This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json) Hash identifier: p5eTRUkOWXnPPSfnzlPJR7uOOs63wMpGlsuz/EEMEXA= Subject key identifier: CB:18:1B:E9:91:08:11:1A:87:71:8C:1B:5B:28:BE:C5:71:81:03:E6 Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08 Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008 Certificate serial: 019AACB9DD2FC8098169B850C16CA712D1A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft Manifest number: 1741 Signing time: Sat 22 Nov 2025 18:00:53 +0000 Manifest this update: Sat 22 Nov 2025 18:00:53 +0000 Manifest next update: Sun 23 Nov 2025 18:00:53 +0000 Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: 9+Kb6QIQ3Ybs0/eL6k3iOYo12mY0qQXLGPAAa0DiTHs=) 2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=) 3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:dd:2f:c8:09:81:69:b8:50:c1:6c:a7:12:d1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008 Validity Not Before: Nov 22 18:00:53 2025 GMT Not After : Nov 23 18:00:53 2025 GMT Subject: CN=cb181be99108111a87718c1b5b28bec5718103e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:ac:d7:34:72:37:c6:c3:35:c6:0c:2c:d4: 50:99:7e:ab:87:80:0b:c0:d3:e4:c9:fa:3e:0c:3f: d5:37:69:53:e2:e8:45:52:1a:ac:f9:23:5f:33:5f: 43:b5:d3:e2:ff:c5:91:a0:6c:3e:6f:66:3c:17:04: 01:c2:90:68:21:72:ed:4a:f3:ed:8b:e6:1f:1c:35: b3:f4:d0:85:8d:7b:44:b4:5e:7f:ed:6f:d9:71:a6: 9f:1e:ed:1f:6d:d2:f0:46:f9:67:99:f2:a8:25:84: 81:59:1b:74:25:90:b2:b6:6d:5e:21:9a:9c:e8:d4: a1:90:16:c2:a5:aa:3c:31:91:05:3a:3e:9a:c3:90: 02:15:ea:e2:b5:9e:8e:37:66:00:b2:c9:31:50:a2: b1:98:4d:26:4d:64:94:20:4e:cc:68:c0:47:ac:6d: 39:e7:6b:3e:f3:56:78:a9:e0:2b:c1:4e:64:95:16: 4f:ff:7d:70:19:9e:6e:40:e4:1e:03:82:49:02:28: 71:06:18:aa:8a:ea:de:33:fc:ac:88:59:83:9d:d7: f2:ae:00:3f:c6:8d:9e:2f:67:35:8a:23:90:37:cd: 5d:52:09:6a:ea:90:2a:fb:54:51:ca:d9:8e:45:d3: 34:16:d4:c5:9e:f8:00:ef:f0:a6:4a:e6:77:4c:b5: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:18:1B:E9:91:08:11:1A:87:71:8C:1B:5B:28:BE:C5:71:81:03:E6 X509v3 Authority Key Identifier: keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:26:be:96:fd:b3:7c:b5:0b:51:e3:a3:9d:47:20:ed:07:44: 16:2f:05:dc:b0:ed:e0:ca:3b:23:cb:e4:08:8c:03:7f:ec:24: be:0b:33:3f:b9:3c:6e:f2:b1:ea:6e:d9:f4:c5:1e:a5:8f:65: d3:f8:9f:10:9f:0f:d7:c6:07:17:9b:62:a3:f2:9f:08:bd:20: bf:b9:2e:82:cd:50:e4:42:20:6c:97:1f:bf:6b:e6:19:eb:65: a7:15:9e:3c:08:36:9a:ee:db:a4:d2:0c:94:65:81:67:70:c5: b6:aa:a6:26:67:6c:f6:4f:e4:18:ff:5a:53:9e:14:48:45:84: b4:7f:fd:4e:f6:6d:ef:d7:2d:9e:fc:f5:be:ea:d2:50:37:2b: d4:58:eb:06:91:77:fe:34:b4:d2:0c:5b:5e:5c:e2:72:28:4e: f9:7b:14:9e:bf:40:4b:25:85:75:9c:c9:23:88:a5:46:ee:5a: 38:1d:52:fb:78:f0:78:94:46:8e:14:e5:39:88:6b:3d:8c:16: 1c:9e:af:aa:a5:88:16:96:45:1b:90:96:45:1c:e9:63:92:ed: b4:fe:4a:45:5e:3b:de:74:93:dd:d7:32:a6:11:fe:2f:35:43: 27:48:b4:38:da:e0:4c:39:3b:28:79:c8:31:06:72:e0:27:c2: b4:c4:ae:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsud0vyAmBabhQwWynEtGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjM2ExZDk3M2Y5YjMzOTFlOGFkYWNhYTY2NGQxYjIzZDc3 OGYwMDgwHhcNMjUxMTIyMTgwMDUzWhcNMjUxMTIzMTgwMDUzWjAzMTEwLwYDVQQD EyhjYjE4MWJlOTkxMDgxMTFhODc3MThjMWI1YjI4YmVjNTcxODEwM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqys1zRyN8bDNcYMLNRQmX6rh4AL wNPkyfo+DD/VN2lT4uhFUhqs+SNfM19DtdPi/8WRoGw+b2Y8FwQBwpBoIXLtSvPt i+YfHDWz9NCFjXtEtF5/7W/ZcaafHu0fbdLwRvlnmfKoJYSBWRt0JZCytm1eIZqc 6NShkBbCpao8MZEFOj6aw5ACFeritZ6ON2YAsskxUKKxmE0mTWSUIE7MaMBHrG05 52s+81Z4qeArwU5klRZP/31wGZ5uQOQeA4JJAihxBhiqiureM/ysiFmDndfyrgA/ xo2eL2c1iiOQN81dUglq6pAq+1RRytmORdM0FtTFnvgA7/CmSuZ3TLXoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsYG+mRCBEah3GMG1sovsVxgQPmMB8GA1UdIwQY MBaAFFw6HZc/mzOR6K2sqmZNGyPXePAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEt MTk0Y2M5OTAyYWJmLzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEtMTk0Y2M5OTAyYWJm LzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCa+lv2z fLULUeOjnUcg7QdEFi8F3LDt4Mo7I8vkCIwDf+wkvgszP7k8bvKx6m7Z9MUepY9l 0/ifEJ8P18YHF5tio/KfCL0gv7kugs1Q5EIgbJcfv2vmGetlpxWePAg2mu7bpNIM lGWBZ3DFtqqmJmds9k/kGP9aU54USEWEtH/9TvZt79ctnvz1vurSUDcr1FjrBpF3 /jS00gxbXlzicihO+XsUnr9ASyWFdZzJI4ilRu5aOB1S+3jweJRGjhTlOYhrPYwW HJ6vqqWIFpZFG5CWRRzpY5LttP5KRV473nST3dcyphH+LzVDJ0i0ONrgTDk7KHnI MQZy4CfCtMSu9g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:42:40 2025 by rpki-client