This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json) Hash identifier: Ug/27tf+Q6E824qrx/Om5wb1EwNQbJKks9gHV35JE2Q= Subject key identifier: 9B:03:BE:61:EB:5B:B1:A6:76:01:55:24:E7:2A:43:A4:87:B3:C3:4E Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42 Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542 Certificate serial: 019B25880B501593F4CF53AF9C94BD22E97B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft Manifest number: 06C9 Signing time: Tue 16 Dec 2025 05:00:31 +0000 Manifest this update: Tue 16 Dec 2025 05:00:31 +0000 Manifest next update: Wed 17 Dec 2025 05:00:31 +0000 Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=) 2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: Y6gCDuKqaVWYIL33EKegUJ+l+OOxSo/P3nc3zpnY9dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:0b:50:15:93:f4:cf:53:af:9c:94:bd:22:e9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542 Validity Not Before: Dec 16 05:00:31 2025 GMT Not After : Dec 17 05:00:31 2025 GMT Subject: CN=9b03be61eb5bb1a676015524e72a43a487b3c34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:bb:a1:46:ca:3d:3b:50:77:96:96:f5:f4: f5:0b:17:56:53:91:2b:60:65:f1:ff:f5:08:d8:79: e2:e8:2a:40:cd:90:f5:1c:ba:d1:4a:83:01:41:22: 54:92:00:a9:c4:7d:29:68:39:66:85:28:5f:9f:e2: ad:8c:7f:a7:6b:b0:44:4b:c5:56:c7:3a:c0:8c:96: 70:96:8d:16:65:f3:a7:6f:c3:20:b3:b4:13:df:4d: 77:66:84:aa:0d:ec:45:3a:37:b4:82:fd:a4:8b:e6: a6:ba:75:14:95:35:48:04:2e:68:cd:25:fd:ec:69: 0e:60:4c:9a:d3:e8:52:cb:11:58:5e:66:af:ca:3e: 4a:eb:8d:6b:65:6f:f1:ae:76:51:34:20:3c:f1:95: a3:07:3f:be:51:9d:af:f7:e6:8e:d6:b7:bb:1d:e0: 15:07:8e:16:ab:39:eb:d8:44:9c:7c:90:81:77:55: 75:48:0c:13:6f:1c:db:3a:6a:19:73:a0:86:e5:38: c5:e7:88:e8:b1:b8:bf:16:5e:08:5f:e3:38:cc:61: 43:ad:87:65:f5:17:38:fa:d4:96:39:bf:01:45:6c: 04:ad:ed:9b:4c:19:9d:f8:5a:15:59:b4:8d:00:7b: f9:3f:24:79:75:9c:fd:c5:8c:f0:f2:b9:03:02:b7: 93:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:03:BE:61:EB:5B:B1:A6:76:01:55:24:E7:2A:43:A4:87:B3:C3:4E X509v3 Authority Key Identifier: keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:69:7f:17:61:74:b4:96:57:b8:71:8a:2c:5c:3f:e7:74:ef: 95:48:ee:26:81:6d:29:87:25:03:9c:07:e9:0b:8a:b2:43:3d: d6:5b:4d:3d:9b:68:85:1c:cf:d9:b9:cd:00:65:76:ad:b2:a2: 8b:2a:eb:d9:3f:3e:1a:45:0f:bf:69:7e:63:02:cc:95:ce:61: f6:36:ca:61:50:cf:6f:16:4e:0c:5d:3c:7a:77:1c:cc:9b:78: 57:01:c3:16:94:5d:ab:29:71:5e:4c:88:3b:7a:37:98:1a:26: e5:b7:5a:36:f6:e2:6b:95:41:63:2d:64:ce:10:a0:d0:d4:bd: 3e:18:47:eb:76:47:ba:bb:dc:2f:5b:b0:23:cd:9d:db:74:08: f5:8d:68:e1:80:70:e2:e1:09:74:10:cf:8a:0d:d5:f0:82:41: dc:c0:c2:61:6c:62:fe:fe:57:71:73:1d:61:8a:29:a6:07:38: 1a:2a:6c:2b:aa:f5:a2:56:fe:b3:d1:86:ef:5e:cd:fb:bf:7c: 7e:de:78:ee:b3:d9:1b:13:d6:a5:65:3e:d3:d8:73:ab:59:9d: 7e:ac:f0:fb:d1:6b:3c:69:29:34:45:4a:a8:2b:30:99:64:82: c6:ae:56:5c:a7:0b:fe:22:03:85:5c:fe:a0:0b:8e:c8:94:90: 9a:5f:2b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliAtQFZP0z1OvnJS9Iul7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi MmE1NDIwHhcNMjUxMjE2MDUwMDMxWhcNMjUxMjE3MDUwMDMxWjAzMTEwLwYDVQQD Eyg5YjAzYmU2MWViNWJiMWE2NzYwMTU1MjRlNzJhNDNhNDg3YjNjMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ue7oUbKPTtQd5aW9fT1CxdWU5Er YGXx//UI2Hni6CpAzZD1HLrRSoMBQSJUkgCpxH0paDlmhShfn+KtjH+na7BES8VW xzrAjJZwlo0WZfOnb8Mgs7QT3013ZoSqDexFOje0gv2ki+amunUUlTVIBC5ozSX9 7GkOYEya0+hSyxFYXmavyj5K641rZW/xrnZRNCA88ZWjBz++UZ2v9+aO1re7HeAV B44Wqznr2EScfJCBd1V1SAwTbxzbOmoZc6CG5TjF54josbi/Fl4IX+M4zGFDrYdl 9Rc4+tSWOb8BRWwEre2bTBmd+FoVWbSNAHv5PyR5dZz9xYzw8rkDAreTDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsDvmHrW7GmdgFVJOcqQ6SHs8NOMB8GA1UdIwQY MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2l/F2F0 tJZXuHGKLFw/53TvlUjuJoFtKYclA5wH6QuKskM91ltNPZtohRzP2bnNAGV2rbKi iyrr2T8+GkUPv2l+YwLMlc5h9jbKYVDPbxZODF08encczJt4VwHDFpRdqylxXkyI O3o3mBom5bdaNvbia5VBYy1kzhCg0NS9PhhH63ZHurvcL1uwI82d23QI9Y1o4YBw 4uEJdBDPig3V8IJB3MDCYWxi/v5XcXMdYYoppgc4GipsK6r1olb+s9GG717N+798 ft547rPZGxPWpWU+09hzq1mdfqzw+9FrPGkpNEVKqCswmWSCxq5WXKcL/iIDhVz+ oAuOyJSQml8rWA== -----END CERTIFICATE-----Generated at Tue Dec 16 09:42:04 2025 by rpki-client