This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json) Hash identifier: m5L5BPubXpmxsSzyLyjttNi5F/TKPPeKS72+IdWK3Tk= Subject key identifier: 9C:76:5B:1E:39:DE:46:33:65:EF:63:C7:2C:22:BF:43:8A:E5:3D:46 Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Certificate serial: 019B3C0FDB1028DFF04283E6DACF2F817089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft Manifest number: 05A8 Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=) 2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=) 3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: aeqsFCRCARjFW6v5mYuMuQ5brpJvldUfFCSuqJWgrCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:db:10:28:df:f0:42:83:e6:da:cf:2f:81:70:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9 Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=9c765b1e39de463365ef63c72c22bf438ae53d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:ab:a8:c1:2a:4f:34:9e:f6:2e:50:de:ec: 23:e3:86:05:69:84:8f:75:0c:d7:28:ce:29:51:67: 1c:4e:d7:6a:28:ea:de:04:ca:e3:f2:6e:e0:fe:28: dd:29:9b:bb:29:32:92:fe:a7:78:6a:95:54:66:6d: cd:00:a7:89:d4:d2:9b:7d:4c:df:f1:99:37:86:da: c3:8d:a1:e6:25:7b:9a:c6:6d:8e:38:0d:3a:84:73: 7d:a7:a1:1b:f8:3d:3d:33:fb:6c:ce:30:94:42:e2: 10:7f:37:ee:e7:cc:0e:64:ed:3a:3e:9b:4a:8b:9e: 3f:c0:60:c8:36:6e:26:6f:f3:ca:24:02:56:83:aa: 5f:ee:a1:f7:00:5d:87:65:9e:82:ce:ac:fe:24:62: cb:f3:fa:f8:7e:07:c9:8a:3d:8d:00:45:33:07:c3: 76:fc:63:31:4e:ba:0b:ca:0a:ab:55:ee:67:5f:57: 5b:9a:b8:e0:61:a9:a5:c7:f4:a0:dd:63:c8:d6:c9: 00:69:a2:aa:bd:61:2f:b9:ba:3a:bb:fe:29:9d:c1: 0c:6a:b0:40:33:c8:e4:28:e0:13:68:6c:76:da:81: 34:c9:92:6b:09:13:64:1f:be:a2:5d:e5:e9:f6:7a: d9:24:b3:8b:0d:0f:e0:af:94:0a:6f:ef:b2:80:fd: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:5B:1E:39:DE:46:33:65:EF:63:C7:2C:22:BF:43:8A:E5:3D:46 X509v3 Authority Key Identifier: keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:87:46:1b:13:b9:2b:6d:7f:e6:51:a2:a2:f2:4e:6c:65:c0: 0c:8d:11:c7:1f:40:ee:7c:56:ac:d5:cc:75:9d:78:81:f8:b5: 23:e5:9a:40:05:3e:e4:6a:36:8e:34:af:2a:5d:5f:f8:e6:8a: ce:cc:da:97:db:b2:43:dc:22:fa:27:50:a9:5a:7c:38:98:50: ab:dc:5f:4c:d0:3f:91:11:8e:dd:16:6e:6a:58:da:f9:33:90: 8f:a7:c9:d2:1d:d9:95:f3:eb:76:ce:57:71:bd:ce:79:b0:21: c2:84:4f:63:42:8b:a5:bb:d2:9e:75:8f:2e:66:06:86:23:d7: 13:56:3c:c8:cf:f3:05:4f:1a:5a:70:1c:3c:82:95:05:dd:a0: 2c:09:7b:a7:49:e3:a7:46:55:77:51:42:8e:39:9b:bb:33:24: a5:71:02:7e:cf:20:a1:03:5d:84:68:5a:13:f2:b4:bc:91:49: bf:a3:96:3a:f6:a7:73:33:f6:72:52:af:50:6f:88:02:34:f7: 10:a4:ff:8a:56:a2:d2:f7:81:ef:11:ac:c1:4c:71:99:f4:79: b5:ba:47:a3:23:26:c0:71:1d:f7:90:01:59:a6:40:6b:dd:a5: ab:62:0c:09:7d:85:b3:54:2c:f0:90:b8:3c:6c:37:41:ec:72: 0d:44:15:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9sQKN/wQoPm2s8vgXCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDEzOTg5NzZiMmY0ODc3MjViYzEzZDdmYWViZWQzZTE2 ZDgyYzkwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD Eyg5Yzc2NWIxZTM5ZGU0NjMzNjVlZjYzYzcyYzIyYmY0MzhhZTUzZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo6rqMEqTzSe9i5Q3uwj44YFaYSP dQzXKM4pUWccTtdqKOreBMrj8m7g/ijdKZu7KTKS/qd4apVUZm3NAKeJ1NKbfUzf 8Zk3htrDjaHmJXuaxm2OOA06hHN9p6Eb+D09M/tszjCUQuIQfzfu58wOZO06PptK i54/wGDINm4mb/PKJAJWg6pf7qH3AF2HZZ6Czqz+JGLL8/r4fgfJij2NAEUzB8N2 /GMxTroLygqrVe5nX1dbmrjgYamlx/Sg3WPI1skAaaKqvWEvubo6u/4pncEMarBA M8jkKOATaGx22oE0yZJrCRNkH76iXeXp9nrZJLOLDQ/gr5QKb++ygP13iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJx2Wx453kYzZe9jxywiv0OK5T1GMB8GA1UdIwQY MBaAFF3ROYl2svSHclvBPX+uvtPhbYLJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYt NjAwODEwNjM0ODc4LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYtNjAwODEwNjM0ODc4 LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIdGGxO5 K21/5lGiovJObGXADI0Rxx9A7nxWrNXMdZ14gfi1I+WaQAU+5Go2jjSvKl1f+OaK zszal9uyQ9wi+idQqVp8OJhQq9xfTNA/kRGO3RZualja+TOQj6fJ0h3ZlfPrds5X cb3OebAhwoRPY0KLpbvSnnWPLmYGhiPXE1Y8yM/zBU8aWnAcPIKVBd2gLAl7p0nj p0ZVd1FCjjmbuzMkpXECfs8goQNdhGhaE/K0vJFJv6OWOvanczP2clKvUG+IAjT3 EKT/ilai0veB7xGswUxxmfR5tbpHoyMmwHEd95ABWaZAa92lq2IMCX2Fs1Qs8JC4 PGw3QexyDUQVqw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:11:40 2025 by rpki-client