This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json) Hash identifier: clpxQD/8qS+H2EVdzpE6ZGCPNPm47lVavkb8trbaZoI= Subject key identifier: F1:FF:D7:7B:46:5C:10:82:F8:78:15:56:09:31:DD:D4:44:0E:BC:99 Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Certificate serial: 019AF19B60E699765EED93BEBD0273536D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=) 2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: mfMWGofNQbm+hqSLu0Nxqg+rXUEwqMjwEzWQ7VV1SnE=) 3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:60:e6:99:76:5e:ed:93:be:bd:02:73:53:6d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=f1ffd77b465c1082f87815560931ddd4440ebc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:5a:64:f9:8f:2b:43:57:87:5a:e1:2f:fd: bc:37:42:1b:9c:66:30:1e:d7:5c:e0:67:fe:d6:2f: 71:cd:d1:8c:22:fa:55:11:4a:6f:45:bc:68:d5:e6: 34:40:b8:5c:af:28:d5:0c:8b:aa:a4:59:60:f8:b8: 81:7e:35:fb:b3:2c:98:48:bb:1e:0a:83:de:ed:5d: 55:17:ba:3f:da:92:bf:0e:ad:b3:10:18:74:09:2d: ba:65:01:c5:05:1f:29:8f:e1:68:4a:d5:02:53:86: d4:d3:99:9b:27:c7:25:be:3d:01:39:fe:b5:c8:54: f6:90:0d:e9:d6:76:4a:a7:ac:3b:78:6e:66:d3:e8: 9b:0b:d0:27:0b:ce:ee:cc:79:4e:a2:98:6b:bc:1d: de:9a:fa:e3:7c:4e:41:10:a5:85:c4:27:44:b2:58: bf:c5:ca:b5:97:24:e2:9d:fa:da:1d:09:ac:29:59: e7:f4:5f:0c:85:1a:f7:ed:c1:2f:ed:d6:7d:f6:95: 65:20:91:e0:63:99:10:9e:fc:ea:68:47:3a:8a:0a: bd:4d:40:ee:fb:95:33:c8:12:11:c2:64:06:6b:fb: 8a:14:05:db:a3:db:05:65:15:47:85:a4:2e:dd:35: ea:40:83:e2:e5:0d:56:17:37:38:80:97:fe:cf:fb: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FF:D7:7B:46:5C:10:82:F8:78:15:56:09:31:DD:D4:44:0E:BC:99 X509v3 Authority Key Identifier: keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a9:bb:06:1c:2a:cb:01:8d:59:a9:da:79:8c:60:f9:61:da: d1:a7:84:5c:6a:fd:73:96:9a:a9:8d:24:b0:cb:90:89:e4:c2: 8a:1e:68:b2:9d:da:c8:b5:09:72:ea:4a:cb:6f:16:f2:f0:05: bb:8e:79:5e:d6:ca:34:01:eb:01:9e:e6:3a:5e:d1:19:12:30: 13:0a:07:4e:69:38:c9:cc:17:f3:51:f2:0e:23:20:12:cf:b1: df:42:f3:04:1d:0f:9b:66:20:34:aa:89:b3:9f:41:bb:4c:1e: 1b:44:ea:0f:14:7f:fd:8a:6b:86:07:d6:ee:58:70:0f:b1:63: 54:06:83:b7:e9:ca:86:46:88:2a:a9:eb:2d:28:9e:c5:ba:2a: eb:30:c4:39:9b:d4:d2:d2:ed:5b:b8:4b:a4:be:c3:13:2b:44: 9d:bf:52:cc:58:bf:e0:05:36:f1:23:a0:c8:81:aa:24:68:a9: 80:98:f9:86:00:26:30:c9:37:af:9e:56:4c:c0:60:48:d1:5d: e8:93:30:5b:6c:db:68:22:34:93:43:55:b8:fb:ee:32:03:8d: ff:cf:a5:37:13:62:fd:f9:60:72:9f:b2:85:77:1c:34:a5:49: 6c:e1:8d:50:52:db:4f:ea:89:d2:6a:32:80:11:13:61:7c:f9: f2:b4:44:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2DmmXZe7ZO+vQJzU20wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy YTBmZDgwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EyhmMWZmZDc3YjQ2NWMxMDgyZjg3ODE1NTYwOTMxZGRkNDQ0MGViYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkhaZPmPK0NXh1rhL/28N0IbnGYw Htdc4Gf+1i9xzdGMIvpVEUpvRbxo1eY0QLhcryjVDIuqpFlg+LiBfjX7syyYSLse CoPe7V1VF7o/2pK/Dq2zEBh0CS26ZQHFBR8pj+FoStUCU4bU05mbJ8clvj0BOf61 yFT2kA3p1nZKp6w7eG5m0+ibC9AnC87uzHlOophrvB3emvrjfE5BEKWFxCdEsli/ xcq1lyTinfraHQmsKVnn9F8MhRr37cEv7dZ99pVlIJHgY5kQnvzqaEc6igq9TUDu +5UzyBIRwmQGa/uKFAXbo9sFZRVHhaQu3TXqQIPi5Q1WFzc4gJf+z/uZGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH/13tGXBCC+HgVVgkx3dREDryZMB8GA1UdIwQY MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGam7Bhwq ywGNWanaeYxg+WHa0aeEXGr9c5aaqY0ksMuQieTCih5osp3ayLUJcupKy28W8vAF u455XtbKNAHrAZ7mOl7RGRIwEwoHTmk4ycwX81HyDiMgEs+x30LzBB0Pm2YgNKqJ s59Bu0weG0TqDxR//YprhgfW7lhwD7FjVAaDt+nKhkaIKqnrLSiexboq6zDEOZvU 0tLtW7hLpL7DEytEnb9SzFi/4AU28SOgyIGqJGipgJj5hgAmMMk3r55WTMBgSNFd 6JMwW2zbaCI0k0NVuPvuMgON/8+lNxNi/flgcp+yhXccNKVJbOGNUFLbT+qJ0moy gBETYXz58rRE5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:07 2025 by rpki-client