This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json) Hash identifier: 21pYtSG8a0iJgXO0S0BSHBng/UtOo+00Efu9BMTxBqY= Subject key identifier: 2E:AB:2B:61:1A:CF:58:A7:68:83:5E:30:00:4E:F8:44:50:88:3A:6B Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Certificate serial: 019B2BC1D8BE94E1F39A50EE3BFFC2BCFDBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft Manifest number: 057A Signing time: Wed 17 Dec 2025 10:01:22 +0000 Manifest this update: Wed 17 Dec 2025 10:01:22 +0000 Manifest next update: Thu 18 Dec 2025 10:01:22 +0000 Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=) 2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: 0Wvg+Cg/n2vcJWz+5Tv42VRMwFp0uAe5pdHc2gOhUw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:d8:be:94:e1:f3:9a:50:ee:3b:ff:c2:bc:fd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Validity Not Before: Dec 17 10:01:22 2025 GMT Not After : Dec 18 10:01:22 2025 GMT Subject: CN=2eab2b611acf58a768835e30004ef84450883a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:02:a5:c7:7b:b2:ee:8a:c9:0f:7e:e2:74: aa:ae:22:91:ce:ae:b9:9b:4c:3d:e0:fc:40:7c:22: 0c:70:da:1a:9f:e3:d0:21:d2:1b:cf:c5:de:b4:b7: 01:c6:77:5d:c8:65:68:6a:bd:b1:e9:6d:fe:8b:4a: 7f:48:61:0b:5c:5b:c8:c5:ef:de:fa:14:fe:dc:8a: 90:b2:29:84:4c:25:6d:6e:09:0b:13:e1:e4:34:b4: 71:24:1e:47:df:77:21:64:f1:15:75:3e:56:f5:52: fa:35:75:44:f4:60:21:a0:82:ef:5e:e9:e7:bf:d5: fd:1e:35:6b:85:d6:ba:25:7f:40:be:44:be:40:66: e6:5b:e5:72:94:32:b4:22:50:e9:48:d1:89:94:72: a3:60:dd:db:62:6b:54:19:16:0d:a5:f0:4d:74:ae: 00:2f:43:f7:6b:45:39:1c:b8:d3:94:21:4b:07:5d: 17:82:2b:3c:2d:d9:c5:64:91:46:97:c4:20:de:7a: 99:0f:18:b9:f0:53:d0:11:12:58:0b:4d:92:a7:44: 28:76:ea:cf:54:3b:35:1d:02:f1:90:d4:a9:84:15: bc:d1:e2:18:4a:07:68:47:07:5a:42:1d:31:d1:68: 9e:b2:a6:07:bc:b8:b9:92:8d:f8:b2:a6:7b:ea:9f: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AB:2B:61:1A:CF:58:A7:68:83:5E:30:00:4E:F8:44:50:88:3A:6B X509v3 Authority Key Identifier: keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:46:6e:96:4d:39:96:e8:02:23:e3:ac:bf:ea:37:f9:c1: 93:d7:a4:8b:d0:03:3d:60:d2:45:06:bd:e0:f9:b6:c4:18:f6: 5c:9e:2c:ae:f8:5f:e1:1c:be:8a:9a:fd:bf:e3:28:b5:90:79: 18:fc:e7:7a:6f:66:23:cf:a6:57:9f:4e:3a:8d:fe:60:54:4f: 00:bc:f4:9d:56:e8:16:c1:d0:72:e0:ad:2a:28:ac:ce:5d:e9: 89:93:96:cf:61:99:0a:46:37:af:7e:b1:39:52:83:4b:c6:73: 36:04:c4:53:0d:45:a4:17:cb:2c:2b:a3:80:6c:90:a7:a0:28: 9f:fb:bf:ba:87:37:fd:be:14:52:90:91:12:eb:b2:a3:25:33: 4c:fe:97:fd:72:d6:51:a2:16:1e:a4:71:c5:f4:a6:c9:47:77: d7:b2:73:c2:00:ee:fd:5a:70:fd:51:f0:25:0e:97:18:60:6b: df:33:67:33:fc:da:b2:74:ba:38:16:d9:2a:7a:61:0a:d9:3e: c3:75:93:fb:8a:2c:36:87:04:3c:0c:3c:c7:79:2d:34:31:03: a7:f5:9b:6a:d9:7c:59:b2:bf:fb:11:30:75:11:79:e1:c6:f3: 44:4d:72:28:f4:fe:86:bf:26:ad:2c:87:a4:98:b6:68:73:c9: b5:f6:24:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwdi+lOHzmlDuO//CvP29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl NGM5MzEwHhcNMjUxMjE3MTAwMTIyWhcNMjUxMjE4MTAwMTIyWjAzMTEwLwYDVQQD EygyZWFiMmI2MTFhY2Y1OGE3Njg4MzVlMzAwMDRlZjg0NDUwODgzYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z4Cpcd7su6KyQ9+4nSqriKRzq65 m0w94PxAfCIMcNoan+PQIdIbz8XetLcBxnddyGVoar2x6W3+i0p/SGELXFvIxe/e +hT+3IqQsimETCVtbgkLE+HkNLRxJB5H33chZPEVdT5W9VL6NXVE9GAhoILvXunn v9X9HjVrhda6JX9AvkS+QGbmW+VylDK0IlDpSNGJlHKjYN3bYmtUGRYNpfBNdK4A L0P3a0U5HLjTlCFLB10Xgis8LdnFZJFGl8Qg3nqZDxi58FPQERJYC02Sp0QodurP VDs1HQLxkNSphBW80eIYSgdoRwdaQh0x0WiesqYHvLi5ko34sqZ76p8zKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6rK2Eaz1inaINeMABO+ERQiDprMB8GA1UdIwQY MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt OGQ2Zjc0ODNlNjMyLzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjRGbpZN OZboAiPjrL/qN/nBk9eki9ADPWDSRQa94Pm2xBj2XJ4srvhf4Ry+ipr9v+MotZB5 GPznem9mI8+mV59OOo3+YFRPALz0nVboFsHQcuCtKiiszl3piZOWz2GZCkY3r36x OVKDS8ZzNgTEUw1FpBfLLCujgGyQp6Aon/u/uoc3/b4UUpCREuuyoyUzTP6X/XLW UaIWHqRxxfSmyUd317JzwgDu/Vpw/VHwJQ6XGGBr3zNnM/zasnS6OBbZKnphCtk+ w3WT+4osNocEPAw8x3ktNDEDp/Wbatl8WbK/+xEwdRF54cbzRE1yKPT+hr8mrSyH pJi2aHPJtfYkQg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:29:47 2025 by rpki-client