This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json) Hash identifier: GvjtcBWG4j+g84g2XdzhuQ3FHV00wglVwf/65wWJ6ys= Subject key identifier: E8:20:D0:93:23:1D:9A:8C:3E:00:9A:2A:F0:59:4C:10:76:BD:5C:55 Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42 Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542 Certificate serial: 019B2F2FF5AD4418579296E3A7DDCB596B19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft Manifest number: 06CE Signing time: Thu 18 Dec 2025 02:00:30 +0000 Manifest this update: Thu 18 Dec 2025 02:00:30 +0000 Manifest next update: Fri 19 Dec 2025 02:00:30 +0000 Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=) 2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: s2BjQWDrecb39rYL0zA6P+8nEkyrBiJdRkj0RsB4IC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:2f:f5:ad:44:18:57:92:96:e3:a7:dd:cb:59:6b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542 Validity Not Before: Dec 18 02:00:30 2025 GMT Not After : Dec 19 02:00:30 2025 GMT Subject: CN=e820d093231d9a8c3e009a2af0594c1076bd5c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:fd:c2:19:de:36:04:74:52:da:62:4d:67: d3:f2:e6:c6:09:2b:dc:9f:98:9c:35:ec:bf:eb:ec: f0:00:b9:db:26:9d:e7:bc:a7:93:8f:69:62:d9:3e: 3f:29:07:81:b0:3a:85:26:8a:44:1d:3d:d0:cd:e2: 0f:1a:6a:50:00:c2:ad:16:9d:b0:a7:21:39:63:1e: 78:35:7d:61:30:7c:a3:46:47:c2:76:a4:00:b2:8c: e9:12:68:8b:1a:ef:b1:40:0b:d1:6c:90:8f:93:28: da:67:17:50:fb:4a:05:90:b2:08:3e:50:0d:ab:1d: 98:90:ce:a9:db:23:36:2e:c8:35:ed:46:2a:46:4a: 8d:16:1a:6d:16:d0:08:52:82:1e:f2:e0:e3:e5:35: 84:4b:36:91:cf:8d:fe:0d:50:19:ea:86:f9:2d:b3: 4f:36:0a:56:69:b8:b3:20:cb:2c:cb:df:1c:14:e6: 44:38:68:a9:86:0f:14:b9:a6:58:9e:bf:93:af:de: 81:4a:71:c3:4d:ad:f2:da:27:9c:b8:4b:91:ab:36: 84:db:02:7d:a4:ef:09:f1:77:57:7f:c3:57:21:fe: 13:40:0b:e4:64:fb:e7:ae:95:57:b6:d0:d3:46:a3: 32:20:b6:3c:0f:71:05:9a:9c:34:40:9f:c5:9e:0b: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:20:D0:93:23:1D:9A:8C:3E:00:9A:2A:F0:59:4C:10:76:BD:5C:55 X509v3 Authority Key Identifier: keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f8:01:63:87:0c:54:e9:91:85:36:5d:cd:4a:d8:4d:4b:f9: 91:d9:d5:35:a6:cf:e8:2f:60:5d:73:5c:e7:91:73:e0:19:32: fd:86:43:d1:e0:cd:6e:b0:a3:a2:b6:62:18:12:4c:91:f5:4d: 29:44:ee:17:a8:2c:36:33:20:83:80:46:d9:a1:37:64:4c:01: 81:e9:0f:b5:ce:e4:16:0c:63:82:3f:0a:19:e3:52:f9:e6:f4: 65:76:81:02:be:40:ba:d4:43:e8:be:84:25:d5:39:11:d8:94: 6d:dd:f5:5d:3f:b0:9f:2f:c0:5e:89:8a:ea:3f:31:07:4d:02: 96:33:bd:e5:a7:75:87:b4:f8:5b:04:6e:7a:a7:1e:d1:eb:e6: 71:66:e6:62:f7:f0:ea:35:44:c2:46:7c:82:d1:a0:16:87:f3: 23:df:77:16:31:12:bf:ef:c4:8d:a2:60:da:ab:83:d9:95:7f: ff:f5:ad:22:90:cb:db:f6:a9:78:48:c8:78:1f:23:96:0d:06: 07:b8:c3:73:3c:1b:49:43:bf:6b:e2:c3:d0:3c:8c:de:36:5a: 3e:dd:aa:10:fe:6e:d1:ea:64:9a:85:2b:46:05:cf:d0:69:aa: 76:4f:4f:d3:68:30:ed:09:65:57:23:77:a9:71:b8:fe:88:04: e8:72:e8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvL/WtRBhXkpbjp93LWWsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi MmE1NDIwHhcNMjUxMjE4MDIwMDMwWhcNMjUxMjE5MDIwMDMwWjAzMTEwLwYDVQQD EyhlODIwZDA5MzIzMWQ5YThjM2UwMDlhMmFmMDU5NGMxMDc2YmQ1YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMD9whneNgR0UtpiTWfT8ubGCSvc n5icNey/6+zwALnbJp3nvKeTj2li2T4/KQeBsDqFJopEHT3QzeIPGmpQAMKtFp2w pyE5Yx54NX1hMHyjRkfCdqQAsozpEmiLGu+xQAvRbJCPkyjaZxdQ+0oFkLIIPlAN qx2YkM6p2yM2Lsg17UYqRkqNFhptFtAIUoIe8uDj5TWESzaRz43+DVAZ6ob5LbNP NgpWabizIMssy98cFOZEOGiphg8UuaZYnr+Tr96BSnHDTa3y2iecuEuRqzaE2wJ9 pO8J8XdXf8NXIf4TQAvkZPvnrpVXttDTRqMyILY8D3EFmpw0QJ/FngsoyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgg0JMjHZqMPgCaKvBZTBB2vVxVMB8GA1UdIwQY MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPgBY4cM VOmRhTZdzUrYTUv5kdnVNabP6C9gXXNc55Fz4Bky/YZD0eDNbrCjorZiGBJMkfVN KUTuF6gsNjMgg4BG2aE3ZEwBgekPtc7kFgxjgj8KGeNS+eb0ZXaBAr5AutRD6L6E JdU5EdiUbd31XT+wny/AXomK6j8xB00CljO95ad1h7T4WwRueqce0evmcWbmYvfw 6jVEwkZ8gtGgFofzI993FjESv+/EjaJg2quD2ZV///WtIpDL2/apeEjIeB8jlg0G B7jDczwbSUO/a+LD0DyM3jZaPt2qEP5u0epkmoUrRgXP0Gmqdk9P02gw7QllVyN3 qXG4/ogE6HLoDA== -----END CERTIFICATE-----Generated at Thu Dec 18 03:55:58 2025 by rpki-client