This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json) Hash identifier: N2MCALjAUDr89HDD6TYK5UxbW7LcWHoqj0qP/55rGfs= Subject key identifier: 01:77:48:DC:A8:CC:EF:E3:6B:51:CC:28:23:7D:01:F3:F7:9B:6C:7A Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d Certificate serial: 019B71B5068B80928F39E5241672DAB8CC95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft Manifest number: 17A2 Signing time: Wed 31 Dec 2025 00:00:47 +0000 Manifest this update: Wed 31 Dec 2025 00:00:47 +0000 Manifest next update: Thu 01 Jan 2026 00:00:47 +0000 Files and hashes: 1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=) 2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: eOhHcYcJDx3xN+gPT1m+2mCrZAjZaIIslHbhSxxUSqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:06:8b:80:92:8f:39:e5:24:16:72:da:b8:cc:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d Validity Not Before: Dec 31 00:00:47 2025 GMT Not After : Jan 1 00:00:47 2026 GMT Subject: CN=017748dca8ccefe36b51cc28237d01f3f79b6c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:58:ef:3e:b0:44:3d:a1:79:2e:b0:e3:cf: 1a:4e:e3:52:11:46:d0:f2:ef:28:33:0a:6a:94:54: 30:75:f0:8b:3e:50:44:fd:2d:92:48:11:d4:54:07: 0e:3e:20:f3:a8:54:19:a1:68:47:c0:65:e4:0a:20: 34:58:8e:c1:ce:19:31:8d:02:12:45:95:e4:04:6a: 1d:e3:05:c2:df:3a:e1:e8:67:54:8e:25:ab:2a:f6: 45:a3:00:75:e9:e7:72:39:36:0a:ea:45:4e:0d:0b: 15:fa:b1:c6:45:d4:6f:74:30:2f:22:3b:3c:0b:dd: 1c:ae:01:06:bf:e9:4d:02:94:66:03:4f:9c:c0:ae: 44:7c:9b:88:64:9c:a2:21:0e:de:c1:4b:d9:8a:84: 34:e7:43:92:f1:12:05:1f:92:ba:bb:ec:b0:e6:bd: 0a:74:e3:c7:86:65:65:a2:09:e3:a1:b6:06:e4:53: 5c:0f:f0:e3:9c:6e:c0:e3:51:ff:1c:2b:07:2b:f8: ea:7e:87:f8:55:7a:cc:9d:3e:66:39:08:c0:68:ac: 28:d6:a0:9b:64:aa:d1:b7:e3:db:9f:c4:b4:79:7c: b5:59:26:68:79:ee:98:75:06:f6:8e:e4:bb:d5:ee: 83:3a:0c:11:fb:91:89:bb:aa:92:ec:16:c0:8a:38: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:77:48:DC:A8:CC:EF:E3:6B:51:CC:28:23:7D:01:F3:F7:9B:6C:7A X509v3 Authority Key Identifier: keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:71:da:52:9c:dc:11:00:ce:0a:55:52:3a:2f:66:86:83:79: fd:0b:5b:1e:f1:7e:ac:49:f6:62:f0:fb:ca:6b:51:01:56:95: 07:5f:c5:a2:7f:47:98:2d:37:c1:41:67:42:a1:e8:e8:80:62: 21:e5:48:b8:3e:e3:01:50:20:2f:91:4c:6b:ef:25:9f:cc:61: 95:b5:aa:43:15:63:a4:5c:4d:1c:42:c8:48:56:91:c1:3c:40: 14:12:70:32:90:44:5f:b8:e6:74:a8:04:93:9d:33:be:d3:e7: 7e:66:ed:5a:ea:7d:05:b1:af:eb:ed:c5:d5:d6:46:b9:18:1c: ef:d1:02:04:04:b9:f2:21:23:0b:34:88:92:ba:80:5f:a5:07: 13:63:43:0a:28:41:1d:e0:b8:d5:e4:ea:6e:28:c2:cd:fa:b2: 09:1a:f3:ce:bf:45:0e:7a:f6:5c:41:d2:29:e3:e2:68:3c:a0: 21:ed:9e:96:16:5d:2e:62:a7:eb:00:1f:73:23:d8:8e:e4:b1: 6f:3d:c5:47:7a:28:e4:5c:07:43:3a:4a:00:4d:8b:a7:7e:c7: 5a:d0:49:cf:7f:1e:4f:ce:79:e7:8b:cf:b9:89:1f:c7:b0:68: 0d:52:4e:24:5b:87:e4:21:02:8b:74:ec:be:d8:54:33:70:0b: 5f:36:f3:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtQaLgJKPOeUkFnLauMyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzBkOTUwNDYzMzFiZGNlMzAxOGI3ZmZlMGYxM2RiZjlm YzcxOGQwHhcNMjUxMjMxMDAwMDQ3WhcNMjYwMTAxMDAwMDQ3WjAzMTEwLwYDVQQD EygwMTc3NDhkY2E4Y2NlZmUzNmI1MWNjMjgyMzdkMDFmM2Y3OWI2YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW1Y7z6wRD2heS6w488aTuNSEUbQ 8u8oMwpqlFQwdfCLPlBE/S2SSBHUVAcOPiDzqFQZoWhHwGXkCiA0WI7BzhkxjQIS RZXkBGod4wXC3zrh6GdUjiWrKvZFowB16edyOTYK6kVODQsV+rHGRdRvdDAvIjs8 C90crgEGv+lNApRmA0+cwK5EfJuIZJyiIQ7ewUvZioQ050OS8RIFH5K6u+yw5r0K dOPHhmVlognjobYG5FNcD/DjnG7A41H/HCsHK/jqfof4VXrMnT5mOQjAaKwo1qCb ZKrRt+Pbn8S0eXy1WSZoee6YdQb2juS71e6DOgwR+5GJu6qS7BbAijhCJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF3SNyozO/ja1HMKCN9AfP3m2x6MB8GA1UdIwQY MBaAFFww2VBGMxvc4wGLf/4PE9v5/HGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUt MDc1MDkxOTFmOTUzLzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OTgzYWYtNWMxOC00YmM4LWEzZjUtMDc1MDkxOTFmOTUz LzEvWEREWlVFWXpHOXpqQVl0X19nOFQyX244Y1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXHaUpzc EQDOClVSOi9mhoN5/QtbHvF+rEn2YvD7ymtRAVaVB1/Fon9HmC03wUFnQqHo6IBi IeVIuD7jAVAgL5FMa+8ln8xhlbWqQxVjpFxNHELISFaRwTxAFBJwMpBEX7jmdKgE k50zvtPnfmbtWup9BbGv6+3F1dZGuRgc79ECBAS58iEjCzSIkrqAX6UHE2NDCihB HeC41eTqbijCzfqyCRrzzr9FDnr2XEHSKePiaDygIe2elhZdLmKn6wAfcyPYjuSx bz3FR3oo5FwHQzpKAE2Lp37HWtBJz38eT85554vPuYkfx7BoDVJOJFuH5CECi3Ts vthUM3ALXzbz6w== -----END CERTIFICATE-----Generated at Wed Dec 31 05:57:04 2025 by rpki-client