This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json) Hash identifier: N7KfpVqRL0pQtQFda6iu9JuG2HJSBqBWVrGRtq3/GHU= Subject key identifier: A0:48:B5:37:7A:A2:46:9F:D8:9B:CA:44:49:3F:3B:FC:2B:C3:5C:C9 Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Certificate serial: 019B0BC8FE879D21739ACC6D597F1F1234EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft Manifest number: 058F Signing time: Thu 11 Dec 2025 05:01:20 +0000 Manifest this update: Thu 11 Dec 2025 05:01:20 +0000 Manifest next update: Fri 12 Dec 2025 05:01:20 +0000 Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=) 2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=) 3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: gOBs0ap46OUUL9DjOjfbqOFC1lUZ+os0HxBgpMIUWBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:c8:fe:87:9d:21:73:9a:cc:6d:59:7f:1f:12:34:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Validity Not Before: Dec 11 05:01:20 2025 GMT Not After : Dec 12 05:01:20 2025 GMT Subject: CN=a048b5377aa2469fd89bca44493f3bfc2bc35cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:9f:9e:2c:24:81:da:68:2e:7b:15:78:b9: e4:9c:4d:94:fb:13:b2:7a:1f:b2:5d:25:f4:17:19: 69:9c:33:46:80:c6:4f:a3:54:80:8c:19:81:fa:6d: 23:29:13:b6:5f:a1:e8:42:17:25:67:2b:63:a5:ac: 00:6a:27:a7:67:78:5c:77:9f:42:1e:61:56:eb:c6: a6:19:2a:26:cb:4d:ee:dc:c3:ba:1c:bb:9f:f1:36: eb:f5:ce:48:31:b5:9c:8c:2f:28:ca:4a:f6:a0:05: 7c:7a:9e:5b:b9:f0:23:6d:b9:d4:9d:88:b4:ab:5d: e6:3a:28:75:70:23:1c:3d:4e:12:fe:03:c3:40:01: bd:9a:3d:8a:f1:e0:7e:6f:86:bf:30:06:02:a9:26: b2:55:d1:77:cb:4f:95:87:25:7e:cb:95:59:9e:b9: 1d:f0:01:33:50:2f:da:1f:d8:87:1d:bb:eb:e7:f5: 8b:94:57:0a:ae:8b:db:ab:5f:70:f2:c7:43:df:e5: e0:3f:b3:e5:ab:57:39:53:fe:69:55:41:98:68:94: b9:6e:6e:9c:ef:1e:a2:d6:76:a9:c3:ba:74:3d:e0: e1:b1:55:bc:bd:da:e2:79:f6:8a:fd:10:14:60:30: 6b:f1:64:1f:f1:8e:06:03:b2:ce:8e:79:bf:cd:8f: 34:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:48:B5:37:7A:A2:46:9F:D8:9B:CA:44:49:3F:3B:FC:2B:C3:5C:C9 X509v3 Authority Key Identifier: keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d0:5a:28:74:d4:05:d2:cc:42:9e:f4:93:8d:af:f1:19:cd: b8:14:69:5d:fa:5a:91:a7:1d:25:45:81:33:d9:73:31:ce:f0: 1e:d4:1c:a1:09:61:21:e7:3d:01:38:6a:69:59:e5:e6:bb:38: 3c:1a:1a:01:bf:e2:76:6e:73:3c:d0:53:bd:a1:f8:41:7d:53: c0:77:e2:1a:7f:b9:ef:bc:31:11:0c:0d:47:1d:95:46:f9:72: e5:62:03:46:da:f7:c2:fc:80:ab:7d:7b:41:b2:43:a3:29:5e: 14:80:9b:4b:7e:09:0a:bc:40:34:18:38:d2:3f:ab:f9:17:5c: c4:f3:f1:64:15:fd:a4:78:d8:2d:b1:83:c1:7a:bb:00:99:36: e5:f7:24:47:1f:88:87:09:f0:40:9e:d1:e8:e1:20:30:d1:e8: 5e:14:8b:65:de:72:5c:5e:92:21:66:2b:c5:37:32:6e:ae:5a: 0b:91:d2:1d:09:46:dd:95:f8:6b:b8:66:64:af:ab:40:f8:fa: da:f1:b3:ff:1a:81:d7:13:3f:47:b4:b0:f8:79:2e:f5:1b:66: ed:88:c1:36:95:5a:d8:15:bb:a4:0b:59:f2:c8:09:b3:66:4e: 3e:02:53:4b:24:28:de:0b:34:f6:59:f5:89:4a:75:43:5d:3f: 66:90:c1:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLyP6HnSFzmsxtWX8fEjTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDEzOTg5NzZiMmY0ODc3MjViYzEzZDdmYWViZWQzZTE2 ZDgyYzkwHhcNMjUxMjExMDUwMTIwWhcNMjUxMjEyMDUwMTIwWjAzMTEwLwYDVQQD EyhhMDQ4YjUzNzdhYTI0NjlmZDg5YmNhNDQ0OTNmM2JmYzJiYzM1Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniqfniwkgdpoLnsVeLnknE2U+xOy eh+yXSX0FxlpnDNGgMZPo1SAjBmB+m0jKRO2X6HoQhclZytjpawAaienZ3hcd59C HmFW68amGSomy03u3MO6HLuf8Tbr9c5IMbWcjC8oykr2oAV8ep5bufAjbbnUnYi0 q13mOih1cCMcPU4S/gPDQAG9mj2K8eB+b4a/MAYCqSayVdF3y0+VhyV+y5VZnrkd 8AEzUC/aH9iHHbvr5/WLlFcKrovbq19w8sdD3+XgP7Plq1c5U/5pVUGYaJS5bm6c 7x6i1napw7p0PeDhsVW8vdriefaK/RAUYDBr8WQf8Y4GA7LOjnm/zY80cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBItTd6okaf2JvKREk/O/wrw1zJMB8GA1UdIwQY MBaAFF3ROYl2svSHclvBPX+uvtPhbYLJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYt NjAwODEwNjM0ODc4LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYtNjAwODEwNjM0ODc4 LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtBaKHTU BdLMQp70k42v8RnNuBRpXfpakacdJUWBM9lzMc7wHtQcoQlhIec9AThqaVnl5rs4 PBoaAb/idm5zPNBTvaH4QX1TwHfiGn+577wxEQwNRx2VRvly5WIDRtr3wvyAq317 QbJDoyleFICbS34JCrxANBg40j+r+RdcxPPxZBX9pHjYLbGDwXq7AJk25fckRx+I hwnwQJ7R6OEgMNHoXhSLZd5yXF6SIWYrxTcybq5aC5HSHQlG3ZX4a7hmZK+rQPj6 2vGz/xqB1xM/R7Sw+Hku9Rtm7YjBNpVa2BW7pAtZ8sgJs2ZOPgJTSyQo3gs09ln1 iUp1Q10/ZpDBfQ== -----END CERTIFICATE-----Generated at Thu Dec 11 06:59:13 2025 by rpki-client