This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json) Hash identifier: nnvnqRWIOeTrK7513rUc8esG5RctP7f1z8D6ud+aRJQ= Subject key identifier: A4:7D:86:31:BC:71:C4:04:C8:B6:69:9D:F6:0F:41:43:D1:62:F5:49 Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Certificate serial: 019B3FECB76977A6E9611E035F55CD200E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft Manifest number: 1329 Signing time: Sun 21 Dec 2025 08:00:36 +0000 Manifest this update: Sun 21 Dec 2025 08:00:36 +0000 Manifest next update: Mon 22 Dec 2025 08:00:36 +0000 Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: cf+U3PVQpQuF1tvEMvnNFewTQgn6B/O/6x2BeGEz/F0=) 2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:b7:69:77:a6:e9:61:1e:03:5f:55:cd:20:0e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Validity Not Before: Dec 21 08:00:36 2025 GMT Not After : Dec 22 08:00:36 2025 GMT Subject: CN=a47d8631bc71c404c8b6699df60f4143d162f549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:a9:21:07:fa:ef:96:ae:d8:3a:41:ec:3c: ee:61:c1:c8:d0:e1:d7:49:b9:cb:3b:11:7c:d4:31: 87:9b:7b:b7:fa:b4:5e:f7:7b:9f:9c:2c:67:49:b2: 82:7d:87:34:00:cf:24:44:87:98:d3:f0:d0:a0:71: 5a:fb:1e:c1:86:c3:0b:31:1d:8e:5b:ca:60:54:dd: 46:60:61:f2:38:dc:be:58:36:7a:c7:9e:61:39:1d: 45:5e:00:63:4a:6b:da:32:23:72:33:b2:56:f4:63: ab:6d:16:cf:ef:c7:5e:4c:b4:a5:df:56:7a:4b:5c: 45:3e:ce:0a:08:ad:24:49:2d:7e:4f:c6:45:74:6f: 6f:c5:fc:c5:21:c5:2b:2a:ae:4c:ce:be:c4:d4:1e: b8:91:d8:9a:9d:87:2f:e6:0a:63:47:b8:1a:c8:17: 11:3e:90:32:8e:f4:a0:1e:b9:6a:b7:cc:e8:6f:29: 3e:e7:ee:8f:88:2f:2a:31:5f:4e:d7:17:c9:24:0d: 28:d6:21:03:70:4c:85:60:9d:b4:34:08:87:cc:10: 43:ab:b4:54:19:ed:e9:26:c4:42:ba:6f:3e:75:a2: 67:ad:f8:67:20:32:73:a3:39:3b:33:05:70:c4:93: 4e:f4:5d:ab:dd:fa:c9:0a:a0:60:d1:8d:b0:ed:e6: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7D:86:31:BC:71:C4:04:C8:B6:69:9D:F6:0F:41:43:D1:62:F5:49 X509v3 Authority Key Identifier: keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:87:6b:f6:1f:ad:e9:1e:33:2b:2f:93:51:b2:c9:76:a5:b1: 00:19:8c:e6:39:d7:19:68:51:38:8e:98:cf:4b:eb:6b:8b:52: 64:50:99:15:32:cb:c7:aa:e3:45:0e:fa:ae:c9:b4:1c:5e:db: 30:06:a4:1d:a1:a9:c9:44:11:80:8a:50:20:e8:56:a9:4a:8f: fb:3c:4b:4f:71:79:ef:de:f8:0d:ab:8f:74:c8:de:39:02:fa: cc:33:03:a6:4e:58:49:f0:91:41:4c:9c:95:d6:b0:91:33:74: 4e:25:bc:25:00:c0:8d:a7:10:82:4a:8e:b8:59:fc:62:bd:9d: b3:19:9c:fc:4e:5a:5a:af:66:5a:13:5f:2c:74:f6:54:be:95: b4:e9:34:35:b3:32:9b:65:96:46:44:da:2a:5c:96:4d:f2:09: 03:29:ab:8f:de:b2:cd:98:40:70:69:69:07:82:03:2e:29:f0: b6:3b:57:05:2e:74:9a:c9:2a:c5:51:25:45:7b:61:37:40:88: ca:f8:27:b5:9e:f2:18:20:c3:18:95:44:cf:0c:fc:ae:f4:cf: 36:10:20:dc:d4:62:89:5b:d1:8f:98:82:13:64:a4:93:d6:ee: 1d:58:17:8d:95:c6:75:14:66:f6:c7:35:be:49:4a:9f:45:f9: d5:2d:a2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Ldpd6bpYR4DX1XNIA6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2 ZTJmMDgwHhcNMjUxMjIxMDgwMDM2WhcNMjUxMjIyMDgwMDM2WjAzMTEwLwYDVQQD EyhhNDdkODYzMWJjNzFjNDA0YzhiNjY5OWRmNjBmNDE0M2QxNjJmNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRqpIQf675au2DpB7DzuYcHI0OHX SbnLOxF81DGHm3u3+rRe93ufnCxnSbKCfYc0AM8kRIeY0/DQoHFa+x7BhsMLMR2O W8pgVN1GYGHyONy+WDZ6x55hOR1FXgBjSmvaMiNyM7JW9GOrbRbP78deTLSl31Z6 S1xFPs4KCK0kSS1+T8ZFdG9vxfzFIcUrKq5Mzr7E1B64kdianYcv5gpjR7gayBcR PpAyjvSgHrlqt8zobyk+5+6PiC8qMV9O1xfJJA0o1iEDcEyFYJ20NAiHzBBDq7RU Ge3pJsRCum8+daJnrfhnIDJzozk7MwVwxJNO9F2r3frJCqBg0Y2w7eZkgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR9hjG8ccQEyLZpnfYPQUPRYvVJMB8GA1UdIwQY MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4 LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgodr9h+t 6R4zKy+TUbLJdqWxABmM5jnXGWhROI6Yz0vra4tSZFCZFTLLx6rjRQ76rsm0HF7b MAakHaGpyUQRgIpQIOhWqUqP+zxLT3F57974DauPdMjeOQL6zDMDpk5YSfCRQUyc ldawkTN0TiW8JQDAjacQgkqOuFn8Yr2dsxmc/E5aWq9mWhNfLHT2VL6VtOk0NbMy m2WWRkTaKlyWTfIJAymrj96yzZhAcGlpB4IDLinwtjtXBS50mskqxVElRXthN0CI yvgntZ7yGCDDGJVEzwz8rvTPNhAg3NRiiVvRj5iCE2Skk9buHVgXjZXGdRRm9sc1 vklKn0X51S2iMg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:57:53 2025 by rpki-client