This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json) Hash identifier: PBDRqMtctJK7uTJwfQVTxYc3Z7PkMba7gY4tFkIK8Eg= Subject key identifier: 27:67:3E:4B:5C:D9:AD:91:F0:18:B9:44:A7:0B:9E:C8:4C:9B:66:83 Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7 Certificate serial: 019B608A4E4252689D7A06BAB3695716C60B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft Manifest number: 17B2 Signing time: Sat 27 Dec 2025 16:00:35 +0000 Manifest this update: Sat 27 Dec 2025 16:00:35 +0000 Manifest next update: Sun 28 Dec 2025 16:00:35 +0000 Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=) 2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: bppUTbGgBo2xL6RV9aqHPfq5YHpZUSFa84YkutXcDDQ=) 3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:4e:42:52:68:9d:7a:06:ba:b3:69:57:16:c6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7 Validity Not Before: Dec 27 16:00:35 2025 GMT Not After : Dec 28 16:00:35 2025 GMT Subject: CN=27673e4b5cd9ad91f018b944a70b9ec84c9b6683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:68:11:79:57:a8:88:18:d7:14:cc:4a:bc: 9d:8e:7d:ce:60:76:00:f9:f3:a6:f3:0b:9e:0d:52: 68:51:43:d2:ea:cc:b7:e9:9c:66:9f:1e:73:e2:47: c7:95:b2:b5:b5:74:94:e2:e7:77:78:59:a6:ed:8c: b8:67:5c:83:dd:39:b1:b3:f9:72:d4:ce:05:97:fb: b7:16:4b:08:79:f7:d8:bf:9d:31:57:69:b3:21:36: 09:41:82:df:00:5d:5c:bd:18:da:f8:e2:bd:6c:65: cf:f2:e4:5c:bb:1f:ba:e0:3b:e5:fd:21:d7:60:68: 25:1b:8b:0c:0e:87:c7:6b:e5:3f:f4:ff:a4:ff:9b: 69:e6:ca:23:21:b5:67:4d:fc:3f:b8:ec:52:fd:6d: c0:91:99:af:91:89:81:99:f6:23:05:35:59:87:ff: c9:33:c1:0d:bb:a2:9d:c0:d0:6b:0d:48:22:56:d5: 42:a9:66:79:00:3e:cd:a1:a0:b1:05:9b:c6:c0:8f: d6:e2:0d:e8:a6:df:dd:1c:ff:16:d2:61:47:34:32: 17:80:71:f6:6a:7f:3b:c2:ae:a2:87:73:80:f6:7e: b6:03:b3:f1:55:57:83:a3:00:5d:3d:1e:a6:fa:88: 98:a9:ef:42:a9:f6:40:ef:02:f4:d6:93:29:fc:2a: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:67:3E:4B:5C:D9:AD:91:F0:18:B9:44:A7:0B:9E:C8:4C:9B:66:83 X509v3 Authority Key Identifier: keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:84:db:67:ce:c7:26:b5:fe:b7:c3:29:99:ff:62:66:92: 4c:1e:a2:6d:30:ac:9f:bf:19:ae:69:f1:50:e1:72:68:97:76: c2:22:c9:f8:59:74:63:13:03:a7:b5:6f:f4:dc:0c:5a:7d:44: 79:a0:61:91:09:78:66:bd:af:c6:14:8f:ce:a9:da:de:5c:93: 29:11:03:97:b0:a5:8c:48:9c:bd:db:c2:1e:65:21:0e:47:9b: 0b:1b:ec:44:4b:36:5e:87:f7:e7:dc:12:bc:26:bf:34:25:de: c0:b2:5b:ca:14:30:2b:e4:44:1b:8c:69:20:2f:51:92:61:6d: 29:9d:4c:db:05:32:52:36:ab:9a:9a:7f:64:33:31:9e:86:79: 8f:70:4f:4a:91:96:21:5a:1f:1a:53:1e:7b:ba:ec:00:ea:ab: 1f:e9:68:08:60:5c:4c:fb:69:47:1f:f6:2b:06:ec:c4:b3:3e: a6:09:e7:9a:d1:0d:09:c8:2a:0a:22:ea:18:19:c9:99:9a:52: 29:43:64:e6:c9:df:7d:74:74:f2:fa:53:03:83:8b:c4:7c:e0: de:22:eb:b3:78:42:6b:24:cc:9c:8b:7e:70:e1:60:f3:41:22: 36:0a:2d:ca:cb:ad:64:ef:52:59:09:eb:e3:98:ce:14:7c:10: f9:8e:02:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgik5CUmidega6s2lXFsYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTY2NzZjZjM5OGQzOTk0YzRkZDRhMjk2NTk0NjE0ZGZm NTg2YzcwHhcNMjUxMjI3MTYwMDM1WhcNMjUxMjI4MTYwMDM1WjAzMTEwLwYDVQQD EygyNzY3M2U0YjVjZDlhZDkxZjAxOGI5NDRhNzBiOWVjODRjOWI2NjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmJoEXlXqIgY1xTMSrydjn3OYHYA +fOm8wueDVJoUUPS6sy36Zxmnx5z4kfHlbK1tXSU4ud3eFmm7Yy4Z1yD3Tmxs/ly 1M4Fl/u3FksIeffYv50xV2mzITYJQYLfAF1cvRja+OK9bGXP8uRcux+64Dvl/SHX YGglG4sMDofHa+U/9P+k/5tp5sojIbVnTfw/uOxS/W3AkZmvkYmBmfYjBTVZh//J M8ENu6KdwNBrDUgiVtVCqWZ5AD7NoaCxBZvGwI/W4g3opt/dHP8W0mFHNDIXgHH2 an87wq6ih3OA9n62A7PxVVeDowBdPR6m+oiYqe9CqfZA7wL01pMp/CqNqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdnPktc2a2R8Bi5RKcLnshMm2aDMB8GA1UdIwQY MBaAFF+WZ2zzmNOZTE3UopZZRhTf9YbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMt ZjYyZjM1YWY0MzcxLzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMtZjYyZjM1YWY0Mzcx LzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXSE22fO xya1/rfDKZn/YmaSTB6ibTCsn78ZrmnxUOFyaJd2wiLJ+Fl0YxMDp7Vv9NwMWn1E eaBhkQl4Zr2vxhSPzqna3lyTKREDl7CljEicvdvCHmUhDkebCxvsREs2Xof359wS vCa/NCXewLJbyhQwK+REG4xpIC9RkmFtKZ1M2wUyUjarmpp/ZDMxnoZ5j3BPSpGW IVofGlMee7rsAOqrH+loCGBcTPtpRx/2KwbsxLM+pgnnmtENCcgqCiLqGBnJmZpS KUNk5snffXR08vpTA4OLxHzg3iLrs3hCayTMnIt+cOFg80EiNgotysutZO9SWQnr 45jOFHwQ+Y4Csw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:26:13 2025 by rpki-client