This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json) Hash identifier: lwYu7mBfMiXd80LXEalTdhU5aWSfLyS9VZXJoMNC+vk= Subject key identifier: 90:AD:17:05:1F:14:C0:C4:55:AF:F6:BA:47:3C:93:8F:87:24:61:7D Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e Certificate serial: 019B6EB4BA22369636AED0CB82B541646CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 10:01:36 +0000 Manifest this update: Tue 30 Dec 2025 10:01:36 +0000 Manifest next update: Wed 31 Dec 2025 10:01:36 +0000 Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=) 2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: Y9fOJfQZVvyFPg5k6cWy/gAQHb5hAHFtZQnrAlixxGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:ba:22:36:96:36:ae:d0:cb:82:b5:41:64:6c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e Validity Not Before: Dec 30 10:01:36 2025 GMT Not After : Dec 31 10:01:36 2025 GMT Subject: CN=90ad17051f14c0c455aff6ba473c938f8724617d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:d4:f5:ec:1b:cd:37:9a:94:61:2a:79:4a: 74:1a:cb:19:55:44:ea:77:c2:7d:c0:ec:9a:63:96: aa:02:9e:5f:eb:e0:5f:77:53:81:22:a2:25:2f:78: ac:65:0e:b3:68:ca:1a:ff:7a:9a:bb:a8:c1:08:43: df:ea:53:14:25:67:57:b8:48:ce:dd:29:8a:8f:ba: 0f:15:65:4f:15:0b:6a:76:6f:53:15:e3:81:82:bc: 79:7e:43:2f:23:56:e7:f9:e7:f7:a3:0f:b5:e7:0e: 02:1b:ec:81:29:75:f4:90:62:7b:a8:10:67:a4:62: 50:54:1e:4c:ba:22:59:46:f0:ee:06:4b:54:b0:ba: 9e:33:12:f7:21:bd:f1:df:7f:8f:c3:dd:71:a3:d9: 01:d0:37:78:db:1c:84:ba:06:9f:16:74:fb:d4:c1: f0:70:05:c0:40:b5:ce:a9:9d:83:d2:72:56:48:78: d7:22:9e:13:f6:ed:2f:03:a8:59:92:4c:76:9a:ac: 63:f4:35:72:ad:a0:54:27:74:13:d1:9b:c7:19:98: ff:67:dc:a7:80:94:54:79:5f:fc:0a:f6:d7:08:da: 1a:07:3d:60:67:3e:ef:32:23:de:8f:ea:fd:da:08: f3:93:33:15:39:a1:62:09:82:0f:32:d8:27:04:83: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AD:17:05:1F:14:C0:C4:55:AF:F6:BA:47:3C:93:8F:87:24:61:7D X509v3 Authority Key Identifier: keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3b:fe:ac:1b:11:ca:3f:5a:32:ae:9c:d0:41:2c:84:75:e4: 06:8b:79:b9:af:09:4e:9d:52:7a:ef:0b:f6:af:7c:a9:f1:62: 28:5b:5b:1f:85:0e:22:e2:8e:9e:81:b0:1e:91:24:1f:55:08: 7c:3a:b8:40:0f:18:86:89:b0:f7:73:d0:62:fc:6d:c1:9b:a3: da:18:44:3a:8c:e7:c5:15:0e:61:67:79:47:04:bd:72:03:cc: 44:6c:61:38:0f:9b:59:2a:d5:6c:4b:bc:0b:79:8f:88:5c:19: 54:dd:36:a2:9e:16:02:68:40:a8:e1:90:2b:f8:a1:ec:66:c5: 34:be:a9:da:82:e8:40:b7:32:74:a3:ae:af:4b:3b:40:6d:fa: 98:2a:75:6a:8d:8f:01:cc:36:48:b7:78:0a:67:88:a1:d4:0f: c4:47:db:53:40:d8:a8:af:e4:64:d6:4e:6f:ed:f6:0d:ab:42: d3:a1:20:fa:ba:cc:0b:b2:ea:a2:73:dc:74:da:dd:e1:bf:36: c1:de:bf:12:62:49:67:14:35:33:39:e9:3c:a0:0f:4a:c9:29: c9:a8:d3:fa:6c:c5:fa:36:37:48:2b:4d:51:75:ce:43:70:14: a0:9c:5e:6b:ba:a7:19:55:02:cf:db:c3:bc:b0:60:9d:7e:ab: ef:6a:69:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutLoiNpY2rtDLgrVBZGzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MDQ5MTA5MjEzMGRlZGQ4NDY2ZmZkNWNjNTEwNTc2Yzg5 NGRmNmUwHhcNMjUxMjMwMTAwMTM2WhcNMjUxMjMxMTAwMTM2WjAzMTEwLwYDVQQD Eyg5MGFkMTcwNTFmMTRjMGM0NTVhZmY2YmE0NzNjOTM4Zjg3MjQ2MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgLU9ewbzTealGEqeUp0GssZVUTq d8J9wOyaY5aqAp5f6+Bfd1OBIqIlL3isZQ6zaMoa/3qau6jBCEPf6lMUJWdXuEjO 3SmKj7oPFWVPFQtqdm9TFeOBgrx5fkMvI1bn+ef3ow+15w4CG+yBKXX0kGJ7qBBn pGJQVB5MuiJZRvDuBktUsLqeMxL3Ib3x33+Pw91xo9kB0Dd42xyEugafFnT71MHw cAXAQLXOqZ2D0nJWSHjXIp4T9u0vA6hZkkx2mqxj9DVyraBUJ3QT0ZvHGZj/Z9yn gJRUeV/8CvbXCNoaBz1gZz7vMiPej+r92gjzkzMVOaFiCYIPMtgnBIPW/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCtFwUfFMDEVa/2ukc8k4+HJGF9MB8GA1UdIwQY MBaAFMUEkQkhMN7dhGb/1cxRBXbIlN9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgt YmYxOTFkOWEyYzljLzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgtYmYxOTFkOWEyYzlj LzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjv+rBsR yj9aMq6c0EEshHXkBot5ua8JTp1Seu8L9q98qfFiKFtbH4UOIuKOnoGwHpEkH1UI fDq4QA8Yhomw93PQYvxtwZuj2hhEOoznxRUOYWd5RwS9cgPMRGxhOA+bWSrVbEu8 C3mPiFwZVN02op4WAmhAqOGQK/ih7GbFNL6p2oLoQLcydKOur0s7QG36mCp1ao2P Acw2SLd4CmeIodQPxEfbU0DYqK/kZNZOb+32DatC06Eg+rrMC7LqonPcdNrd4b82 wd6/EmJJZxQ1MznpPKAPSskpyajT+mzF+jY3SCtNUXXOQ3AUoJxea7qnGVUCz9vD vLBgnX6r72ppNQ== -----END CERTIFICATE-----Generated at Tue Dec 30 11:31:17 2025 by rpki-client