This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json) Hash identifier: O5GnxvX+ry78WMS0CnucWovKy4eGtVMGDEZDzuMksGE= Subject key identifier: 25:EF:AA:33:4D:96:49:F3:28:7D:C5:F2:A8:1C:10:24:47:E9:CA:43 Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7 Certificate serial: 019AF276F6389850A1E673AD8A43F4C6740B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft Manifest number: 1779 Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=) 2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: 85dNwyBDFajRrz7ccrkw5LophXwyx8m0PucAHcsKZwU=) 3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f6:38:98:50:a1:e6:73:ad:8a:43:f4:c6:74:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=25efaa334d9649f3287dc5f2a81c102447e9ca43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:00:3f:83:8d:d3:34:2f:41:b9:f9:84:44: df:4b:77:38:d4:dd:a1:4f:7d:06:a7:de:fc:3c:a8: c2:fc:b5:0d:17:ff:30:f3:01:9f:c6:e7:e2:63:c3: 8b:0e:8a:57:e2:97:f5:16:5c:55:be:0a:69:58:35: dc:cc:cd:d6:fd:72:ce:91:91:8b:22:81:f1:6b:7f: 2c:a3:3b:fc:02:0a:a1:90:f0:ed:2f:4f:ea:3f:43: 52:6c:cf:c3:70:59:6b:bb:cd:55:a6:d1:dd:6e:22: 1f:f4:a0:06:c8:24:78:8e:48:a0:29:36:50:3c:f5: 8b:41:21:fc:27:6e:48:ec:1f:20:8c:59:8a:67:5d: b7:44:15:05:b6:5a:a5:55:76:64:d2:03:13:09:a9: ac:6d:44:d0:3b:52:fd:21:c8:68:a0:f0:e0:ed:ad: 5a:3e:ff:c3:fb:ac:2e:29:4c:3f:6e:6f:44:5e:10: 4c:b2:fc:2a:47:47:a6:ba:c4:74:06:f1:7a:86:28: 70:ec:c7:6f:ca:a9:2e:2f:1c:60:8f:d4:f4:99:2e: 89:aa:90:4f:49:fb:6a:64:d7:00:e1:e9:0b:56:8c: d9:d4:48:89:08:5b:b9:30:30:e9:a2:fc:fc:97:b7: 2c:12:e1:4c:47:f0:22:0e:cc:49:a7:93:b8:3d:dd: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:AA:33:4D:96:49:F3:28:7D:C5:F2:A8:1C:10:24:47:E9:CA:43 X509v3 Authority Key Identifier: keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:e8:f8:92:8e:ce:3f:4e:50:6f:20:c3:ed:b4:6e:e0:66:ad: 71:6d:09:98:1b:27:46:26:9a:d3:d9:e3:49:80:22:5d:51:81: a4:cd:bc:49:52:e5:2d:3a:6b:65:11:54:31:04:70:3f:fd:d3: 85:5b:fd:6b:66:8a:bd:3b:9c:5b:bc:88:a0:c9:52:cf:a6:9b: 63:cf:da:7c:5d:39:65:8b:a4:99:f7:d8:d1:38:15:7d:a0:29: 94:73:c2:2c:1b:eb:ed:f6:56:f6:7c:38:67:5d:47:90:7d:70: 73:13:d1:56:76:b7:86:d3:8c:b1:20:42:fa:4d:92:b0:20:82: f1:1e:06:6c:e8:b1:59:b1:6f:1d:1f:79:9b:52:a8:3f:70:c7: 2b:a4:04:7c:dd:b5:07:eb:43:6f:72:d7:55:16:a8:8f:d3:79: 73:dd:76:0c:c8:c0:d8:08:48:19:a2:da:2f:46:ae:22:e7:78: 91:aa:18:03:a7:71:ec:da:d0:bb:b1:05:65:22:4b:6b:08:47: d1:e5:d3:94:c0:2b:e9:72:9e:e8:b8:0e:95:73:8f:01:6a:29: a0:b7:76:f8:cc:22:a2:3a:f6:38:3b:44:64:79:5c:16:27:38: 2d:9c:b4:a2:60:1e:03:77:d4:62:8a:7c:10:98:0e:5c:bf:71: 31:8f:74:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvY4mFCh5nOtikP0xnQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTY2NzZjZjM5OGQzOTk0YzRkZDRhMjk2NTk0NjE0ZGZm NTg2YzcwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EygyNWVmYWEzMzRkOTY0OWYzMjg3ZGM1ZjJhODFjMTAyNDQ3ZTljYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY4AP4ON0zQvQbn5hETfS3c41N2h T30Gp978PKjC/LUNF/8w8wGfxufiY8OLDopX4pf1FlxVvgppWDXczM3W/XLOkZGL IoHxa38sozv8AgqhkPDtL0/qP0NSbM/DcFlru81VptHdbiIf9KAGyCR4jkigKTZQ PPWLQSH8J25I7B8gjFmKZ123RBUFtlqlVXZk0gMTCamsbUTQO1L9IchooPDg7a1a Pv/D+6wuKUw/bm9EXhBMsvwqR0emusR0BvF6hihw7MdvyqkuLxxgj9T0mS6JqpBP SftqZNcA4ekLVozZ1EiJCFu5MDDpovz8l7csEuFMR/AiDsxJp5O4Pd1AvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXvqjNNlknzKH3F8qgcECRH6cpDMB8GA1UdIwQY MBaAFF+WZ2zzmNOZTE3UopZZRhTf9YbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMt ZjYyZjM1YWY0MzcxLzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMtZjYyZjM1YWY0Mzcx LzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Oj4ko7O P05QbyDD7bRu4GatcW0JmBsnRiaa09njSYAiXVGBpM28SVLlLTprZRFUMQRwP/3T hVv9a2aKvTucW7yIoMlSz6abY8/afF05ZYukmffY0TgVfaAplHPCLBvr7fZW9nw4 Z11HkH1wcxPRVna3htOMsSBC+k2SsCCC8R4GbOixWbFvHR95m1KoP3DHK6QEfN21 B+tDb3LXVRaoj9N5c912DMjA2AhIGaLaL0auIud4kaoYA6dx7NrQu7EFZSJLawhH 0eXTlMAr6XKe6LgOlXOPAWopoLd2+Mwiojr2ODtEZHlcFic4LZy0omAeA3fUYop8 EJgOXL9xMY908g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:01 2025 by rpki-client