This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json) Hash identifier: lsjdxEPqumvNgPWVr9thPOuYmr/7OUUvFUZ3e41Apm4= Subject key identifier: 73:1B:8F:4A:7B:75:E6:96:2F:85:5A:FA:2A:54:60:78:FC:BB:AD:C4 Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d Certificate serial: 019AF42E6A0021CD5FC9C2BAA697A9197B0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 15:01:13 +0000 Manifest this update: Sat 06 Dec 2025 15:01:13 +0000 Manifest next update: Sun 07 Dec 2025 15:01:13 +0000 Files and hashes: 1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=) 2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: jQq1J5qece/noXU47/sT+xJuGQ1X7W+0puBIM8DdeuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6a:00:21:cd:5f:c9:c2:ba:a6:97:a9:19:7b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d Validity Not Before: Dec 6 15:01:13 2025 GMT Not After : Dec 7 15:01:13 2025 GMT Subject: CN=731b8f4a7b75e6962f855afa2a546078fcbbadc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:c9:c7:5b:6f:c3:dd:e1:b3:03:09:d3:04: fa:fa:47:a8:58:46:ad:89:0d:29:3b:73:06:8b:3f: 37:65:b9:a7:61:eb:cf:ca:bc:98:46:ac:5b:4c:76: 3d:41:42:5e:b9:25:62:e4:e5:c2:1a:15:5b:6d:88: cc:d4:fc:81:61:f3:b0:32:c9:da:d5:85:f0:b2:0a: 31:9d:cd:04:3d:71:07:c8:01:82:6c:e6:04:08:45: 0a:c7:f0:a4:d0:dd:a2:6c:54:65:8a:03:88:9c:6b: 58:06:a0:b8:c5:ca:d1:86:d9:3e:a3:b0:a6:e1:f7: 10:c5:47:ee:f8:ae:1e:35:be:a9:99:d2:67:e9:35: ee:27:c5:6b:49:ec:0b:2a:53:35:d6:c4:a3:24:94: cd:55:0f:a6:28:ca:9e:4e:cf:ae:4a:c5:98:01:bc: b8:47:2c:03:57:fb:f7:5f:13:e1:3e:bd:3d:8a:3a: aa:82:41:83:f5:5f:3e:98:70:04:df:4e:5d:0c:5f: 0d:ef:6e:30:cb:e1:18:55:78:d6:8a:c0:37:c9:06: fa:90:c1:82:06:48:ea:e5:3f:6d:dd:7c:68:dd:1d: ea:75:e0:17:9d:92:b2:45:52:31:42:e8:d3:1f:ab: b4:81:a3:b9:fc:76:03:76:03:a4:0f:7f:7a:5e:88: f8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1B:8F:4A:7B:75:E6:96:2F:85:5A:FA:2A:54:60:78:FC:BB:AD:C4 X509v3 Authority Key Identifier: keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2f:43:ef:0f:7b:ef:49:44:e3:f8:59:a2:2d:a8:45:a1:d2: 9f:8a:06:54:e5:1a:0a:26:a0:00:af:77:82:d4:6a:3c:da:5c: fe:38:3f:49:9e:88:cf:48:69:00:70:da:61:06:f6:2f:ab:b1: 73:08:cd:3a:3c:78:17:f4:59:3a:21:f9:51:6e:b1:5e:57:87: 29:6c:6d:6e:c2:e0:db:d8:e6:16:43:e9:d0:4b:3d:c5:d0:a7: 78:08:30:24:ef:41:4d:50:95:f4:6f:0d:25:52:52:cc:d9:4f: e5:90:29:49:89:d6:8b:db:ee:4e:0c:e2:8d:27:e7:4c:47:eb: bc:91:12:2d:ba:5c:6e:75:b8:54:7e:a3:bd:97:08:85:c6:c6: 8e:67:e1:43:78:31:78:06:6b:26:cd:dd:01:7e:23:d3:0b:7f: 5a:98:44:13:cd:39:ca:ba:82:fb:b1:88:30:21:04:38:01:1c: 6c:1b:88:56:16:de:a2:26:96:ee:5a:64:04:92:eb:49:9c:b3: 63:4e:75:0c:7b:bc:a1:59:3c:e2:ff:22:d2:65:89:cf:c2:72: 1f:63:cc:98:77:1f:36:2c:9d:02:ba:b2:24:54:86:a3:9a:b8: b0:c8:9b:89:64:98:6d:01:fa:eb:db:1d:da:89:23:f4:96:81: 65:7b:e2:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmoAIc1fycK6ppepGXsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzBkOTUwNDYzMzFiZGNlMzAxOGI3ZmZlMGYxM2RiZjlm YzcxOGQwHhcNMjUxMjA2MTUwMTEzWhcNMjUxMjA3MTUwMTEzWjAzMTEwLwYDVQQD Eyg3MzFiOGY0YTdiNzVlNjk2MmY4NTVhZmEyYTU0NjA3OGZjYmJhZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljrJx1tvw93hswMJ0wT6+keoWEat iQ0pO3MGiz83ZbmnYevPyryYRqxbTHY9QUJeuSVi5OXCGhVbbYjM1PyBYfOwMsna 1YXwsgoxnc0EPXEHyAGCbOYECEUKx/Ck0N2ibFRligOInGtYBqC4xcrRhtk+o7Cm 4fcQxUfu+K4eNb6pmdJn6TXuJ8VrSewLKlM11sSjJJTNVQ+mKMqeTs+uSsWYAby4 RywDV/v3XxPhPr09ijqqgkGD9V8+mHAE305dDF8N724wy+EYVXjWisA3yQb6kMGC Bkjq5T9t3Xxo3R3qdeAXnZKyRVIxQujTH6u0gaO5/HYDdgOkD396Xoj4eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMbj0p7deaWL4Va+ipUYHj8u63EMB8GA1UdIwQY MBaAFFww2VBGMxvc4wGLf/4PE9v5/HGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUt MDc1MDkxOTFmOTUzLzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUtMDc1MDkxOTFmOTUz LzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZS9D7w97 70lE4/hZoi2oRaHSn4oGVOUaCiagAK93gtRqPNpc/jg/SZ6Iz0hpAHDaYQb2L6ux cwjNOjx4F/RZOiH5UW6xXleHKWxtbsLg29jmFkPp0Es9xdCneAgwJO9BTVCV9G8N JVJSzNlP5ZApSYnWi9vuTgzijSfnTEfrvJESLbpcbnW4VH6jvZcIhcbGjmfhQ3gx eAZrJs3dAX4j0wt/WphEE805yrqC+7GIMCEEOAEcbBuIVhbeoiaW7lpkBJLrSZyz Y051DHu8oVk84v8i0mWJz8JyH2PMmHcfNiydArqyJFSGo5q4sMibiWSYbQH669sd 2okj9JaBZXviFA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:54 2025 by rpki-client