This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json) Hash identifier: JS8eyixRkfhdZPjMioD2aRGJKKfdkGhtSJ/GN34f5/0= Subject key identifier: C5:EF:33:05:3C:E5:7C:D3:3C:F6:0E:CF:3D:6D:B7:3A:34:18:83:13 Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Certificate serial: 019B3EDA962EE1835D710211F287C8CDFBAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:01:11 +0000 Manifest this update: Sun 21 Dec 2025 03:01:11 +0000 Manifest next update: Mon 22 Dec 2025 03:01:11 +0000 Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=) 2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: +tvD/kVE7LWbrSQFYPgN2X2Q9++QlmnFyA1ZY6kunlQ=) 3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:96:2e:e1:83:5d:71:02:11:f2:87:c8:cd:fb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8 Validity Not Before: Dec 21 03:01:11 2025 GMT Not After : Dec 22 03:01:11 2025 GMT Subject: CN=c5ef33053ce57cd33cf60ecf3d6db73a34188313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:cd:bf:4e:70:4d:18:87:44:2b:b5:4a:6f: 6f:9e:01:8c:2c:ed:b4:4e:56:cd:6b:a2:d4:e8:79: 62:09:2f:19:c2:c1:16:16:46:09:fc:c9:78:db:0e: c7:ae:fd:1e:1e:c3:85:ea:db:d2:e5:dd:de:de:48: 67:3f:28:17:88:0d:44:4f:4f:87:64:08:ce:ab:7e: bc:f2:5c:65:52:52:33:2e:41:87:d5:a6:31:1c:12: 8b:4a:51:b1:0c:40:f2:8c:96:2d:29:aa:03:92:5c: e0:b7:b5:dd:fc:aa:3d:20:7e:9a:30:09:d5:a9:f3: af:55:28:53:7a:38:07:d5:62:8d:d2:fb:31:2e:ca: ca:2e:23:7c:ea:c7:43:68:7d:f5:b9:f6:b8:6a:0c: 55:f3:d7:8a:fb:52:e9:0a:11:57:18:12:79:92:02: 28:de:9a:8d:fc:8c:e0:aa:16:ba:ad:a8:db:dd:73: 1a:89:3b:04:0e:e9:a9:e1:6f:bc:c6:62:9d:cc:59: 12:f3:22:d2:00:3d:92:43:94:74:d3:26:84:08:cd: eb:24:ca:a5:9d:9f:2d:b0:40:ce:7e:83:2b:6e:9d: 7d:2d:2d:66:e9:b6:36:ef:0f:b0:47:26:df:ad:fa: ca:8e:1e:76:73:10:24:88:e0:b7:2a:42:8b:16:84: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:33:05:3C:E5:7C:D3:3C:F6:0E:CF:3D:6D:B7:3A:34:18:83:13 X509v3 Authority Key Identifier: keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:23:a3:e9:03:35:9a:52:d5:74:f5:17:17:28:27:19:73:7b: 33:5d:8e:0d:38:85:fb:38:d5:ab:64:6e:e3:a5:d3:d8:24:94: c7:4c:ec:e7:ec:43:74:74:91:8d:23:1d:12:26:98:7e:9d:10: 57:2d:58:d0:06:68:56:00:ea:05:e4:2c:09:bb:0f:e6:88:ef: 9f:f0:a8:98:83:a5:42:c8:39:e2:68:f2:ce:59:8a:67:3c:9b: 56:ff:31:6e:87:db:b2:64:25:91:79:d6:89:ba:0c:d7:51:f6: d8:a7:24:ae:c4:cf:06:35:d7:87:ce:4a:14:6e:19:a1:4c:75: eb:87:8a:c2:9b:85:20:88:03:80:93:45:b7:96:d5:fa:3c:a9: 72:c6:93:43:74:64:67:41:2a:1a:48:24:95:87:c5:77:b6:47: 93:b0:1c:03:ea:93:9e:84:4f:d4:6b:8a:7d:31:14:4e:34:d9: ce:66:5f:ae:c6:f7:58:03:bd:0c:0e:ef:32:a8:16:9b:66:27: 64:3d:89:b1:ba:31:a0:27:5e:5a:d4:0a:76:71:cf:9f:8c:b3: be:f1:58:61:78:fa:b3:23:a5:a2:06:63:da:32:5b:8c:2d:f7: c4:eb:61:65:f0:36:b5:c7:e0:18:db:d0:32:46:1b:4b:7b:cf: b4:47:b1:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pYu4YNdcQIR8ofIzfuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy YTBmZDgwHhcNMjUxMjIxMDMwMTExWhcNMjUxMjIyMDMwMTExWjAzMTEwLwYDVQQD EyhjNWVmMzMwNTNjZTU3Y2QzM2NmNjBlY2YzZDZkYjczYTM0MTg4MzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXnNv05wTRiHRCu1Sm9vngGMLO20 TlbNa6LU6HliCS8ZwsEWFkYJ/Ml42w7Hrv0eHsOF6tvS5d3e3khnPygXiA1ET0+H ZAjOq3688lxlUlIzLkGH1aYxHBKLSlGxDEDyjJYtKaoDklzgt7Xd/Ko9IH6aMAnV qfOvVShTejgH1WKN0vsxLsrKLiN86sdDaH31ufa4agxV89eK+1LpChFXGBJ5kgIo 3pqN/Izgqha6rajb3XMaiTsEDump4W+8xmKdzFkS8yLSAD2SQ5R00yaECM3rJMql nZ8tsEDOfoMrbp19LS1m6bY27w+wRybfrfrKjh52cxAkiOC3KkKLFoRdxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXvMwU85XzTPPYOzz1ttzo0GIMTMB8GA1UdIwQY MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSOj6QM1 mlLVdPUXFygnGXN7M12ODTiF+zjVq2Ru46XT2CSUx0zs5+xDdHSRjSMdEiaYfp0Q Vy1Y0AZoVgDqBeQsCbsP5ojvn/ComIOlQsg54mjyzlmKZzybVv8xbofbsmQlkXnW iboM11H22KckrsTPBjXXh85KFG4ZoUx164eKwpuFIIgDgJNFt5bV+jypcsaTQ3Rk Z0EqGkgklYfFd7ZHk7AcA+qTnoRP1GuKfTEUTjTZzmZfrsb3WAO9DA7vMqgWm2Yn ZD2JsboxoCdeWtQKdnHPn4yzvvFYYXj6syOlogZj2jJbjC33xOthZfA2tcfgGNvQ MkYbS3vPtEex8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:15 2025 by rpki-client