This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft File: Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json) Hash identifier: lt+b1gxU9msCvCBRVGZzvTHjpMA9A0VNSBfyVrvJN0g= Subject key identifier: F6:3C:EB:0A:77:16:80:76:DB:60:3B:E4:18:60:0C:41:87:61:14:33 Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Certificate serial: 019B0F0093F22581C3E277E671443936351D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft Manifest number: 0F25 Signing time: Thu 11 Dec 2025 20:00:54 +0000 Manifest this update: Thu 11 Dec 2025 20:00:54 +0000 Manifest next update: Fri 12 Dec 2025 20:00:54 +0000 Files and hashes: 1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: ScITl0px5e7xiDyeg+VNDiortqMG45+x8QOs5MytJio=) 2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:93:f2:25:81:c3:e2:77:e6:71:44:39:36:35:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Validity Not Before: Dec 11 20:00:54 2025 GMT Not After : Dec 12 20:00:54 2025 GMT Subject: CN=f63ceb0a77168076db603be418600c4187611433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7d:fa:ec:be:c8:df:da:0c:ad:8d:69:88:21: 63:54:73:84:20:a1:cd:79:10:43:5a:39:63:24:f7: e4:18:9f:b8:98:65:fa:d5:6a:04:38:5c:ff:d6:80: 57:fc:3a:66:63:ae:9e:c2:07:1d:21:f0:59:d5:63: 8e:db:3f:e5:d3:ef:b1:1b:c3:4b:1c:4e:a6:36:c0: 72:98:71:81:4f:e4:ef:e2:44:18:a5:29:d1:5b:fc: ad:64:11:eb:eb:b7:21:0d:0d:ae:91:7c:4a:5f:07: 48:67:e7:5e:b0:f2:e2:ce:42:04:af:15:58:f4:a2: 57:37:14:44:0b:1b:b4:52:b6:06:71:52:f7:d9:80: 14:d0:a7:df:dd:fc:d3:36:bc:fc:a9:1b:8a:d7:7f: 6a:08:3e:ec:1f:0a:e1:de:c3:f8:63:ca:d1:87:7f: 0d:df:fd:4d:ff:95:0e:af:a6:fc:7e:2e:c9:e7:fa: 59:7f:25:ee:10:1d:21:ad:1e:96:ab:9e:07:23:b8: 4e:d2:e2:26:9e:e5:cd:80:3a:f4:05:74:ad:63:23: c1:bf:75:23:4b:92:67:00:14:ac:15:29:99:32:28: 28:a4:53:22:ea:90:03:8d:f7:10:c2:d5:fa:62:f9: 07:3b:1b:28:86:47:9f:c1:ca:35:d8:e2:9c:df:b3: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:EB:0A:77:16:80:76:DB:60:3B:E4:18:60:0C:41:87:61:14:33 X509v3 Authority Key Identifier: keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fa:67:b1:d2:18:e4:2f:88:b9:5a:a3:84:0f:26:91:f4:4d: 08:81:62:3a:cc:89:d8:1d:da:6f:56:f2:11:25:2f:bf:33:0e: 0c:17:d3:31:80:3d:92:73:7c:5c:9e:f5:59:f5:f9:5a:8a:04: b8:b5:75:d7:c4:ef:db:ad:3b:9c:b7:bc:75:d3:44:7c:d3:d5: 12:d1:c3:6b:8f:1a:1b:a4:61:3c:50:75:27:5d:05:01:54:94: 97:1d:86:b3:ff:7a:73:f3:04:e9:15:0a:94:b1:5b:03:92:b0: 15:10:4b:3a:39:2f:6f:55:24:33:d4:c4:ba:a2:47:fd:32:71: 2a:be:9c:b7:ed:45:24:62:fc:38:c1:51:ce:34:35:a2:c1:8d: 66:29:53:7e:b5:24:28:71:73:2f:86:45:2a:83:dd:cf:c4:fb: 69:92:d7:08:78:60:37:68:ba:1b:1d:23:7c:92:0e:66:b3:3c: 71:0e:6d:d7:70:38:94:5d:ff:a3:64:fe:f6:89:1e:6b:24:bd: d0:86:b6:dd:c5:03:33:a7:03:43:57:b1:7d:83:10:f4:b3:fd: e8:a4:6a:35:4a:c8:ae:f0:ca:f9:f6:5e:96:02:ed:d0:3f:ce: e9:05:e0:c7:bd:17:8e:45:26:15:b7:f1:a3:9e:13:2e:c5:ea: d9:32:a6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAJPyJYHD4nfmcUQ5NjUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2E3ODM1Mzc3YjllODQ5ZmU3YzMzZjlmY2E0NTcyZDkw MjY3M2YwHhcNMjUxMjExMjAwMDU0WhcNMjUxMjEyMjAwMDU0WjAzMTEwLwYDVQQD EyhmNjNjZWIwYTc3MTY4MDc2ZGI2MDNiZTQxODYwMGM0MTg3NjExNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n367L7I39oMrY1piCFjVHOEIKHN eRBDWjljJPfkGJ+4mGX61WoEOFz/1oBX/DpmY66ewgcdIfBZ1WOO2z/l0++xG8NL HE6mNsBymHGBT+Tv4kQYpSnRW/ytZBHr67chDQ2ukXxKXwdIZ+desPLizkIErxVY 9KJXNxRECxu0UrYGcVL32YAU0Kff3fzTNrz8qRuK139qCD7sHwrh3sP4Y8rRh38N 3/1N/5UOr6b8fi7J5/pZfyXuEB0hrR6Wq54HI7hO0uImnuXNgDr0BXStYyPBv3Uj S5JnABSsFSmZMigopFMi6pADjfcQwtX6YvkHOxsohkefwco12OKc37MxkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPY86wp3FoB222A75BhgDEGHYRQzMB8GA1UdIwQY MBaAFF46eDU3e56En+fDP5/KRXLZAmc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5Yjgt MDU1YjFiMGU2MGY0LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5YjgtMDU1YjFiMGU2MGY0 LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/pnsdIY 5C+IuVqjhA8mkfRNCIFiOsyJ2B3ab1byESUvvzMODBfTMYA9knN8XJ71WfX5WooE uLV118Tv2607nLe8ddNEfNPVEtHDa48aG6RhPFB1J10FAVSUlx2Gs/96c/ME6RUK lLFbA5KwFRBLOjkvb1UkM9TEuqJH/TJxKr6ct+1FJGL8OMFRzjQ1osGNZilTfrUk KHFzL4ZFKoPdz8T7aZLXCHhgN2i6Gx0jfJIOZrM8cQ5t13A4lF3/o2T+9okeayS9 0Ia23cUDM6cDQ1exfYMQ9LP96KRqNUrIrvDK+fZelgLt0D/O6QXgx70XjkUmFbfx o54TLsXq2TKmOA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:54 2025 by rpki-client