This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json) Hash identifier: lkcJ1jUUGaeYt/w7+yhsa4VgcZDx7UivqKOrU8lqQLU= Subject key identifier: D5:16:56:A5:D4:8E:A2:3F:68:5C:62:69:5A:40:87:9A:AA:51:4B:34 Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Certificate serial: 019AF3C057ABA42BC762FD05364BF22D3D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft Manifest number: 055D Signing time: Sat 06 Dec 2025 13:01:00 +0000 Manifest this update: Sat 06 Dec 2025 13:01:00 +0000 Manifest next update: Sun 07 Dec 2025 13:01:00 +0000 Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=) 2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: 6XyprP64fGZFbmpzlzOzE5VcmlCTTuKxykTx/4hvD+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:57:ab:a4:2b:c7:62:fd:05:36:4b:f2:2d:3d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Validity Not Before: Dec 6 13:01:00 2025 GMT Not After : Dec 7 13:01:00 2025 GMT Subject: CN=d51656a5d48ea23f685c62695a40879aaa514b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:5e:dd:f9:3e:b0:92:2b:5d:f8:a9:e9:33: cc:93:91:f0:1e:65:60:ef:bc:a1:10:44:60:6b:7a: 18:7f:10:6f:b4:6f:24:63:f1:1f:6c:fa:48:13:ab: b7:19:c0:4c:36:a2:67:aa:8c:fb:77:2e:1c:c8:67: 6a:01:8f:4b:0a:76:0e:e0:b4:6f:e3:22:93:96:72: 71:2f:6e:84:54:f0:86:2a:be:7a:73:c7:9a:eb:94: c7:7d:8a:5a:0f:62:51:7a:3f:d8:ba:a6:b5:be:a5: 20:24:02:c4:b9:7e:11:09:1b:fe:83:4b:da:f2:61: 72:88:3b:64:c3:fc:68:58:00:80:85:60:51:b7:48: 17:d1:dd:84:38:d8:ef:c9:b6:a8:71:b6:30:03:8d: 1d:c0:12:37:c4:87:be:78:00:4e:c8:3b:5b:56:02: 97:1c:95:77:01:1d:11:17:5a:34:60:9e:13:b5:38: b4:63:34:8b:ca:8c:eb:c2:a0:07:ac:0a:ad:27:d5: 5b:6a:3f:3f:f6:1d:02:a7:1c:d7:4d:a6:9c:a1:41: ac:33:09:37:3e:ff:09:4b:c2:18:2f:a7:6c:7e:14: 37:59:0c:07:97:b8:36:cf:64:ad:f7:7f:c4:43:86: 59:81:1a:38:59:64:89:47:72:f2:8f:af:fa:d0:5c: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:16:56:A5:D4:8E:A2:3F:68:5C:62:69:5A:40:87:9A:AA:51:4B:34 X509v3 Authority Key Identifier: keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0b:40:28:24:09:88:5b:ec:6f:e4:aa:c2:ee:05:d7:04:d1: 81:1d:53:58:7b:45:19:0e:37:b4:02:21:93:28:af:8b:91:93: eb:ba:34:2b:1f:ec:14:b2:0e:32:65:4c:09:37:a4:b7:b4:c0: 81:e5:4a:85:c0:2a:c0:14:c8:a8:44:7b:cb:fc:d8:a0:ff:80: 1d:b8:7e:08:99:09:3e:36:78:ce:74:2c:0f:a6:ea:79:22:69: 09:24:85:04:31:21:51:a7:b6:4c:6f:7b:c4:d5:34:e4:71:18: 56:63:b0:50:2c:44:68:4d:67:49:4a:fc:bf:04:f6:ad:0a:ab: a4:0e:b9:8b:43:26:45:a3:23:40:b9:49:36:84:5d:f2:ce:9d: ed:89:90:7c:55:47:fa:89:60:58:d6:8c:e9:b0:1a:f9:ef:97: b5:2c:8b:12:18:ca:1d:05:76:8f:2f:e4:2d:a3:25:5a:92:f1: 53:99:4b:96:7e:e7:3b:99:07:30:54:a4:7f:c2:38:3f:dd:94: df:ac:0a:ba:22:24:48:9f:0d:91:3b:f3:69:d6:b4:60:fe:d4: b2:0f:da:5a:4f:e9:e8:ae:59:b3:88:ea:81:41:fa:71:07:35: d9:02:a3:9a:27:87:46:db:5f:81:e9:7c:1c:da:6f:92:51:3a: 36:cc:b3:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFerpCvHYv0FNkvyLT1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl NGM5MzEwHhcNMjUxMjA2MTMwMTAwWhcNMjUxMjA3MTMwMTAwWjAzMTEwLwYDVQQD EyhkNTE2NTZhNWQ0OGVhMjNmNjg1YzYyNjk1YTQwODc5YWFhNTE0YjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPNe3fk+sJIrXfip6TPMk5HwHmVg 77yhEERga3oYfxBvtG8kY/EfbPpIE6u3GcBMNqJnqoz7dy4cyGdqAY9LCnYO4LRv 4yKTlnJxL26EVPCGKr56c8ea65THfYpaD2JRej/Yuqa1vqUgJALEuX4RCRv+g0va 8mFyiDtkw/xoWACAhWBRt0gX0d2EONjvybaocbYwA40dwBI3xIe+eABOyDtbVgKX HJV3AR0RF1o0YJ4TtTi0YzSLyozrwqAHrAqtJ9Vbaj8/9h0CpxzXTaacoUGsMwk3 Pv8JS8IYL6dsfhQ3WQwHl7g2z2St93/EQ4ZZgRo4WWSJR3Lyj6/60FwV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUWVqXUjqI/aFxiaVpAh5qqUUs0MB8GA1UdIwQY MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt OGQ2Zjc0ODNlNjMyLzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQtAKCQJ iFvsb+Sqwu4F1wTRgR1TWHtFGQ43tAIhkyivi5GT67o0Kx/sFLIOMmVMCTekt7TA geVKhcAqwBTIqER7y/zYoP+AHbh+CJkJPjZ4znQsD6bqeSJpCSSFBDEhUae2TG97 xNU05HEYVmOwUCxEaE1nSUr8vwT2rQqrpA65i0MmRaMjQLlJNoRd8s6d7YmQfFVH +olgWNaM6bAa+e+XtSyLEhjKHQV2jy/kLaMlWpLxU5lLln7nO5kHMFSkf8I4P92U 36wKuiIkSJ8NkTvzada0YP7Usg/aWk/p6K5Zs4jqgUH6cQc12QKjmieHRttfgel8 HNpvklE6Nsyz/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:44:15 2025 by rpki-client