This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json) Hash identifier: j3JtjrJb9SlMI1vCvgSQ988HBLbuPmUlL5wEFlQ0Z9s= Subject key identifier: 79:7E:E3:23:1C:28:86:1F:77:B8:D3:94:CC:12:23:B7:5B:D6:93:DA Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7 Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7 Certificate serial: 019B39B457257268ACC68BB06CA7E7B3595F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 03:01:18 +0000 Manifest this update: Sat 20 Dec 2025 03:01:18 +0000 Manifest next update: Sun 21 Dec 2025 03:01:18 +0000 Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=) 2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: 3QaaljSkYW0HXpjGt1QrcgJwjjL9EH5iPPa95gR0fmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:57:25:72:68:ac:c6:8b:b0:6c:a7:e7:b3:59:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7 Validity Not Before: Dec 20 03:01:18 2025 GMT Not After : Dec 21 03:01:18 2025 GMT Subject: CN=797ee3231c28861f77b8d394cc1223b75bd693da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:73:51:25:20:38:63:cb:12:7f:7a:8a:33: 7d:72:9e:45:39:b2:4e:59:df:d0:2c:25:b9:b1:55: 7c:3b:7d:ee:05:44:07:03:c6:70:a7:3b:70:6d:49: 07:b5:d8:3f:f5:fe:8e:eb:d1:57:ef:58:ff:9a:cf: bc:45:33:c4:7f:86:8c:37:7b:49:b5:1c:82:32:36: 2c:df:74:d1:7d:8f:75:e6:30:13:58:5b:0e:61:da: a3:38:8d:bb:92:7e:10:12:22:35:ce:4a:b4:58:89: 26:e4:7d:21:69:a6:a2:10:11:05:6e:eb:95:b4:ec: 2a:f3:be:74:f7:16:ad:63:01:0c:28:0c:8f:5b:12: 2f:15:db:1b:a9:36:49:05:c8:2d:dc:73:1a:fb:2c: fe:ee:c9:04:ff:9e:3b:b5:4e:33:d0:af:7a:2f:68: b6:58:d1:aa:cb:67:38:42:6d:ca:5d:dd:5b:35:2e: 24:52:ee:76:ec:00:d5:82:5b:d7:7d:98:f8:24:ef: 69:a8:1e:f0:ee:df:38:a8:82:21:35:ee:f0:bb:f5: b1:e8:89:56:92:42:c6:d2:b0:95:7e:17:b8:3a:57: b3:e7:1d:df:f7:19:27:e2:e3:6f:3d:24:02:74:5a: 3e:b5:23:1d:d4:73:a5:be:03:44:28:da:63:17:62: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7E:E3:23:1C:28:86:1F:77:B8:D3:94:CC:12:23:B7:5B:D6:93:DA X509v3 Authority Key Identifier: keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d7:f1:b9:a2:9a:bb:cd:51:0e:75:76:d6:30:68:ca:54:1b: 1c:35:b3:a5:1e:01:98:f0:fa:f2:0c:70:dd:37:e3:d2:1d:be: a3:2e:0b:c8:31:91:71:df:f5:a8:93:34:bb:b5:49:44:fe:b5: 0c:15:f1:08:54:f4:b9:1c:39:9b:d1:44:7b:0a:ec:fd:ec:dd: 95:2a:9a:45:86:ed:03:ef:a0:7b:e6:7b:ec:f0:ec:a9:8e:64: a3:42:4c:b7:8a:f5:09:35:aa:dd:28:bf:42:07:de:40:e9:cb: 32:78:c0:63:3e:ff:34:da:4c:75:74:29:09:0d:f5:05:08:01: 3d:1f:97:82:78:44:16:65:67:bb:a2:ce:b3:77:4a:f8:c9:25: 19:4e:1a:c9:c6:4c:9e:bf:3a:50:ab:45:87:d9:57:e3:63:13: 82:b0:12:a9:08:59:47:c4:05:0e:45:a5:b4:41:b2:e2:f5:ae: aa:6e:43:c7:74:12:c7:93:ce:a4:d6:20:1b:1a:15:a4:c1:92: 19:76:a0:8a:86:69:d2:5b:12:88:76:05:96:06:7c:20:8c:2b: 7f:61:9f:7e:ee:85:a3:59:d1:9a:81:d0:0f:e0:e3:d0:6d:af: 33:4e:88:b1:14:eb:6a:06:a7:a5:01:d4:d7:68:38:dd:0a:7e: 2f:9d:f8:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFclcmisxouwbKfns1lfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZkOTQyMzdlZmQyMDBkZDBiMTE2ZTFmNmY5YjdiY2E2 NTljYTcwHhcNMjUxMjIwMDMwMTE4WhcNMjUxMjIxMDMwMTE4WjAzMTEwLwYDVQQD Eyg3OTdlZTMyMzFjMjg4NjFmNzdiOGQzOTRjYzEyMjNiNzViZDY5M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyNzUSUgOGPLEn96ijN9cp5FObJO Wd/QLCW5sVV8O33uBUQHA8ZwpztwbUkHtdg/9f6O69FX71j/ms+8RTPEf4aMN3tJ tRyCMjYs33TRfY915jATWFsOYdqjOI27kn4QEiI1zkq0WIkm5H0haaaiEBEFbuuV tOwq87509xatYwEMKAyPWxIvFdsbqTZJBcgt3HMa+yz+7skE/547tU4z0K96L2i2 WNGqy2c4Qm3KXd1bNS4kUu527ADVglvXfZj4JO9pqB7w7t84qIIhNe7wu/Wx6IlW kkLG0rCVfhe4Olez5x3f9xkn4uNvPSQCdFo+tSMd1HOlvgNEKNpjF2JXWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl+4yMcKIYfd7jTlMwSI7db1pPaMB8GA1UdIwQY MBaAFMbP2UI379IA3QsRbh9vm3vKZZynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEt ZGM4ODRmMWJlM2U1LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEtZGM4ODRmMWJlM2U1 LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9fxuaKa u81RDnV21jBoylQbHDWzpR4BmPD68gxw3Tfj0h2+oy4LyDGRcd/1qJM0u7VJRP61 DBXxCFT0uRw5m9FEewrs/ezdlSqaRYbtA++ge+Z77PDsqY5ko0JMt4r1CTWq3Si/ QgfeQOnLMnjAYz7/NNpMdXQpCQ31BQgBPR+XgnhEFmVnu6LOs3dK+MklGU4aycZM nr86UKtFh9lX42MTgrASqQhZR8QFDkWltEGy4vWuqm5Dx3QSx5POpNYgGxoVpMGS GXagioZp0lsSiHYFlgZ8IIwrf2Gffu6Fo1nRmoHQD+Dj0G2vM06IsRTraganpQHU 12g43Qp+L5342w== -----END CERTIFICATE-----Generated at Sat Dec 20 11:41:21 2025 by rpki-client