This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json) Hash identifier: iIf2wpbrb8JpGroxCLtXi5xE2jkXFkfJEDoJ3dXUGPk= Subject key identifier: 67:61:4A:6F:2D:EB:0D:D5:93:CA:64:17:A4:7E:04:47:5D:BF:05:E7 Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Certificate serial: 019AF0BF9B5A9EF6BB896427D871E0BA9BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft Manifest number: 0581 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=) 2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=) 3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: EZglYD3Ep9xbWO6PLeb9/q0HFv2fECUz7CS4I8iiHgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9b:5a:9e:f6:bb:89:64:27:d8:71:e0:ba:9b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=67614a6f2deb0dd593ca6417a47e04475dbf05e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:6d:c7:bf:c9:96:cf:07:f9:cd:25:9b:8d: 0f:20:ee:78:10:0e:8a:16:a8:73:c6:ca:d5:e1:87: e3:11:46:58:d2:1b:00:ef:b2:04:9f:88:b3:2d:4b: f0:57:56:18:8b:bf:a6:cd:af:5e:f1:0f:18:a0:0b: 01:59:93:4a:9a:53:ed:36:d2:55:8c:d7:c4:17:53: dc:8e:06:41:04:1e:ac:7c:fd:1d:04:85:20:ca:e2: 75:9b:f6:f4:e5:ed:bc:d0:1d:51:b7:0e:f9:47:37: b3:f8:95:cc:6e:49:43:6d:c1:90:99:a6:90:d6:25: 19:2d:46:a4:9e:88:f7:8b:84:fd:58:4b:4b:c5:ef: a9:8d:d7:0f:f3:8c:83:14:63:a3:43:b9:dd:cd:58: c1:64:cb:bc:01:d5:b5:a6:1f:ad:1b:96:4a:5a:bc: ee:d4:f0:3b:3c:14:0e:3e:4c:6a:e4:89:97:05:8b: ae:03:d3:b4:f1:10:18:19:75:87:67:fb:17:73:f6: 7d:08:80:72:fa:ba:9d:8e:ef:8c:66:b8:94:c9:f4: f0:2a:1d:ce:dd:15:4a:ca:15:9d:3c:ff:3b:57:c5: 8c:9b:ce:c7:61:4a:f4:50:50:35:5b:15:0b:1c:c1: 25:98:28:64:db:34:46:e4:98:ef:22:30:8e:04:1f: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:61:4A:6F:2D:EB:0D:D5:93:CA:64:17:A4:7E:04:47:5D:BF:05:E7 X509v3 Authority Key Identifier: keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:08:0a:83:9f:ec:d1:e2:95:07:0f:c0:b1:f7:2d:ca:6f:94: 00:51:69:36:1d:af:83:75:11:87:5f:81:cd:f3:a6:17:f8:0c: 7a:bc:1e:19:c6:8d:77:2e:09:fd:d3:c3:f6:2b:94:58:05:60: 69:5c:0c:a5:bd:cb:52:c5:82:e0:40:2a:c3:53:39:9e:c8:01: 73:c6:c6:79:5d:77:93:2c:19:b1:5b:82:46:6b:a5:cf:b9:39: b8:8e:2c:1a:b9:30:9b:e6:6e:fe:52:0a:2f:d5:e6:0e:5e:b0: ae:a6:d6:ed:0e:a2:b7:ce:42:c5:09:ce:05:9a:45:7e:d0:74: c2:c7:67:10:d7:e0:8c:25:c0:6c:8f:72:ec:45:d1:27:39:01: f0:ed:be:5c:09:35:3e:53:97:ac:3e:c8:8f:30:ee:09:95:9a: 18:b5:87:b3:de:e6:f4:6c:9b:71:29:65:c4:8d:be:d3:35:d1: 65:25:02:31:f5:4b:50:aa:a1:80:09:08:ea:5c:c3:fc:3d:40: 3d:77:92:7e:f4:4f:89:c9:7b:7d:8a:7a:20:54:70:a4:d1:ff: 62:24:ab:ae:9c:17:98:67:e6:e3:f9:f0:75:7e:cd:ce:fd:11: 67:b3:fa:70:e2:71:e8:29:7a:69:00:17:94:2a:74:1e:53:cb: 29:8b:b2:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5tanva7iWQn2HHgupuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDEzOTg5NzZiMmY0ODc3MjViYzEzZDdmYWViZWQzZTE2 ZDgyYzkwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD Eyg2NzYxNGE2ZjJkZWIwZGQ1OTNjYTY0MTdhNDdlMDQ0NzVkYmYwNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEptx7/Jls8H+c0lm40PIO54EA6K FqhzxsrV4YfjEUZY0hsA77IEn4izLUvwV1YYi7+mza9e8Q8YoAsBWZNKmlPtNtJV jNfEF1PcjgZBBB6sfP0dBIUgyuJ1m/b05e280B1Rtw75Rzez+JXMbklDbcGQmaaQ 1iUZLUaknoj3i4T9WEtLxe+pjdcP84yDFGOjQ7ndzVjBZMu8AdW1ph+tG5ZKWrzu 1PA7PBQOPkxq5ImXBYuuA9O08RAYGXWHZ/sXc/Z9CIBy+rqdju+MZriUyfTwKh3O 3RVKyhWdPP87V8WMm87HYUr0UFA1WxULHMElmChk2zRG5JjvIjCOBB/ocwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdhSm8t6w3Vk8pkF6R+BEddvwXnMB8GA1UdIwQY MBaAFF3ROYl2svSHclvBPX+uvtPhbYLJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYt NjAwODEwNjM0ODc4LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYtNjAwODEwNjM0ODc4 LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPggKg5/s 0eKVBw/Asfctym+UAFFpNh2vg3URh1+BzfOmF/gMerweGcaNdy4J/dPD9iuUWAVg aVwMpb3LUsWC4EAqw1M5nsgBc8bGeV13kywZsVuCRmulz7k5uI4sGrkwm+Zu/lIK L9XmDl6wrqbW7Q6it85CxQnOBZpFftB0wsdnENfgjCXAbI9y7EXRJzkB8O2+XAk1 PlOXrD7IjzDuCZWaGLWHs97m9GybcSllxI2+0zXRZSUCMfVLUKqhgAkI6lzD/D1A PXeSfvRPicl7fYp6IFRwpNH/YiSrrpwXmGfm4/nwdX7Nzv0RZ7P6cOJx6Cl6aQAX lCp0HlPLKYuyaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:16:44 2025 by rpki-client