This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft File: x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json) Hash identifier: KqpTVkx+yTcYVronmZjtfIMFjvxAAOdv4NwSdP9W1VQ= Subject key identifier: 25:13:82:2D:5E:C1:E0:2D:5F:CD:B4:D2:C1:33:34:0C:F6:75:68:33 Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66 Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166 Certificate serial: 019AF208B3558117859FC07244170C3C13A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft Manifest number: 0D89 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: abpRqtiQtQaZu4MHu087BH1phaI.roa (hash: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=) 2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: 3n4muTRuHaDbu2RBU9HMyc63YK+YKsOL9x6vgxepWZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b3:55:81:17:85:9f:c0:72:44:17:0c:3c:13:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=2513822d5ec1e02d5fcdb4d2c133340cf6756833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:9f:22:d4:77:9e:87:84:b5:5d:0b:c9:5b: 71:23:01:68:35:6f:b1:58:04:f1:ea:5b:40:b8:5a: f3:b9:22:3f:55:1a:10:3d:51:4c:d4:9b:e3:6c:45: 69:2b:ed:1d:72:1f:de:1a:7a:9a:9e:19:ac:8d:19: a1:75:cd:d4:9c:f3:b4:d0:5b:59:af:69:a6:cc:79: 1e:cc:d3:4f:e7:45:8a:e2:7c:a0:03:3c:c7:b1:c8: a3:0f:f5:dc:f6:11:db:e7:e5:97:c7:57:90:82:91: 54:e5:8f:e8:2f:aa:af:81:78:1f:47:b4:d3:1f:45: 49:64:33:42:55:1f:0b:46:db:82:32:1c:bf:44:e1: 6e:14:57:45:b8:cd:e5:fa:ab:39:6b:ca:36:b1:64: 26:07:57:58:a2:99:36:35:38:a7:f3:10:57:1e:f9: f3:7a:7e:51:d4:96:09:83:3b:38:3d:46:c2:f4:bf: 9d:5b:71:22:0e:39:bc:30:e8:81:9b:d9:c9:17:01: 08:46:74:89:78:1b:e1:9c:76:51:da:46:58:6b:1e: c4:1e:58:c5:a2:19:4b:b5:b0:75:02:07:a9:8f:9f: 6a:9e:bc:51:0b:e0:11:8d:ca:e4:6c:3c:ea:e3:de: 3c:fb:7e:19:6b:84:57:af:9e:38:3a:e7:58:0e:ea: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:13:82:2D:5E:C1:E0:2D:5F:CD:B4:D2:C1:33:34:0C:F6:75:68:33 X509v3 Authority Key Identifier: keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:43:b3:3f:27:e3:74:79:fa:a5:75:52:c6:73:3e:8a:9a:cb: 74:e6:3b:71:94:24:28:10:3e:41:8a:33:ec:d5:16:b7:09:04: f0:96:43:41:33:4d:c9:52:9c:d0:16:bf:e3:e4:6b:ba:3f:38: 52:fa:62:6b:2b:bf:d5:6d:79:4d:77:ab:a1:04:21:2a:95:76: dd:c6:a7:50:f2:5a:1d:2b:e6:29:aa:fc:34:a9:d4:29:9e:8a: 39:7e:d9:cf:30:77:69:95:d4:3d:3d:67:2e:3d:76:da:8a:ff: f8:e6:20:4d:df:dc:3c:4b:d3:1a:c5:47:ac:ba:4d:56:4a:14: 9e:c4:b8:93:49:5c:55:39:53:88:9b:ee:14:63:f9:8f:9d:ce: 6f:67:c7:a1:12:8c:77:d8:b9:d2:d1:76:30:e1:61:54:f6:1f: 90:62:89:23:3d:86:b4:61:77:0b:0a:ce:3a:f9:c8:1e:2c:1e: c8:0b:28:f8:f9:6b:b7:58:75:7f:ec:88:42:29:20:c0:7e:23: 95:37:03:d1:cc:fd:bd:73:47:96:26:7b:3f:a7:83:ab:75:f0: 3a:3f:97:b8:ec:77:d2:5a:45:60:40:4a:48:75:a5:11:81:df: ea:c1:89:2f:7f:8a:a2:a6:47:61:fb:fa:73:c4:11:21:41:15: 68:6d:6e:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLNVgReFn8ByRBcMPBOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OWE3Y2E0NDAyN2QyZTVhZDM4OWYxNjllZDE1OTM2ZDc4 NTExNjYwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD EygyNTEzODIyZDVlYzFlMDJkNWZjZGI0ZDJjMTMzMzQwY2Y2NzU2ODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfefItR3noeEtV0LyVtxIwFoNW+x WATx6ltAuFrzuSI/VRoQPVFM1JvjbEVpK+0dch/eGnqanhmsjRmhdc3UnPO00FtZ r2mmzHkezNNP50WK4nygAzzHscijD/Xc9hHb5+WXx1eQgpFU5Y/oL6qvgXgfR7TT H0VJZDNCVR8LRtuCMhy/ROFuFFdFuM3l+qs5a8o2sWQmB1dYopk2NTin8xBXHvnz en5R1JYJgzs4PUbC9L+dW3EiDjm8MOiBm9nJFwEIRnSJeBvhnHZR2kZYax7EHljF ohlLtbB1Agepj59qnrxRC+ARjcrkbDzq4948+34Za4RXr544OudYDurIhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUTgi1eweAtX8200sEzNAz2dWgzMB8GA1UdIwQY MBaAFMeafKRAJ9LlrTifFp7RWTbXhRFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lNTMzMTMtYmE2YS00ZTgxLWJhN2It NjcxNWY1OGNlZWJmLzEveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9lNTMzMTMtYmE2YS00ZTgxLWJhN2ItNjcxNWY1OGNlZWJm LzEveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEOzPyfj dHn6pXVSxnM+iprLdOY7cZQkKBA+QYoz7NUWtwkE8JZDQTNNyVKc0Ba/4+Rruj84 Uvpiayu/1W15TXeroQQhKpV23canUPJaHSvmKar8NKnUKZ6KOX7ZzzB3aZXUPT1n Lj122or/+OYgTd/cPEvTGsVHrLpNVkoUnsS4k0lcVTlTiJvuFGP5j53Ob2fHoRKM d9i50tF2MOFhVPYfkGKJIz2GtGF3CwrOOvnIHiweyAso+Plrt1h1f+yIQikgwH4j lTcD0cz9vXNHliZ7P6eDq3XwOj+XuOx30lpFYEBKSHWlEYHf6sGJL3+KoqZHYfv6 c8QRIUEVaG1uyg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:33 2025 by rpki-client