This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json) Hash identifier: JPsFz5U4CZhi9gy7vhEJ/ycVO7AzHvv64CFNkCiBo6U= Subject key identifier: 6B:0E:26:CC:FF:31:27:52:79:FB:A3:4F:69:01:59:E7:FE:98:B0:1A Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425 Certificate serial: 019AF31D46B8C2C518A0D75AB0FD6961167A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft Manifest number: 0C6B Signing time: Sat 06 Dec 2025 10:02:53 +0000 Manifest this update: Sat 06 Dec 2025 10:02:53 +0000 Manifest next update: Sun 07 Dec 2025 10:02:53 +0000 Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: 9/GQFs9M6eK1YsC5upcxemYTrdqR3B0uFOXOkr1mbDM=) 2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:46:b8:c2:c5:18:a0:d7:5a:b0:fd:69:61:16:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425 Validity Not Before: Dec 6 10:02:53 2025 GMT Not After : Dec 7 10:02:53 2025 GMT Subject: CN=6b0e26ccff31275279fba34f690159e7fe98b01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:c2:5b:6b:a0:0f:1c:a8:d6:e8:3a:89:03: 40:1e:38:22:6a:ab:26:d5:b6:49:98:d1:31:66:ff: c8:2f:a7:3a:53:2b:00:03:af:48:f1:7e:2e:78:53: 1b:39:9d:6c:85:bf:d5:6d:3f:2f:86:a3:a3:9f:fa: 25:c5:66:a9:65:ef:6c:32:90:27:f9:ec:48:d7:b5: 78:b5:01:6d:a7:6f:ce:e8:1d:8c:13:99:ec:b8:43: 59:d2:98:9a:45:15:81:ce:ac:4a:32:e8:40:38:df: b6:dc:13:e1:76:7a:75:ed:4f:14:f9:85:84:47:72: b9:dd:3f:65:9a:6f:c2:81:36:8b:a5:a8:84:45:d9: 83:b7:63:80:d9:55:25:75:41:f0:ab:5f:1b:84:9a: 80:2d:25:c9:a1:dd:2d:06:6a:b8:04:3f:9f:05:e8: 85:ff:33:af:74:53:fb:8e:4b:81:05:24:7f:de:f6: 43:1d:19:e8:c2:0d:e1:09:17:a0:69:0d:eb:0f:30: a5:ae:d6:9a:e5:2e:a8:ce:cd:eb:56:6d:89:90:51: c3:e3:bd:6f:88:9c:ff:44:3a:c5:b3:d8:97:6a:e4: cf:48:73:33:7f:9d:15:3a:55:ea:68:1f:62:12:be: 5e:5e:77:85:1d:71:f9:b0:e5:49:b6:5c:3b:09:4f: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0E:26:CC:FF:31:27:52:79:FB:A3:4F:69:01:59:E7:FE:98:B0:1A X509v3 Authority Key Identifier: keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:0f:ac:58:53:0c:ac:50:7e:c7:61:3d:72:80:5d:cd:09:93: be:67:a3:b1:f6:3c:a7:eb:b4:72:49:b0:c4:83:47:7c:96:a5: 9b:dc:18:b1:a7:df:f1:0a:d9:52:9c:b0:6f:c5:1c:61:a4:9b: af:de:8a:3a:bc:52:61:ba:1e:e2:bd:ea:5b:e0:35:d3:71:20: b2:53:a7:45:f2:d4:9d:9e:a6:87:24:23:18:e0:b3:40:59:ee: 5a:de:a9:55:a3:c6:ad:58:89:22:66:4e:54:0a:e6:10:aa:e8: 49:91:b0:22:f9:22:37:d4:b5:27:fe:78:cc:bb:47:3f:03:49: 8e:90:20:71:10:06:19:d6:3b:b2:2e:82:c3:dd:53:dc:8b:ab: 06:95:19:e7:f6:43:61:1d:27:8b:ff:1f:e3:6b:82:3c:1c:da: 53:e1:54:0b:e5:4e:df:85:13:5e:16:bf:de:74:08:aa:b2:ee: 7f:b1:50:e5:e4:37:8d:d5:f5:b2:c0:ac:5d:23:4c:c2:c4:4e: 96:24:ab:c6:a7:49:bd:35:7e:ec:65:77:0c:5a:76:bc:f4:9d: 7b:0d:77:0e:3f:32:d4:57:8c:fa:f1:57:3d:40:c3:d6:ce:8c: 81:25:15:cc:c8:28:56:54:85:ac:e1:c9:02:26:90:3b:d6:4d: f2:7c:35:44 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHUa4wsUYoNdasP1pYRZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzA4Nzc5ODViMGM1Y2Y2OTE2N2M5MWU4Mzc0MjRjNDdk OWE0MjUwHhcNMjUxMjA2MTAwMjUzWhcNMjUxMjA3MTAwMjUzWjAzMTEwLwYDVQQD Eyg2YjBlMjZjY2ZmMzEyNzUyNzlmYmEzNGY2OTAxNTllN2ZlOThiMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7DCW2ugDxyo1ug6iQNAHjgiaqsm 1bZJmNExZv/IL6c6UysAA69I8X4ueFMbOZ1shb/VbT8vhqOjn/olxWapZe9sMpAn +exI17V4tQFtp2/O6B2ME5nsuENZ0piaRRWBzqxKMuhAON+23BPhdnp17U8U+YWE R3K53T9lmm/CgTaLpaiERdmDt2OA2VUldUHwq18bhJqALSXJod0tBmq4BD+fBeiF /zOvdFP7jkuBBSR/3vZDHRnowg3hCRegaQ3rDzClrtaa5S6ozs3rVm2JkFHD471v iJz/RDrFs9iXauTPSHMzf50VOlXqaB9iEr5eXneFHXH5sOVJtlw7CU8PSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGsOJsz/MSdSefujT2kBWef+mLAaMB8GA1UdIwQY MBaAFPlwh3mFsMXPaRZ8keg3QkxH2aQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQ0hlWVd3eGM5cEZueVI2RGRDVEVmWnBDVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1 LWVlY2ZlN2ZjZjFjMC8xLzEtWENIZVlXd3hjOXBGbnlSNkRkQ1RFZlpwQ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y0L2Q5ZGI5OC00MDEwLTQzMjgtODQ0NS1lZWNmZTdmY2Yx YzAvMS8xLVhDSGVZV3d4YzlwRm55UjZEZENURWZacENVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzA+s WFMMrFB+x2E9coBdzQmTvmejsfY8p+u0ckmwxINHfJalm9wYsaff8QrZUpywb8Uc YaSbr96KOrxSYboe4r3qW+A103EgslOnRfLUnZ6mhyQjGOCzQFnuWt6pVaPGrViJ ImZOVArmEKroSZGwIvkiN9S1J/54zLtHPwNJjpAgcRAGGdY7si6Cw91T3IurBpUZ 5/ZDYR0ni/8f42uCPBzaU+FUC+VO34UTXha/3nQIqrLuf7FQ5eQ3jdX1ssCsXSNM wsROliSrxqdJvTV+7GV3DFp2vPSdew13Dj8y1FeM+vFXPUDD1s6MgSUVzMgoVlSF rOHJAiaQO9ZN8nw1RA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:07 2025 by rpki-client