This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json) Hash identifier: TwnmBjaSrurei0PtgkrzeNvaByVb3YJsbVU49/4/eQs= Subject key identifier: 30:82:26:6D:A8:E0:46:7F:73:CE:64:29:E4:16:35:0E:1F:18:75:B9 Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c Certificate serial: 019AF12E4B4F415C67B4EAED66CC0A1F79D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft Manifest number: 04C3 Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: bYIINNBKhXjDh1pF3KKSMwvKxIpDjDWQL++1IL1qfCs=) 2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4b:4f:41:5c:67:b4:ea:ed:66:cc:0a:1f:79:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=3082266da8e0467f73ce6429e416350e1f1875b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:87:03:09:7f:30:df:0a:f7:c3:cd:37:bf: f7:11:71:90:2f:c1:89:5f:84:e8:14:6e:f7:41:24: 21:ed:61:c2:3c:5e:f6:21:0c:34:09:e5:26:87:9f: 9f:b6:a0:7a:e4:9d:97:90:ce:38:87:bc:88:9e:2e: e1:ee:08:71:93:58:a1:e1:bd:cc:6a:b4:70:9d:a1: 25:71:86:a1:32:2e:25:4b:e4:06:a8:b4:a2:6d:6e: 8a:5f:85:82:1d:e7:a3:8d:ed:67:a3:f3:0f:8c:3d: b8:07:8f:6f:0e:ad:25:8d:aa:f0:e4:04:d1:9f:8f: cd:3d:96:70:70:ca:3f:7e:ef:16:56:dc:ac:2c:d2: 37:41:c2:6d:34:7e:3e:d9:a9:40:3c:11:68:02:e5: 82:3a:ef:be:1d:8b:af:fd:57:f9:6e:e6:ce:d7:3d: aa:55:10:02:92:4e:94:bd:fe:be:ea:a1:62:6f:3a: 07:86:40:c3:4c:c9:45:6e:05:84:0c:6d:dd:d5:57: 20:38:70:20:f7:08:13:cb:ce:2f:d7:72:07:61:b6: 8a:92:8d:6a:28:41:41:37:64:89:b9:f2:5a:30:99: ef:78:19:e3:f6:a8:c4:8c:d3:a1:a5:9b:3a:a2:f7: 09:70:b4:0f:61:db:c7:dc:35:f3:1d:c4:b8:66:65: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:82:26:6D:A8:E0:46:7F:73:CE:64:29:E4:16:35:0E:1F:18:75:B9 X509v3 Authority Key Identifier: keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f9:72:8c:05:53:88:38:b6:a9:f9:f2:5a:19:59:29:4a:b9: 0c:1e:3d:58:6c:33:8a:3e:dc:38:29:de:4e:7c:39:7d:c0:a9: 6a:c5:e9:31:26:d1:a6:73:5e:b3:04:a5:fc:9e:da:49:b0:a2: 47:b2:2f:76:4e:ef:61:ce:55:23:af:8c:f2:65:96:5c:1f:ae: 46:44:7a:21:cc:77:b3:b7:80:13:e8:2f:08:c9:76:19:68:44: 09:f8:59:71:48:a6:03:a1:e9:23:68:e3:96:08:69:54:3a:4b: 54:7d:fb:34:f8:43:7a:8b:78:a5:2b:5d:fc:61:da:38:24:82: a0:1f:8c:89:17:b9:af:93:a1:3d:9a:5c:1e:41:86:fe:5a:7f: 07:71:a5:45:5f:7b:d8:b0:48:0d:f0:e5:47:86:30:0c:5b:0d: aa:dd:e5:bb:33:a7:3d:12:fa:4b:56:33:0b:76:19:bc:de:bd: f2:17:40:35:66:ab:25:03:de:64:ac:60:54:bc:a6:9b:bd:1c: aa:75:ae:fe:a9:dd:a7:be:ce:f0:5d:f4:0c:15:19:07:44:74: e8:39:0b:7b:00:5a:15:05:48:2b:21:c4:99:75:fc:84:8e:6b: 5b:ae:d8:65:32:ed:6c:b4:98:a5:56:fa:36:90:c1:a6:84:e2: a1:02:ea:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLktPQVxntOrtZswKH3nZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi YmM0OWMwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EygzMDgyMjY2ZGE4ZTA0NjdmNzNjZTY0MjllNDE2MzUwZTFmMTg3NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz+HAwl/MN8K98PNN7/3EXGQL8GJ X4ToFG73QSQh7WHCPF72IQw0CeUmh5+ftqB65J2XkM44h7yIni7h7ghxk1ih4b3M arRwnaElcYahMi4lS+QGqLSibW6KX4WCHeejje1no/MPjD24B49vDq0ljarw5ATR n4/NPZZwcMo/fu8WVtysLNI3QcJtNH4+2alAPBFoAuWCOu++HYuv/Vf5bubO1z2q VRACkk6Uvf6+6qFibzoHhkDDTMlFbgWEDG3d1VcgOHAg9wgTy84v13IHYbaKko1q KEFBN2SJufJaMJnveBnj9qjEjNOhpZs6ovcJcLQPYdvH3DXzHcS4ZmViFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCCJm2o4EZ/c85kKeQWNQ4fGHW5MB8GA1UdIwQY MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt YzIzZjczMTM2MmNlLzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPlyjAVT iDi2qfnyWhlZKUq5DB49WGwzij7cOCneTnw5fcCpasXpMSbRpnNeswSl/J7aSbCi R7Ivdk7vYc5VI6+M8mWWXB+uRkR6Icx3s7eAE+gvCMl2GWhECfhZcUimA6HpI2jj lghpVDpLVH37NPhDeot4pStd/GHaOCSCoB+MiRe5r5OhPZpcHkGG/lp/B3GlRV97 2LBIDfDlR4YwDFsNqt3luzOnPRL6S1YzC3YZvN698hdANWarJQPeZKxgVLymm70c qnWu/qndp77O8F30DBUZB0R06DkLewBaFQVIKyHEmXX8hI5rW67YZTLtbLSYpVb6 NpDBpoTioQLqIA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:12 2025 by rpki-client