This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json) Hash identifier: LhYCvVKQ0OV+sjguDwR5GTBEQn9d7uhhxht9g6MlLDw= Subject key identifier: F4:F6:7D:F1:87:06:17:89:BA:04:87:A0:8B:47:F5:7D:96:89:1B:63 Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Certificate serial: 019B31C42BCE3BC6ED1DD0BD6EBBE5A15399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 14:01:38 +0000 Manifest this update: Thu 18 Dec 2025 14:01:38 +0000 Manifest next update: Fri 19 Dec 2025 14:01:38 +0000 Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: hwYXYOq/y0B3mvzHfhbflrk+FhoGRIW6oxtoWU71gCE=) 2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:2b:ce:3b:c6:ed:1d:d0:bd:6e:bb:e5:a1:53:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Validity Not Before: Dec 18 14:01:38 2025 GMT Not After : Dec 19 14:01:38 2025 GMT Subject: CN=f4f67df187061789ba0487a08b47f57d96891b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f1:fc:e3:cd:13:7c:38:98:34:30:1d:93:fc: 1b:e9:28:b9:48:8c:35:1a:1a:1f:6d:32:35:a0:56: ce:98:1b:90:ef:72:1b:87:63:62:06:3d:20:ed:a2: c2:36:de:a9:58:a9:2f:0b:95:82:27:e3:85:10:01: a2:e1:b7:12:5b:b7:6f:97:6e:ba:de:30:ad:7f:cc: ba:3d:3d:b9:b3:89:34:7b:94:a1:fb:97:2e:c1:4c: da:0f:78:8c:fb:84:c9:c0:09:0a:f3:72:b8:5d:a9: 9e:ee:30:0e:c1:1f:2c:0f:1c:25:d5:0d:97:e1:26: ae:de:9f:48:60:34:91:24:5d:a4:c4:fe:14:fb:7f: 23:93:1b:c8:41:1b:60:5e:36:bd:a8:63:c0:ea:54: f7:27:19:7a:fe:99:f0:79:85:1c:7e:57:3a:a3:40: 8f:7d:22:0a:21:44:4c:b3:6a:77:17:ca:e2:3c:4e: ee:fe:eb:f8:0c:f8:6a:bd:e4:6a:4c:a1:97:f4:b2: 15:84:95:61:d6:3b:6e:e4:54:ba:23:22:79:79:3c: e1:4b:6e:58:c8:e9:6b:ed:15:43:b8:da:6c:6e:1c: 43:ad:52:b7:41:96:e2:cc:a2:e8:f4:a2:eb:a5:23: 8e:16:bd:d8:de:47:40:94:18:37:69:85:09:f8:68: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:7D:F1:87:06:17:89:BA:04:87:A0:8B:47:F5:7D:96:89:1B:63 X509v3 Authority Key Identifier: keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:6b:30:9f:92:2b:9c:c4:3e:0e:b9:66:30:d7:65:9f:02:79: 30:87:27:1c:85:05:3d:b8:d2:a8:5d:cb:b5:c6:92:15:9e:32: 01:21:8f:0c:30:2e:de:b8:d4:b9:11:a0:57:1e:fa:ee:c8:15: 7e:79:fb:19:88:99:a6:cf:f2:f1:31:57:9a:40:56:f3:04:2f: e9:f6:d2:5d:83:d9:18:73:6f:bd:fb:3e:52:74:c1:6d:89:26: e3:db:8e:80:ed:06:b0:7c:6e:03:72:19:2a:23:9f:f1:3e:83: 55:a0:76:8b:a9:dd:40:90:cd:ea:24:5f:7d:3e:77:78:cd:ad: 35:e7:b7:3f:5b:b1:93:3c:b2:d4:b4:a4:37:4c:56:c4:2d:e4: 6f:72:20:36:cf:3b:46:a1:c7:90:a4:58:26:be:42:0b:28:c2: 60:9c:41:7c:58:e0:7e:b4:48:3e:ed:99:7d:ea:2d:a1:73:c2: f8:a3:e7:4c:28:c6:9c:2b:46:91:15:de:94:a0:b3:16:b7:90: 52:35:66:fd:de:bf:dd:b1:bb:8d:43:9e:bb:5c:6e:3b:d8:d5: eb:f2:35:16:2b:f7:4d:93:37:c1:2d:09:33:2d:38:ed:dd:34: 0a:31:4f:bd:3a:fe:ce:e6:df:e8:53:1f:33:14:9f:2c:07:e5: 32:08:c3:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxCvOO8btHdC9brvloVOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDY5MTBjZjFlMmUyYjFjYTM0NzNjNGI3ZDA5MjAyMGU3 YjdjNjEwHhcNMjUxMjE4MTQwMTM4WhcNMjUxMjE5MTQwMTM4WjAzMTEwLwYDVQQD EyhmNGY2N2RmMTg3MDYxNzg5YmEwNDg3YTA4YjQ3ZjU3ZDk2ODkxYjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/H8480TfDiYNDAdk/wb6Si5SIw1 GhofbTI1oFbOmBuQ73Ibh2NiBj0g7aLCNt6pWKkvC5WCJ+OFEAGi4bcSW7dvl266 3jCtf8y6PT25s4k0e5Sh+5cuwUzaD3iM+4TJwAkK83K4Xame7jAOwR8sDxwl1Q2X 4Sau3p9IYDSRJF2kxP4U+38jkxvIQRtgXja9qGPA6lT3Jxl6/pnweYUcflc6o0CP fSIKIURMs2p3F8riPE7u/uv4DPhqveRqTKGX9LIVhJVh1jtu5FS6IyJ5eTzhS25Y yOlr7RVDuNpsbhxDrVK3QZbizKLo9KLrpSOOFr3Y3kdAlBg3aYUJ+GgW7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT2ffGHBheJugSHoItH9X2WiRtjMB8GA1UdIwQY MBaAFFzWkQzx4uKxyjRzxLfQkgIOe3xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQt MTcyYzYwYjNlMzZkLzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQtMTcyYzYwYjNlMzZk LzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGswn5Ir nMQ+DrlmMNdlnwJ5MIcnHIUFPbjSqF3LtcaSFZ4yASGPDDAu3rjUuRGgVx767sgV fnn7GYiZps/y8TFXmkBW8wQv6fbSXYPZGHNvvfs+UnTBbYkm49uOgO0GsHxuA3IZ KiOf8T6DVaB2i6ndQJDN6iRffT53eM2tNee3P1uxkzyy1LSkN0xWxC3kb3IgNs87 RqHHkKRYJr5CCyjCYJxBfFjgfrRIPu2ZfeotoXPC+KPnTCjGnCtGkRXelKCzFreQ UjVm/d6/3bG7jUOeu1xuO9jV6/I1Fiv3TZM3wS0JMy047d00CjFPvTr+zubf6FMf MxSfLAflMgjDGg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:24:54 2025 by rpki-client