This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json) Hash identifier: kqvztPTd0iKHO15E5BK40gmjI/q4+kJqvJXikDaLlLc= Subject key identifier: 51:2F:B2:EB:5E:7F:8D:D9:71:2E:E4:64:BD:A4:B5:93:0E:4B:AC:CD Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Certificate serial: 019B10819E201DF6AAA74CA3D481CA4EC210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft Manifest number: 0A93 Signing time: Fri 12 Dec 2025 03:01:28 +0000 Manifest this update: Fri 12 Dec 2025 03:01:28 +0000 Manifest next update: Sat 13 Dec 2025 03:01:28 +0000 Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: GQ9uVpavUNuXg4oRRU6jB25ptaRl+ucT8FQPMWjkXkc=) 2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:9e:20:1d:f6:aa:a7:4c:a3:d4:81:ca:4e:c2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Validity Not Before: Dec 12 03:01:28 2025 GMT Not After : Dec 13 03:01:28 2025 GMT Subject: CN=512fb2eb5e7f8dd9712ee464bda4b5930e4baccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:c5:3f:f4:d0:26:a5:b9:15:c7:21:ce:a3: 77:41:f9:11:57:30:92:e6:58:e6:d9:06:70:5f:c8: dd:ca:02:5c:f9:01:3b:58:05:fb:e1:a4:9f:f0:71: a3:00:cd:29:91:82:44:2f:ec:4f:9e:aa:fa:2b:98: 64:53:b4:84:ae:f8:3c:d7:73:53:1f:f1:a1:b0:1c: 7c:ab:86:22:4c:9c:35:f6:c8:c2:23:9a:92:e8:84: 5f:84:b4:62:19:b8:4d:68:51:f7:72:67:97:7a:f6: ee:d0:a3:9b:17:40:ea:dc:b6:80:11:97:fd:ef:ca: bd:6b:76:25:98:21:c5:d9:8c:11:ef:86:29:75:65: 15:68:67:02:c0:cc:66:4b:c7:d8:5c:f2:9e:ab:7b: 10:c4:06:3c:49:5a:02:92:79:1b:a8:71:47:c5:da: 6b:3b:b0:0b:35:fe:92:ea:b9:da:57:7d:9c:25:f1: 6c:44:1e:53:cd:7c:04:47:8b:91:73:e9:77:44:d6: 47:e2:47:b4:33:f5:d3:2a:2f:13:cf:f4:dd:41:10: 78:7e:1d:cb:fd:29:dd:5d:ee:92:d3:d1:3f:f0:6b: 61:f8:4a:23:71:96:e0:b0:8e:96:1b:f4:5b:d1:15: 01:93:91:46:1b:e7:c9:74:7a:68:a7:69:43:17:16: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2F:B2:EB:5E:7F:8D:D9:71:2E:E4:64:BD:A4:B5:93:0E:4B:AC:CD X509v3 Authority Key Identifier: keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:bb:ec:02:cf:29:c3:13:c6:70:2e:94:85:58:b2:af:dc:94: 06:cd:16:25:c2:6c:f5:1c:6c:67:09:55:53:7d:9a:43:be:df: fb:c6:28:f1:41:3d:2b:cc:5b:05:06:44:e1:4a:8b:b6:fa:b4: ca:b8:fc:18:8d:b6:4d:a7:27:2e:98:a4:f5:e1:ec:38:e0:45: 2e:4b:3d:12:14:cd:a2:a1:56:ad:ae:a8:56:c5:f0:13:12:c1: 5b:f3:33:48:a4:91:23:09:ff:36:b5:23:a5:5e:1b:a8:a6:d8: dc:01:b6:e2:d5:e2:55:70:66:21:a9:28:09:d4:68:f0:8a:d2: 88:b3:3b:18:22:23:bb:45:c0:c3:70:bb:c5:e0:12:0f:b9:71: e3:0b:e7:da:df:4d:8e:51:54:a2:d1:96:31:42:b4:c3:35:9e: ea:07:88:12:97:12:fc:f9:d1:b4:b7:2a:32:d8:01:08:d8:18: 90:bc:b0:f4:14:75:71:5e:86:1e:d5:40:4a:e8:88:55:a3:54: 14:00:dc:00:e4:f6:c4:c2:f6:79:20:bd:fd:98:48:d2:6a:fc: c1:12:4b:b4:5f:dc:ec:53:ab:32:1d:cb:10:a8:63:7a:63:68: 1b:6d:00:e8:e6:77:dd:6e:9a:f3:7f:4b:91:ed:f8:06:ad:7c: 2a:15:26:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgZ4gHfaqp0yj1IHKTsIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3 N2Q0ZDEwHhcNMjUxMjEyMDMwMTI4WhcNMjUxMjEzMDMwMTI4WjAzMTEwLwYDVQQD Eyg1MTJmYjJlYjVlN2Y4ZGQ5NzEyZWU0NjRiZGE0YjU5MzBlNGJhY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QDFP/TQJqW5FcchzqN3QfkRVzCS 5ljm2QZwX8jdygJc+QE7WAX74aSf8HGjAM0pkYJEL+xPnqr6K5hkU7SErvg813NT H/GhsBx8q4YiTJw19sjCI5qS6IRfhLRiGbhNaFH3cmeXevbu0KObF0Dq3LaAEZf9 78q9a3YlmCHF2YwR74YpdWUVaGcCwMxmS8fYXPKeq3sQxAY8SVoCknkbqHFHxdpr O7ALNf6S6rnaV32cJfFsRB5TzXwER4uRc+l3RNZH4ke0M/XTKi8Tz/TdQRB4fh3L /SndXe6S09E/8Gth+EojcZbgsI6WG/Rb0RUBk5FGG+fJdHpop2lDFxZvaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEvsutef43ZcS7kZL2ktZMOS6zNMB8GA1UdIwQY MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2 LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLvsAs8p wxPGcC6UhViyr9yUBs0WJcJs9RxsZwlVU32aQ77f+8Yo8UE9K8xbBQZE4UqLtvq0 yrj8GI22TacnLpik9eHsOOBFLks9EhTNoqFWra6oVsXwExLBW/MzSKSRIwn/NrUj pV4bqKbY3AG24tXiVXBmIakoCdRo8IrSiLM7GCIju0XAw3C7xeASD7lx4wvn2t9N jlFUotGWMUK0wzWe6geIEpcS/PnRtLcqMtgBCNgYkLyw9BR1cV6GHtVASuiIVaNU FADcAOT2xML2eSC9/ZhI0mr8wRJLtF/c7FOrMh3LEKhjemNoG20A6OZ33W6a839L ke34Bq18KhUmGQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:35 2025 by rpki-client