmyDPf1Z8PMuZWLTzEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODkt YjU0OWZmYTA0MDQ2LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODktYjU0OWZmYTA0MDQ2 LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRw8OuOH JLC9oSWSeXbSAUK+fk6EH8kJ/w9zKkJSYmuwtCQ5MFwE6FESi2eQMPIJgHnKm9A4 nJj4HwgRVDImIFb5COyuzhStFjz12vcYVr+ydnjeFgO+kkeGlDNikOLYqaSO+D8/ b56/+1f5/LFtNlzlJmwAVHqMBoxv0oAlWcYjhufr3EX8czwcO3EUS3398/M482+h Xp/xNgjYnR46KYLCpnFEMV6PtSKllTxv2Y4HCROPxb2BoAIk2LuNegyvZrmtJmYh u9gJh6brvAGkxPJ4geLRYs2xYCIqT6g5m9dPHbWUqwFQXyuOX14tMXt1fiZtqgK5 upKl6+nJ+V0Wzg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:12 2025 by rpki-client