This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json) Hash identifier: XLXnFYY6hQzOmPA0GxbrLQ+AaOSDLfDa3ZVUf1zK44w= Subject key identifier: E4:2E:C6:35:7E:A2:D0:62:EE:5D:F7:1A:60:2B:43:43:57:CF:DB:4F Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7 Certificate serial: 019B3C1078EE70624EFA95ED9CC31011BE6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft Manifest number: 0650 Signing time: Sat 20 Dec 2025 14:01:10 +0000 Manifest this update: Sat 20 Dec 2025 14:01:10 +0000 Manifest next update: Sun 21 Dec 2025 14:01:10 +0000 Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=) 2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=) 3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: 3hLNef6L6f+CgmNhmvRAcTfoArDfRSR7ges5ppGwSXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:78:ee:70:62:4e:fa:95:ed:9c:c3:10:11:be:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7 Validity Not Before: Dec 20 14:01:10 2025 GMT Not After : Dec 21 14:01:10 2025 GMT Subject: CN=e42ec6357ea2d062ee5df71a602b434357cfdb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:57:de:1f:3a:5c:7a:46:81:c6:cb:95:55: a4:37:8b:49:d2:8c:09:a7:3e:cc:28:46:6b:94:65: 63:50:c3:41:1e:9d:ae:fe:2d:e7:3d:61:d7:0c:9d: fc:fc:7d:29:84:19:d7:4e:f4:66:9e:43:b2:51:53: 84:1c:4e:be:6b:cb:fc:7c:c0:a1:09:c4:32:fe:ec: 9d:77:a2:82:b0:c9:dd:e5:e6:76:2e:eb:5f:df:99: 63:59:2f:18:61:33:41:07:ae:f6:aa:c5:8d:7e:d0: d7:51:cc:3c:cb:f1:36:29:fd:81:1f:e2:cb:2b:a5: 0a:7e:e8:6b:bb:d7:39:a3:63:c2:28:c0:61:2f:a1: de:49:66:47:4a:9e:ad:e7:d1:71:63:ed:30:1b:ba: 10:cd:b6:eb:09:23:96:b7:f1:86:62:1e:dd:c8:2a: 54:a5:9d:2e:6b:b6:17:e2:db:77:44:37:ad:c8:70: e7:8b:dc:59:0d:22:b5:a1:af:3d:fa:64:fc:e6:76: 07:67:2b:5e:c6:86:da:1b:d8:fe:1f:29:08:04:bf: f9:81:e0:3e:91:69:f0:29:fa:29:32:78:98:0d:50: 48:57:a8:c9:ef:3c:f4:70:e1:ff:77:ad:37:f8:d1: 2e:fd:df:51:3f:20:cb:29:e3:61:77:3c:c3:1b:4d: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2E:C6:35:7E:A2:D0:62:EE:5D:F7:1A:60:2B:43:43:57:CF:DB:4F X509v3 Authority Key Identifier: keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:db:89:e8:f1:51:55:31:d0:17:cf:98:12:ac:d7:da:ad:95: 5b:e0:03:9a:ab:57:1a:90:05:eb:20:6f:41:01:da:d0:78:1b: d6:ef:cc:7f:0b:dd:9b:b1:68:c6:43:3c:76:16:8d:1f:12:80: d9:22:ea:04:ae:89:af:1f:7a:63:f0:2b:ce:95:df:0b:0a:74: 30:16:2c:8b:97:58:ae:4d:e6:dc:b2:4f:b6:de:94:08:95:9b: 8c:b8:45:bc:d9:17:8a:6a:10:97:f0:74:7d:3d:19:b1:b7:6c: 4f:64:db:89:87:da:a1:6d:e1:42:86:64:f4:aa:be:43:95:0e: f4:32:17:ad:5a:f6:8b:28:b1:43:11:c1:9b:a4:64:7c:a9:a7: 88:2e:cd:0b:19:ed:0b:86:f6:2e:a9:e8:fe:2e:84:fe:eb:2a: 4a:b0:02:b4:de:26:28:4b:f0:3c:27:2d:fd:53:5c:a0:61:62: 47:90:87:08:9e:50:65:30:77:a4:81:73:5b:8a:4c:d9:53:c1: 7f:6f:74:b3:10:36:51:9f:88:64:2a:02:7c:4c:bd:3c:5c:e8: fe:09:43:56:c1:41:64:ac:70:19:9b:30:18:fe:3e:5a:64:70: 75:62:e4:ff:06:68:4a:67:86:64:b4:c2:89:11:05:7c:da:0f: 95:88:28:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHjucGJO+pXtnMMQEb5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMGEwZDM5NmY3NjkzNjkzNjVmMmI5ODNjNTMxYWZlY2E5 NzEwYTcwHhcNMjUxMjIwMTQwMTEwWhcNMjUxMjIxMTQwMTEwWjAzMTEwLwYDVQQD EyhlNDJlYzYzNTdlYTJkMDYyZWU1ZGY3MWE2MDJiNDM0MzU3Y2ZkYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnONX3h86XHpGgcbLlVWkN4tJ0owJ pz7MKEZrlGVjUMNBHp2u/i3nPWHXDJ38/H0phBnXTvRmnkOyUVOEHE6+a8v8fMCh CcQy/uydd6KCsMnd5eZ2Lutf35ljWS8YYTNBB672qsWNftDXUcw8y/E2Kf2BH+LL K6UKfuhru9c5o2PCKMBhL6HeSWZHSp6t59FxY+0wG7oQzbbrCSOWt/GGYh7dyCpU pZ0ua7YX4tt3RDetyHDni9xZDSK1oa89+mT85nYHZytexobaG9j+HykIBL/5geA+ kWnwKfopMniYDVBIV6jJ7zz0cOH/d603+NEu/d9RPyDLKeNhdzzDG00c8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQuxjV+otBi7l33GmArQ0NXz9tPMB8GA1UdIwQY MBaAFF0KDTlvdpNpNl8rmDxTGv7KlxCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUt NDQyMDEwYjU3OWVmLzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUtNDQyMDEwYjU3OWVm LzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNuJ6PFR VTHQF8+YEqzX2q2VW+ADmqtXGpAF6yBvQQHa0Hgb1u/Mfwvdm7FoxkM8dhaNHxKA 2SLqBK6Jrx96Y/ArzpXfCwp0MBYsi5dYrk3m3LJPtt6UCJWbjLhFvNkXimoQl/B0 fT0ZsbdsT2TbiYfaoW3hQoZk9Kq+Q5UO9DIXrVr2iyixQxHBm6RkfKmniC7NCxnt C4b2Lqno/i6E/usqSrACtN4mKEvwPCct/VNcoGFiR5CHCJ5QZTB3pIFzW4pM2VPB f290sxA2UZ+IZCoCfEy9PFzo/glDVsFBZKxwGZswGP4+WmRwdWLk/wZoSmeGZLTC iREFfNoPlYgohA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:46:03 2025 by rpki-client