This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json) Hash identifier: 2BaX87iVkNRlD/1uQvhIBNlS1Jfmyv5Ero4THdTAqXY= Subject key identifier: 21:48:61:24:86:DE:3A:3F:4C:DC:C5:1F:98:87:E6:30:2A:6F:D9:71 Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425 Certificate serial: 019B3E6DCFA59D93273667DEB79B4FFE0161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft Manifest number: 0C92 Signing time: Sun 21 Dec 2025 01:02:22 +0000 Manifest this update: Sun 21 Dec 2025 01:02:22 +0000 Manifest next update: Mon 22 Dec 2025 01:02:22 +0000 Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: 6GI9xLYNHX97LPCXq0fkyWF3aC4FbLz6Jz3aEdE3DUs=) 2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:cf:a5:9d:93:27:36:67:de:b7:9b:4f:fe:01:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425 Validity Not Before: Dec 21 01:02:22 2025 GMT Not After : Dec 22 01:02:22 2025 GMT Subject: CN=2148612486de3a3f4cdcc51f9887e6302a6fd971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:91:86:75:0b:37:0c:d8:38:36:70:97:52: 31:04:b1:d0:05:cf:3a:b2:d2:9e:d1:6b:a9:c6:35: 60:c2:4b:c0:ac:99:74:d1:df:4e:83:13:01:20:d5: 2f:90:da:22:31:15:f5:4c:4c:56:4b:75:7d:ee:ed: 4b:59:54:ca:bd:9a:2a:d2:41:6c:fb:50:62:a3:77: 63:97:7b:69:b7:94:90:08:b7:f4:4a:87:e4:a3:5e: c1:62:9e:02:54:2c:88:53:14:13:bb:51:54:3d:ce: 11:d6:06:c2:5d:69:39:97:a4:06:61:10:eb:29:4c: 57:83:33:d7:70:67:98:1a:bb:e9:ed:a3:f9:03:b8: 7e:fd:22:7e:e5:af:98:80:29:5d:05:b2:1b:79:e9: ac:68:fb:ab:dd:bb:57:3e:b7:d6:35:2a:90:d3:ec: cd:96:43:4d:cb:68:1e:ca:b5:be:58:75:5b:80:b0: 66:b4:cf:1c:ce:24:0e:10:ef:30:40:92:0e:c5:23: 4a:69:10:e0:b0:c7:d6:6d:4c:64:12:9f:2d:61:9e: ff:fc:07:84:af:42:5d:03:bf:dd:f7:de:de:61:bd: e7:5a:d5:58:47:92:b1:db:75:e4:10:37:ec:a0:5b: ee:cb:b8:82:c5:e1:72:91:f6:62:50:5a:a0:26:95: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:48:61:24:86:DE:3A:3F:4C:DC:C5:1F:98:87:E6:30:2A:6F:D9:71 X509v3 Authority Key Identifier: keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f4:50:de:49:ba:30:5a:64:f3:55:d2:1b:5b:dc:99:87:44: 54:54:fd:c7:b5:32:21:cf:79:e6:ba:4a:ab:cc:be:6d:ad:50: e5:32:5f:a7:df:d3:01:5f:8f:b7:64:ea:c5:06:2a:e1:e0:5f: dd:cf:85:8e:b6:32:50:7a:64:88:24:dc:12:bc:d0:b7:70:fa: b8:41:8a:7a:a7:64:20:61:f0:7d:8f:74:1c:f9:f6:0f:fd:04: ee:4d:00:6b:d5:b9:57:7a:28:58:77:a2:ca:24:2d:c9:a7:87: e9:9a:11:5e:55:5d:6a:33:32:c3:db:ce:fc:eb:1c:a2:c1:b1: 4e:8c:9e:0e:c4:8c:40:0b:41:b1:2a:21:45:2d:52:c5:59:e5: cd:53:94:4e:3f:da:bd:e4:a8:cf:e6:a6:b2:64:d2:9b:54:ca: 60:e6:98:27:43:09:06:0e:89:d0:50:d3:73:d8:d6:23:11:f8: b9:96:79:2c:d1:57:fe:3d:93:29:50:c8:9b:d4:88:98:ba:0c: f9:d2:52:e6:21:b3:14:a9:1a:a8:84:43:31:42:5d:4d:ad:64: d3:bb:e8:7a:ba:af:ad:56:70:d5:7a:2e:6c:07:2d:1a:f8:21: 25:f5:8d:3a:5a:bb:45:0a:44:51:24:77:6c:97:bc:ce:02:f2: 33:90:01:89 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs+bc+lnZMnNmfet5tP/gFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzA4Nzc5ODViMGM1Y2Y2OTE2N2M5MWU4Mzc0MjRjNDdk OWE0MjUwHhcNMjUxMjIxMDEwMjIyWhcNMjUxMjIyMDEwMjIyWjAzMTEwLwYDVQQD EygyMTQ4NjEyNDg2ZGUzYTNmNGNkY2M1MWY5ODg3ZTYzMDJhNmZkOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybqRhnULNwzYODZwl1IxBLHQBc86 stKe0WupxjVgwkvArJl00d9OgxMBINUvkNoiMRX1TExWS3V97u1LWVTKvZoq0kFs +1Bio3djl3tpt5SQCLf0Sofko17BYp4CVCyIUxQTu1FUPc4R1gbCXWk5l6QGYRDr KUxXgzPXcGeYGrvp7aP5A7h+/SJ+5a+YgCldBbIbeemsaPur3btXPrfWNSqQ0+zN lkNNy2geyrW+WHVbgLBmtM8cziQOEO8wQJIOxSNKaRDgsMfWbUxkEp8tYZ7//AeE r0JdA7/d997eYb3nWtVYR5Kx23XkEDfsoFvuy7iCxeFykfZiUFqgJpXh3QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCFIYSSG3jo/TNzFH5iH5jAqb9lxMB8GA1UdIwQY MBaAFPlwh3mFsMXPaRZ8keg3QkxH2aQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQ0hlWVd3eGM5cEZueVI2RGRDVEVmWnBDVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvZDlkYjk4LTQwMTAtNDMyOC04NDQ1 LWVlY2ZlN2ZjZjFjMC8xLzEtWENIZVlXd3hjOXBGbnlSNkRkQ1RFZlpwQ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y0L2Q5ZGI5OC00MDEwLTQzMjgtODQ0NS1lZWNmZTdmY2Yx YzAvMS8xLVhDSGVZV3d4YzlwRm55UjZEZENURWZacENVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfRQ 3km6MFpk81XSG1vcmYdEVFT9x7UyIc955rpKq8y+ba1Q5TJfp9/TAV+Pt2TqxQYq 4eBf3c+FjrYyUHpkiCTcErzQt3D6uEGKeqdkIGHwfY90HPn2D/0E7k0Aa9W5V3oo WHeiyiQtyaeH6ZoRXlVdajMyw9vO/OscosGxToyeDsSMQAtBsSohRS1SxVnlzVOU Tj/aveSoz+amsmTSm1TKYOaYJ0MJBg6J0FDTc9jWIxH4uZZ5LNFX/j2TKVDIm9SI mLoM+dJS5iGzFKkaqIRDMUJdTa1k07voerqvrVZw1XoubActGvghJfWNOlq7RQpE USR3bJe8zgLyM5ABiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:40 2025 by rpki-client