This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json) Hash identifier: JS2qqGEk9UeKTcTvj9ZIThBCFLEnbda/JyVsTJF+oFA= Subject key identifier: 4A:38:4B:4C:A2:D5:E4:FC:27:74:9C:36:D4:14:21:0F:8E:31:5D:E3 Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e Certificate serial: 019B4392EE81E5BB1BA6F5592D440EE84253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft Manifest number: 0B57 Signing time: Mon 22 Dec 2025 01:01:01 +0000 Manifest this update: Mon 22 Dec 2025 01:01:01 +0000 Manifest next update: Tue 23 Dec 2025 01:01:01 +0000 Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=) 2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: VeyHmeGX5E2elptHV1bLas5X2zc8dbTTXrM+sl9BTK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:ee:81:e5:bb:1b:a6:f5:59:2d:44:0e:e8:42:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e Validity Not Before: Dec 22 01:01:01 2025 GMT Not After : Dec 23 01:01:01 2025 GMT Subject: CN=4a384b4ca2d5e4fc27749c36d414210f8e315de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:94:7b:89:99:31:57:a1:8e:96:c9:b1:af: 7e:81:96:83:54:46:8e:b8:ce:2d:13:c3:86:dc:d5: c4:fe:49:6c:80:99:7b:52:9f:b8:3a:fd:91:68:23: cd:1b:eb:70:8b:f5:45:62:9d:fe:87:20:32:57:b8: 78:a7:f6:33:ed:73:57:b0:fb:06:10:df:70:b9:0e: dc:e9:5d:5a:ae:7d:06:1b:d0:90:b3:5b:d6:a3:a6: 48:5f:f1:7a:29:d8:3b:9e:8f:1f:17:d9:c8:1f:dd: ae:3e:ce:c3:e6:2d:7b:32:55:e5:54:a5:2f:9c:b5: 10:aa:c9:a5:fd:80:71:1a:6b:83:d3:b1:8c:dd:97: b0:85:aa:a2:a8:53:82:07:c7:a3:6f:13:76:37:b1: 53:51:69:00:fe:f4:cb:58:2b:3b:24:84:ae:03:cc: 22:cd:98:fc:e6:55:e9:38:ca:a2:a4:7e:55:70:bb: d2:e9:3e:81:ec:7f:4c:87:76:72:4d:7f:a1:14:aa: fe:01:88:3e:0f:d6:a1:c5:77:d4:50:1f:5c:aa:cb: 13:10:92:d9:0a:4a:3f:2e:65:df:d0:30:70:7c:ec: 9c:a8:3c:53:bc:06:27:52:e8:62:87:9a:ba:29:7f: e7:1a:66:41:55:ea:60:ce:f0:36:61:99:62:c6:ed: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:38:4B:4C:A2:D5:E4:FC:27:74:9C:36:D4:14:21:0F:8E:31:5D:E3 X509v3 Authority Key Identifier: keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e3:a8:f5:03:a5:07:8e:65:1a:25:f8:63:98:48:2c:6f:cd: b3:a1:0f:d2:37:9a:3f:eb:ad:85:09:e7:ea:c0:ff:7b:46:59: ee:d4:47:17:d7:fc:19:1b:41:bb:9b:8f:54:e2:c4:3c:9d:09: d5:b0:fe:2a:ac:54:df:1a:b1:4b:ff:f1:78:4a:22:a8:2e:4b: 8c:10:7a:3f:67:80:0f:a1:4f:0d:d4:ed:6d:8b:b4:a4:f8:4c: cb:ab:35:a1:26:aa:81:77:e0:28:e7:01:23:1c:96:2c:51:f7: 35:c5:8c:e4:74:3e:e7:3f:bc:0c:93:41:cb:7e:22:bc:92:3f: 80:e5:3d:e8:5f:9f:48:fb:10:a4:2e:d7:2d:1b:6e:68:9a:19: ea:70:43:2b:9f:5f:0b:ad:62:8a:06:e6:52:6a:2f:87:22:d0: 23:3a:98:d6:48:d5:91:a4:6a:fd:f8:48:90:9a:30:32:8c:98: a1:be:ab:df:13:e0:7a:8c:42:94:bb:a5:44:3d:e2:c8:92:b8: 32:ad:49:50:16:ea:36:48:1e:0d:d4:9a:75:c1:c7:ab:5e:03: 85:c6:ad:3f:c7:a2:5a:dd:45:cf:f3:17:5d:72:91:28:36:34: 59:dc:36:7d:c9:f7:1d:90:fa:8e:ad:f6:03:37:bd:99:e7:ab: 4a:34:0d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDku6B5bsbpvVZLUQO6EJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTNkYTc1N2MxN2ZlMzhhMGU2Y2Q3MDI3NWM3M2M4YzY5 Yzg5NmUwHhcNMjUxMjIyMDEwMTAxWhcNMjUxMjIzMDEwMTAxWjAzMTEwLwYDVQQD Eyg0YTM4NGI0Y2EyZDVlNGZjMjc3NDljMzZkNDE0MjEwZjhlMzE1ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNiUe4mZMVehjpbJsa9+gZaDVEaO uM4tE8OG3NXE/klsgJl7Up+4Ov2RaCPNG+twi/VFYp3+hyAyV7h4p/Yz7XNXsPsG EN9wuQ7c6V1arn0GG9CQs1vWo6ZIX/F6Kdg7no8fF9nIH92uPs7D5i17MlXlVKUv nLUQqsml/YBxGmuD07GM3ZewhaqiqFOCB8ejbxN2N7FTUWkA/vTLWCs7JISuA8wi zZj85lXpOMqipH5VcLvS6T6B7H9Mh3ZyTX+hFKr+AYg+D9ahxXfUUB9cqssTEJLZ Cko/LmXf0DBwfOycqDxTvAYnUuhih5q6KX/nGmZBVepgzvA2YZlixu2kLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo4S0yi1eT8J3ScNtQUIQ+OMV3jMB8GA1UdIwQY MBaAFF+T2nV8F/44oObNcCdcc8jGnIluMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83OWU0MzktZmMwYi00ZTZlLThiMDYt MzlmYjY2YTI2ZWY4LzEvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83OWU0MzktZmMwYi00ZTZlLThiMDYtMzlmYjY2YTI2ZWY4 LzEvWDVQYWRYd1hfamlnNXMxd0oxeHp5TWFjaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+Oo9QOl B45lGiX4Y5hILG/Ns6EP0jeaP+uthQnn6sD/e0ZZ7tRHF9f8GRtBu5uPVOLEPJ0J 1bD+KqxU3xqxS//xeEoiqC5LjBB6P2eAD6FPDdTtbYu0pPhMy6s1oSaqgXfgKOcB IxyWLFH3NcWM5HQ+5z+8DJNBy34ivJI/gOU96F+fSPsQpC7XLRtuaJoZ6nBDK59f C61iigbmUmovhyLQIzqY1kjVkaRq/fhIkJowMoyYob6r3xPgeoxClLulRD3iyJK4 Mq1JUBbqNkgeDdSadcHHq14DhcatP8eiWt1Fz/MXXXKRKDY0Wdw2fcn3HZD6jq32 Aze9meerSjQNDw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:21:35 2025 by rpki-client