This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json) Hash identifier: FPRrsXT8lTsLTiBLBs8UmPOIMb77LtetLB6uIGpWMRM= Subject key identifier: 90:DD:1C:5B:6D:02:04:A6:ED:15:16:30:7A:A5:32:16:46:83:B7:1B Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08 Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008 Certificate serial: 019AF2401DA3BE8B7415314F666080FA7167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: U/TYY1n0467TnrNOINA6QWUBcajxO3pLa49pR6QpKI8=) 2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=) 3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1d:a3:be:8b:74:15:31:4f:66:60:80:fa:71:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008 Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=90dd1c5b6d0204a6ed1516307aa532164683b71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:eb:55:b5:ae:35:93:b1:85:e2:30:5a:3a: 92:15:6d:ad:d8:dd:9a:7c:bb:9a:22:5b:6d:3e:4b: 67:d9:fd:a9:e0:06:e0:72:43:15:32:7e:58:e5:8f: 1e:bd:4b:fc:49:85:dc:87:56:15:5f:7d:b7:cf:35: 4f:a9:aa:6a:0f:84:fb:ab:36:51:2c:2c:2d:f4:3c: 9b:f8:75:ee:38:55:6e:65:d8:e7:4e:dc:5d:cc:fb: 7b:5a:18:23:6c:eb:ed:b7:2c:2d:38:29:82:f3:03: 53:f0:26:ea:7c:26:54:ac:d8:22:bc:82:0d:b5:53: 92:8f:e6:cf:91:00:ea:82:91:57:62:03:40:a8:ec: af:50:08:7c:df:46:bd:31:0e:1a:fc:8c:cb:81:46: c5:20:41:f0:07:65:04:d5:96:b8:16:05:04:c7:66: e0:83:43:2d:a7:96:45:56:10:d2:9e:22:78:48:3f: 43:31:35:ff:bf:8e:29:ca:4c:d0:90:b6:0a:ab:d5: 03:1e:a5:c0:d6:42:39:d5:3b:a7:f3:38:ad:1e:ae: 24:90:45:5e:28:fa:a1:a0:43:6a:7c:4f:7b:ac:4a: 7d:3e:c8:0f:f8:4c:a1:f5:0b:7b:43:20:3f:10:7d: a8:2a:f1:2c:3d:9f:37:77:f7:04:f2:3c:dd:ae:7d: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DD:1C:5B:6D:02:04:A6:ED:15:16:30:7A:A5:32:16:46:83:B7:1B X509v3 Authority Key Identifier: keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:dd:d2:5d:6f:97:55:c9:50:5b:0c:ac:a2:d5:1a:5d:dd:77: d8:5b:cc:f3:e0:7b:d1:ab:83:c3:ba:cf:53:7a:c6:99:c7:4c: 93:0d:0e:b7:e7:67:36:39:46:16:0e:4d:64:80:78:d1:e8:8e: f0:6d:59:ff:f9:22:99:4c:e2:ec:ab:c9:08:0e:43:d7:41:45: e9:f0:95:a7:ff:8c:97:70:b2:69:4f:82:2d:ec:63:13:52:48: a4:1c:6e:63:08:37:fa:f1:a2:dc:01:d5:72:9d:d3:57:14:51: 0f:e2:39:fa:4d:fb:02:58:c5:08:79:01:2c:45:02:14:86:ab: 53:61:38:32:24:52:39:b8:03:8a:75:75:00:96:05:24:9c:18: 4e:c0:49:e2:f0:ed:30:ce:9a:58:dd:b1:a6:a1:2e:3b:b7:6d: 1a:fe:8a:81:ac:9d:dd:b6:ae:9b:74:12:c1:ad:b0:cf:57:e9: 01:34:fa:ea:06:f8:e3:54:51:d0:89:bd:9e:a4:e4:7c:b9:f8: 7b:50:07:37:72:fd:53:58:66:c5:93:b0:44:a5:53:6c:5d:1b: 21:6e:30:44:8e:05:f3:dd:fe:f4:6d:ea:a7:75:a7:6b:02:d3: 89:e0:60:4c:e2:90:56:bc:3f:3b:ea:4d:3d:60:14:bb:c7:92: 22:e8:93:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB2jvot0FTFPZmCA+nFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjM2ExZDk3M2Y5YjMzOTFlOGFkYWNhYTY2NGQxYjIzZDc3 OGYwMDgwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD Eyg5MGRkMWM1YjZkMDIwNGE2ZWQxNTE2MzA3YWE1MzIxNjQ2ODNiNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNbrVbWuNZOxheIwWjqSFW2t2N2a fLuaIlttPktn2f2p4AbgckMVMn5Y5Y8evUv8SYXch1YVX323zzVPqapqD4T7qzZR LCwt9Dyb+HXuOFVuZdjnTtxdzPt7WhgjbOvttywtOCmC8wNT8CbqfCZUrNgivIIN tVOSj+bPkQDqgpFXYgNAqOyvUAh830a9MQ4a/IzLgUbFIEHwB2UE1Za4FgUEx2bg g0Mtp5ZFVhDSniJ4SD9DMTX/v44pykzQkLYKq9UDHqXA1kI51Tun8zitHq4kkEVe KPqhoENqfE97rEp9PsgP+Eyh9Qt7QyA/EH2oKvEsPZ83d/cE8jzdrn1zUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDdHFttAgSm7RUWMHqlMhZGg7cbMB8GA1UdIwQY MBaAFFw6HZc/mzOR6K2sqmZNGyPXePAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEt MTk0Y2M5OTAyYWJmLzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEtMTk0Y2M5OTAyYWJm LzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvd3SXW+X VclQWwysotUaXd132FvM8+B70auDw7rPU3rGmcdMkw0Ot+dnNjlGFg5NZIB40eiO 8G1Z//kimUzi7KvJCA5D10FF6fCVp/+Ml3CyaU+CLexjE1JIpBxuYwg3+vGi3AHV cp3TVxRRD+I5+k37AljFCHkBLEUCFIarU2E4MiRSObgDinV1AJYFJJwYTsBJ4vDt MM6aWN2xpqEuO7dtGv6Kgayd3baum3QSwa2wz1fpATT66gb441RR0Im9nqTkfLn4 e1AHN3L9U1hmxZOwRKVTbF0bIW4wRI4F893+9G3qp3WnawLTieBgTOKQVrw/O+pN PWAUu8eSIuiTJg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:21 2025 by rpki-client