This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json) Hash identifier: Hb0ZWk/geiNi0Z5EKget1jGtCEadEJpGzDokAx5kt68= Subject key identifier: 53:B3:5A:A0:D2:C6:0A:3B:4D:BA:95:B1:5B:F4:67:14:3B:C4:58:81 Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e Certificate serial: 019B4ADE8A91236997839C50BADB9D187168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft Manifest number: 174E Signing time: Tue 23 Dec 2025 11:00:56 +0000 Manifest this update: Tue 23 Dec 2025 11:00:56 +0000 Manifest next update: Wed 24 Dec 2025 11:00:56 +0000 Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: qGaFsf0BF56smmLbMCDfdGjsIMCc1xoRJUZSwNSVbOE=) 2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:8a:91:23:69:97:83:9c:50:ba:db:9d:18:71:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e Validity Not Before: Dec 23 11:00:56 2025 GMT Not After : Dec 24 11:00:56 2025 GMT Subject: CN=53b35aa0d2c60a3b4dba95b15bf467143bc45881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:62:63:5b:de:e3:56:28:02:25:32:d6:6e: 09:2a:42:a3:76:9e:a1:ac:fb:26:db:e8:d1:f8:9f: 42:7f:29:29:a9:ef:61:29:59:fa:e3:c7:62:0f:c4: 73:5a:11:9a:dd:d9:86:0b:5c:42:d8:6a:26:61:8c: 2d:fe:10:77:3b:35:66:d7:72:34:75:c0:0c:e3:c7: 0d:45:1c:48:70:c6:7f:e7:88:63:cc:0e:25:ef:cd: 1d:56:46:1a:52:5d:11:28:37:f0:ba:2a:fc:a8:31: 5e:b0:63:83:dc:e5:30:65:8f:54:61:04:84:53:63: e7:9a:43:e7:96:87:31:70:98:a3:36:cc:f0:e9:a8: 85:06:a8:da:42:a8:90:46:bd:3f:58:18:6c:12:f5: 68:1f:62:9d:0f:f6:02:12:91:4c:c4:62:c4:7d:03: 4a:37:60:e0:61:ff:12:e3:81:72:18:b3:a1:bb:99: 0b:02:3d:5b:ef:1a:e3:a4:d8:c9:d4:77:ae:16:d3: 54:6a:13:19:84:d7:a7:d7:2d:36:29:7c:45:1e:36: 21:80:bc:02:e6:06:b1:dd:54:57:2a:d2:6d:ea:1b: ac:65:08:b1:37:57:1e:0b:f6:94:ad:f3:45:69:c0: b4:47:af:fe:a1:06:38:2b:72:ec:02:f3:bc:3f:d5: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B3:5A:A0:D2:C6:0A:3B:4D:BA:95:B1:5B:F4:67:14:3B:C4:58:81 X509v3 Authority Key Identifier: keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d2:b1:d5:49:85:d4:dd:92:16:6a:1d:f0:0c:8f:c3:44:98: 88:ad:11:dc:b2:b1:55:a5:ee:22:71:e0:77:00:95:80:3f:01: 87:bd:e7:cd:66:79:51:7e:9c:26:5f:f4:7b:85:00:78:35:c3: f5:f5:1a:45:c6:47:8c:be:af:2c:b6:ec:ab:e9:71:5f:7b:36: 9b:b9:5c:04:46:43:e0:4c:79:0a:d6:0c:e9:10:aa:ff:91:2c: 7e:e5:93:dc:e8:6d:90:7f:74:03:ff:14:7e:47:70:d2:2b:02: 31:d9:f7:0c:4d:ab:a6:6a:a8:ac:49:4e:5d:37:c8:4a:ae:2a: 6f:6f:2f:93:bb:9c:9f:1c:e8:a7:4f:35:08:6f:f2:e1:d7:8d: d7:9f:2b:b7:fb:ac:5b:dc:cd:35:48:2c:92:82:a6:cb:cc:f1: 64:f6:54:9f:8e:9c:a4:ea:62:c4:ef:12:3d:77:f6:a0:6b:bc: cc:55:5b:3f:39:84:4a:46:a8:33:b0:5d:1c:db:e0:43:df:22: e3:45:1c:f9:b5:e8:50:1d:b0:a8:00:f0:8c:81:c9:a4:8e:89: e8:ef:e9:58:bd:49:56:cb:8b:60:f3:a6:07:1e:01:72:35:f4: 1b:f8:cf:d1:c6:ba:74:9d:74:40:31:4a:6c:db:73:8f:1e:a1: f8:40:3c:fe -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtK3oqRI2mXg5xQutudGHFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl MjQyM2UwHhcNMjUxMjIzMTEwMDU2WhcNMjUxMjI0MTEwMDU2WjAzMTEwLwYDVQQD Eyg1M2IzNWFhMGQyYzYwYTNiNGRiYTk1YjE1YmY0NjcxNDNiYzQ1ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTJiY1ve41YoAiUy1m4JKkKjdp6h rPsm2+jR+J9Cfykpqe9hKVn648diD8RzWhGa3dmGC1xC2GomYYwt/hB3OzVm13I0 dcAM48cNRRxIcMZ/54hjzA4l780dVkYaUl0RKDfwuir8qDFesGOD3OUwZY9UYQSE U2PnmkPnlocxcJijNszw6aiFBqjaQqiQRr0/WBhsEvVoH2KdD/YCEpFMxGLEfQNK N2DgYf8S44FyGLOhu5kLAj1b7xrjpNjJ1HeuFtNUahMZhNen1y02KXxFHjYhgLwC 5gax3VRXKtJt6husZQixN1ceC/aUrfNFacC0R6/+oQY4K3LsAvO8P9VCqQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFOzWqDSxgo7TbqVsVv0ZxQ7xFiBMB8GA1UdIwQY MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9Kx 1UmF1N2SFmod8AyPw0SYiK0R3LKxVaXuInHgdwCVgD8Bh73nzWZ5UX6cJl/0e4UA eDXD9fUaRcZHjL6vLLbsq+lxX3s2m7lcBEZD4Ex5CtYM6RCq/5EsfuWT3OhtkH90 A/8Ufkdw0isCMdn3DE2rpmqorElOXTfISq4qb28vk7ucnxzop081CG/y4deN158r t/usW9zNNUgskoKmy8zxZPZUn46cpOpixO8SPXf2oGu8zFVbPzmESkaoM7BdHNvg Q98i40Uc+bXoUB2wqADwjIHJpI6J6O/pWL1JVsuLYPOmBx4BcjX0G/jP0ca6dJ10 QDFKbNtzjx6h+EA8/g== -----END CERTIFICATE-----Generated at Tue Dec 23 20:51:39 2025 by rpki-client