This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json) Hash identifier: k+xzR0PflRXCmfXsvQBEqBVnPTMrx7HsHFVTvktwddE= Subject key identifier: 44:2A:FB:E8:65:5F:CA:3D:AC:E6:DA:9D:A9:87:01:B1:F3:08:36:69 Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0 Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0 Certificate serial: 019B47700DFA634A212E8B28C6E682E532E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 19:01:24 +0000 Manifest this update: Mon 22 Dec 2025 19:01:24 +0000 Manifest next update: Tue 23 Dec 2025 19:01:24 +0000 Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: t3IHL9WgRz4VNxwOfPJZnmn/IEBOYSgKOL2n+eJsu5M=) 2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:0d:fa:63:4a:21:2e:8b:28:c6:e6:82:e5:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0 Validity Not Before: Dec 22 19:01:24 2025 GMT Not After : Dec 23 19:01:24 2025 GMT Subject: CN=442afbe8655fca3dace6da9da98701b1f3083669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:32:c1:76:ee:f8:a0:67:bb:86:ea:18:dc: 2e:bb:b0:ca:7f:1a:82:b1:e9:2e:c4:ce:aa:ab:7b: dc:e6:82:f2:0d:05:6d:1b:20:60:05:ba:66:73:d6: fa:97:aa:80:da:a2:cd:22:d0:60:dd:5b:55:a6:de: 99:64:76:a1:c4:93:0b:16:ed:1c:04:45:43:ef:1a: 3d:f9:c3:87:4e:dd:ff:fb:3e:f5:ca:40:81:70:d9: d6:fb:35:15:d2:ec:8c:b2:51:14:a4:1e:3e:01:09: 6b:2a:51:28:6f:11:b6:4a:63:5a:ee:42:d8:4e:04: 8c:a9:f2:f7:f4:64:8a:f5:5b:f6:a2:35:ae:54:3e: ad:76:62:78:b9:d7:55:38:fc:7c:38:6a:3c:e6:8c: 9b:0c:8f:a2:68:d7:31:c2:5e:8c:bb:e3:09:d5:ae: c0:10:d7:8e:95:e2:c3:85:93:a1:30:8b:52:76:07: 83:21:cd:70:1b:54:c8:98:2b:90:e8:7c:4d:30:05: 19:d5:ed:ed:57:bf:8b:64:70:bd:27:5f:94:16:78: a0:0a:10:42:f0:28:3f:f7:e9:9c:12:46:bf:f6:16: f2:bd:e6:15:bd:7b:d7:0d:ef:f0:61:d7:4a:9c:96: b9:a2:8b:94:46:a6:7d:21:57:35:f3:f6:71:05:0f: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:FB:E8:65:5F:CA:3D:AC:E6:DA:9D:A9:87:01:B1:F3:08:36:69 X509v3 Authority Key Identifier: keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b2:cf:08:9b:12:c6:1a:90:97:be:30:8d:db:8a:3f:ed:33: 0d:15:02:d2:43:51:4c:ed:73:65:2a:2b:9e:94:e3:4f:1d:7f: c3:e1:cf:15:2b:3e:95:bf:10:21:54:db:80:60:64:f0:9b:a4: 66:62:1d:20:c8:0b:ee:a4:2d:16:0b:65:86:42:11:5e:a8:f2: bd:d9:4a:74:bc:57:4e:6c:db:17:08:50:de:b8:15:6f:ec:c2: cf:99:16:9a:03:fd:e5:b4:da:26:fc:e3:06:c6:32:7a:17:36: 1a:bd:ea:dc:aa:ec:7c:aa:f4:b5:39:86:bd:b9:cf:56:e7:12: d3:5f:48:c1:37:29:93:66:f3:6f:c3:b7:01:dc:ae:ae:bd:44: 3e:82:07:98:c8:f7:16:f7:7f:c7:bc:cb:87:51:7c:fd:19:04: 50:a3:6e:5f:91:55:fa:22:37:fd:e3:a8:8c:cd:96:ed:1b:96: 5e:36:5a:52:92:78:a4:99:c7:06:97:8f:65:3f:49:76:fa:e0: 1c:e2:e2:b3:1a:c8:86:de:33:a4:94:52:e2:2b:19:4b:0b:b8: 6e:a3:6d:de:58:bf:8e:07:b6:89:fa:c1:02:07:55:b0:27:fe: 55:0f:de:c2:e9:2f:6e:08:0a:92:d4:2c:68:ca:ec:4a:02:1b: d5:64:8c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcA36Y0ohLosoxuaC5TLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYWZjNjBmNGQzNDA5ZmI0NmM4YTViZjk1ZDM5ODFmMTRh MTQzYjAwHhcNMjUxMjIyMTkwMTI0WhcNMjUxMjIzMTkwMTI0WjAzMTEwLwYDVQQD Eyg0NDJhZmJlODY1NWZjYTNkYWNlNmRhOWRhOTg3MDFiMWYzMDgzNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoMywXbu+KBnu4bqGNwuu7DKfxqC sekuxM6qq3vc5oLyDQVtGyBgBbpmc9b6l6qA2qLNItBg3VtVpt6ZZHahxJMLFu0c BEVD7xo9+cOHTt3/+z71ykCBcNnW+zUV0uyMslEUpB4+AQlrKlEobxG2SmNa7kLY TgSMqfL39GSK9Vv2ojWuVD6tdmJ4uddVOPx8OGo85oybDI+iaNcxwl6Mu+MJ1a7A ENeOleLDhZOhMItSdgeDIc1wG1TImCuQ6HxNMAUZ1e3tV7+LZHC9J1+UFnigChBC 8Cg/9+mcEka/9hbyveYVvXvXDe/wYddKnJa5oouURqZ9IVc18/ZxBQ/hKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQq++hlX8o9rObanamHAbHzCDZpMB8GA1UdIwQY MBaAFF6vxg9NNAn7Rsilv5XTmB8UoUOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82Mjg1ZjEtOGMxZC00ODQ0LWJlMGUt YmU4ZTY1MWM1MWY2LzEvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82Mjg1ZjEtOGMxZC00ODQ0LWJlMGUtYmU4ZTY1MWM1MWY2 LzEvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbLPCJsS xhqQl74wjduKP+0zDRUC0kNRTO1zZSornpTjTx1/w+HPFSs+lb8QIVTbgGBk8Juk ZmIdIMgL7qQtFgtlhkIRXqjyvdlKdLxXTmzbFwhQ3rgVb+zCz5kWmgP95bTaJvzj BsYyehc2Gr3q3KrsfKr0tTmGvbnPVucS019IwTcpk2bzb8O3Adyurr1EPoIHmMj3 Fvd/x7zLh1F8/RkEUKNuX5FV+iI3/eOojM2W7RuWXjZaUpJ4pJnHBpePZT9Jdvrg HOLisxrIht4zpJRS4isZSwu4bqNt3li/jge2ifrBAgdVsCf+VQ/ewukvbggKktQs aMrsSgIb1WSM3g== -----END CERTIFICATE-----Generated at Tue Dec 23 00:44:30 2025 by rpki-client