This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft File: 56q82sOtn7MtJK1gyKJsueq41YU.mft (raw, json) Hash identifier: DbQ8ICBw32d4z8dfJFOiK7uJroZdvwoTMmkNZqSMigw= Subject key identifier: 86:C8:6C:25:25:D1:B9:B9:1C:4F:FD:4C:A5:9E:EB:7C:66:A3:A8:BA Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Certificate serial: 019AF19B041E1605FADBB18BC1FFF1D1ECD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: 56q82sOtn7MtJK1gyKJsueq41YU.crl (hash: cIZl1JlmHr2J4ZM+PQKN5jrXOZWmZBIw+Nax6Awlito=) 2: 8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa (hash: 62aQx/AwBMCJ8pFWHg2Z3I0/UbL8gX53YDgRIUnI4jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:04:1e:16:05:fa:db:b1:8b:c1:ff:f1:d1:ec:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=86c86c2525d1b9b91c4ffd4ca59eeb7c66a3a8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:13:c5:df:7a:4f:08:f8:8f:40:90:7d:87: 0e:38:7b:79:4d:f3:07:25:9c:e5:10:19:a4:e6:d5: a4:ce:a3:37:f8:14:3b:8b:af:99:a9:f2:f0:2a:87: 33:99:37:d1:c7:91:86:77:a2:c7:6f:7b:c2:3e:fa: 9f:39:b6:1c:89:1a:4c:e3:45:98:09:c1:ba:96:76: 70:ec:95:42:88:25:39:51:5d:0b:e6:7f:10:c5:54: c6:40:58:07:37:84:78:79:4f:7e:10:5f:b8:db:a5: d4:1f:9f:c0:7d:ae:d8:06:fc:c8:03:b6:81:76:93: 27:7f:99:77:62:5a:3b:62:bd:c6:60:bb:3b:9a:72: 24:ad:38:8d:d6:77:0c:7b:55:20:63:57:72:45:3a: 36:41:20:b0:e2:15:c5:f0:2c:77:bf:8d:c0:63:46: db:97:2c:6d:6d:f1:0e:09:2c:3e:e8:35:02:71:5d: 50:93:89:66:08:95:90:b9:48:8d:bf:08:f5:7a:51: 9f:a7:6a:7b:ef:d7:94:dc:36:9a:3a:da:8b:fa:96: 83:d9:64:be:b3:97:95:ae:75:31:c5:c3:e6:ed:65: cd:08:33:d3:f9:b4:e5:69:19:a3:86:59:38:27:5a: d1:db:11:a4:2b:87:c5:23:07:b6:85:8f:b5:72:c2: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C8:6C:25:25:D1:B9:B9:1C:4F:FD:4C:A5:9E:EB:7C:66:A3:A8:BA X509v3 Authority Key Identifier: keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4e:c0:c3:e7:5c:a5:c0:b6:05:52:b3:ed:ae:35:79:4d:f0: b0:7a:93:02:32:75:ce:c7:38:32:45:b0:a0:6f:91:54:0c:97: d8:ca:fa:8d:c3:c4:43:bd:ba:e6:8e:ea:78:5a:b7:8f:e5:ca: 3d:5a:61:e2:69:b0:d4:31:3a:74:82:b9:38:8f:5a:66:b4:d4: fe:48:0e:ba:05:34:88:2b:22:55:0a:31:96:03:a3:05:eb:b4: 11:7a:f4:94:61:ea:06:d1:03:df:56:17:ea:5f:83:dd:ba:ab: fb:84:b5:a4:e8:44:db:b0:ca:a5:26:4d:43:da:5d:16:34:d5: 9c:65:fc:19:8f:37:0e:13:83:ec:64:40:ea:78:8a:df:3f:8a: 8e:a7:01:71:0f:7c:59:1b:e9:21:ee:64:f4:69:ed:be:4d:63: 27:02:89:d7:5e:54:02:6b:15:63:00:0b:37:9a:da:65:0e:1b: 94:8a:a8:e9:5e:74:d1:ea:50:b6:7f:6b:a4:04:7e:a8:34:c4: b8:8b:1c:b5:0c:74:51:3a:3c:ca:da:dc:da:58:cc:5e:99:8a: d8:ac:d5:5b:dc:4e:89:be:7c:99:27:57:e3:c2:38:11:83:22: da:17:00:7b:7d:6d:47:58:9f:46:4f:13:fa:b0:db:cf:c5:13: f2:15:ec:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwQeFgX627GLwf/x0ezWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YWFiY2RhYzNhZDlmYjMyZDI0YWQ2MGM4YTI2Y2I5ZWFi OGQ1ODUwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD Eyg4NmM4NmMyNTI1ZDFiOWI5MWM0ZmZkNGNhNTllZWI3YzY2YTNhOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM8Txd96Twj4j0CQfYcOOHt5TfMH JZzlEBmk5tWkzqM3+BQ7i6+ZqfLwKoczmTfRx5GGd6LHb3vCPvqfObYciRpM40WY CcG6lnZw7JVCiCU5UV0L5n8QxVTGQFgHN4R4eU9+EF+426XUH5/Afa7YBvzIA7aB dpMnf5l3Ylo7Yr3GYLs7mnIkrTiN1ncMe1UgY1dyRTo2QSCw4hXF8Cx3v43AY0bb lyxtbfEOCSw+6DUCcV1Qk4lmCJWQuUiNvwj1elGfp2p779eU3DaaOtqL+paD2WS+ s5eVrnUxxcPm7WXNCDPT+bTlaRmjhlk4J1rR2xGkK4fFIwe2hY+1csIPMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbIbCUl0bm5HE/9TKWe63xmo6i6MB8GA1UdIwQY MBaAFOeqvNrDrZ+zLSStYMiibLnquNWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTIt ZTM2ZDBiOWI2NDVkLzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTItZTM2ZDBiOWI2NDVk LzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk7Aw+dc pcC2BVKz7a41eU3wsHqTAjJ1zsc4MkWwoG+RVAyX2Mr6jcPEQ7265o7qeFq3j+XK PVph4mmw1DE6dIK5OI9aZrTU/kgOugU0iCsiVQoxlgOjBeu0EXr0lGHqBtED31YX 6l+D3bqr+4S1pOhE27DKpSZNQ9pdFjTVnGX8GY83DhOD7GRA6niK3z+KjqcBcQ98 WRvpIe5k9Gntvk1jJwKJ115UAmsVYwALN5raZQ4blIqo6V500epQtn9rpAR+qDTE uIsctQx0UTo8ytrc2ljMXpmK2KzVW9xOib58mSdX48I4EYMi2hcAe31tR1ifRk8T +rDbz8UT8hXsbw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:58 2025 by rpki-client