This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json) Hash identifier: 5Iufi6Vx/xBWfG6hISoiGoD6ABRT+aJOWvJAMJG+VTU= Subject key identifier: 26:EB:98:96:3E:C9:FC:E9:14:A5:CE:6E:D3:9D:EC:72:0D:87:D2:F3 Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Certificate serial: 019B42B7C7FEE882AE64303236D2F0436B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft Manifest number: 1795 Signing time: Sun 21 Dec 2025 21:01:39 +0000 Manifest this update: Sun 21 Dec 2025 21:01:39 +0000 Manifest next update: Mon 22 Dec 2025 21:01:39 +0000 Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=) 2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: ihumayzkgIySsDj9bYzo6gZHT8/X8pe1NOOUIcmDGQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:c7:fe:e8:82:ae:64:30:32:36:d2:f0:43:6b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Validity Not Before: Dec 21 21:01:39 2025 GMT Not After : Dec 22 21:01:39 2025 GMT Subject: CN=26eb98963ec9fce914a5ce6ed39dec720d87d2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:40:e1:b9:43:65:bc:d7:46:58:c5:b4:45: 96:dd:97:4f:ed:66:49:e8:d3:83:66:8e:0d:85:23: 78:5b:48:c1:ab:ce:fb:5f:e9:82:53:59:24:27:ce: 73:39:95:c1:83:fe:a9:2f:79:9c:bf:6f:d4:90:7f: d9:bb:2d:16:a7:fa:37:d8:d2:d2:f5:34:47:f6:81: 52:39:b6:26:ec:ff:26:13:c2:3a:9c:e5:4e:31:b3: 5f:c7:19:fd:36:c6:6b:dc:0d:8e:14:e0:18:25:d5: f6:fe:3d:74:c2:69:21:90:3e:4b:75:fe:94:c6:3e: 86:91:c8:d6:48:d5:37:27:63:18:64:8f:59:b5:d7: 7b:38:b4:a3:0e:94:38:ce:0d:7d:bf:29:b3:5f:67: 55:3c:a1:76:07:8e:69:75:1e:dc:c0:05:93:3d:dc: 05:8f:fc:99:62:a8:e9:22:9b:c0:fb:5a:e1:16:b6: ce:04:ac:68:2e:82:ea:ab:70:f5:f0:21:6b:14:f6: b1:70:26:4c:74:19:c0:73:8f:de:cb:88:3f:3e:2a: 69:b2:c7:af:06:b5:e8:4d:43:42:9b:33:1a:6c:73: d9:57:87:27:03:f6:84:07:7a:84:fa:b6:99:19:e3: eb:d9:80:cb:39:0a:15:09:1e:7c:e5:89:8a:e4:67: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EB:98:96:3E:C9:FC:E9:14:A5:CE:6E:D3:9D:EC:72:0D:87:D2:F3 X509v3 Authority Key Identifier: keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:53:7b:78:47:bf:b5:79:22:bd:83:88:5e:8f:b3:52:bd:b1: cf:40:d8:81:19:d8:3a:3d:56:24:53:75:d5:53:18:95:88:70: 58:f0:e9:dc:70:90:fe:a9:54:2a:12:89:f8:7e:9f:e8:cc:8d: d1:86:3f:d9:5c:e0:8c:91:20:8d:de:fa:d5:63:fe:2d:6a:f9: a8:c6:38:c7:3d:fa:f5:16:3e:f0:78:0e:88:f4:6e:3e:95:30: d5:4f:e1:91:94:f1:15:d0:41:cc:79:f0:df:24:40:98:9e:87: da:bf:73:da:42:66:98:0d:06:7e:65:7e:42:ed:14:32:51:5b: ef:27:d0:24:f9:a4:5c:c3:ff:aa:9a:1f:4d:91:b1:07:51:5c: 54:c0:16:ed:83:61:75:e0:2d:10:f3:23:f1:0e:9b:af:79:35: 55:f5:d6:62:b2:b1:13:8f:9b:a7:75:8f:c7:bb:10:70:cb:55: 17:03:e2:d2:82:d9:53:d0:15:85:16:55:ee:0b:13:ac:80:27: b6:91:d6:56:82:ef:6f:13:cc:b5:5f:94:75:b5:2d:1f:e2:f1: a9:3c:27:50:01:45:71:c3:62:18:fa:fc:8b:be:38:17:13:d4: 73:c5:14:2b:0f:18:16:bb:26:fd:3f:7f:6b:bf:fb:1f:b3:a3: 90:f6:cd:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt8f+6IKuZDAyNtLwQ2s1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk YzRhYzYwHhcNMjUxMjIxMjEwMTM5WhcNMjUxMjIyMjEwMTM5WjAzMTEwLwYDVQQD EygyNmViOTg5NjNlYzlmY2U5MTRhNWNlNmVkMzlkZWM3MjBkODdkMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPlA4blDZbzXRljFtEWW3ZdP7WZJ 6NODZo4NhSN4W0jBq877X+mCU1kkJ85zOZXBg/6pL3mcv2/UkH/Zuy0Wp/o32NLS 9TRH9oFSObYm7P8mE8I6nOVOMbNfxxn9NsZr3A2OFOAYJdX2/j10wmkhkD5Ldf6U xj6GkcjWSNU3J2MYZI9Ztdd7OLSjDpQ4zg19vymzX2dVPKF2B45pdR7cwAWTPdwF j/yZYqjpIpvA+1rhFrbOBKxoLoLqq3D18CFrFPaxcCZMdBnAc4/ey4g/Pippssev BrXoTUNCmzMabHPZV4cnA/aEB3qE+raZGePr2YDLOQoVCR585YmK5Gfe9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbrmJY+yfzpFKXObtOd7HINh9LzMB8GA1UdIwQY MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt NzczYzBiM2M4OTM1LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1 LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFN7eEe/ tXkivYOIXo+zUr2xz0DYgRnYOj1WJFN11VMYlYhwWPDp3HCQ/qlUKhKJ+H6f6MyN 0YY/2VzgjJEgjd761WP+LWr5qMY4xz369RY+8HgOiPRuPpUw1U/hkZTxFdBBzHnw 3yRAmJ6H2r9z2kJmmA0GfmV+Qu0UMlFb7yfQJPmkXMP/qpofTZGxB1FcVMAW7YNh deAtEPMj8Q6br3k1VfXWYrKxE4+bp3WPx7sQcMtVFwPi0oLZU9AVhRZV7gsTrIAn tpHWVoLvbxPMtV+UdbUtH+LxqTwnUAFFccNiGPr8i744FxPUc8UUKw8YFrsm/T9/ a7/7H7OjkPbNMQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:34:03 2025 by rpki-client