This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json) Hash identifier: XhIjIZdfrdAWxJ+2tdytGtpkD9ObSHOM7Li2rWanPBU= Subject key identifier: 36:ED:4C:65:83:1D:33:30:FB:C0:E9:41:5A:FF:A1:C5:08:F0:F5:95 Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Certificate serial: 019B0F0105C9D07CD59CB742C8BE8FEAB8E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft Manifest number: 1701 Signing time: Thu 11 Dec 2025 20:01:23 +0000 Manifest this update: Thu 11 Dec 2025 20:01:23 +0000 Manifest next update: Fri 12 Dec 2025 20:01:23 +0000 Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: K5AJU8IElTOJrlkjOOCu5/Y6DJcx9JuZe5ZoC3jhPTk=) 2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:05:c9:d0:7c:d5:9c:b7:42:c8:be:8f:ea:b8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Validity Not Before: Dec 11 20:01:23 2025 GMT Not After : Dec 12 20:01:23 2025 GMT Subject: CN=36ed4c65831d3330fbc0e9415affa1c508f0f595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:7d:4d:de:1b:ac:24:5f:06:ab:6d:1b:ce: 1f:37:fc:04:46:ed:48:63:34:63:4c:bf:cf:20:63: 54:1c:d1:90:44:c8:9c:91:21:e4:65:0a:67:d2:0b: 1b:e2:6e:29:0e:29:86:99:f0:d9:48:6e:4f:8e:e3: 0c:0d:c5:29:1c:47:fd:eb:2f:ef:5c:23:cc:ae:8f: 31:1e:78:88:70:f7:0c:79:47:79:25:94:80:94:40: 92:4f:f1:b0:ff:0f:53:17:a1:db:80:08:7a:d7:e3: 48:70:2e:4c:b0:ef:9a:1f:11:c1:b3:71:56:1e:4f: 42:ab:01:22:02:c2:71:19:6e:22:ce:f8:21:df:cf: c5:6a:cc:66:35:b3:6f:69:91:bd:f7:d8:4b:57:9b: ef:13:f3:b1:85:15:f7:20:f0:7f:03:3c:3e:97:fd: ef:c3:11:03:22:00:a3:f6:e5:88:75:f0:63:8e:34: d4:69:33:cb:80:cf:a7:68:09:c0:85:e8:3d:a6:b3: 8f:cb:2f:d4:20:c4:83:49:62:4f:73:6c:bd:12:c4: b8:68:5c:97:38:05:12:d9:52:d8:50:6e:4f:ad:a9: 0a:df:65:2c:c5:83:17:a3:89:2c:09:57:a9:16:34: d5:9d:44:cd:00:9b:ac:a4:2d:0a:8a:9c:dc:90:05: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:ED:4C:65:83:1D:33:30:FB:C0:E9:41:5A:FF:A1:C5:08:F0:F5:95 X509v3 Authority Key Identifier: keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0c:b6:99:77:96:4f:14:97:2e:d4:e6:ce:7f:2e:01:87:43: 78:99:b5:c6:89:e6:c5:ee:ba:e8:bb:17:53:c3:d9:3b:cf:47: 96:7d:7d:a3:7d:25:26:fe:ff:e8:c5:34:2f:d8:2e:a0:8f:66: 4a:48:5b:78:37:be:fd:9a:82:92:91:0e:c9:8e:54:ea:30:8b: f5:5a:d8:02:72:d1:1a:f3:62:d8:e3:05:4d:cf:7f:e7:84:bc: ac:fa:40:e3:56:bd:c7:6d:91:04:cf:ef:a4:30:f2:76:8d:b0: f3:3a:49:34:9e:55:35:d5:bd:bf:78:f9:e6:69:d8:d8:0a:d7: f9:e0:c4:c4:4d:eb:17:81:62:7e:fd:87:b7:01:c8:18:b1:89: 48:bf:a0:4b:05:85:9f:21:ef:81:78:e9:63:c1:6e:4b:b2:ed: a8:8d:78:a0:60:65:18:80:45:56:9f:b9:85:37:6d:ca:61:3e: d3:b8:43:ac:4d:1a:a1:66:b2:ac:10:f8:ec:1c:10:c8:cd:4b: f4:71:6a:f4:2f:be:38:59:41:ee:8c:2b:b5:24:91:4f:c9:95: cb:c9:85:9c:1d:a9:36:42:11:64:77:f8:af:45:79:bd:cb:aa: 95:28:04:3d:c3:f4:35:0b:d5:34:eb:ff:d3:55:e1:a9:ed:5d: 91:2f:14:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAQXJ0HzVnLdCyL6P6rjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDY5MTBjZjFlMmUyYjFjYTM0NzNjNGI3ZDA5MjAyMGU3 YjdjNjEwHhcNMjUxMjExMjAwMTIzWhcNMjUxMjEyMjAwMTIzWjAzMTEwLwYDVQQD EygzNmVkNGM2NTgzMWQzMzMwZmJjMGU5NDE1YWZmYTFjNTA4ZjBmNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjB9Td4brCRfBqttG84fN/wERu1I YzRjTL/PIGNUHNGQRMickSHkZQpn0gsb4m4pDimGmfDZSG5PjuMMDcUpHEf96y/v XCPMro8xHniIcPcMeUd5JZSAlECST/Gw/w9TF6HbgAh61+NIcC5MsO+aHxHBs3FW Hk9CqwEiAsJxGW4izvgh38/FasxmNbNvaZG999hLV5vvE/OxhRX3IPB/Azw+l/3v wxEDIgCj9uWIdfBjjjTUaTPLgM+naAnAheg9prOPyy/UIMSDSWJPc2y9EsS4aFyX OAUS2VLYUG5PrakK32UsxYMXo4ksCVepFjTVnUTNAJuspC0KipzckAV97QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbtTGWDHTMw+8DpQVr/ocUI8PWVMB8GA1UdIwQY MBaAFFzWkQzx4uKxyjRzxLfQkgIOe3xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQt MTcyYzYwYjNlMzZkLzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQtMTcyYzYwYjNlMzZk LzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwy2mXeW TxSXLtTmzn8uAYdDeJm1xonmxe666LsXU8PZO89Hln19o30lJv7/6MU0L9guoI9m SkhbeDe+/ZqCkpEOyY5U6jCL9VrYAnLRGvNi2OMFTc9/54S8rPpA41a9x22RBM/v pDDydo2w8zpJNJ5VNdW9v3j55mnY2ArX+eDExE3rF4Fifv2HtwHIGLGJSL+gSwWF nyHvgXjpY8FuS7LtqI14oGBlGIBFVp+5hTdtymE+07hDrE0aoWayrBD47BwQyM1L 9HFq9C++OFlB7owrtSSRT8mVy8mFnB2pNkIRZHf4r0V5vcuqlSgEPcP0NQvVNOv/ 01Xhqe1dkS8UJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:28 2025 by rpki-client