This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json) Hash identifier: q9JnoeUnPkNDaQ70Z7MIDdRHPWSCtRDQqKnn3iFkBwQ= Subject key identifier: DD:70:03:84:7B:3B:42:9C:66:16:81:8E:E7:2F:CA:3C:57:20:D0:76 Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95 Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195 Certificate serial: 019B26D24D174FC9E53BF7E06DD03869EF6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft Manifest number: 080C Signing time: Tue 16 Dec 2025 11:01:14 +0000 Manifest this update: Tue 16 Dec 2025 11:01:14 +0000 Manifest next update: Wed 17 Dec 2025 11:01:14 +0000 Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: qLP7Sjg6dyUkAkBUQLODBTnAn77bFcB9nf1JA/lC10I=) 2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:4d:17:4f:c9:e5:3b:f7:e0:6d:d0:38:69:ef:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195 Validity Not Before: Dec 16 11:01:14 2025 GMT Not After : Dec 17 11:01:14 2025 GMT Subject: CN=dd7003847b3b429c6616818ee72fca3c5720d076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:a1:23:9d:12:3d:a5:a5:12:f4:31:eb:15: 16:5b:70:05:5d:84:8b:b9:e3:c5:2b:70:77:69:b6: 9b:d0:30:60:87:ed:a2:35:a2:4b:3c:53:bb:d9:93: 0a:98:b3:15:ff:fe:58:b5:84:b0:bc:a0:77:ca:86: ce:c6:28:21:7d:eb:74:d7:62:e1:05:7d:07:ba:86: b2:31:e6:ff:45:16:d2:24:42:86:2f:98:d7:a8:75: 90:00:7f:13:cd:a4:9b:44:d2:d9:39:41:93:07:9c: c6:8e:0a:02:42:a1:68:d0:b2:17:82:0a:2b:3e:87: 85:5a:03:6b:d5:e0:d2:8b:91:74:db:dc:c5:2c:4c: 4c:e0:56:0e:c7:5f:e4:41:db:9d:cd:b7:b3:76:aa: 45:df:c3:d7:a3:67:fa:f9:31:e0:64:c6:97:71:36: a2:84:3f:1d:d6:20:a6:b5:03:32:5d:5c:80:cb:84: d1:73:e4:61:6c:ff:db:ee:84:58:6c:32:e9:92:95: 99:ad:c9:ac:14:4b:e3:65:cf:f0:b7:3c:c6:9d:0d: 02:c5:a5:e2:2b:ce:08:81:8c:95:4b:08:3a:63:7c: 6c:43:74:f4:f4:14:00:a1:85:c3:e3:c3:8a:a6:a2: e8:21:d0:d6:48:ae:7c:db:70:ea:6c:b6:c8:a8:77: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:70:03:84:7B:3B:42:9C:66:16:81:8E:E7:2F:CA:3C:57:20:D0:76 X509v3 Authority Key Identifier: keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a0:bd:3e:43:27:6c:2c:61:80:68:04:57:b6:ec:12:8a:f0: f8:3a:da:34:dc:59:e9:8b:24:ea:94:14:ef:fe:d4:89:11:77: f8:45:d9:d5:b1:d2:31:f1:12:cc:46:8b:30:ff:19:7f:35:cf: 6e:09:af:b7:09:8e:b1:15:7c:3b:2c:1e:88:fa:b2:c7:69:ed: 4b:33:b8:3b:b1:38:53:dc:55:a4:5b:de:54:9e:12:6a:e4:ad: 02:61:0f:69:31:ca:ff:95:6c:38:37:de:44:ce:7c:fa:c3:5c: f5:f6:d9:43:45:5d:8b:57:9e:a6:a4:23:97:51:71:50:0c:99: a2:1b:a8:30:f5:f2:c8:13:5d:0c:7a:16:db:39:c4:ea:7e:57: 13:9a:bd:f7:ef:1f:4b:f4:ae:aa:13:4e:09:6f:e7:52:85:d4: 43:9e:5f:15:f2:e3:cf:e3:19:36:a6:35:21:53:cd:b9:77:b4: 51:a9:c6:75:0f:07:29:ff:70:43:03:a4:0e:92:a8:b5:8d:d3: e7:7d:ab:b7:ea:6b:ca:3b:35:3a:7f:98:49:96:48:26:33:13: 57:78:a4:a1:17:fe:6f:30:cf:ec:6f:ab:f6:0d:f1:26:d9:fd: 19:0b:77:23:ef:77:dd:b4:83:0f:fe:c8:1d:8c:2e:c9:98:a5: 57:06:26:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0k0XT8nlO/fgbdA4ae9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh MWQxOTUwHhcNMjUxMjE2MTEwMTE0WhcNMjUxMjE3MTEwMTE0WjAzMTEwLwYDVQQD EyhkZDcwMDM4NDdiM2I0MjljNjYxNjgxOGVlNzJmY2EzYzU3MjBkMDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkuhI50SPaWlEvQx6xUWW3AFXYSL uePFK3B3abab0DBgh+2iNaJLPFO72ZMKmLMV//5YtYSwvKB3yobOxighfet012Lh BX0HuoayMeb/RRbSJEKGL5jXqHWQAH8TzaSbRNLZOUGTB5zGjgoCQqFo0LIXggor PoeFWgNr1eDSi5F029zFLExM4FYOx1/kQdudzbezdqpF38PXo2f6+THgZMaXcTai hD8d1iCmtQMyXVyAy4TRc+RhbP/b7oRYbDLpkpWZrcmsFEvjZc/wtzzGnQ0CxaXi K84IgYyVSwg6Y3xsQ3T09BQAoYXD48OKpqLoIdDWSK5823DqbLbIqHePVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1wA4R7O0KcZhaBjucvyjxXINB2MB8GA1UdIwQY MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaC9PkMn bCxhgGgEV7bsEorw+DraNNxZ6Ysk6pQU7/7UiRF3+EXZ1bHSMfESzEaLMP8ZfzXP bgmvtwmOsRV8OyweiPqyx2ntSzO4O7E4U9xVpFveVJ4SauStAmEPaTHK/5VsODfe RM58+sNc9fbZQ0Vdi1eepqQjl1FxUAyZohuoMPXyyBNdDHoW2znE6n5XE5q99+8f S/SuqhNOCW/nUoXUQ55fFfLjz+MZNqY1IVPNuXe0UanGdQ8HKf9wQwOkDpKotY3T 532rt+pryjs1On+YSZZIJjMTV3ikoRf+bzDP7G+r9g3xJtn9GQt3I+933bSDD/7I HYwuyZilVwYmYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:05:09 2025 by rpki-client