This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json) Hash identifier: iyVY3K7ThTjBGs3y/mpho1xW5C11jt0A69vodq79vHM= Subject key identifier: 1D:DF:F4:37:17:26:30:A3:B7:7A:28:52:A1:DF:15:3B:69:0B:80:71 Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0 Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0 Certificate serial: 019AF20947AD61BDE63F409B1E704B9AA1AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: obk4Tm7AS3OKIT79WBy/9vo0LkAoLSU6bQbqdsxetLI=) 2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:47:ad:61:bd:e6:3f:40:9b:1e:70:4b:9a:a1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=1ddff437172630a3b77a2852a1df153b690b8071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:af:68:75:ed:ba:62:7b:d2:f9:3f:c8:1e: f8:ce:51:6b:97:ca:8e:3b:0b:40:cb:7c:d5:26:55: 48:eb:41:c5:66:a6:5f:79:90:73:1d:cc:4c:e5:96: 1b:00:33:8f:2b:58:7d:54:1e:5d:ea:be:f1:4c:ab: b3:71:1c:bc:89:9e:71:2e:76:0b:89:90:34:63:ac: 42:a0:6d:58:26:c9:46:52:2f:6f:b6:60:f7:0e:52: ee:f5:f3:16:e6:56:58:aa:37:09:36:7e:d7:13:ae: a8:47:e5:60:d7:aa:55:e9:06:e8:eb:40:2a:9b:f6: f1:38:5e:a0:02:20:80:ea:90:35:18:61:18:e2:0d: 75:10:3a:46:f9:98:91:8f:0d:1c:19:d0:14:b6:6d: f3:f4:8e:2c:f3:6c:6d:df:a0:cb:cc:61:b8:2a:11: e7:d4:9d:b2:a9:f4:9a:23:06:40:48:b5:1a:22:ba: 3a:12:c0:59:b4:06:05:ba:55:cc:00:a4:ed:f6:33: a7:a5:05:46:fd:1d:cd:41:b6:3d:64:19:7a:73:06: 3b:7b:2c:a3:12:1c:e3:10:28:91:7d:c7:ce:b9:1a: ee:c1:82:67:86:cf:bf:2b:88:c1:d1:d1:44:7c:6c: 04:8e:c9:e0:41:81:49:ec:55:71:40:f5:0a:c3:c0: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:F4:37:17:26:30:A3:B7:7A:28:52:A1:DF:15:3B:69:0B:80:71 X509v3 Authority Key Identifier: keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f9:d6:0d:70:4b:f4:25:60:1e:36:b0:33:c6:e6:1c:a5:dd:d0: 3c:1f:bb:60:d7:66:5c:c8:3c:c8:ed:a8:d3:b3:f3:43:ab:e0: a6:62:4d:63:93:9e:2d:90:f5:f6:f1:1d:97:e3:27:4e:75:fe: 52:b6:06:a3:ea:17:f9:21:d7:41:23:e5:86:bc:c4:8f:38:7b: a4:e1:5b:6d:ef:95:ac:77:aa:95:6e:7a:1d:5a:a5:9e:24:e5: de:7b:43:c0:0c:38:ba:42:ad:2e:29:78:4b:88:e2:4a:ed:83: 72:99:e7:b4:e0:8a:8f:1c:e1:3b:e3:42:dc:03:a6:83:0a:80: 92:64:8f:60:e8:af:f7:1c:23:45:56:63:0a:1c:fe:3a:18:e9: 87:97:50:12:6b:9c:76:f0:61:c9:86:64:73:7c:27:3c:a8:22: d9:bb:ef:03:5d:5c:44:5a:13:9b:d8:3b:a0:43:2d:48:8e:3e: 72:91:5a:67:a2:d0:7e:ea:f5:25:f1:35:3c:0e:98:c4:95:f6: 68:3b:59:42:4b:e5:4c:3e:3e:02:e1:02:6b:fb:64:5d:43:9c: 44:0b:c3:15:a1:1c:a6:21:76:5d:cd:53:a4:15:67:84:bb:d7: 4f:48:bd:5c:38:47:b2:46:ae:6a:50:58:39:7d:92:cc:97:aa: 26:45:51:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUetYb3mP0CbHnBLmqGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMjljYmEyZGFjZjBlZjlmYTIyMDkwMDMyYmIxNTlhMTA5 MTQwZjAwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EygxZGRmZjQzNzE3MjYzMGEzYjc3YTI4NTJhMWRmMTUzYjY5MGI4MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaqvaHXtumJ70vk/yB74zlFrl8qO OwtAy3zVJlVI60HFZqZfeZBzHcxM5ZYbADOPK1h9VB5d6r7xTKuzcRy8iZ5xLnYL iZA0Y6xCoG1YJslGUi9vtmD3DlLu9fMW5lZYqjcJNn7XE66oR+Vg16pV6Qbo60Aq m/bxOF6gAiCA6pA1GGEY4g11EDpG+ZiRjw0cGdAUtm3z9I4s82xt36DLzGG4KhHn 1J2yqfSaIwZASLUaIro6EsBZtAYFulXMAKTt9jOnpQVG/R3NQbY9ZBl6cwY7eyyj EhzjECiRfcfOuRruwYJnhs+/K4jB0dFEfGwEjsngQYFJ7FVxQPUKw8CHUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3f9DcXJjCjt3ooUqHfFTtpC4BxMB8GA1UdIwQY MBaAFFwpy6Lazw75+iIJADK7FZoQkUDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYt NmQxZmE0MmQwYjgwLzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYtNmQxZmE0MmQwYjgw LzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+dYNcEv0 JWAeNrAzxuYcpd3QPB+7YNdmXMg8yO2o07PzQ6vgpmJNY5OeLZD19vEdl+MnTnX+ UrYGo+oX+SHXQSPlhrzEjzh7pOFbbe+VrHeqlW56HVqlniTl3ntDwAw4ukKtLil4 S4jiSu2DcpnntOCKjxzhO+NC3AOmgwqAkmSPYOiv9xwjRVZjChz+Ohjph5dQEmuc dvBhyYZkc3wnPKgi2bvvA11cRFoTm9g7oEMtSI4+cpFaZ6LQfur1JfE1PA6YxJX2 aDtZQkvlTD4+AuECa/tkXUOcRAvDFaEcpiF2Xc1TpBVnhLvXT0i9XDhHskaualBY OX2SzJeqJkVRTA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:30 2025 by rpki-client