This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json) Hash identifier: Oa40RnevCyFTC2reL3moAYR2bEoFEWWbp3T9uAbWXAU= Subject key identifier: 6C:EC:6D:E1:4C:0D:36:7D:B5:B9:DE:62:B4:66:F9:5F:B4:A1:21:11 Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Certificate serial: 019B3D22CDC5821DDFA6AFB25EC120CA1567 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft Manifest number: 044C Signing time: Sat 20 Dec 2025 19:00:49 +0000 Manifest this update: Sat 20 Dec 2025 19:00:49 +0000 Manifest next update: Sun 21 Dec 2025 19:00:49 +0000 Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: Z5DOFyFH/R0ekSf6X/VpADYtLL6lc5A/4Yn/cIcm+Pk=) 2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:cd:c5:82:1d:df:a6:af:b2:5e:c1:20:ca:15:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Validity Not Before: Dec 20 19:00:49 2025 GMT Not After : Dec 21 19:00:49 2025 GMT Subject: CN=6cec6de14c0d367db5b9de62b466f95fb4a12111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:97:e4:77:c2:da:1e:44:f9:7c:ed:5c:80:69: 54:37:11:3f:49:21:ab:f7:4e:2a:2a:02:49:35:2e: cc:d6:9e:e1:de:cf:18:33:01:09:8a:62:81:06:1a: eb:a3:1d:f8:2d:85:a2:01:8a:35:01:8c:ff:31:2e: 44:d2:6e:c6:49:74:36:9c:6f:e5:be:1a:87:7f:d8: 54:f3:f9:27:0c:19:e1:ff:06:51:26:7a:9b:ed:d8: 8e:c0:31:78:75:7c:a9:4e:86:e6:6c:69:a9:67:eb: 67:56:29:0d:fe:f5:16:17:3e:93:23:c8:cb:8c:b6: 9e:bf:07:67:3e:74:c0:57:ef:16:c0:27:c4:53:f5: 82:79:f4:bf:30:97:34:7b:5e:4a:64:71:11:dc:4d: b2:84:6e:fc:40:a2:8c:40:5c:46:df:bb:c0:7f:be: e3:96:33:83:6b:1b:42:7c:42:05:06:14:a2:2a:42: 8f:41:6e:25:cb:80:e7:8c:fa:b8:79:76:91:31:22: 44:75:4e:db:1f:73:39:2e:f6:0c:8d:0c:71:74:91: 58:b7:aa:eb:35:b7:63:8c:fa:3b:d7:1f:e9:7c:95: d9:3f:17:79:21:88:38:e0:8a:48:f4:3b:b2:97:b4: 9c:18:c6:29:0c:f6:6e:8f:eb:39:49:44:e6:8b:ee: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EC:6D:E1:4C:0D:36:7D:B5:B9:DE:62:B4:66:F9:5F:B4:A1:21:11 X509v3 Authority Key Identifier: keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7a:39:16:44:43:f4:57:6d:f0:49:ae:2a:6e:e4:98:bf:ac: 33:b1:24:fc:9d:7a:e3:7d:05:83:4b:56:a6:48:4c:52:42:8d: c0:d4:de:94:17:fe:9c:51:bb:e4:ac:fd:84:b8:6a:be:78:19: 4d:9f:1a:b9:7a:09:4c:69:80:bb:af:5c:da:3f:e3:76:e4:14: 5e:3f:f6:4e:ee:69:03:7a:e4:5c:2a:4d:72:b8:b5:14:59:16: 4f:dc:31:78:11:cb:7c:cb:b6:33:5e:67:a3:a7:98:f4:c4:fe: 5f:41:42:58:96:67:99:a1:68:37:b1:e8:12:fc:f9:91:02:a4: 25:b7:f6:8d:06:a0:3e:d8:b6:cf:93:6f:c3:e2:c4:d0:5b:ab: 55:d6:f7:06:20:ec:12:de:ec:a5:ab:34:43:6c:ed:3d:9f:25: 68:b3:a8:2a:e1:76:b7:e8:18:44:55:fd:c3:3b:13:e5:2f:76: bf:f4:2c:60:2a:85:85:3a:8a:a7:27:37:b5:c2:cc:c7:f0:ff: 10:e8:0c:0d:cd:7f:c5:b1:88:38:07:c8:0c:47:ba:13:88:c6: a8:8a:58:0b:7c:8b:bf:e0:bb:da:e6:76:e9:0b:99:db:41:1e: 77:a2:52:cf:95:d4:5a:e4:94:77:ed:01:3e:eb:d7:c0:cc:9a: 50:c1:9e:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Is3Fgh3fpq+yXsEgyhVnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTlmZmZhZjA5MjQ5YjIwY2Y3ZjU2N2MzY2NiOTk1OGI0 ZjMxMTAwHhcNMjUxMjIwMTkwMDQ5WhcNMjUxMjIxMTkwMDQ5WjAzMTEwLwYDVQQD Eyg2Y2VjNmRlMTRjMGQzNjdkYjViOWRlNjJiNDY2Zjk1ZmI0YTEyMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5fkd8LaHkT5fO1cgGlUNxE/SSGr 904qKgJJNS7M1p7h3s8YMwEJimKBBhrrox34LYWiAYo1AYz/MS5E0m7GSXQ2nG/l vhqHf9hU8/knDBnh/wZRJnqb7diOwDF4dXypTobmbGmpZ+tnVikN/vUWFz6TI8jL jLaevwdnPnTAV+8WwCfEU/WCefS/MJc0e15KZHER3E2yhG78QKKMQFxG37vAf77j ljODaxtCfEIFBhSiKkKPQW4ly4DnjPq4eXaRMSJEdU7bH3M5LvYMjQxxdJFYt6rr NbdjjPo71x/pfJXZPxd5IYg44IpI9Duyl7ScGMYpDPZuj+s5SUTmi+4MNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzsbeFMDTZ9tbneYrRm+V+0oSERMB8GA1UdIwQY MBaAFF6p//rwkkmyDPf1Z8PMuZWLTzEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODkt YjU0OWZmYTA0MDQ2LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODktYjU0OWZmYTA0MDQ2 LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUno5FkRD 9Fdt8EmuKm7kmL+sM7Ek/J16430Fg0tWpkhMUkKNwNTelBf+nFG75Kz9hLhqvngZ TZ8auXoJTGmAu69c2j/jduQUXj/2Tu5pA3rkXCpNcri1FFkWT9wxeBHLfMu2M15n o6eY9MT+X0FCWJZnmaFoN7HoEvz5kQKkJbf2jQagPti2z5Nvw+LE0FurVdb3BiDs Et7spas0Q2ztPZ8laLOoKuF2t+gYRFX9wzsT5S92v/QsYCqFhTqKpyc3tcLMx/D/ EOgMDc1/xbGIOAfIDEe6E4jGqIpYC3yLv+C72uZ26QuZ20Eed6JSz5XUWuSUd+0B PuvXwMyaUMGeww== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:20 2025 by rpki-client