This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json) Hash identifier: aXyZQ+Kt8kT5lU0g8j20KZLNRLF6Df4/KhxCceOUJrY= Subject key identifier: 3A:1D:8F:2A:54:7F:EA:15:47:FA:86:7D:49:1E:5F:0A:B8:02:C5:F4 Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0 Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0 Certificate serial: 019B5E2E5B841C9E8174BDBAAB5E069954A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft Manifest number: 04FC Signing time: Sat 27 Dec 2025 05:00:54 +0000 Manifest this update: Sat 27 Dec 2025 05:00:54 +0000 Manifest next update: Sun 28 Dec 2025 05:00:54 +0000 Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=) 2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=) 3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: Try4HT+re+jqXDnKxJIC+BNQ0DSF40UvmOMERtBzjsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:5b:84:1c:9e:81:74:bd:ba:ab:5e:06:99:54:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0 Validity Not Before: Dec 27 05:00:54 2025 GMT Not After : Dec 28 05:00:54 2025 GMT Subject: CN=3a1d8f2a547fea1547fa867d491e5f0ab802c5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:f0:4b:96:2a:73:c3:87:f7:f3:41:05:12: f3:45:e2:13:f3:3b:e7:5d:c5:9f:5d:b4:27:54:c2: 9c:18:89:6e:e5:00:6b:36:68:05:4f:87:05:a5:2a: a5:71:32:bd:28:90:3c:50:1a:c7:98:e9:54:92:d5: 6f:c2:12:34:ec:1f:8b:05:78:bd:e9:36:cb:6b:ee: 10:87:dd:3c:44:8e:bb:b5:d3:ac:fc:a5:a6:54:4f: 18:d5:e3:fa:6a:50:0d:df:7e:24:55:dd:db:04:3b: d6:90:76:c9:48:3e:4d:7b:5c:58:a5:5b:e8:e7:74: 6c:e3:d0:50:d3:3b:be:5c:18:18:c7:a5:76:84:c0: 08:8b:2f:9c:84:41:f4:9e:c7:18:5d:35:40:84:71: 41:bd:fa:c5:24:48:f1:1b:24:41:79:14:41:64:50: 61:f3:1b:93:fc:52:43:a0:a4:3a:6e:6f:be:d4:69: 8d:f9:5f:7e:97:7d:26:07:f1:5e:63:fb:74:00:82: 85:d6:c5:8b:16:b7:51:62:9f:0b:49:65:f8:f1:c8: 78:7e:41:0a:a6:fd:9a:75:9d:c1:da:90:72:1f:d9: 97:4f:fc:77:38:6b:fc:a0:53:c9:47:e3:65:7d:14: 3c:5e:ce:43:fd:72:51:00:46:34:5d:b4:e1:2f:4d: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1D:8F:2A:54:7F:EA:15:47:FA:86:7D:49:1E:5F:0A:B8:02:C5:F4 X509v3 Authority Key Identifier: keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a4:ca:e4:26:ec:af:bd:4d:38:4d:34:38:5b:81:5a:da:fe: c8:32:a4:37:2d:f1:88:34:56:10:d4:86:2b:6c:0e:0d:87:fb: 0a:8b:17:be:f7:f4:7d:3c:59:1f:6b:40:c2:a9:bb:bc:59:0a: 53:d8:30:ca:7b:18:c5:91:f3:a7:1e:72:26:1e:ee:cd:21:51: ee:a9:02:34:76:97:09:12:07:7a:db:06:68:74:fd:da:80:9f: 7a:83:05:3a:d2:d4:72:d9:a6:3f:24:3b:b9:7b:4f:b2:fa:fc: 67:52:5a:f4:1f:c5:c1:3d:03:22:f6:2b:63:e3:54:83:32:10: c9:07:07:b2:36:fa:55:02:1a:35:15:d3:d5:32:2e:01:3a:34: 44:bf:97:e0:3b:c0:a1:8d:17:34:c8:1b:9e:de:b5:c1:99:e5: c5:9e:90:0f:b9:6c:94:9f:2d:5e:7d:62:77:94:8e:fe:1e:ae: 18:35:8f:dc:fb:0b:23:c2:ca:bd:c4:65:16:a5:a6:1b:c4:58: b6:f5:ce:47:04:17:e2:08:b5:ee:62:26:6a:8f:41:76:ca:6e: 90:c1:10:10:6d:cf:a3:b6:c8:6d:f5:34:44:ce:ee:8c:f6:c2: ce:c9:be:9b:c1:48:c7:98:ec:04:18:c3:e1:14:7f:c6:52:61: 6f:e1:0c:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLluEHJ6BdL26q14GmVSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGVlYTEzMDcyMWU5Y2QxOTc2ZmQ3ZTBmMzRjOTZkZjZl YWM2YjAwHhcNMjUxMjI3MDUwMDU0WhcNMjUxMjI4MDUwMDU0WjAzMTEwLwYDVQQD EygzYTFkOGYyYTU0N2ZlYTE1NDdmYTg2N2Q0OTFlNWYwYWI4MDJjNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U3wS5Yqc8OH9/NBBRLzReIT8zvn XcWfXbQnVMKcGIlu5QBrNmgFT4cFpSqlcTK9KJA8UBrHmOlUktVvwhI07B+LBXi9 6TbLa+4Qh908RI67tdOs/KWmVE8Y1eP6alAN334kVd3bBDvWkHbJSD5Ne1xYpVvo 53Rs49BQ0zu+XBgYx6V2hMAIiy+chEH0nscYXTVAhHFBvfrFJEjxGyRBeRRBZFBh 8xuT/FJDoKQ6bm++1GmN+V9+l30mB/FeY/t0AIKF1sWLFrdRYp8LSWX48ch4fkEK pv2adZ3B2pByH9mXT/x3OGv8oFPJR+NlfRQ8Xs5D/XJRAEY0XbThL00QhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDodjypUf+oVR/qGfUkeXwq4AsX0MB8GA1UdIwQY MBaAFMUO6hMHIenNGXb9fg80yW326sawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQt NjNmNWZlMTEwZTc2LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQtNjNmNWZlMTEwZTc2 LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6TK5Cbs r71NOE00OFuBWtr+yDKkNy3xiDRWENSGK2wODYf7CosXvvf0fTxZH2tAwqm7vFkK U9gwynsYxZHzpx5yJh7uzSFR7qkCNHaXCRIHetsGaHT92oCfeoMFOtLUctmmPyQ7 uXtPsvr8Z1Ja9B/FwT0DIvYrY+NUgzIQyQcHsjb6VQIaNRXT1TIuATo0RL+X4DvA oY0XNMgbnt61wZnlxZ6QD7lslJ8tXn1id5SO/h6uGDWP3PsLI8LKvcRlFqWmG8RY tvXORwQX4gi17mImao9BdspukMEQEG3Po7bIbfU0RM7ujPbCzsm+m8FIx5jsBBjD 4RR/xlJhb+EMlA== -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:46 2025 by rpki-client