This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json) Hash identifier: 9kLHR4zG9SurYgSDgMoD7FtwYyzsMtarend2KxXnO04= Subject key identifier: 9A:CE:21:5F:1C:CC:80:52:62:C8:FA:E4:DA:B8:15:54:37:DA:AB:C9 Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Certificate serial: 019B292E296FB2E36D4F5DD27E84EB30610E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft Manifest number: 0363 Signing time: Tue 16 Dec 2025 22:00:49 +0000 Manifest this update: Tue 16 Dec 2025 22:00:49 +0000 Manifest next update: Wed 17 Dec 2025 22:00:49 +0000 Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=) 2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: bf17AQY8R0vaNUBwk2rI9CzevxWqtGO6KCN5+SXVgtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:29:6f:b2:e3:6d:4f:5d:d2:7e:84:eb:30:61:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Validity Not Before: Dec 16 22:00:49 2025 GMT Not After : Dec 17 22:00:49 2025 GMT Subject: CN=9ace215f1ccc805262c8fae4dab8155437daabc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:d8:4b:2e:51:ea:95:0a:66:21:f7:4e:25: 4c:74:1b:78:bd:31:e2:c6:29:26:ff:fd:02:aa:1a: ab:d2:af:5c:22:55:1e:c2:db:34:e9:d4:71:77:c6: 57:30:b1:61:73:4a:25:eb:fa:2d:4f:18:cf:99:42: f5:c6:1c:48:3e:ff:56:4f:4a:7e:f7:db:d2:46:2d: 2e:ff:71:5a:24:d2:35:03:56:c8:08:62:cd:0d:7a: 30:d3:e4:7a:9c:16:56:d7:e8:fb:fa:3c:43:48:06: 7d:1b:a2:7e:38:1c:f7:bb:1f:fe:8f:b1:9e:07:5c: c8:38:28:4e:34:94:96:c5:8b:2e:58:cc:f5:89:f7: d3:a1:22:ce:22:3f:78:be:7c:cb:c3:15:65:09:1f: eb:be:ab:5c:7f:cb:a7:0c:47:5b:40:1e:66:85:dd: ae:10:2c:f4:48:2c:c9:32:a5:1d:ae:f7:8e:c1:f3: 3d:17:2d:ad:bb:f3:8e:d2:8e:92:d9:33:fb:de:62: fc:6f:7e:dd:01:2b:bc:b1:b9:15:42:5e:66:e5:17: b8:8e:f5:16:f5:df:f1:9f:13:e2:87:ab:d0:bd:c7: 7a:d2:34:da:9c:5d:5f:e2:7c:c8:cc:8b:3e:5d:87: e5:57:be:44:53:2a:b5:30:92:5c:64:b1:1b:62:36: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CE:21:5F:1C:CC:80:52:62:C8:FA:E4:DA:B8:15:54:37:DA:AB:C9 X509v3 Authority Key Identifier: keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2d:ae:09:f3:57:eb:f7:59:03:bd:8f:75:be:8d:86:8c:dc: 05:1f:b7:8e:a7:5c:c7:38:1a:1e:e8:0c:50:fb:34:27:0b:c9: 46:19:08:14:84:48:4a:3d:a3:ad:8f:26:82:35:46:84:a6:82: 9f:1a:bd:e0:38:6d:82:78:fe:48:f9:c2:2a:16:18:af:d1:9a: 0f:e1:21:f0:10:07:84:c3:25:7c:d3:14:d6:2d:6b:2a:76:4e: af:68:51:53:f7:ab:fc:65:fc:17:f6:11:26:b9:a4:c2:20:0b: 7f:c7:bf:a5:25:37:c4:25:74:68:50:42:c8:0a:1b:5c:76:62: d0:69:98:d0:b3:ef:c6:ec:86:a3:7d:a5:4b:d4:2f:0a:21:78: ca:1b:10:b0:c6:e0:ea:f5:4f:9c:d2:01:ca:3c:7c:d5:ad:2c: 65:cc:bb:a0:a5:65:99:3c:22:3f:6b:62:7f:28:5b:f2:76:1e: b4:b3:88:b5:2a:de:97:ae:4b:a8:e6:be:23:a8:5c:08:50:ca: 31:6c:4b:3f:0b:6a:2a:2a:df:d6:95:a8:18:90:97:b7:e6:a9: 3f:24:17:f0:9d:31:a7:ab:d5:12:0b:a0:b0:f1:f5:2a:30:80: 20:57:e3:48:29:27:cc:70:44:6e:41:3d:7c:7e:ed:0b:52:86: 56:83:d5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLilvsuNtT13SfoTrMGEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy ZTJlM2QwHhcNMjUxMjE2MjIwMDQ5WhcNMjUxMjE3MjIwMDQ5WjAzMTEwLwYDVQQD Eyg5YWNlMjE1ZjFjY2M4MDUyNjJjOGZhZTRkYWI4MTU1NDM3ZGFhYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5HYSy5R6pUKZiH3TiVMdBt4vTHi xikm//0Cqhqr0q9cIlUewts06dRxd8ZXMLFhc0ol6/otTxjPmUL1xhxIPv9WT0p+ 99vSRi0u/3FaJNI1A1bICGLNDXow0+R6nBZW1+j7+jxDSAZ9G6J+OBz3ux/+j7Ge B1zIOChONJSWxYsuWMz1iffToSLOIj94vnzLwxVlCR/rvqtcf8unDEdbQB5mhd2u ECz0SCzJMqUdrveOwfM9Fy2tu/OO0o6S2TP73mL8b37dASu8sbkVQl5m5Re4jvUW 9d/xnxPih6vQvcd60jTanF1f4nzIzIs+XYflV75EUyq1MJJcZLEbYjZaJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrOIV8czIBSYsj65Nq4FVQ32qvJMB8GA1UdIwQY MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt NTBkMDE4YmIwYmY2LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2 LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi2uCfNX 6/dZA72Pdb6NhozcBR+3jqdcxzgaHugMUPs0JwvJRhkIFIRISj2jrY8mgjVGhKaC nxq94Dhtgnj+SPnCKhYYr9GaD+Eh8BAHhMMlfNMU1i1rKnZOr2hRU/er/GX8F/YR JrmkwiALf8e/pSU3xCV0aFBCyAobXHZi0GmY0LPvxuyGo32lS9QvCiF4yhsQsMbg 6vVPnNIByjx81a0sZcy7oKVlmTwiP2tifyhb8nYetLOItSrel65LqOa+I6hcCFDK MWxLPwtqKirf1pWoGJCXt+apPyQX8J0xp6vVEgugsPH1KjCAIFfjSCknzHBEbkE9 fH7tC1KGVoPVzg== -----END CERTIFICATE-----Generated at Wed Dec 17 00:23:49 2025 by rpki-client