This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json) Hash identifier: t8L30smjtaYj3YGJJn9TApFPnVN/0+zF3XvMfyPLD0o= Subject key identifier: AA:20:83:4F:7E:7E:23:2F:4C:7B:F5:86:2C:65:26:07:FE:1B:91:96 Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Certificate serial: 019B126FB338DD95FE0A531C87E71C06177C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft Manifest number: 0D71 Signing time: Fri 12 Dec 2025 12:01:08 +0000 Manifest this update: Fri 12 Dec 2025 12:01:08 +0000 Manifest next update: Sat 13 Dec 2025 12:01:08 +0000 Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=) 2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: p9ssoIJi6C8JnMbWIrbpTuFa01bCanSFsoTAEwKAlq0=) 3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:b3:38:dd:95:fe:0a:53:1c:87:e7:1c:06:17:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Validity Not Before: Dec 12 12:01:08 2025 GMT Not After : Dec 13 12:01:08 2025 GMT Subject: CN=aa20834f7e7e232f4c7bf5862c652607fe1b9196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:69:63:f3:43:84:1c:d7:b8:d5:43:bf:06: db:5c:f2:cf:bb:15:08:f3:d0:14:af:d3:0e:29:bd: 10:90:e5:f0:f1:55:63:a5:74:1e:69:96:98:c8:c6: 8f:cf:49:8b:32:4a:fe:98:ad:13:7a:72:d2:68:97: be:b1:51:aa:43:de:e9:76:9d:2c:c1:35:70:3e:85: 36:18:3a:be:56:b9:8f:f9:d2:50:a3:50:d1:c2:80: 84:c5:d7:1b:4b:d2:a5:04:59:d3:fa:90:b5:58:b4: c0:91:5f:0e:59:6c:d2:0a:24:f9:28:c7:48:fe:99: 6a:eb:7e:17:9b:e1:f8:64:6f:5f:65:9d:46:ff:c7: fd:5c:c8:01:91:1e:96:12:61:4c:16:a2:83:82:54: 28:49:22:d4:cd:3b:2e:a7:e5:28:08:b0:b4:7e:bd: e0:c3:01:62:6c:07:90:db:45:98:d7:c8:59:f1:e1: d5:10:08:10:11:35:0f:d0:9f:86:97:13:85:46:44: 61:f0:38:2b:7b:e3:fe:10:e6:4c:f8:4c:bc:cb:45: 77:e4:26:4f:d1:14:e8:f0:bc:2a:3b:a5:27:5f:dd: 89:ea:ab:c7:1a:09:b4:d2:95:24:13:6e:d4:27:6d: 79:ef:86:55:74:ea:b6:1c:89:b5:96:f5:55:08:a1: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:20:83:4F:7E:7E:23:2F:4C:7B:F5:86:2C:65:26:07:FE:1B:91:96 X509v3 Authority Key Identifier: keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ea:28:d9:6a:b0:ea:bc:8d:29:31:da:2e:cd:08:c1:2e:1c: 06:61:64:ab:10:dd:6e:77:1b:9e:28:68:2d:74:23:94:8e:2b: e0:07:fa:db:18:51:97:ec:e3:d4:5c:6e:d6:82:e1:10:eb:f0: 77:62:29:1a:22:50:08:0c:74:78:b8:d7:fb:36:18:ff:c1:f0: 87:6e:ea:d8:f8:7b:0e:26:06:4b:2b:43:06:04:9c:60:18:a6: 54:99:84:d6:41:b1:46:34:16:92:5b:1b:a8:6a:20:89:08:80: 45:f2:d7:2f:22:ce:0c:ce:58:49:ab:e9:2b:3b:d3:ab:2f:09: 7e:63:1d:2e:bb:6d:12:b7:c6:ba:77:4a:70:c8:df:11:b3:3f: 60:f0:91:de:0a:74:fb:a8:a3:73:f0:f8:66:e7:9e:0f:da:9e: f8:66:17:37:6a:4b:03:82:7b:87:ea:7a:d5:69:0e:9e:fc:4b: 0e:aa:c1:ec:b3:d0:a0:7a:5c:6d:61:c6:30:e6:27:15:5d:3f: 14:a9:fa:2b:61:f8:12:b0:d8:d8:92:be:6d:6a:66:33:3c:3b: 7b:40:79:9f:f9:fd:62:07:8d:c3:c6:9a:2a:4d:46:53:09:15: 3f:e4:5c:09:fe:53:9b:61:85:d0:90:43:f7:92:c8:8d:17:e8: 87:ed:08:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb7M43ZX+ClMch+ccBhd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5 M2FjM2EwHhcNMjUxMjEyMTIwMTA4WhcNMjUxMjEzMTIwMTA4WjAzMTEwLwYDVQQD EyhhYTIwODM0ZjdlN2UyMzJmNGM3YmY1ODYyYzY1MjYwN2ZlMWI5MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltFpY/NDhBzXuNVDvwbbXPLPuxUI 89AUr9MOKb0QkOXw8VVjpXQeaZaYyMaPz0mLMkr+mK0TenLSaJe+sVGqQ97pdp0s wTVwPoU2GDq+VrmP+dJQo1DRwoCExdcbS9KlBFnT+pC1WLTAkV8OWWzSCiT5KMdI /plq634Xm+H4ZG9fZZ1G/8f9XMgBkR6WEmFMFqKDglQoSSLUzTsup+UoCLC0fr3g wwFibAeQ20WY18hZ8eHVEAgQETUP0J+GlxOFRkRh8Dgre+P+EOZM+Ey8y0V35CZP 0RTo8LwqO6UnX92J6qvHGgm00pUkE27UJ21574ZVdOq2HIm1lvVVCKGBwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKogg09+fiMvTHv1hixlJgf+G5GWMB8GA1UdIwQY MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4 LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuoo2Wqw 6ryNKTHaLs0IwS4cBmFkqxDdbncbnihoLXQjlI4r4Af62xhRl+zj1Fxu1oLhEOvw d2IpGiJQCAx0eLjX+zYY/8Hwh27q2Ph7DiYGSytDBgScYBimVJmE1kGxRjQWklsb qGogiQiARfLXLyLODM5YSavpKzvTqy8JfmMdLrttErfGundKcMjfEbM/YPCR3gp0 +6ijc/D4ZueeD9qe+GYXN2pLA4J7h+p61WkOnvxLDqrB7LPQoHpcbWHGMOYnFV0/ FKn6K2H4ErDY2JK+bWpmMzw7e0B5n/n9YgeNw8aaKk1GUwkVP+RcCf5Tm2GF0JBD 95LIjRfoh+0IIw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:30:31 2025 by rpki-client