This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft File: Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json) Hash identifier: dJu7gqRf4W0pLdlIAVPvFuUKRV9iMaGkMri9Y7fa/AU= Subject key identifier: CF:D4:A7:D3:72:D4:E7:BD:C2:77:8E:F5:A2:D1:9C:E5:B4:CB:32:77 Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C Certificate issuer: /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c Certificate serial: 019B2D0C3CA14C7A1740DC29E4CAEDB179D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft Manifest number: 04E2 Signing time: Wed 17 Dec 2025 16:02:15 +0000 Manifest this update: Wed 17 Dec 2025 16:02:15 +0000 Manifest next update: Thu 18 Dec 2025 16:02:15 +0000 Files and hashes: 1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: JmwDRUk8JR2fZzcfYvNeUJHH4GuA1QP8UcjFxHwSyqU=) 2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:3c:a1:4c:7a:17:40:dc:29:e4:ca:ed:b1:79:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c Validity Not Before: Dec 17 16:02:15 2025 GMT Not After : Dec 18 16:02:15 2025 GMT Subject: CN=cfd4a7d372d4e7bdc2778ef5a2d19ce5b4cb3277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:68:83:60:ef:89:ff:dc:a4:fb:80:f1:d9:f8: 33:fa:b9:2b:0c:17:32:99:1c:97:02:e5:1a:e9:7c: 02:b1:1e:c4:76:fb:62:18:cb:6f:14:fe:5d:ad:a6: 02:ce:cb:27:1c:4a:95:08:ee:2b:f5:58:95:41:42: 74:78:e0:cd:b7:be:fb:8a:3e:f5:a5:4c:98:1f:bb: 0e:7b:11:5e:bc:a3:a9:b3:eb:58:91:e3:cf:95:5d: 60:ac:43:91:dd:4f:38:30:d1:2d:9d:b1:c8:51:a7: ec:b9:9f:53:c2:5b:9b:92:f0:8d:59:f2:f0:55:09: a1:44:00:e4:4f:b3:96:0e:ea:ae:40:0a:2f:69:a0: dd:50:c9:bf:16:2c:1c:c7:e6:77:79:76:14:38:e4: a3:48:cc:d9:51:29:17:34:e1:82:c2:c2:3b:18:98: 21:2c:3d:83:e0:25:72:e3:d4:20:2f:72:f4:65:ec: 48:d1:cd:cc:d1:44:47:8c:b6:ba:29:f7:48:fb:5e: 57:95:70:fb:de:5b:02:52:72:c7:66:c2:c1:96:a4: 4a:dc:d8:f1:56:f9:53:94:1f:46:ee:c6:bf:1c:25: 70:b9:e9:2c:10:dc:df:87:c5:0f:45:3c:01:fb:e6: 69:8e:c3:9d:d9:3f:0f:63:ba:a9:de:15:4c:42:50: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:A7:D3:72:D4:E7:BD:C2:77:8E:F5:A2:D1:9C:E5:B4:CB:32:77 X509v3 Authority Key Identifier: keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:39:fe:5b:e8:11:5e:c8:b7:8a:c3:7f:e6:f1:d4:1e:83:f1: b2:f4:e4:3e:11:8c:22:37:90:c3:3c:9a:f0:29:26:2d:df:24: 32:62:89:e9:de:58:b9:0b:0e:b1:d1:11:ec:f4:43:59:fb:27: 2c:e7:de:bd:b6:fd:79:a7:ed:44:77:ae:d2:87:e7:18:2b:f7: 06:c8:00:41:87:3c:cc:e1:ad:c0:f8:9c:1c:8e:f4:de:a5:1c: ff:3d:bf:42:44:d3:0b:32:03:f2:6e:a8:71:83:34:30:77:f6: 43:70:4f:92:f1:ad:97:af:ea:45:da:60:a0:7b:79:7c:62:54: cf:90:98:a2:ba:7d:4a:b5:46:be:20:67:40:53:b7:b2:6e:09: f0:4c:c9:62:04:53:79:8e:2b:49:b5:61:8c:e2:0a:e4:69:ac: 49:71:cf:68:99:a0:7a:97:cb:ae:18:85:a1:be:43:4c:ca:39: 1d:ea:09:46:ed:1a:99:60:e1:4f:c1:a5:cd:05:1a:f0:64:b2: 8f:e5:69:82:f3:15:af:a4:4d:b0:c6:ec:d2:5b:a5:57:b4:8b: ed:b7:00:62:a3:10:e7:53:1b:37:6a:3a:41:f0:68:33:2b:85: 1c:06:c5:64:07:e2:b3:10:ff:57:f3:82:e6:9a:86:01:03:67: ef:f9:9a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDDyhTHoXQNwp5MrtsXnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNTdhMWZjYmYyZTc1YTJlMTAzNGNhNzRhMGU5NzI2MjNi YmM0OWMwHhcNMjUxMjE3MTYwMjE1WhcNMjUxMjE4MTYwMjE1WjAzMTEwLwYDVQQD EyhjZmQ0YTdkMzcyZDRlN2JkYzI3NzhlZjVhMmQxOWNlNWI0Y2IzMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWiDYO+J/9yk+4Dx2fgz+rkrDBcy mRyXAuUa6XwCsR7EdvtiGMtvFP5draYCzssnHEqVCO4r9ViVQUJ0eODNt777ij71 pUyYH7sOexFevKOps+tYkePPlV1grEOR3U84MNEtnbHIUafsuZ9TwlubkvCNWfLw VQmhRADkT7OWDuquQAovaaDdUMm/Fiwcx+Z3eXYUOOSjSMzZUSkXNOGCwsI7GJgh LD2D4CVy49QgL3L0ZexI0c3M0URHjLa6KfdI+15XlXD73lsCUnLHZsLBlqRK3Njx VvlTlB9G7sa/HCVwueksENzfh8UPRTwB++ZpjsOd2T8PY7qp3hVMQlDcgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/Up9Ny1Oe9wneO9aLRnOW0yzJ3MB8GA1UdIwQY MBaAFAJXofy/LnWi4QNMp0oOlyYju8ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt YzIzZjczMTM2MmNlLzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl LzEvQWxlaF9MOHVkYUxoQTB5blNnNlhKaU83eEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDn+W+gR Xsi3isN/5vHUHoPxsvTkPhGMIjeQwzya8CkmLd8kMmKJ6d5YuQsOsdER7PRDWfsn LOfevbb9eaftRHeu0ofnGCv3BsgAQYc8zOGtwPicHI703qUc/z2/QkTTCzID8m6o cYM0MHf2Q3BPkvGtl6/qRdpgoHt5fGJUz5CYorp9SrVGviBnQFO3sm4J8EzJYgRT eY4rSbVhjOIK5GmsSXHPaJmgepfLrhiFob5DTMo5HeoJRu0amWDhT8GlzQUa8GSy j+VpgvMVr6RNsMbs0lulV7SL7bcAYqMQ51MbN2o6QfBoMyuFHAbFZAfisxD/V/OC 5pqGAQNn7/macQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:07:44 2025 by rpki-client