This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft File: 56q82sOtn7MtJK1gyKJsueq41YU.mft (raw, json) Hash identifier: tLAlCK06Pfvn4/qWhzAQ7BuVRTi11+eH0h+kypIlVwY= Subject key identifier: 3A:C8:04:1C:16:72:34:EC:1F:E3:0C:50:E9:4B:F5:77:FE:4E:71:11 Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Certificate serial: 019B37212F3E5767F97D5330F596A30C085C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 15:01:20 +0000 Manifest this update: Fri 19 Dec 2025 15:01:20 +0000 Manifest next update: Sat 20 Dec 2025 15:01:20 +0000 Files and hashes: 1: 56q82sOtn7MtJK1gyKJsueq41YU.crl (hash: ClEQHN9iHgSPTKOx2a2Gcy0lQQ9FNY5BsDxdlKFCLdc=) 2: 8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa (hash: 62aQx/AwBMCJ8pFWHg2Z3I0/UbL8gX53YDgRIUnI4jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:2f:3e:57:67:f9:7d:53:30:f5:96:a3:0c:08:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Validity Not Before: Dec 19 15:01:20 2025 GMT Not After : Dec 20 15:01:20 2025 GMT Subject: CN=3ac8041c167234ec1fe30c50e94bf577fe4e7111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:c5:c5:2f:fd:9b:9b:f4:d6:79:df:ef:7e: b9:d8:77:7d:5e:90:95:f4:ed:06:6d:f0:cf:4f:54: 26:78:1d:2d:d8:76:b9:38:c2:bf:55:dd:d1:5a:4b: 82:d2:7d:63:23:41:57:68:6c:48:0e:14:02:33:6d: 0c:bb:c8:93:09:29:2a:c8:6f:62:51:c4:02:da:27: 03:12:dc:a7:10:fc:08:ee:e1:a8:e8:08:95:e1:06: 3b:99:c8:fd:98:6a:fb:31:0c:79:71:64:7c:c5:89: a1:60:c2:44:fe:c8:fc:46:88:c0:ec:68:a2:35:58: e7:98:12:67:e8:29:8d:c0:08:ee:a8:9a:a7:24:56: e6:8f:ee:89:74:4c:ec:c6:2a:ce:3e:e2:63:76:e6: 01:92:ed:78:ce:42:3d:1f:b1:f0:ba:62:62:4d:a9: 09:05:dd:64:a3:ce:f6:64:6c:de:8e:f0:f5:e5:45: f7:b0:28:8f:0b:b4:cb:3d:24:56:57:f6:95:bf:a9: 6d:48:04:eb:22:94:ef:0b:6d:27:03:18:96:9d:05: 60:6e:9f:4d:dd:35:34:68:8c:9e:d8:b5:be:4d:d0: 04:d2:05:14:ea:e9:33:7c:85:69:51:0f:46:ac:4c: 67:f3:5c:fa:b7:1b:0e:db:6b:68:71:e6:32:f8:a4: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C8:04:1C:16:72:34:EC:1F:E3:0C:50:E9:4B:F5:77:FE:4E:71:11 X509v3 Authority Key Identifier: keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:57:59:f3:99:7b:f2:dd:2f:9b:74:90:bd:84:1d:39:c2:56: ef:6d:0e:8e:21:a8:60:89:85:6a:56:66:51:3c:26:64:84:5a: 75:6e:dc:a9:c3:ea:56:5b:16:aa:a5:b3:0c:59:6c:fe:67:5a: 96:34:1e:16:e7:52:5e:04:5c:e6:9b:35:25:30:0c:d0:6a:55: 3f:aa:12:db:67:5d:48:0d:ff:ad:ef:ba:e1:56:1b:60:ac:9a: 68:9e:56:de:8a:b0:5e:45:8e:cb:9c:6a:a8:31:76:bd:e7:4d: ca:04:61:0d:b7:c6:d9:ab:c6:1a:4c:33:b2:b7:b8:63:87:e2: df:a1:05:45:a3:43:2b:a6:28:e6:dc:6a:c8:c9:11:05:11:8b: ca:7e:cf:d3:cc:47:26:94:89:ac:fd:d3:8b:41:31:2c:b3:f0: 33:f6:c7:77:3a:b2:01:c8:8f:ee:39:2c:7b:7a:de:b0:c3:00: a0:e1:1e:ac:8f:3f:ce:29:ee:a5:a7:19:40:9a:0b:d9:eb:3a: 94:52:f0:cd:79:7a:12:bf:e6:20:09:46:2e:07:72:54:6d:2d: 90:71:89:01:2f:41:f7:ec:9c:c1:5d:80:3e:4d:4a:a2:04:32: e2:19:bc:1d:57:60:0f:b4:3a:99:ed:52:60:66:92:6c:dd:88: fd:3a:e1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IS8+V2f5fVMw9ZajDAhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YWFiY2RhYzNhZDlmYjMyZDI0YWQ2MGM4YTI2Y2I5ZWFi OGQ1ODUwHhcNMjUxMjE5MTUwMTIwWhcNMjUxMjIwMTUwMTIwWjAzMTEwLwYDVQQD EygzYWM4MDQxYzE2NzIzNGVjMWZlMzBjNTBlOTRiZjU3N2ZlNGU3MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1fFxS/9m5v01nnf73652Hd9XpCV 9O0GbfDPT1QmeB0t2Ha5OMK/Vd3RWkuC0n1jI0FXaGxIDhQCM20Mu8iTCSkqyG9i UcQC2icDEtynEPwI7uGo6AiV4QY7mcj9mGr7MQx5cWR8xYmhYMJE/sj8RojA7Gii NVjnmBJn6CmNwAjuqJqnJFbmj+6JdEzsxirOPuJjduYBku14zkI9H7HwumJiTakJ Bd1ko872ZGzejvD15UX3sCiPC7TLPSRWV/aVv6ltSATrIpTvC20nAxiWnQVgbp9N 3TU0aIye2LW+TdAE0gUU6ukzfIVpUQ9GrExn81z6txsO22toceYy+KQpQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrIBBwWcjTsH+MMUOlL9Xf+TnERMB8GA1UdIwQY MBaAFOeqvNrDrZ+zLSStYMiibLnquNWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTIt ZTM2ZDBiOWI2NDVkLzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTItZTM2ZDBiOWI2NDVk LzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFdZ85l7 8t0vm3SQvYQdOcJW720OjiGoYImFalZmUTwmZIRadW7cqcPqVlsWqqWzDFls/mda ljQeFudSXgRc5ps1JTAM0GpVP6oS22ddSA3/re+64VYbYKyaaJ5W3oqwXkWOy5xq qDF2vedNygRhDbfG2avGGkwzsre4Y4fi36EFRaNDK6Yo5txqyMkRBRGLyn7P08xH JpSJrP3Ti0ExLLPwM/bHdzqyAciP7jkse3resMMAoOEerI8/zinupacZQJoL2es6 lFLwzXl6Er/mIAlGLgdyVG0tkHGJAS9B9+ycwV2APk1KogQy4hm8HVdgD7Q6me1S YGaSbN2I/Trhcw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:58 2025 by rpki-client