This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft File: 56q82sOtn7MtJK1gyKJsueq41YU.mft (raw, json) Hash identifier: NVxET4hhHDKB1uAhXWqijngWfZSoirevBHL0AMJfyFw= Subject key identifier: 1B:0A:D8:C9:E6:16:A6:BD:BC:29:A7:3B:7D:4F:BB:B5:83:48:BD:9E Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Certificate serial: 019B7110A61E98D31AF62032A4FC7832CFE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 21:01:15 +0000 Manifest this update: Tue 30 Dec 2025 21:01:15 +0000 Manifest next update: Wed 31 Dec 2025 21:01:15 +0000 Files and hashes: 1: 56q82sOtn7MtJK1gyKJsueq41YU.crl (hash: Yl8c5Op74K7Ui57Abw8zyj2w36PDYAxUp0lvIZNy8cE=) 2: 8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa (hash: 62aQx/AwBMCJ8pFWHg2Z3I0/UbL8gX53YDgRIUnI4jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:a6:1e:98:d3:1a:f6:20:32:a4:fc:78:32:cf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Validity Not Before: Dec 30 21:01:15 2025 GMT Not After : Dec 31 21:01:15 2025 GMT Subject: CN=1b0ad8c9e616a6bdbc29a73b7d4fbbb58348bd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ce:49:8d:7e:1b:c7:21:66:0d:58:53:96:88: 4a:98:4e:f1:b6:1e:67:02:96:7d:7a:c3:89:3a:26: 30:ef:f4:63:a6:c8:97:6c:fe:2c:29:1a:11:91:3b: 73:85:9c:73:1e:09:91:6c:ff:52:7b:ae:fe:6a:dc: 7d:4c:ec:09:1f:f2:f7:62:39:b4:2d:2a:26:27:51: 44:63:07:c4:59:90:0e:e1:03:28:0a:a6:26:72:05: 23:a2:46:1d:5c:47:d0:f8:44:ef:77:d8:b3:c0:9c: 82:f2:60:84:42:95:85:c1:4b:18:67:44:64:8f:89: 3a:bb:aa:b3:b0:47:9c:6d:0a:db:bf:f4:dc:1a:67: 87:58:68:05:85:00:73:d1:33:eb:96:1a:aa:1d:a6: 98:47:69:83:28:33:d1:ed:a9:34:3f:70:a5:ea:d5: 08:9b:ea:11:fc:39:b3:d1:64:7d:d4:ab:32:ec:d4: 2c:22:78:d9:1a:31:32:a2:d2:4d:7b:a9:b8:6e:90: 14:8f:ff:1b:9f:8a:5a:a8:15:7a:8b:e5:46:30:95: ae:5a:15:c8:d7:9b:1a:82:6e:e8:ab:2d:3f:39:45: dc:ea:54:0c:6a:cb:62:d6:92:1e:f0:1f:b5:8e:4b: 2a:8f:dd:d5:48:2b:20:d6:ea:83:5e:0e:85:3b:db: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0A:D8:C9:E6:16:A6:BD:BC:29:A7:3B:7D:4F:BB:B5:83:48:BD:9E X509v3 Authority Key Identifier: keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:fc:1c:35:53:2a:ab:3d:3c:a8:c0:7f:86:97:66:f9:0c: c2:8f:5a:87:5d:59:22:ac:e1:14:c4:08:98:79:33:d2:76:27: c1:17:08:63:ce:aa:a7:81:05:44:76:8b:06:5a:eb:e9:66:8f: c3:49:73:69:e6:b6:49:fe:d9:02:8b:6e:c8:a6:1a:62:f0:63: e3:af:28:dc:88:3e:46:78:76:1c:af:ab:e6:4e:ae:bf:aa:50: d6:8c:c4:c3:e2:52:ab:2a:c0:f3:f3:0e:b5:09:dd:11:26:09: 90:a6:ac:a1:52:11:8c:1f:76:0b:e9:15:46:a4:3c:d9:2b:3e: 3a:42:c2:a8:bc:28:ce:2b:c0:98:91:c4:4e:da:e1:fd:20:ac: 4a:5c:dc:96:16:67:f0:8a:76:9e:1e:31:ba:1d:74:89:dc:44: 34:67:a6:36:74:02:72:20:22:ea:07:3d:a7:3e:23:48:df:2d: b9:5b:f8:e4:2b:20:ab:cc:19:05:d3:41:07:6d:cf:49:ef:f9: 91:40:55:b2:78:d8:1b:01:2f:09:3e:e0:32:22:7c:cb:01:34: 56:b3:a4:fd:5b:05:25:02:40:86:54:3b:c4:bb:a7:eb:cc:d1: 0e:69:86:52:26:50:03:5b:e6:72:d7:e4:85:45:c2:73:0d:67: 5d:2d:b8:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEKYemNMa9iAypPx4Ms/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YWFiY2RhYzNhZDlmYjMyZDI0YWQ2MGM4YTI2Y2I5ZWFi OGQ1ODUwHhcNMjUxMjMwMjEwMTE1WhcNMjUxMjMxMjEwMTE1WjAzMTEwLwYDVQQD EygxYjBhZDhjOWU2MTZhNmJkYmMyOWE3M2I3ZDRmYmJiNTgzNDhiZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c5JjX4bxyFmDVhTlohKmE7xth5n ApZ9esOJOiYw7/RjpsiXbP4sKRoRkTtzhZxzHgmRbP9Se67+atx9TOwJH/L3Yjm0 LSomJ1FEYwfEWZAO4QMoCqYmcgUjokYdXEfQ+ETvd9izwJyC8mCEQpWFwUsYZ0Rk j4k6u6qzsEecbQrbv/TcGmeHWGgFhQBz0TPrlhqqHaaYR2mDKDPR7ak0P3Cl6tUI m+oR/Dmz0WR91Ksy7NQsInjZGjEyotJNe6m4bpAUj/8bn4paqBV6i+VGMJWuWhXI 15sagm7oqy0/OUXc6lQMasti1pIe8B+1jksqj93VSCsg1uqDXg6FO9vR3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsK2MnmFqa9vCmnO31Pu7WDSL2eMB8GA1UdIwQY MBaAFOeqvNrDrZ+zLSStYMiibLnquNWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTIt ZTM2ZDBiOWI2NDVkLzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81ZDkzYmEtYmY1OS00ZTc4LWE0YTItZTM2ZDBiOWI2NDVk LzEvNTZxODJzT3RuN010SksxZ3lLSnN1ZXE0MVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW138HDVT Kqs9PKjAf4aXZvkMwo9ah11ZIqzhFMQImHkz0nYnwRcIY86qp4EFRHaLBlrr6WaP w0lzaea2Sf7ZAotuyKYaYvBj468o3Ig+Rnh2HK+r5k6uv6pQ1ozEw+JSqyrA8/MO tQndESYJkKasoVIRjB92C+kVRqQ82Ss+OkLCqLwozivAmJHETtrh/SCsSlzclhZn 8Ip2nh4xuh10idxENGemNnQCciAi6gc9pz4jSN8tuVv45Csgq8wZBdNBB23PSe/5 kUBVsnjYGwEvCT7gMiJ8ywE0VrOk/VsFJQJAhlQ7xLun68zRDmmGUiZQA1vmctfk hUXCcw1nXS24Ag== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:26 2025 by rpki-client