This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json) Hash identifier: xXGwxgzKcs4PtwqyvJ32maYGLb3lXX550QFVMtdDe64= Subject key identifier: F8:0D:36:81:FF:A1:70:D3:89:27:F0:DA:B3:D5:54:80:88:48:39:9D Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50 Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150 Certificate serial: 019B3A8FA02154C52D0928F042DD62F60DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 07:00:49 +0000 Manifest this update: Sat 20 Dec 2025 07:00:49 +0000 Manifest next update: Sun 21 Dec 2025 07:00:49 +0000 Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=) 2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: Y+BoozhJ49Du/b+I0htE+AVlof5eyx0y8MMn7DosZlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:a0:21:54:c5:2d:09:28:f0:42:dd:62:f6:0d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150 Validity Not Before: Dec 20 07:00:49 2025 GMT Not After : Dec 21 07:00:49 2025 GMT Subject: CN=f80d3681ffa170d38927f0dab3d554808848399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:97:63:b3:9b:f8:9c:e1:b2:25:13:fe:61:ba: 35:d1:ef:a0:90:28:88:5e:03:ff:55:12:0f:9b:80: ac:b6:85:d2:1a:85:07:1b:62:16:6e:8e:0e:75:28: e7:cf:06:0b:22:86:c0:40:f9:f5:98:34:b4:a2:5f: b7:62:ad:ea:cc:b1:69:17:c5:6a:62:f8:64:4d:dd: e6:c0:0d:fc:f8:a0:22:d6:aa:be:f5:c1:95:52:74: 76:b9:59:80:bd:87:61:73:5f:a3:c9:09:fd:ce:81: 5b:13:53:50:0c:56:5e:3c:ca:90:59:83:09:6a:bd: 75:99:55:f1:d1:b8:33:62:3f:38:91:21:d7:24:ab: bb:a8:fb:ff:45:92:b3:d2:63:bc:1f:7e:02:80:c5: 4c:d9:bf:ef:88:b9:90:db:4f:60:23:9e:b7:fe:9f: ba:e1:86:87:fc:d8:c0:e6:b3:8e:c6:6f:12:b7:8d: 76:af:69:ac:dd:70:e2:0f:49:03:01:e5:a3:38:d9: cf:d4:5f:c5:cd:9c:dc:76:87:dc:c3:06:2b:dd:45: 9c:e0:bb:bf:a2:5d:02:c4:a7:cb:ea:b7:8e:6c:6d: 5e:e9:8b:8f:42:18:30:33:37:ea:a4:ca:ff:e6:24: db:e3:66:70:60:39:92:eb:ac:92:67:e4:5b:91:d3: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0D:36:81:FF:A1:70:D3:89:27:F0:DA:B3:D5:54:80:88:48:39:9D X509v3 Authority Key Identifier: keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2d:58:10:d6:80:83:73:2c:bd:cb:2a:21:e1:7b:23:1e:59: c6:b5:de:8f:8f:de:79:f3:bc:3b:dc:d8:9e:a6:c1:82:36:cb: 20:ad:f0:1b:29:26:ed:b0:24:20:a2:d9:66:40:95:be:e1:aa: d0:b5:3e:55:b6:fc:cf:55:7a:57:99:ee:0f:3e:76:8a:4a:ba: f1:42:3b:37:86:d9:9e:c6:05:5d:79:0e:43:17:12:72:b1:e3: 50:17:47:f3:fc:e6:41:09:17:ac:96:b0:14:d8:43:5d:4d:3d: 83:b8:2a:1e:e4:02:cc:b4:53:15:0f:09:0b:5e:35:7d:f1:88: e3:0f:d9:26:b8:99:57:a0:4a:9f:20:20:3f:30:56:e0:05:b9: 6b:98:99:84:87:88:0d:04:ad:7f:81:ee:3f:de:2b:85:57:40: 40:56:1b:79:e9:16:67:ee:f4:c0:36:cc:92:3f:5b:7d:d7:0f: 04:b8:36:93:8f:fc:e6:b2:c0:dc:25:5a:30:2c:e3:b9:f0:d2: 92:0c:b0:da:2f:af:a1:05:e6:55:ff:83:13:a1:35:74:36:eb: ba:35:86:ff:82:98:e9:59:4f:7b:d9:26:fc:50:9d:c7:bd:13: 84:a7:52:c2:62:43:51:7f:fb:5a:8b:ae:ad:18:41:28:fd:ed: 0c:51:ea:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j6AhVMUtCSjwQt1i9g38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTllZTc0ZjJkOTg0Yzg4YWIzYjk5YWU3MWQwYjdjN2Jh ZjgxNTAwHhcNMjUxMjIwMDcwMDQ5WhcNMjUxMjIxMDcwMDQ5WjAzMTEwLwYDVQQD EyhmODBkMzY4MWZmYTE3MGQzODkyN2YwZGFiM2Q1NTQ4MDg4NDgzOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jdjs5v4nOGyJRP+Ybo10e+gkCiI XgP/VRIPm4CstoXSGoUHG2IWbo4OdSjnzwYLIobAQPn1mDS0ol+3Yq3qzLFpF8Vq YvhkTd3mwA38+KAi1qq+9cGVUnR2uVmAvYdhc1+jyQn9zoFbE1NQDFZePMqQWYMJ ar11mVXx0bgzYj84kSHXJKu7qPv/RZKz0mO8H34CgMVM2b/viLmQ209gI563/p+6 4YaH/NjA5rOOxm8St412r2ms3XDiD0kDAeWjONnP1F/FzZzcdofcwwYr3UWc4Lu/ ol0CxKfL6reObG1e6YuPQhgwMzfqpMr/5iTb42ZwYDmS66ySZ+RbkdN1+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgNNoH/oXDTiSfw2rPVVICISDmdMB8GA1UdIwQY MBaAFOSp7nTy2YTIirO5mucdC3x7r4FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgt ZDJjMGJlNDQ4NTYxLzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgtZDJjMGJlNDQ4NTYx LzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIC1YENaA g3MsvcsqIeF7Ix5ZxrXej4/eefO8O9zYnqbBgjbLIK3wGykm7bAkIKLZZkCVvuGq 0LU+Vbb8z1V6V5nuDz52ikq68UI7N4bZnsYFXXkOQxcScrHjUBdH8/zmQQkXrJaw FNhDXU09g7gqHuQCzLRTFQ8JC141ffGI4w/ZJriZV6BKnyAgPzBW4AW5a5iZhIeI DQStf4HuP94rhVdAQFYbeekWZ+70wDbMkj9bfdcPBLg2k4/85rLA3CVaMCzjufDS kgyw2i+voQXmVf+DE6E1dDbrujWG/4KY6VlPe9km/FCdx70ThKdSwmJDUX/7Wouu rRhBKP3tDFHqqg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:24:07 2025 by rpki-client