This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json) Hash identifier: keZiGE/SPWz3ts1pCzEwLcRUP7ZkSEn2FYZNHxiq7Rw= Subject key identifier: 92:ED:8E:80:AC:10:82:0F:E1:17:61:7A:14:66:CB:77:0F:2E:E6:5F Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e Certificate serial: 019B6CC5853615A794EBD1754F6E476EE3F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 01:00:42 +0000 Manifest this update: Tue 30 Dec 2025 01:00:42 +0000 Manifest next update: Wed 31 Dec 2025 01:00:42 +0000 Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=) 2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: 5It/ub5SV4KGXPDuecioM4IbbiqydlGpM+XajvrwyUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:85:36:15:a7:94:eb:d1:75:4f:6e:47:6e:e3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e Validity Not Before: Dec 30 01:00:42 2025 GMT Not After : Dec 31 01:00:42 2025 GMT Subject: CN=92ed8e80ac10820fe117617a1466cb770f2ee65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:2b:ee:24:e3:e4:24:eb:91:4e:6a:02:18: f5:6d:22:07:60:ab:5a:c6:fa:7b:12:eb:6a:76:23: b4:82:bd:bc:6d:2f:b3:46:a7:45:ae:13:dc:89:69: ae:f5:4e:6f:83:9f:7b:e1:8e:86:a3:ff:89:e3:f2: 8d:dd:f6:be:ff:21:4d:c5:78:96:54:c8:6a:3f:6d: c2:72:3a:26:66:09:6b:d1:62:b6:47:35:e9:6f:7e: 71:93:8c:7b:9c:eb:dc:a5:94:ea:e1:c1:40:ca:e3: c2:0a:dd:e3:b4:9a:3e:c4:a0:e6:20:30:99:ee:ff: b3:b3:fd:ae:b5:ee:53:7d:d6:db:51:e2:85:78:63: a5:2c:70:d7:65:b2:34:49:de:50:1d:98:a9:54:ac: 0b:e2:e7:0d:c9:5b:d1:a8:d3:12:19:48:6c:4f:e8: 43:d7:2f:b6:32:2e:ea:19:f8:2e:bd:21:54:ad:4c: 30:2d:bb:f5:fb:ee:97:72:2c:a7:7f:1e:26:8d:56: 78:94:5a:1a:f1:39:95:10:23:c9:12:45:a7:d3:16: 01:a6:b7:76:e8:34:29:c3:49:49:96:6a:57:5b:fe: ff:7e:c8:42:74:ac:da:0a:72:d0:30:2a:1b:a4:37: ac:43:85:b9:b4:e2:65:9f:3a:6c:24:6c:ed:2d:17: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:8E:80:AC:10:82:0F:E1:17:61:7A:14:66:CB:77:0F:2E:E6:5F X509v3 Authority Key Identifier: keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d4:e1:d2:62:a6:1f:52:76:07:90:05:3b:1c:90:63:7d:5e: 97:1b:17:db:0c:1f:eb:69:4a:10:20:b3:df:1d:20:36:79:54: 8d:ae:24:13:b1:8c:4f:85:7e:a9:be:2f:d2:a8:d8:6e:54:75: 55:ad:52:b8:ee:84:76:4b:0b:5f:e0:cb:ab:69:4e:74:b6:78: b2:52:b1:93:a6:c1:a1:ea:81:1d:a9:c6:d0:f9:82:8b:f9:9d: 02:2e:e8:41:90:57:a1:a0:a4:d0:67:0d:58:9b:ec:c3:8a:9d: 7d:0b:4a:09:21:af:a6:29:24:44:d7:fa:ba:f4:d0:9f:f6:54: a7:75:5e:1b:27:5b:3d:30:2a:2d:01:aa:54:59:5d:52:6f:68: 0d:13:fb:c3:22:b0:7d:f5:f6:17:ae:1a:ab:5b:17:38:02:5e: fc:6e:ad:41:52:c2:95:bc:08:51:63:ba:4b:58:8b:14:e7:26: 16:e5:93:67:0a:88:56:fb:d3:10:7e:d1:6a:c2:ef:e1:2a:d3: 24:f0:d0:d6:4c:31:33:93:79:8e:89:b6:0b:83:14:45:da:9a: 9b:2c:e8:65:80:e6:d8:36:e7:dc:56:7f:e5:a1:39:6a:17:a1: af:2d:d3:4b:91:a3:26:88:3d:c6:d8:3d:06:56:9c:20:bd:fb: 23:8e:79:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxYU2FaeU69F1T25HbuPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MDQ5MTA5MjEzMGRlZGQ4NDY2ZmZkNWNjNTEwNTc2Yzg5 NGRmNmUwHhcNMjUxMjMwMDEwMDQyWhcNMjUxMjMxMDEwMDQyWjAzMTEwLwYDVQQD Eyg5MmVkOGU4MGFjMTA4MjBmZTExNzYxN2ExNDY2Y2I3NzBmMmVlNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuysr7iTj5CTrkU5qAhj1bSIHYKta xvp7EutqdiO0gr28bS+zRqdFrhPciWmu9U5vg5974Y6Go/+J4/KN3fa+/yFNxXiW VMhqP23CcjomZglr0WK2RzXpb35xk4x7nOvcpZTq4cFAyuPCCt3jtJo+xKDmIDCZ 7v+zs/2ute5TfdbbUeKFeGOlLHDXZbI0Sd5QHZipVKwL4ucNyVvRqNMSGUhsT+hD 1y+2Mi7qGfguvSFUrUwwLbv1++6Xciynfx4mjVZ4lFoa8TmVECPJEkWn0xYBprd2 6DQpw0lJlmpXW/7/fshCdKzaCnLQMCobpDesQ4W5tOJlnzpsJGztLRewTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLtjoCsEIIP4RdhehRmy3cPLuZfMB8GA1UdIwQY MBaAFMUEkQkhMN7dhGb/1cxRBXbIlN9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgt YmYxOTFkOWEyYzljLzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgtYmYxOTFkOWEyYzlj LzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9Th0mKm H1J2B5AFOxyQY31elxsX2wwf62lKECCz3x0gNnlUja4kE7GMT4V+qb4v0qjYblR1 Va1SuO6EdksLX+DLq2lOdLZ4slKxk6bBoeqBHanG0PmCi/mdAi7oQZBXoaCk0GcN WJvsw4qdfQtKCSGvpikkRNf6uvTQn/ZUp3VeGydbPTAqLQGqVFldUm9oDRP7wyKw ffX2F64aq1sXOAJe/G6tQVLClbwIUWO6S1iLFOcmFuWTZwqIVvvTEH7RasLv4SrT JPDQ1kwxM5N5jom2C4MURdqamyzoZYDm2Dbn3FZ/5aE5ahehry3TS5GjJog9xtg9 BlacIL37I455PQ== -----END CERTIFICATE-----Generated at Tue Dec 30 09:40:47 2025 by rpki-client