This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json) Hash identifier: 1y6WPOgmqB0nLKVgrvufqnkvUS7R/JZ8LAvgalezBG4= Subject key identifier: D5:B5:93:FA:6B:C9:64:51:B9:BA:60:09:EE:2A:41:21:70:3C:71:EC Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Certificate serial: 019B3DC7BE841FA6161922D774EDF1CB2580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft Manifest number: 12BE Signing time: Sat 20 Dec 2025 22:00:59 +0000 Manifest this update: Sat 20 Dec 2025 22:00:59 +0000 Manifest next update: Sun 21 Dec 2025 22:00:59 +0000 Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=) 2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: OHkX0PSLPChaLzedtLlhKVhdbOLBPH4aZmxGwd6St3M=) 3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=) 4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:be:84:1f:a6:16:19:22:d7:74:ed:f1:cb:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96 Validity Not Before: Dec 20 22:00:59 2025 GMT Not After : Dec 21 22:00:59 2025 GMT Subject: CN=d5b593fa6bc96451b9ba6009ee2a4121703c71ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:5d:7c:54:b5:35:1f:34:2a:d5:85:54:89: 5d:bf:b4:ab:53:01:f7:ee:0f:d9:36:8c:ac:c1:b0: 0c:f6:c5:bd:b5:8f:b7:e0:87:52:fd:df:95:15:4f: 2c:d1:54:01:d4:0a:77:82:e0:97:5a:ee:70:db:2c: df:7c:00:29:ff:74:46:c7:38:da:15:4f:39:58:38: b6:55:d2:21:b6:f1:c6:6a:8c:7c:5e:c0:c4:64:6d: 04:7f:9a:6b:67:43:7d:03:91:2e:4e:fc:dc:6c:22: 5e:b7:ca:22:49:77:8e:5a:5a:99:f6:65:95:73:a6: ed:76:fd:82:2d:2b:59:b4:6a:f1:1a:c0:09:c4:08: 7d:69:32:c4:d2:69:e9:d5:94:77:08:f1:9f:3a:e5: bd:9b:34:a5:1f:84:67:56:7e:ca:43:fc:2a:33:9d: bc:a2:7a:df:92:5c:7a:8f:36:ca:5b:8a:64:a1:b7: 1b:98:49:0e:7b:a6:5e:07:1a:06:6e:9d:33:22:c4: 65:5f:9b:b7:c7:5d:a7:4b:6f:b8:60:78:8f:59:c8: f9:67:00:3b:39:d1:8f:91:6e:3c:4d:50:4a:e4:49: 3b:86:be:e3:8a:26:95:fb:e2:f5:58:d0:ef:2b:05: 46:ff:e6:26:65:79:fa:8b:ed:1b:ad:ba:65:3e:9b: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:93:FA:6B:C9:64:51:B9:BA:60:09:EE:2A:41:21:70:3C:71:EC X509v3 Authority Key Identifier: keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:45:3e:fe:11:ae:08:a4:a3:67:5d:51:07:17:80:49:74:52: 8a:44:1f:d7:d4:1a:ba:da:58:78:f6:20:f9:61:c0:87:fd:43: fd:6a:46:e4:ec:e6:60:06:10:a1:9b:4c:5c:4e:f5:12:9b:3b: c1:19:36:c8:d7:50:dd:dd:3a:9c:14:bf:11:a1:b9:8c:37:70: bf:66:52:d6:d9:6b:a0:cd:f3:7b:35:e4:16:5e:61:ae:8b:81: 2c:a8:57:8c:1c:b1:66:0c:1f:b2:eb:0a:f8:2c:b8:93:36:26: 85:e4:9c:df:a1:a7:1b:dd:4c:3f:c1:a7:43:71:c8:d3:19:2a: ed:cf:47:c4:e7:4d:1d:76:52:d1:36:fa:f1:88:d5:0b:f9:3c: dc:90:07:e3:ba:f1:3d:35:dc:c1:91:20:04:1a:6c:4d:a0:c4: f4:d9:b0:b8:b6:30:6c:c8:e8:af:b6:48:a6:de:1d:b4:53:d7: 20:f1:43:4e:5c:ab:ca:ff:25:05:07:a1:dd:73:ab:a7:a7:c0: 50:fd:03:bc:c9:1a:dc:2b:55:fa:88:d3:f7:53:4a:87:59:f5: 92:b5:00:32:70:da:7a:32:cc:bd:79:b1:ec:81:38:4a:3a:38: 59:bc:77:a4:da:74:e9:a0:ee:9d:11:0d:b8:f0:95:5d:fd:5c: 8a:90:96:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x76EH6YWGSLXdO3xyyWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2JiODQ4OTE2NTFmMjAzOWNkODFiMGI2MDkxMmY3YzBl NWNmOTYwHhcNMjUxMjIwMjIwMDU5WhcNMjUxMjIxMjIwMDU5WjAzMTEwLwYDVQQD EyhkNWI1OTNmYTZiYzk2NDUxYjliYTYwMDllZTJhNDEyMTcwM2M3MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN5dfFS1NR80KtWFVIldv7SrUwH3 7g/ZNoyswbAM9sW9tY+34IdS/d+VFU8s0VQB1Ap3guCXWu5w2yzffAAp/3RGxzja FU85WDi2VdIhtvHGaox8XsDEZG0Ef5prZ0N9A5EuTvzcbCJet8oiSXeOWlqZ9mWV c6btdv2CLStZtGrxGsAJxAh9aTLE0mnp1ZR3CPGfOuW9mzSlH4RnVn7KQ/wqM528 onrfklx6jzbKW4pkobcbmEkOe6ZeBxoGbp0zIsRlX5u3x12nS2+4YHiPWcj5ZwA7 OdGPkW48TVBK5Ek7hr7jiiaV++L1WNDvKwVG/+YmZXn6i+0brbplPpve4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW1k/pryWRRubpgCe4qQSFwPHHsMB8GA1UdIwQY MBaAFF07uEiRZR8gOc2BsLYJEvfA5c+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4Njkt NGY4YzYzOGE3MmUxLzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS81ODdmN2UtNjBjYy00MWEwLTg4NjktNGY4YzYzOGE3MmUx LzEvWFR1NFNKRmxIeUE1ellHd3Rna1M5OERsejVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUU+/hGu CKSjZ11RBxeASXRSikQf19QautpYePYg+WHAh/1D/WpG5OzmYAYQoZtMXE71Eps7 wRk2yNdQ3d06nBS/EaG5jDdwv2ZS1tlroM3zezXkFl5hrouBLKhXjByxZgwfsusK +Cy4kzYmheSc36GnG91MP8GnQ3HI0xkq7c9HxOdNHXZS0Tb68YjVC/k83JAH47rx PTXcwZEgBBpsTaDE9NmwuLYwbMjor7ZIpt4dtFPXIPFDTlyryv8lBQeh3XOrp6fA UP0DvMka3CtV+ojT91NKh1n1krUAMnDaejLMvXmx7IE4Sjo4Wbx3pNp06aDunREN uPCVXf1cipCWCA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:41:49 2025 by rpki-client