This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json) Hash identifier: qvf1uYvinG241DK3k91L074M6TDcNrVuhILDS9T8tkc= Subject key identifier: 9B:59:E5:EC:B7:19:9A:39:4A:84:65:DD:FB:3D:A2:0B:13:E3:2D:64 Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9 Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9 Certificate serial: 019AF3C0CCFD74B12D5CAAE35C5E4DDC4CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:01:30 +0000 Manifest this update: Sat 06 Dec 2025 13:01:30 +0000 Manifest next update: Sun 07 Dec 2025 13:01:30 +0000 Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: a4NxfdJhNSEZq51IfHoHyXJTlhSBdoqCtjCIkv3Ob08=) 2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:cc:fd:74:b1:2d:5c:aa:e3:5c:5e:4d:dc:4c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9 Validity Not Before: Dec 6 13:01:30 2025 GMT Not After : Dec 7 13:01:30 2025 GMT Subject: CN=9b59e5ecb7199a394a8465ddfb3da20b13e32d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:ad:cb:a7:f1:52:72:70:75:eb:4f:9f:ff: 7e:4c:4c:9f:02:22:78:3d:e7:74:95:ab:67:51:f3: 89:7a:17:60:a0:b9:b9:5b:78:78:70:0d:82:36:0d: 85:cc:0f:e7:da:5b:82:ac:dc:ae:4b:67:f4:95:3a: 4f:5b:1f:73:4c:1a:6d:f8:b6:27:b8:43:21:bc:4f: c2:fe:59:00:00:2f:59:b7:f0:b5:79:7e:42:cf:2b: 95:f3:76:0e:28:df:4d:58:b8:28:f4:99:9c:ef:79: 97:f7:cf:a5:ea:81:87:7d:29:fb:84:f4:3c:36:db: 9e:74:7e:d1:d4:91:7c:ae:bf:cd:e4:8d:0c:bd:11: 7d:ec:16:3f:f4:ac:fc:35:17:71:08:28:65:95:3c: 81:5f:75:35:bf:41:09:98:0a:d4:6c:c0:1e:b5:58: 80:5e:30:24:3c:df:66:ee:4d:ac:8e:7e:90:98:21: 12:c5:89:2e:90:30:ed:3c:0f:d2:2c:58:3e:95:91: 46:04:0e:d5:c6:cb:aa:11:c9:83:4a:e1:b6:65:0f: e8:c9:99:5f:96:7b:9b:c5:e2:8e:fd:d4:3c:42:e6: 1d:a9:33:d2:0d:95:66:f2:d1:78:2a:7d:e1:00:23: c0:40:df:c9:38:0b:71:d3:82:0d:55:1a:0c:a4:45: 85:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:E5:EC:B7:19:9A:39:4A:84:65:DD:FB:3D:A2:0B:13:E3:2D:64 X509v3 Authority Key Identifier: keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b8:a6:c4:00:b3:8c:0d:d4:0a:c3:cc:98:9c:82:94:6a:74: ce:ae:f9:31:e5:f2:7e:61:09:fb:e5:36:2d:60:43:ea:73:ba: 46:3b:a4:d6:de:16:4a:ce:8d:29:d7:f8:e4:fe:87:8b:14:07: 0a:07:3e:c9:18:63:d5:0a:e9:59:94:5e:18:d7:7c:eb:79:b6: 37:ab:2f:f5:60:62:c2:da:e0:29:9d:ed:8f:4b:6e:e5:4f:ea: b1:6a:c0:11:38:f6:43:88:9c:f3:70:03:d8:38:f8:89:da:d9: fd:db:17:47:65:8c:b3:e5:31:5f:df:2a:7e:b2:f1:9e:1d:8d: e4:f1:8d:8a:46:d9:ec:8b:8b:b0:86:81:bd:af:d7:d7:16:5f: 35:3a:18:1d:43:71:90:2d:5e:cf:4a:13:99:cc:3a:f7:e7:29: 0a:8d:1b:0c:1e:b0:6e:ae:d7:36:e3:ff:e0:57:c7:04:95:f0: a1:25:a7:79:bd:6a:8d:4d:88:69:10:46:14:86:fa:fa:97:24: f6:18:58:48:b1:43:86:25:7e:ef:74:d7:a9:89:df:3e:e7:fd: 0c:09:2b:5c:43:2e:0b:45:10:f7:71:a5:11:5e:15:74:36:74: 28:c9:13:eb:bf:eb:77:04:61:9e:99:07:fa:d1:0f:a5:ba:ea: 50:b2:0d:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwMz9dLEtXKrjXF5N3EzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1Nzc3NTc5Y2M2Nzc4NDQ1NGJjZDkxYTA2YmQ2OTM1YWFl ZjczZjkwHhcNMjUxMjA2MTMwMTMwWhcNMjUxMjA3MTMwMTMwWjAzMTEwLwYDVQQD Eyg5YjU5ZTVlY2I3MTk5YTM5NGE4NDY1ZGRmYjNkYTIwYjEzZTMyZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT6ty6fxUnJwdetPn/9+TEyfAiJ4 Ped0latnUfOJehdgoLm5W3h4cA2CNg2FzA/n2luCrNyuS2f0lTpPWx9zTBpt+LYn uEMhvE/C/lkAAC9Zt/C1eX5CzyuV83YOKN9NWLgo9Jmc73mX98+l6oGHfSn7hPQ8 NtuedH7R1JF8rr/N5I0MvRF97BY/9Kz8NRdxCChllTyBX3U1v0EJmArUbMAetViA XjAkPN9m7k2sjn6QmCESxYkukDDtPA/SLFg+lZFGBA7VxsuqEcmDSuG2ZQ/oyZlf lnubxeKO/dQ8QuYdqTPSDZVm8tF4Kn3hACPAQN/JOAtx04INVRoMpEWFqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtZ5ey3GZo5SoRl3fs9ogsT4y1kMB8GA1UdIwQY MBaAFNV3dXnMZ3hEVLzZGga9aTWq73P5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYt ODBhMmI2OGMzODMyLzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYtODBhMmI2OGMzODMy LzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbimxACz jA3UCsPMmJyClGp0zq75MeXyfmEJ++U2LWBD6nO6Rjuk1t4WSs6NKdf45P6HixQH Cgc+yRhj1QrpWZReGNd863m2N6sv9WBiwtrgKZ3tj0tu5U/qsWrAETj2Q4ic83AD 2Dj4idrZ/dsXR2WMs+UxX98qfrLxnh2N5PGNikbZ7IuLsIaBva/X1xZfNToYHUNx kC1ez0oTmcw69+cpCo0bDB6wbq7XNuP/4FfHBJXwoSWneb1qjU2IaRBGFIb6+pck 9hhYSLFDhiV+73TXqYnfPuf9DAkrXEMuC0UQ93GlEV4VdDZ0KMkT67/rdwRhnpkH +tEPpbrqULIN8w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:32 2025 by rpki-client