This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json) Hash identifier: u4Llbk9MxejCaOksJiRCUTZ3ANRZXMlM3klX0ddOGsk= Subject key identifier: F2:56:07:40:E3:CD:73:40:A6:8F:1E:35:77:53:CA:ED:E4:37:21:28 Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b Certificate serial: 019AF19AD1032DB410800CF09C8ED883CF35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft Manifest number: 0DB7 Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: KAfCdWyar78wkX0HM9nlNgesbeDINNuyvzpIJ+Pr8DM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d1:03:2d:b4:10:80:0c:f0:9c:8e:d8:83:cf:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=f2560740e3cd7340a68f1e357753caede4372128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:6c:be:67:47:2a:7d:c0:b6:30:e2:87:06: 1b:a3:ee:f0:a8:0d:3e:54:11:4e:d3:a3:7d:1d:a9: c1:01:60:27:7c:e6:c7:e2:cc:84:ed:fd:80:9f:30: ce:26:8f:20:ef:d7:8b:a2:d7:b8:d2:2f:cb:b9:f9: 6c:a7:9d:34:bd:3e:a5:ba:80:02:24:25:1b:41:dc: 1a:12:c7:c1:79:aa:ab:73:d6:37:76:d2:21:40:7a: d6:3a:b3:31:58:fa:dc:34:17:d6:8a:73:f3:70:23: f0:36:97:dd:68:29:cd:e4:4d:bb:6a:77:4e:7f:59: d5:10:13:98:ca:28:4e:d3:c1:42:9d:76:a4:0f:2c: 3d:eb:81:e7:88:07:19:d8:c7:13:6e:2e:00:9e:5f: fe:f6:27:38:19:03:5f:8e:f4:6c:99:52:fb:fa:1d: 1d:bb:30:90:30:1d:30:c6:6d:d9:80:ff:3f:fa:b5: 51:fc:3e:3d:ae:2f:27:88:0d:0c:1a:ff:b6:62:e2: a7:a2:5c:5b:e9:4c:4f:b2:ab:0d:33:68:50:44:89: 46:df:81:11:e1:c8:af:15:75:ae:19:9e:4c:0d:6e: d1:f0:5e:ee:a1:ff:eb:ed:82:88:24:88:e7:df:39: 4c:60:17:21:7e:36:7a:32:f4:3f:06:f4:00:87:d8: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:56:07:40:E3:CD:73:40:A6:8F:1E:35:77:53:CA:ED:E4:37:21:28 X509v3 Authority Key Identifier: keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:77:6a:c6:db:f4:4f:d0:8f:44:22:c2:8c:b3:f4:68:fb:04: 15:29:20:da:44:52:e6:b4:d9:1e:a8:cd:6d:3b:60:b8:20:74: 2a:33:dd:13:b4:1e:f1:08:9d:9b:4f:87:ff:1c:36:02:ce:64: a8:4f:8a:ce:9e:af:c8:25:d8:9c:4c:79:8e:f5:4b:b7:1e:f9: 0b:b8:ef:a4:ce:d1:5e:66:f0:66:5c:e1:9d:bc:33:fb:dc:eb: 4b:6d:d5:f8:c8:d0:8c:f1:94:86:6f:d9:c9:f3:22:25:01:9d: 9c:a8:b7:1b:3f:87:f9:ec:08:88:7b:8c:e1:05:1a:d7:c1:20: 91:12:7b:6c:c6:b9:c4:3b:ac:4c:a9:05:3c:ae:11:ca:3a:04: 57:26:86:02:77:27:5d:b2:c4:85:1d:1f:eb:7a:0d:3b:16:4b: f8:66:b7:64:ce:91:99:23:33:28:99:f4:ab:63:3a:dd:e5:bb: e0:e5:77:67:c7:e2:b5:70:ee:f7:41:77:7b:dc:f9:4f:bd:5a: 28:26:38:a7:64:a6:a6:14:f8:ad:05:0d:ac:ee:36:f7:a5:69: 65:61:a4:1b:6e:f4:91:d5:27:1d:6a:77:71:c7:98:1e:f9:b9: 98:90:21:c1:74:be:9a:45:74:b7:36:1c:f8:cd:b3:98:c1:d8: f2:66:4e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtEDLbQQgAzwnI7Yg881MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2U0ZmE4Yzk5NzFhZWYxMjM0NWZjMGUzN2QxNmIzNDU5 Yjc4M2IwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EyhmMjU2MDc0MGUzY2Q3MzQwYTY4ZjFlMzU3NzUzY2FlZGU0MzcyMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskdsvmdHKn3AtjDihwYbo+7wqA0+ VBFO06N9HanBAWAnfObH4syE7f2AnzDOJo8g79eLote40i/Luflsp500vT6luoAC JCUbQdwaEsfBeaqrc9Y3dtIhQHrWOrMxWPrcNBfWinPzcCPwNpfdaCnN5E27andO f1nVEBOYyihO08FCnXakDyw964HniAcZ2McTbi4Anl/+9ic4GQNfjvRsmVL7+h0d uzCQMB0wxm3ZgP8/+rVR/D49ri8niA0MGv+2YuKnolxb6UxPsqsNM2hQRIlG34ER 4civFXWuGZ5MDW7R8F7uof/r7YKIJIjn3zlMYBchfjZ6MvQ/BvQAh9iIvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJWB0DjzXNApo8eNXdTyu3kNyEoMB8GA1UdIwQY MBaAFF4+T6jJlxrvEjRfwON9FrNFm3g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGIt M2EzYjAyOTZiYjgyLzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGItM2EzYjAyOTZiYjgy LzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhndqxtv0 T9CPRCLCjLP0aPsEFSkg2kRS5rTZHqjNbTtguCB0KjPdE7Qe8Qidm0+H/xw2As5k qE+Kzp6vyCXYnEx5jvVLtx75C7jvpM7RXmbwZlzhnbwz+9zrS23V+MjQjPGUhm/Z yfMiJQGdnKi3Gz+H+ewIiHuM4QUa18EgkRJ7bMa5xDusTKkFPK4RyjoEVyaGAncn XbLEhR0f63oNOxZL+Ga3ZM6RmSMzKJn0q2M63eW74OV3Z8fitXDu90F3e9z5T71a KCY4p2SmphT4rQUNrO4296VpZWGkG270kdUnHWp3cceYHvm5mJAhwXS+mkV0tzYc +M2zmMHY8mZOXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:05 2025 by rpki-client