This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json) Hash identifier: Utiq9n6PeHrPDRYAQ9FYhkj68Ohs1HzdPw11yNm0jEQ= Subject key identifier: 24:00:29:20:58:91:E6:8D:70:50:E7:8B:F1:07:FE:19:27:26:08:A5 Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Certificate serial: 019B3B6BCEDBEFD5A1629B14D67D7F7CA6F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft Manifest number: 0AF4 Signing time: Sat 20 Dec 2025 11:01:19 +0000 Manifest this update: Sat 20 Dec 2025 11:01:19 +0000 Manifest next update: Sun 21 Dec 2025 11:01:19 +0000 Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: 9SIG3eQGPy1YHuTxNLY0aS1PsVTwrZY85FnY+4gOIX8=) 2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=) 3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ce:db:ef:d5:a1:62:9b:14:d6:7d:7f:7c:a6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2 Validity Not Before: Dec 20 11:01:19 2025 GMT Not After : Dec 21 11:01:19 2025 GMT Subject: CN=240029205891e68d7050e78bf107fe19272608a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:56:1d:d3:2f:51:84:b5:8c:14:84:80:19: f3:b9:ed:e7:e1:fd:50:97:45:ec:12:66:fa:20:6f: b0:ab:fd:44:90:bd:fc:41:62:f5:d4:5e:03:9f:45: 65:34:fb:53:31:31:e6:b7:32:22:da:06:8e:bd:dc: 96:86:cd:e6:62:b9:13:04:83:e8:5b:0a:e4:38:1d: 75:ce:f0:18:b7:19:39:bd:6d:3b:7d:f4:01:0d:a8: e0:d8:54:37:2a:1e:41:c4:85:c7:7e:0a:f6:7d:e8: 27:a6:88:49:7f:6f:d8:0c:2d:12:7c:5a:62:06:57: 1e:41:56:b5:05:d8:59:1d:ab:77:18:d5:f0:09:37: 86:56:96:fb:ba:96:fa:b4:ae:7d:9a:ab:09:3c:d0: a1:45:c3:a6:b3:4c:5c:4a:e6:36:c2:6e:7c:98:f3: b9:b0:d1:1c:b0:42:74:08:a5:48:88:12:d4:89:79: dd:c6:ee:96:4a:43:49:03:70:40:09:5d:ad:26:0a: 53:63:80:3d:87:98:a9:bd:16:50:c4:e4:00:d4:81: 86:77:11:01:8a:fc:9f:61:b1:ff:b1:61:73:5b:0b: cb:2d:d4:a7:3f:c6:77:ec:c5:76:3a:fd:d0:b3:2c: ba:14:30:3e:36:92:2e:6d:a7:4d:4e:95:4d:49:d9: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:29:20:58:91:E6:8D:70:50:E7:8B:F1:07:FE:19:27:26:08:A5 X509v3 Authority Key Identifier: keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8e:85:40:94:22:3d:e3:e1:0b:b1:46:6c:e5:d6:db:8a:98: 99:0e:81:8f:52:75:fb:85:cb:9e:bb:25:3a:20:46:2e:97:d3: 2f:f9:73:a3:ed:51:c3:22:3d:b5:20:c6:5f:14:a5:26:80:9e: 15:04:e0:67:f6:13:45:51:67:c4:fd:5a:c9:f2:34:a9:2f:c7: e2:94:fa:58:be:6c:cb:ff:e5:a3:a3:6e:c1:3a:65:e7:eb:ca: 1f:4b:87:b3:4e:de:92:ea:66:29:d1:37:da:3f:81:a3:43:8e: 8b:a9:0e:13:77:d7:6a:30:26:0c:be:b9:9c:84:2b:a6:07:d8: da:36:91:75:87:1b:81:1a:49:20:a8:27:98:34:80:e0:e7:37: a8:a8:9c:08:ec:d6:47:44:ff:a9:bf:44:8f:b6:c5:00:7a:87: ee:41:6e:1c:13:8a:47:a1:30:44:c9:f4:ea:dc:a1:4b:78:47: 56:bd:90:a1:b7:be:64:ae:35:75:81:44:20:43:86:49:25:28: 36:92:d0:78:2f:8a:f0:41:e6:51:03:5a:55:15:ee:86:e6:af: c2:10:de:56:a9:cb:ad:5f:6b:01:7b:36:ad:75:61:ed:11:e9: 6e:ce:32:41:5c:04:89:a9:0a:92:59:4e:d7:e9:12:49:da:b5: bf:2a:8f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a87b79WhYpsU1n1/fKbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYjg4ZDkxNzg4ZmU5OTIxMDg5ZDliNjI3MWUyMTBmN2Y4 OTE0YTIwHhcNMjUxMjIwMTEwMTE5WhcNMjUxMjIxMTEwMTE5WjAzMTEwLwYDVQQD EygyNDAwMjkyMDU4OTFlNjhkNzA1MGU3OGJmMTA3ZmUxOTI3MjYwOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h9WHdMvUYS1jBSEgBnzue3n4f1Q l0XsEmb6IG+wq/1EkL38QWL11F4Dn0VlNPtTMTHmtzIi2gaOvdyWhs3mYrkTBIPo WwrkOB11zvAYtxk5vW07ffQBDajg2FQ3Kh5BxIXHfgr2fegnpohJf2/YDC0SfFpi BlceQVa1BdhZHat3GNXwCTeGVpb7upb6tK59mqsJPNChRcOms0xcSuY2wm58mPO5 sNEcsEJ0CKVIiBLUiXndxu6WSkNJA3BACV2tJgpTY4A9h5ipvRZQxOQA1IGGdxEB ivyfYbH/sWFzWwvLLdSnP8Z37MV2Ov3Qsyy6FDA+NpIubadNTpVNSdmFAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQAKSBYkeaNcFDni/EH/hknJgilMB8GA1UdIwQY MBaAFF+4jZF4j+mSEInZticeIQ9/iRSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQt NGNlNGQ4ZmVhNmVmLzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zZjdiY2QtYTdlYS00ZTEwLWJhMzQtNGNlNGQ4ZmVhNmVm LzEvWDdpTmtYaVA2WklRaWRtMkp4NGhEMy1KRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo6FQJQi PePhC7FGbOXW24qYmQ6Bj1J1+4XLnrslOiBGLpfTL/lzo+1RwyI9tSDGXxSlJoCe FQTgZ/YTRVFnxP1ayfI0qS/H4pT6WL5sy//lo6NuwTpl5+vKH0uHs07ekupmKdE3 2j+Bo0OOi6kOE3fXajAmDL65nIQrpgfY2jaRdYcbgRpJIKgnmDSA4Oc3qKicCOzW R0T/qb9Ej7bFAHqH7kFuHBOKR6EwRMn06tyhS3hHVr2Qobe+ZK41dYFEIEOGSSUo NpLQeC+K8EHmUQNaVRXuhuavwhDeVqnLrV9rAXs2rXVh7RHpbs4yQVwEiakKkllO 1+kSSdq1vyqPrA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:06:05 2025 by rpki-client