This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json) Hash identifier: IAHLVvTEIrUd5zcddxtA9UAVehQGgb/GN8KZzzzGxmA= Subject key identifier: D0:E9:34:DA:F9:58:24:B6:C5:C4:1C:8B:5F:18:E0:16:9B:5A:5B:9E Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9 Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9 Certificate serial: 019B582CC9E8444C9B113E231C30F75AA22C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 01:01:28 +0000 Manifest this update: Fri 26 Dec 2025 01:01:28 +0000 Manifest next update: Sat 27 Dec 2025 01:01:28 +0000 Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: X7SSW/74DLNlu9hrihLYjkehfBiy/BN6GkRfkdBp1II=) 2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:2c:c9:e8:44:4c:9b:11:3e:23:1c:30:f7:5a:a2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9 Validity Not Before: Dec 26 01:01:28 2025 GMT Not After : Dec 27 01:01:28 2025 GMT Subject: CN=d0e934daf95824b6c5c41c8b5f18e0169b5a5b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:02:11:26:a1:6d:f1:ad:aa:98:dc:73:44: 9e:b7:f9:98:42:d4:2c:df:f7:79:00:31:21:7f:50: 60:cc:72:59:17:4b:63:d7:77:05:1a:4b:74:74:ad: 9b:c0:c5:eb:64:6e:dd:e2:c6:07:6e:c7:25:f1:3f: ab:25:88:2a:23:31:f7:fa:bd:1b:6c:cd:f6:4f:d3: 34:b3:9d:2b:78:47:88:ad:f6:40:06:ce:d2:4a:07: 1d:ee:66:95:e2:9b:5d:bf:42:2f:86:e0:d8:a8:e5: 5a:68:84:20:60:2c:e5:ab:df:19:24:0e:6a:33:50: 1e:58:5f:a5:04:34:a0:f0:38:0a:d9:cc:92:7e:b1: ad:5e:28:c4:6c:b3:04:6b:fd:26:cb:bc:2b:52:a8: 9e:2d:16:b7:67:c7:65:89:38:19:dd:d8:a0:1c:3d: ec:87:2c:5d:59:04:af:d6:c0:de:4a:c8:09:34:94: 06:8c:3f:ae:e8:ae:39:08:37:f2:85:72:32:a2:6e: 3f:fb:83:df:52:41:23:6a:31:b8:2f:67:3a:d5:82: 7e:9b:bb:dc:88:6f:ec:d0:0b:d3:64:86:3d:4e:16: d6:1e:1b:01:6d:f3:d7:4a:e4:04:fd:11:4a:ac:4c: d5:7e:67:dd:1e:f0:60:5c:45:2b:8e:3a:47:dc:fc: c8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E9:34:DA:F9:58:24:B6:C5:C4:1C:8B:5F:18:E0:16:9B:5A:5B:9E X509v3 Authority Key Identifier: keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5e:95:32:74:4f:be:66:ff:a6:aa:b9:e1:fc:79:6b:95:8d: 22:91:d0:27:e0:47:87:df:6a:7b:aa:19:60:53:a1:a7:a0:fa: 74:45:ae:ed:34:92:8b:e1:48:3f:ff:ca:d6:d6:fe:a0:7a:af: 80:89:bc:8d:9d:96:dd:7e:d2:2d:f6:bb:c9:95:2b:d2:a2:4d: a2:eb:23:9c:77:ab:5e:c8:e3:b1:2d:3e:14:f8:d9:65:f5:fc: ff:cd:31:b2:15:4a:29:d4:a6:93:e4:31:f0:f0:35:0e:ae:49: 68:bd:db:57:3b:4c:ae:cd:a6:e0:12:d7:2d:95:2b:fd:86:9d: 97:11:46:64:04:99:a3:3b:73:20:e0:b1:5a:c3:44:df:b8:b5: a3:1c:b3:27:d7:16:36:db:01:2c:ae:de:49:e8:f7:e8:41:49: 68:08:c1:e6:07:e4:af:45:17:c2:f6:25:5a:2e:7e:f3:17:ed: 1a:8c:4c:69:b6:92:7c:87:b3:58:d4:f6:39:5e:73:7e:e6:06: f6:53:0a:c9:04:cc:c6:b0:2e:9e:b2:cb:bc:8a:92:41:11:bb: a3:c0:66:97:c8:11:91:28:ef:73:60:c6:38:be:07:23:6b:d5: 4b:27:ae:b4:76:f5:c9:93:e2:7b:ce:01:93:47:76:5e:ca:c7: 5a:3f:31:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYLMnoREybET4jHDD3WqIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1Nzc3NTc5Y2M2Nzc4NDQ1NGJjZDkxYTA2YmQ2OTM1YWFl ZjczZjkwHhcNMjUxMjI2MDEwMTI4WhcNMjUxMjI3MDEwMTI4WjAzMTEwLwYDVQQD EyhkMGU5MzRkYWY5NTgyNGI2YzVjNDFjOGI1ZjE4ZTAxNjliNWE1YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZECESahbfGtqpjcc0Set/mYQtQs 3/d5ADEhf1BgzHJZF0tj13cFGkt0dK2bwMXrZG7d4sYHbscl8T+rJYgqIzH3+r0b bM32T9M0s50reEeIrfZABs7SSgcd7maV4ptdv0IvhuDYqOVaaIQgYCzlq98ZJA5q M1AeWF+lBDSg8DgK2cySfrGtXijEbLMEa/0my7wrUqieLRa3Z8dliTgZ3digHD3s hyxdWQSv1sDeSsgJNJQGjD+u6K45CDfyhXIyom4/+4PfUkEjajG4L2c61YJ+m7vc iG/s0AvTZIY9ThbWHhsBbfPXSuQE/RFKrEzVfmfdHvBgXEUrjjpH3PzI9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDpNNr5WCS2xcQci18Y4BabWlueMB8GA1UdIwQY MBaAFNV3dXnMZ3hEVLzZGga9aTWq73P5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYt ODBhMmI2OGMzODMyLzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81MmZiODYtZWQ3OC00ODUwLWI0MDYtODBhMmI2OGMzODMy LzEvMVhkMWVjeG5lRVJVdk5rYUJyMXBOYXJ2Y19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl6VMnRP vmb/pqq54fx5a5WNIpHQJ+BHh99qe6oZYFOhp6D6dEWu7TSSi+FIP//K1tb+oHqv gIm8jZ2W3X7SLfa7yZUr0qJNousjnHerXsjjsS0+FPjZZfX8/80xshVKKdSmk+Qx 8PA1Dq5JaL3bVztMrs2m4BLXLZUr/YadlxFGZASZoztzIOCxWsNE37i1oxyzJ9cW NtsBLK7eSej36EFJaAjB5gfkr0UXwvYlWi5+8xftGoxMabaSfIezWNT2OV5zfuYG 9lMKyQTMxrAunrLLvIqSQRG7o8Bml8gRkSjvc2DGOL4HI2vVSyeutHb1yZPie84B k0d2XsrHWj8x3Q== -----END CERTIFICATE-----Generated at Fri Dec 26 06:36:28 2025 by rpki-client