This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json) Hash identifier: tQkY+rNHURLQ8HrSAovKonRGlh+psfjYd1RPT8ORvOg= Subject key identifier: 00:BF:FC:45:EA:FD:7D:D2:CC:DC:B2:53:D1:54:BE:6B:6E:9D:5E:ED Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e Certificate serial: 019AF46567CC885EB9E5AE63CEF63CFE22F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft Manifest number: 0B2E Signing time: Sat 06 Dec 2025 16:01:17 +0000 Manifest this update: Sat 06 Dec 2025 16:01:17 +0000 Manifest next update: Sun 07 Dec 2025 16:01:17 +0000 Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=) 2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: O22FMbxL8tTKFbhjBIAzrk1kUiTox4hvNTShBPEXcNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:67:cc:88:5e:b9:e5:ae:63:ce:f6:3c:fe:22:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e Validity Not Before: Dec 6 16:01:17 2025 GMT Not After : Dec 7 16:01:17 2025 GMT Subject: CN=00bffc45eafd7dd2ccdcb253d154be6b6e9d5eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:8f:21:cf:6c:c7:32:72:a8:4f:48:b0:89: 10:9c:41:54:d3:ad:96:ae:d1:71:1f:cb:f2:3e:8f: 19:4d:47:c2:9e:4a:7c:1a:22:3e:96:29:a6:7b:25: e7:8c:4b:3e:be:37:72:0d:87:ef:e5:21:94:9d:7d: ab:34:1f:64:ab:cf:6d:8e:df:ba:02:e6:e1:d4:c0: b2:03:e7:22:49:13:eb:a1:28:14:df:98:f9:82:19: 8b:18:cb:52:84:96:52:7e:5f:26:6b:b2:53:21:37: ef:21:c6:a2:92:f3:c5:29:10:7c:0e:a2:70:d1:d6: 57:c7:38:c4:9f:8e:0b:2e:b4:0c:77:44:4f:35:88: 93:5d:d1:00:1a:93:03:c1:97:ac:42:a6:88:9b:a4: 76:95:a4:08:cd:86:e3:87:83:97:c2:87:61:b8:e5: bd:2b:9a:83:c6:4c:bc:9d:b2:dc:23:78:e9:a2:db: f4:30:20:e0:07:63:1d:f1:1b:30:ab:3c:38:bb:19: 3a:c4:3b:96:23:7e:cd:09:ff:67:f0:38:13:24:77: 12:f3:74:4b:2e:4a:c4:c5:cb:8d:46:db:dd:18:61: 66:4f:75:dc:26:7e:3f:62:6f:53:f6:35:31:5d:b1: 8d:f3:ad:0b:f7:9b:05:17:3d:91:02:0d:e9:dd:1e: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BF:FC:45:EA:FD:7D:D2:CC:DC:B2:53:D1:54:BE:6B:6E:9D:5E:ED X509v3 Authority Key Identifier: keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e0:82:2a:33:cd:3e:42:64:9d:87:23:92:da:43:3b:fe:c5: 31:04:62:f3:c8:01:98:a7:ff:02:e6:e2:8e:07:a0:bc:0f:bb: 19:31:8d:da:6e:cd:27:e1:c8:99:c0:b8:d2:fd:2a:3f:29:0d: 1e:12:01:b2:d5:b8:2c:88:3e:8d:fc:e2:b8:d1:58:a0:40:61: 4a:73:01:31:91:fe:66:18:da:be:a3:d5:d3:e3:59:75:23:0d: 82:02:5e:6e:cd:47:5e:16:7a:eb:20:8d:e3:59:15:11:bc:35: 50:b7:5d:58:0a:75:cf:90:f8:54:db:30:bf:9d:c1:80:c9:23: 5c:63:62:e3:ff:aa:19:96:5a:70:3b:24:ad:47:be:59:45:97: aa:1a:4c:f2:75:6d:0a:42:69:d3:e4:dd:fa:86:02:a1:58:65: 2d:6a:a8:20:cb:ee:26:7b:a7:f0:90:16:c7:17:d5:18:e7:76: 20:f9:81:19:aa:8b:23:84:90:19:9c:e4:6f:8e:18:a3:2d:95: e2:2f:49:c0:61:1e:87:b0:a4:07:7d:41:f7:14:bf:1c:a2:dc: 03:81:3e:1d:bc:4b:0c:da:d6:65:64:e8:94:73:75:f8:fe:0a: 15:b4:28:1e:22:17:6c:85:42:cb:32:81:0b:47:76:80:7b:db: 36:36:2b:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWfMiF655a5jzvY8/iL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTNkYTc1N2MxN2ZlMzhhMGU2Y2Q3MDI3NWM3M2M4YzY5 Yzg5NmUwHhcNMjUxMjA2MTYwMTE3WhcNMjUxMjA3MTYwMTE3WjAzMTEwLwYDVQQD EygwMGJmZmM0NWVhZmQ3ZGQyY2NkY2IyNTNkMTU0YmU2YjZlOWQ1ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxCPIc9sxzJyqE9IsIkQnEFU062W rtFxH8vyPo8ZTUfCnkp8GiI+limmeyXnjEs+vjdyDYfv5SGUnX2rNB9kq89tjt+6 Aubh1MCyA+ciSRProSgU35j5ghmLGMtShJZSfl8ma7JTITfvIcaikvPFKRB8DqJw 0dZXxzjEn44LLrQMd0RPNYiTXdEAGpMDwZesQqaIm6R2laQIzYbjh4OXwodhuOW9 K5qDxky8nbLcI3jpotv0MCDgB2Md8Rswqzw4uxk6xDuWI37NCf9n8DgTJHcS83RL LkrExcuNRtvdGGFmT3XcJn4/Ym9T9jUxXbGN860L95sFFz2RAg3p3R45BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC//EXq/X3SzNyyU9FUvmtunV7tMB8GA1UdIwQY MBaAFF+T2nV8F/44oObNcCdcc8jGnIluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83OWU0MzktZmMwYi00ZTZlLThiMDYt MzlmYjY2YTI2ZWY4LzEvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83OWU0MzktZmMwYi00ZTZlLThiMDYtMzlmYjY2YTI2ZWY4 LzEvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+CCKjPN PkJknYcjktpDO/7FMQRi88gBmKf/AubijgegvA+7GTGN2m7NJ+HImcC40v0qPykN HhIBstW4LIg+jfziuNFYoEBhSnMBMZH+ZhjavqPV0+NZdSMNggJebs1HXhZ66yCN 41kVEbw1ULddWAp1z5D4VNswv53BgMkjXGNi4/+qGZZacDskrUe+WUWXqhpM8nVt CkJp0+Td+oYCoVhlLWqoIMvuJnun8JAWxxfVGOd2IPmBGaqLI4SQGZzkb44Yoy2V 4i9JwGEeh7CkB31B9xS/HKLcA4E+HbxLDNrWZWTolHN1+P4KFbQoHiIXbIVCyzKB C0d2gHvbNjYrPA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:05 2025 by rpki-client