This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft File: Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json) Hash identifier: VCb/Y0TivROdFeVQjei9MnT5N1CFOme7k/s9c3RShu4= Subject key identifier: 41:9C:E9:18:0A:44:DD:68:20:0D:9E:82:A2:C0:AA:E8:B0:54:7D:E4 Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Certificate serial: 019AF208E2CC806802BD17D880A54A3827AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft Manifest number: 0F16 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: 7tEOR62fFIhewzNzkuREDTbvNuBSLd9wk8AWKU7TZto=) 2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:cc:80:68:02:bd:17:d8:80:a5:4a:38:27:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=419ce9180a44dd68200d9e82a2c0aae8b0547de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:a9:7b:fa:31:ba:4f:68:e4:44:f0:2e:ba: 3f:c2:8e:e8:45:32:93:02:cb:33:a0:b6:e9:26:f4: 8f:3a:8d:59:87:d1:bd:f4:57:e5:29:1c:3e:bc:7e: 77:08:44:7b:71:2b:c7:dc:a3:03:68:20:95:d7:48: 29:70:82:22:35:a0:26:44:78:e0:db:93:93:1f:5e: c9:4d:99:06:31:c2:ef:77:49:e8:6d:70:e5:65:e9: 3d:3a:cd:ae:39:73:5b:2a:7d:26:57:67:8f:84:3f: 6f:63:05:65:1c:cf:b1:3b:91:aa:7b:37:1d:02:3c: 1d:30:89:8f:5c:96:f2:c8:31:9a:14:39:5d:6d:fe: e5:44:3d:24:aa:d8:d8:9f:06:18:cd:04:39:1b:4d: 6d:cd:82:ae:54:f2:51:7d:4a:0a:7f:98:6e:2c:c7: 91:8d:b0:fb:6a:6d:6d:b5:5c:66:c8:ee:a1:8d:65: b7:8e:e9:3f:8f:5c:42:7c:27:53:5e:a3:d1:cd:e5: 76:e2:84:93:17:ab:84:55:c7:0b:e9:76:30:9e:4d: 1d:7f:13:a0:9a:8b:98:8a:00:62:ee:4f:ef:e2:b9: 53:4f:72:17:01:87:c3:da:b2:69:95:48:8e:3a:bb: 3f:76:3b:3f:76:b2:45:3a:41:c7:42:1b:44:c0:cb: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9C:E9:18:0A:44:DD:68:20:0D:9E:82:A2:C0:AA:E8:B0:54:7D:E4 X509v3 Authority Key Identifier: keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:68:9f:6e:01:3e:60:6d:81:ea:55:17:7a:8a:22:54:7f:b6: 77:f0:4a:d5:c6:03:0a:ff:2d:cf:8b:fb:b2:ed:58:37:ad:ff: 5d:8b:f3:22:8c:dc:d1:f2:90:77:8b:09:c0:78:06:20:5c:f8: 50:71:9f:90:cf:7b:79:ac:3a:42:4e:71:c7:0f:b2:1e:58:05: 8a:ea:5f:40:cb:a5:f7:11:73:f7:f7:18:7c:89:7e:e1:4c:7c: cb:ed:2c:d7:2a:9b:73:8c:27:6c:23:d3:80:2b:98:e8:e8:21: 5c:ff:f5:2a:91:f5:55:e0:6c:46:d5:a5:ed:55:f3:9b:b5:0f: a4:9e:ce:ec:c8:bb:8d:56:5f:b9:ed:c5:62:77:f4:f0:91:3b: 0b:72:33:7a:34:7a:57:2e:38:ff:3c:3b:cd:94:a1:52:24:7a: 5e:b0:8a:4e:28:12:3e:b6:4c:50:c2:b9:8e:a9:b2:95:73:e3: 73:46:d5:9d:9b:b1:00:a7:5b:e2:9d:87:07:22:93:db:49:e4: 66:71:9f:ae:72:6d:50:e2:55:e5:95:88:6e:d7:1a:af:93:f4: fa:0e:85:85:b0:fd:81:77:15:52:7b:71:e5:3c:24:15:f9:84: 0a:38:b2:04:16:21:68:59:47:b1:5f:ab:17:4e:cc:04:f5:27: 96:f3:b2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOLMgGgCvRfYgKVKOCetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2E3ODM1Mzc3YjllODQ5ZmU3YzMzZjlmY2E0NTcyZDkw MjY3M2YwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD Eyg0MTljZTkxODBhNDRkZDY4MjAwZDllODJhMmMwYWFlOGIwNTQ3ZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJmpe/oxuk9o5ETwLro/wo7oRTKT AsszoLbpJvSPOo1Zh9G99FflKRw+vH53CER7cSvH3KMDaCCV10gpcIIiNaAmRHjg 25OTH17JTZkGMcLvd0nobXDlZek9Os2uOXNbKn0mV2ePhD9vYwVlHM+xO5Gqezcd AjwdMImPXJbyyDGaFDldbf7lRD0kqtjYnwYYzQQ5G01tzYKuVPJRfUoKf5huLMeR jbD7am1ttVxmyO6hjWW3juk/j1xCfCdTXqPRzeV24oSTF6uEVccL6XYwnk0dfxOg mouYigBi7k/v4rlTT3IXAYfD2rJplUiOOrs/djs/drJFOkHHQhtEwMvITwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGc6RgKRN1oIA2egqLAquiwVH3kMB8GA1UdIwQY MBaAFF46eDU3e56En+fDP5/KRXLZAmc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5Yjgt MDU1YjFiMGU2MGY0LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5YjgtMDU1YjFiMGU2MGY0 LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2ifbgE+ YG2B6lUXeooiVH+2d/BK1cYDCv8tz4v7su1YN63/XYvzIozc0fKQd4sJwHgGIFz4 UHGfkM97eaw6Qk5xxw+yHlgFiupfQMul9xFz9/cYfIl+4Ux8y+0s1yqbc4wnbCPT gCuY6OghXP/1KpH1VeBsRtWl7VXzm7UPpJ7O7Mi7jVZfue3FYnf08JE7C3IzejR6 Vy44/zw7zZShUiR6XrCKTigSPrZMUMK5jqmylXPjc0bVnZuxAKdb4p2HByKT20nk ZnGfrnJtUOJV5ZWIbtcar5P0+g6FhbD9gXcVUntx5TwkFfmECjiyBBYhaFlHsV+r F07MBPUnlvOyTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:17 2025 by rpki-client