This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft File: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft (raw, json) Hash identifier: M/hepW6DI9VTqxmaBKY1ps6HZEsA/unxHIBkPil1GfA= Subject key identifier: F7:07:69:40:25:DE:33:78:0F:51:04:EE:38:A8:B9:17:D0:6E:1B:09 Authority key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B Certificate issuer: /CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b Certificate serial: 019B2364BC0A032E66594203731006FC1ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 19:02:42 +0000 Manifest this update: Mon 15 Dec 2025 19:02:42 +0000 Manifest next update: Tue 16 Dec 2025 19:02:42 +0000 Files and hashes: 1: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl (hash: 3XaER2TY0+2sDoNAdQ8YSWNZwoFGGwZ+y0q7J5x+8Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:bc:0a:03:2e:66:59:42:03:73:10:06:fc:1a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b Validity Not Before: Dec 15 19:02:42 2025 GMT Not After : Dec 16 19:02:42 2025 GMT Subject: CN=f707694025de33780f5104ee38a8b917d06e1b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:a2:ce:b1:ff:5a:22:fd:46:86:48:c7:41: b5:75:69:b1:a5:f7:9f:e9:f9:6e:4e:99:80:5d:a2: dd:46:88:13:15:14:5a:e6:1a:89:32:8d:52:65:b4: 1b:6c:93:c5:4c:ad:ed:8e:d5:99:77:ad:3b:32:0e: 52:bf:ad:6d:83:ee:bb:c1:72:fa:50:45:4d:20:b7: 6f:59:b4:49:76:de:3e:db:46:8c:84:6d:ef:1f:e0: e6:d6:c0:fe:a7:56:c2:79:16:06:ba:5b:9d:60:ad: cd:b7:c3:38:49:cf:f5:b7:7d:ed:52:0e:34:15:95: d9:85:22:7c:60:eb:56:b6:12:59:c7:69:61:39:db: d1:4a:e3:bf:d2:bf:9d:d9:7b:48:00:f9:82:a0:2f: d9:2d:64:10:b8:b5:ec:fd:74:4e:dd:28:bb:7c:0b: 6b:4e:c3:fc:af:02:7e:5f:97:25:be:66:42:55:6d: 2a:b7:ac:13:e4:8e:16:f6:1e:2d:2a:1e:7e:10:80: 57:f6:11:39:14:80:f9:b1:90:e1:1b:06:56:4d:dd: 9c:10:92:f8:05:09:72:72:fd:4b:66:2e:12:36:76: 7a:a2:e2:07:4f:d9:09:38:d4:29:2d:bc:e9:4f:d4: fc:e0:f1:d2:78:13:00:18:56:91:9d:7f:24:f4:66: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:07:69:40:25:DE:33:78:0F:51:04:EE:38:A8:B9:17:D0:6E:1B:09 X509v3 Authority Key Identifier: keyid:5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0c:8e:f5:03:04:d1:90:79:80:15:55:6a:89:b5:2a:a9:a3: 08:8c:81:dd:67:e0:64:0c:36:44:83:cc:83:74:14:f2:eb:81: ac:cd:de:f7:b4:e8:84:f7:75:2e:e2:aa:3a:03:9f:ea:75:f8: 9f:79:55:47:48:5b:5d:ce:36:f1:1c:2b:56:f9:bf:06:9e:4d: dd:96:a7:81:75:16:29:0d:ba:db:1c:31:cc:49:1b:17:7d:50: e4:58:39:2d:19:57:a2:51:74:6e:b8:b1:bf:f3:4f:f5:ad:1a: f2:ca:61:8c:f2:11:c1:21:5b:7a:8f:1c:02:73:f0:78:06:a0: d2:a0:3b:88:2d:6d:f7:b7:b7:82:05:12:cb:bf:6a:29:c7:4b: b6:ee:1e:51:41:3f:4d:fd:26:fc:99:af:e6:4f:32:2d:d3:a0: c1:96:b7:40:3f:da:5e:3f:18:fd:7b:cb:6f:fb:cc:58:9e:4e: 5f:ba:2f:77:d4:40:43:89:14:5b:2f:9a:65:89:1c:52:95:71: 92:e3:f9:26:58:b0:fc:e6:c5:55:ca:0a:76:f0:72:97:c9:7c: ab:8f:49:a0:2c:d4:6f:67:bf:ee:c1:e6:d9:fb:1f:cb:ec:c7: d8:63:49:5c:1c:21:ac:13:b9:02:1a:df:c4:06:31:15:34:8c: 35:1b:12:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZLwKAy5mWUIDcxAG/Bq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzQ0YTFhYzBjYmZjNDBjNzVhMGNmYzdiZWM5NmM3YzM1 YmQyN2IwHhcNMjUxMjE1MTkwMjQyWhcNMjUxMjE2MTkwMjQyWjAzMTEwLwYDVQQD EyhmNzA3Njk0MDI1ZGUzMzc4MGY1MTA0ZWUzOGE4YjkxN2QwNmUxYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+2izrH/WiL9RoZIx0G1dWmxpfef 6fluTpmAXaLdRogTFRRa5hqJMo1SZbQbbJPFTK3tjtWZd607Mg5Sv61tg+67wXL6 UEVNILdvWbRJdt4+20aMhG3vH+Dm1sD+p1bCeRYGuludYK3Nt8M4Sc/1t33tUg40 FZXZhSJ8YOtWthJZx2lhOdvRSuO/0r+d2XtIAPmCoC/ZLWQQuLXs/XRO3Si7fAtr TsP8rwJ+X5clvmZCVW0qt6wT5I4W9h4tKh5+EIBX9hE5FID5sZDhGwZWTd2cEJL4 BQlycv1LZi4SNnZ6ouIHT9kJONQpLbzpT9T84PHSeBMAGFaRnX8k9GY49QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcHaUAl3jN4D1EE7jiouRfQbhsJMB8GA1UdIwQY MBaAFFw0ShrAy/xAx1oM/HvslsfDW9J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zMjlhYjgtYjFkOS00ZjlmLWE5Yzgt Y2QxODUxMGVkY2RmLzEvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zMjlhYjgtYjFkOS00ZjlmLWE5YzgtY2QxODUxMGVkY2Rm LzEvWERSS0dzRExfRURIV2d6OGUteVd4OE5iMG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgyO9QME 0ZB5gBVVaom1KqmjCIyB3WfgZAw2RIPMg3QU8uuBrM3e97TohPd1LuKqOgOf6nX4 n3lVR0hbXc428RwrVvm/Bp5N3ZangXUWKQ262xwxzEkbF31Q5Fg5LRlXolF0brix v/NP9a0a8sphjPIRwSFbeo8cAnPweAag0qA7iC1t97e3ggUSy79qKcdLtu4eUUE/ Tf0m/Jmv5k8yLdOgwZa3QD/aXj8Y/XvLb/vMWJ5OX7ovd9RAQ4kUWy+aZYkcUpVx kuP5Jliw/ObFVcoKdvByl8l8q49JoCzUb2e/7sHm2fsfy+zH2GNJXBwhrBO5Ahrf xAYxFTSMNRsSfA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:29:55 2025 by rpki-client