This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json) Hash identifier: 80pVV343NCTdjadxNtdeNeRmfpMXE7Axh907fq4o/mk= Subject key identifier: 76:94:F7:52:6E:C8:7B:36:D2:02:77:5E:BD:FB:77:7D:D9:DF:1F:23 Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca Certificate serial: 019AF08864DEE3E9A5D1CCFF25BCFA5AD59A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft Manifest number: 0E48 Signing time: Fri 05 Dec 2025 22:01:01 +0000 Manifest this update: Fri 05 Dec 2025 22:01:01 +0000 Manifest next update: Sat 06 Dec 2025 22:01:01 +0000 Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=) 2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: rM32b9nvWj9y3EG9/FyPkINQ304F5vLheDVyO3yzGao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:64:de:e3:e9:a5:d1:cc:ff:25:bc:fa:5a:d5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca Validity Not Before: Dec 5 22:01:01 2025 GMT Not After : Dec 6 22:01:01 2025 GMT Subject: CN=7694f7526ec87b36d202775ebdfb777dd9df1f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:27:f3:ef:16:84:cd:3d:bd:45:ad:26:04: 17:bd:09:46:05:b5:6d:4d:d3:4a:95:87:5d:a0:bb: af:91:a8:84:a7:0d:26:0c:6a:b5:df:7d:54:0c:a7: 66:a6:d8:89:2e:1d:58:7b:2d:f2:69:22:45:5f:6f: 21:83:4a:7b:c8:ef:5a:49:78:fc:91:90:64:ef:ab: bf:d2:9b:9b:ca:b8:d5:4e:e6:cf:c2:a0:80:c5:d2: 41:9e:a6:3d:12:a4:61:6a:8b:1a:ec:5f:81:d5:73: ca:36:93:02:b9:4f:d6:0a:c6:d7:55:e5:a6:f3:3f: 27:0e:d8:64:db:96:2a:39:4d:96:67:ce:c6:6b:ec: cc:8e:bf:2b:51:86:2e:13:f9:67:1f:94:0a:89:94: 10:2e:02:98:16:40:6b:68:87:2d:e1:1f:89:fb:cb: e9:87:e1:46:ed:1a:77:6d:ae:20:02:45:73:3f:97: 89:22:0e:74:8f:8a:d8:86:93:c9:d2:38:62:95:14: 07:b9:78:60:5b:2f:b7:4d:f4:bc:45:31:63:9f:5f: 64:4d:7d:53:ab:87:c7:65:04:e6:1e:ed:26:53:f5: 7e:83:77:e5:dc:ec:f1:f1:f0:ab:19:4f:7b:46:c5: 91:d5:ee:43:ca:01:b5:53:1d:1f:68:b5:48:cb:c2: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:F7:52:6E:C8:7B:36:D2:02:77:5E:BD:FB:77:7D:D9:DF:1F:23 X509v3 Authority Key Identifier: keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3e:a3:9f:0c:b0:88:08:d6:67:b5:c2:6f:77:42:1a:bc:39: 37:f8:db:b5:52:9c:7e:c6:dd:3e:a5:c9:b8:73:ac:0c:00:7a: d8:35:3a:57:22:b6:5b:be:ad:e9:f1:f1:41:ce:0b:ea:dd:27: 87:c4:04:19:01:04:56:6f:41:c3:09:14:cf:b7:db:5d:0a:f6: 86:5f:0b:33:37:f4:e7:1f:9e:7b:60:27:b8:71:fe:7d:6f:8a: b8:70:36:e3:16:98:32:cd:c6:01:e7:9a:e7:9d:c9:40:a2:b2: bc:e7:cf:8b:ac:60:22:51:ae:0e:c5:13:58:7f:74:a2:0f:31: b9:92:3b:dd:aa:38:23:da:9f:86:1e:a5:83:f0:b9:e7:91:78: d3:48:5c:7a:6b:20:90:5d:3d:f4:e7:fd:94:0e:67:fd:79:a2: 15:42:ff:19:67:e4:7e:d7:8d:06:f8:6c:db:f8:bb:d5:b6:52: 7e:db:08:35:55:2c:77:81:e9:df:48:d4:4c:6a:eb:8b:dd:fb: 29:6f:b1:c6:85:a2:77:eb:1c:30:45:39:64:0e:b5:3b:55:d5: 7c:40:06:55:3c:60:fc:67:a7:c6:d8:69:c6:ad:5e:bf:d3:52: 98:87:ed:46:11:a0:bb:68:46:47:a1:c4:cd:d1:ad:5b:3b:3a: 29:e9:40:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGTe4+ml0cz/Jbz6WtWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjljMDJkMjYxZjkxM2VhNWJmODNjMmJjN2MzMzQxNGE0 MmJjY2EwHhcNMjUxMjA1MjIwMTAxWhcNMjUxMjA2MjIwMTAxWjAzMTEwLwYDVQQD Eyg3Njk0Zjc1MjZlYzg3YjM2ZDIwMjc3NWViZGZiNzc3ZGQ5ZGYxZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsukn8+8WhM09vUWtJgQXvQlGBbVt TdNKlYddoLuvkaiEpw0mDGq1331UDKdmptiJLh1Yey3yaSJFX28hg0p7yO9aSXj8 kZBk76u/0pubyrjVTubPwqCAxdJBnqY9EqRhaosa7F+B1XPKNpMCuU/WCsbXVeWm 8z8nDthk25YqOU2WZ87Ga+zMjr8rUYYuE/lnH5QKiZQQLgKYFkBraIct4R+J+8vp h+FG7Rp3ba4gAkVzP5eJIg50j4rYhpPJ0jhilRQHuXhgWy+3TfS8RTFjn19kTX1T q4fHZQTmHu0mU/V+g3fl3Ozx8fCrGU97RsWR1e5DygG1Ux0faLVIy8IY0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaU91JuyHs20gJ3Xr37d33Z3x8jMB8GA1UdIwQY MBaAFF4pwC0mH5E+pb+Dwrx8M0FKQrzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjkt OWFjMWE3ZTRjNDA2LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjktOWFjMWE3ZTRjNDA2 LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz6jnwyw iAjWZ7XCb3dCGrw5N/jbtVKcfsbdPqXJuHOsDAB62DU6VyK2W76t6fHxQc4L6t0n h8QEGQEEVm9BwwkUz7fbXQr2hl8LMzf05x+ee2AnuHH+fW+KuHA24xaYMs3GAeea 553JQKKyvOfPi6xgIlGuDsUTWH90og8xuZI73ao4I9qfhh6lg/C555F400hcemsg kF099Of9lA5n/XmiFUL/GWfkfteNBvhs2/i71bZSftsINVUsd4Hp30jUTGrri937 KW+xxoWid+scMEU5ZA61O1XVfEAGVTxg/Genxthpxq1ev9NSmIftRhGgu2hGR6HE zdGtWzs6KelAdw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:11 2025 by rpki-client