This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json) Hash identifier: ZlDCznkpqK4KuWNPAIjc2he9po2fyCtYeAv+Gdc+h2Q= Subject key identifier: 0A:E8:EB:3B:87:AF:86:C8:34:A7:9F:CC:CA:5A:30:14:C7:8A:AC:14 Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Certificate serial: 019AF352C51E7EE00725B8A3EA38402FFD9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft Manifest number: 0CD6 Signing time: Sat 06 Dec 2025 11:01:19 +0000 Manifest this update: Sat 06 Dec 2025 11:01:19 +0000 Manifest next update: Sun 07 Dec 2025 11:01:19 +0000 Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=) 2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: gfehVi486XTbMOilPoxZFIykDSdFHDlVIpnL0XsqjQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c5:1e:7e:e0:07:25:b8:a3:ea:38:40:2f:fd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Validity Not Before: Dec 6 11:01:19 2025 GMT Not After : Dec 7 11:01:19 2025 GMT Subject: CN=0ae8eb3b87af86c834a79fccca5a3014c78aac14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:f6:c9:6b:a4:23:c6:17:1b:32:8b:64:36: 4b:8c:12:ec:bb:e9:a3:54:40:f6:c7:a1:74:e9:b2: 48:c9:7c:97:4a:8a:3f:54:a0:c9:a2:6e:b7:72:d9: 7b:70:6a:5f:2f:5d:da:e2:b1:d2:e9:87:16:48:e0: 1c:63:1e:7f:30:68:e0:6b:bc:d3:01:5e:9c:0c:82: e5:d4:bb:df:bd:67:09:db:72:07:51:b9:52:a8:ae: 9e:85:92:be:45:b5:ed:3f:a7:ec:1d:4f:17:e5:d5: b5:7c:45:a8:fa:76:c7:fe:e0:34:86:4a:c9:09:a9: d9:ab:28:44:52:9f:9d:ec:97:1c:37:4a:ec:68:0e: d4:62:2e:6f:c8:ff:cc:a2:96:16:42:99:b7:20:59: 82:4c:c4:f2:b5:a3:8f:fc:e4:4e:1a:b1:e9:82:84: 70:4d:cc:d8:44:7d:e9:ff:05:17:93:a3:e6:fc:b1: 12:4a:3f:d7:94:90:f0:fb:35:77:61:2e:c5:af:76: 55:d2:21:cf:8d:8f:1e:31:57:16:82:6b:1f:5f:b2: 56:bf:62:c6:0d:4e:c2:52:68:72:0e:a0:0b:43:52: 3f:c8:22:e3:93:29:d3:31:84:72:b2:66:c8:2a:2c: 1a:36:8e:00:25:18:18:ec:aa:40:a6:a4:14:50:8d: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E8:EB:3B:87:AF:86:C8:34:A7:9F:CC:CA:5A:30:14:C7:8A:AC:14 X509v3 Authority Key Identifier: keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:42:dc:4b:fe:ea:b6:4d:f6:4f:9a:d5:83:f1:28:10:5c:92: 0a:92:cf:28:5f:fd:51:43:29:be:b2:85:99:b5:03:50:0f:99: 0f:05:83:51:13:ac:07:3d:95:bb:64:24:c9:1b:0d:5e:fc:2f: 1f:4b:8b:13:1a:b2:3a:5a:7c:53:bf:5b:d1:7c:c8:4b:7f:28: 86:f6:b6:01:bf:75:0a:c4:f6:c8:02:f8:c8:5e:22:74:6e:7b: b4:02:09:b7:45:5c:78:34:c8:0d:8d:e0:d3:9e:84:04:41:86: 41:f5:9e:17:88:74:d6:e9:0e:d8:78:8c:28:54:e5:ab:a9:24: fb:21:ae:2f:3c:4b:ed:80:fc:98:0c:71:dd:08:06:70:64:4e: 70:7c:f3:e0:8d:91:6b:b1:00:56:3c:3e:45:12:e2:10:22:dc: c8:41:4a:5f:12:e3:94:d4:b3:64:4a:8d:81:ac:2a:2c:31:90: df:b4:df:f1:b1:e9:05:f2:fa:06:52:a3:f5:85:58:76:0d:b7: 48:79:e3:87:da:a0:de:a7:7c:e2:ba:d0:5e:d7:d6:dd:09:20: c9:02:28:4f:61:e5:1a:29:86:c6:ce:e9:24:2b:95:d3:47:6b: 09:06:4d:79:01:60:2f:f4:9a:5f:52:7d:b0:a7:ff:be:1f:d6: 5e:c7:fe:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsUefuAHJbij6jhAL/2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2 OWJkZGYwHhcNMjUxMjA2MTEwMTE5WhcNMjUxMjA3MTEwMTE5WjAzMTEwLwYDVQQD EygwYWU4ZWIzYjg3YWY4NmM4MzRhNzlmY2NjYTVhMzAxNGM3OGFhYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvf2yWukI8YXGzKLZDZLjBLsu+mj VED2x6F06bJIyXyXSoo/VKDJom63ctl7cGpfL13a4rHS6YcWSOAcYx5/MGjga7zT AV6cDILl1LvfvWcJ23IHUblSqK6ehZK+RbXtP6fsHU8X5dW1fEWo+nbH/uA0hkrJ CanZqyhEUp+d7JccN0rsaA7UYi5vyP/MopYWQpm3IFmCTMTytaOP/OROGrHpgoRw TczYRH3p/wUXk6Pm/LESSj/XlJDw+zV3YS7Fr3ZV0iHPjY8eMVcWgmsfX7JWv2LG DU7CUmhyDqALQ1I/yCLjkynTMYRysmbIKiwaNo4AJRgY7KpApqQUUI3gNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAro6zuHr4bINKefzMpaMBTHiqwUMB8GA1UdIwQY MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt OTBjMTdlYjc1MWY0LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0 LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApULcS/7q tk32T5rVg/EoEFySCpLPKF/9UUMpvrKFmbUDUA+ZDwWDUROsBz2Vu2QkyRsNXvwv H0uLExqyOlp8U79b0XzIS38ohva2Ab91CsT2yAL4yF4idG57tAIJt0VceDTIDY3g 056EBEGGQfWeF4h01ukO2HiMKFTlq6kk+yGuLzxL7YD8mAxx3QgGcGROcHzz4I2R a7EAVjw+RRLiECLcyEFKXxLjlNSzZEqNgawqLDGQ37Tf8bHpBfL6BlKj9YVYdg23 SHnjh9qg3qd84rrQXtfW3QkgyQIoT2HlGimGxs7pJCuV00drCQZNeQFgL/SaX1J9 sKf/vh/WXsf+Kg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:18 2025 by rpki-client