This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json) Hash identifier: hIJmn1z+4m3F5rnG0W+drxxRwgM/tkIJh2z8OhTT0FU= Subject key identifier: 0E:1C:FC:68:DC:59:A8:38:50:B0:A2:FD:D1:54:DF:1A:B9:16:74:FC Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Certificate serial: 019B0AECF4D1C266FD81656FF5EE1EE9FE4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft Manifest number: 0569 Signing time: Thu 11 Dec 2025 01:00:59 +0000 Manifest this update: Thu 11 Dec 2025 01:00:59 +0000 Manifest next update: Fri 12 Dec 2025 01:00:59 +0000 Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=) 2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: fLOm5Fb5jr5pZmfJ8Q7DvaoE6dp0gZLUiHQSSAxU5V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:ec:f4:d1:c2:66:fd:81:65:6f:f5:ee:1e:e9:fe:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931 Validity Not Before: Dec 11 01:00:59 2025 GMT Not After : Dec 12 01:00:59 2025 GMT Subject: CN=0e1cfc68dc59a83850b0a2fdd154df1ab91674fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c9:32:a5:88:6f:a5:54:ea:21:b3:92:81:15: 64:97:cf:b1:93:06:16:08:8f:3f:5a:7f:54:b2:d1: 0b:e7:b7:9f:d2:6c:b4:8f:5e:a5:b1:6c:1b:b9:bf: b0:d5:0b:7c:ff:24:85:14:b4:de:d7:e0:fb:92:c0: 91:99:9b:d5:f3:8c:8d:0b:7d:8f:17:70:97:48:80: e2:35:2e:6d:47:32:84:df:a8:b4:50:c8:49:27:51: 15:fe:dc:20:7a:dc:46:73:fd:c7:2a:73:46:6c:0f: 75:d6:b4:76:a2:2c:6c:5f:ce:1c:3f:e0:f3:3f:50: 77:25:ea:2c:06:ef:c9:70:0d:db:95:1e:51:08:bb: e2:b3:cf:ee:be:d5:04:88:c4:e9:61:77:b0:25:53: f3:30:5c:f1:bb:b6:84:a5:83:c7:ff:e5:cc:2e:c7: ad:e7:db:a7:53:a2:f9:a8:25:73:ef:f3:79:10:53: f6:6e:af:91:d8:ab:da:d0:a1:19:21:02:c3:45:4a: 4b:78:35:55:80:9c:92:a7:f8:24:57:94:53:5a:0f: cd:44:3d:3e:ab:86:d4:27:ec:45:16:fe:77:a9:b0: fd:a2:c9:8d:0b:80:3b:58:aa:37:23:1e:64:1c:cf: d9:97:22:3f:e3:f2:7c:8e:6f:aa:a0:a2:c9:20:95: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1C:FC:68:DC:59:A8:38:50:B0:A2:FD:D1:54:DF:1A:B9:16:74:FC X509v3 Authority Key Identifier: keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:78:79:e8:f9:34:ef:24:c0:b1:e7:6a:a5:cc:ba:b5:43: 7f:f2:8d:af:03:c5:f8:44:de:f7:53:7f:d0:22:05:57:ae:10: c8:bc:f9:9a:5d:2c:b2:e1:51:18:7a:75:2e:ea:20:75:1e:d3: 75:4b:2c:c9:e9:18:0d:69:4e:58:da:d2:65:9a:a9:cd:93:b0: 0f:14:4a:4c:d5:21:33:2e:c2:1f:92:f9:50:a5:c5:29:6e:83: 6f:e3:22:81:83:0c:67:03:d5:98:44:3c:0c:2a:44:c8:e5:b0: bf:e8:cc:85:0b:a3:fd:f6:b4:ba:a7:4d:66:cc:94:84:07:38: 75:f4:ee:93:02:b3:9d:60:1e:f0:11:d7:69:f0:d4:b4:ba:8b: c4:95:1e:c9:fe:3a:b4:98:ec:d3:7e:b2:11:a8:27:f4:06:0d: 1b:db:13:ae:a2:7f:a4:96:2f:56:2d:5c:aa:b3:76:95:18:65: 45:b9:37:d4:05:a9:e1:9f:ab:9a:7b:cc:c5:48:33:e6:c1:ef: 8c:bc:7b:5b:70:11:27:ad:e7:89:bd:d4:39:f8:76:fa:92:e5: e9:9f:9b:f4:68:bf:67:95:b2:93:ee:f2:49:e6:be:a4:90:e1: 95:c8:6e:7a:e0:d4:f8:7f:d5:b4:92:e6:80:cf:cf:d8:2c:f0: e1:d7:17:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsK7PTRwmb9gWVv9e4e6f5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2U1YTJjZjZkMjgwMTVkYmNhYTI4NTBkMjAxM2IzNjVl NGM5MzEwHhcNMjUxMjExMDEwMDU5WhcNMjUxMjEyMDEwMDU5WjAzMTEwLwYDVQQD EygwZTFjZmM2OGRjNTlhODM4NTBiMGEyZmRkMTU0ZGYxYWI5MTY3NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMkypYhvpVTqIbOSgRVkl8+xkwYW CI8/Wn9UstEL57ef0my0j16lsWwbub+w1Qt8/ySFFLTe1+D7ksCRmZvV84yNC32P F3CXSIDiNS5tRzKE36i0UMhJJ1EV/twgetxGc/3HKnNGbA911rR2oixsX84cP+Dz P1B3JeosBu/JcA3blR5RCLvis8/uvtUEiMTpYXewJVPzMFzxu7aEpYPH/+XMLset 59unU6L5qCVz7/N5EFP2bq+R2Kva0KEZIQLDRUpLeDVVgJySp/gkV5RTWg/NRD0+ q4bUJ+xFFv53qbD9osmNC4A7WKo3Ix5kHM/ZlyI/4/J8jm+qoKLJIJUVjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4c/GjcWag4ULCi/dFU3xq5FnT8MB8GA1UdIwQY MBaAFMQ+Wiz20oAV28qihQ0gE7Nl5MkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEt OGQ2Zjc0ODNlNjMyLzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8wMmNmMDgtMGRiNS00MjRlLThmNTEtOGQ2Zjc0ODNlNjMy LzEveEQ1YUxQYlNnQlhieXFLRkRTQVRzMlhreVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUml4eej5 NO8kwLHnaqXMurVDf/KNrwPF+ETe91N/0CIFV64QyLz5ml0ssuFRGHp1LuogdR7T dUssyekYDWlOWNrSZZqpzZOwDxRKTNUhMy7CH5L5UKXFKW6Db+MigYMMZwPVmEQ8 DCpEyOWwv+jMhQuj/fa0uqdNZsyUhAc4dfTukwKznWAe8BHXafDUtLqLxJUeyf46 tJjs036yEagn9AYNG9sTrqJ/pJYvVi1cqrN2lRhlRbk31AWp4Z+rmnvMxUgz5sHv jLx7W3ARJ63nib3UOfh2+pLl6Z+b9Gi/Z5Wyk+7ySea+pJDhlchueuDU+H/VtJLm gM/P2Czw4dcXrQ== -----END CERTIFICATE-----Generated at Thu Dec 11 06:59:54 2025 by rpki-client