This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json) Hash identifier: UD0sTAL0+oWPVP2BIBUWlb69bcYTMfBrKODppXdFE3Y= Subject key identifier: 1E:73:DF:3F:2F:F6:35:40:95:31:7F:9C:1C:5B:16:88:54:53:E7:A4 Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2 Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2 Certificate serial: 019AF163E5614FB453E32B64DC43AF2C3506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft Manifest number: 1652 Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=) 2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: DzDZo8KmSl41MY5uw68kushqRW7WF36wk+l4LvdxUkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e5:61:4f:b4:53:e3:2b:64:dc:43:af:2c:35:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2 Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=1e73df3f2ff6354095317f9c1c5b16885453e7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:24:50:2e:f0:c9:0d:5d:3f:64:1e:46:bd: c8:b0:34:f2:4d:38:df:15:7e:5f:9a:a9:2a:ad:20: ca:d4:8d:b5:bf:c8:fe:bf:9c:0e:ae:3f:69:e5:7c: a6:fb:d8:04:e6:ed:cc:f8:c0:d8:77:16:a5:14:f2: f6:6e:34:f9:6b:68:49:a7:12:88:d8:1b:c5:b4:04: 9c:4c:d9:83:6a:19:e1:2d:73:3c:ee:64:71:e6:97: 61:8a:b5:31:28:75:13:2f:06:85:ac:a9:a8:eb:fe: 11:b2:6b:4c:4f:0b:d7:95:57:3e:0d:20:e7:e2:d0: 12:46:0c:ee:a1:2d:a9:6a:6e:c1:7c:0e:1b:36:d1: 8a:d1:ed:44:91:ff:4e:ea:de:5f:e6:30:8d:5b:f8: d1:fc:5f:da:1a:c4:6b:56:b1:04:b5:f4:f3:0c:ff: 56:ed:97:ce:0c:a9:1f:d4:16:8b:56:c7:f1:4f:46: 2c:aa:06:99:ee:93:16:76:7f:84:d1:40:17:e6:30: 99:c9:92:30:21:61:ba:cd:00:f8:35:23:b8:a7:7e: 1d:b9:72:b0:84:8b:2e:4e:57:f2:25:f6:21:c4:49: b8:ad:c3:26:03:ff:f8:10:57:93:7b:6a:2b:5d:4c: 82:40:5d:2b:96:38:ad:ec:cb:32:80:6e:c2:bd:cc: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:73:DF:3F:2F:F6:35:40:95:31:7F:9C:1C:5B:16:88:54:53:E7:A4 X509v3 Authority Key Identifier: keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e5:25:09:dc:bd:9c:7d:ec:2b:1e:bd:be:86:b3:2a:4a:50: 77:8d:e2:6f:75:b2:87:98:d2:67:dc:d2:e5:cd:84:fe:97:3b: 32:33:a0:5b:cc:b8:1f:9f:73:2d:54:c6:3a:93:c6:48:fb:4d: 2b:e7:6c:d0:86:14:99:c9:00:6d:6f:3e:49:b9:47:ca:24:60: 76:37:c4:5f:4b:70:22:13:24:40:64:ad:87:8b:1c:e6:1e:6e: 17:e7:2d:48:94:e4:2a:9c:94:8a:83:3c:09:df:16:30:37:87: 18:cd:c5:8a:c5:19:9a:dd:60:8e:d3:8b:db:ed:b6:e2:81:14: da:17:9b:05:6b:db:92:34:ef:fd:01:e7:b9:15:3a:26:4e:49: 37:90:90:1f:30:4b:6d:23:36:8b:3a:64:88:e6:43:1d:56:0d: ed:83:63:2a:cb:5f:33:03:a6:a5:51:08:40:0a:2e:7e:19:9f: 9f:e8:e5:f1:10:0a:7c:40:6f:1b:f1:4a:5a:3a:1b:f0:2e:c7: 51:05:bc:aa:95:fd:00:82:3f:4c:01:92:7b:66:9e:c2:1c:6f: c5:60:b3:6f:9c:39:19:f6:e0:79:61:d0:bb:a1:86:0b:f1:58: 25:37:e5:f8:e4:9c:c6:1c:eb:2a:aa:49:c4:69:59:3b:6c:99: 94:4b:a4:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+VhT7RT4ytk3EOvLDUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy ZjU4ZTIwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD EygxZTczZGYzZjJmZjYzNTQwOTUzMTdmOWMxYzViMTY4ODU0NTNlN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7okUC7wyQ1dP2QeRr3IsDTyTTjf FX5fmqkqrSDK1I21v8j+v5wOrj9p5Xym+9gE5u3M+MDYdxalFPL2bjT5a2hJpxKI 2BvFtAScTNmDahnhLXM87mRx5pdhirUxKHUTLwaFrKmo6/4RsmtMTwvXlVc+DSDn 4tASRgzuoS2pam7BfA4bNtGK0e1Ekf9O6t5f5jCNW/jR/F/aGsRrVrEEtfTzDP9W 7ZfODKkf1BaLVsfxT0YsqgaZ7pMWdn+E0UAX5jCZyZIwIWG6zQD4NSO4p34duXKw hIsuTlfyJfYhxEm4rcMmA//4EFeTe2orXUyCQF0rljit7MsygG7Cvcw/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5z3z8v9jVAlTF/nBxbFohUU+ekMB8GA1UdIwQY MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOUlCdy9 nH3sKx69voazKkpQd43ib3Wyh5jSZ9zS5c2E/pc7MjOgW8y4H59zLVTGOpPGSPtN K+ds0IYUmckAbW8+SblHyiRgdjfEX0twIhMkQGSth4sc5h5uF+ctSJTkKpyUioM8 Cd8WMDeHGM3FisUZmt1gjtOL2+224oEU2hebBWvbkjTv/QHnuRU6Jk5JN5CQHzBL bSM2izpkiOZDHVYN7YNjKstfMwOmpVEIQAoufhmfn+jl8RAKfEBvG/FKWjob8C7H UQW8qpX9AII/TAGSe2aewhxvxWCzb5w5GfbgeWHQu6GGC/FYJTfl+OScxhzrKqpJ xGlZO2yZlEuk0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:24 2025 by rpki-client