This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json) Hash identifier: CpoBt99s1uHwg+ncpQiIfN0husNplSEQbRS34LJqvhM= Subject key identifier: EB:23:DF:7C:51:DB:FB:14:7C:FC:06:84:34:30:D1:48:5C:F8:82:DF Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34 Certificate serial: 019B1049F789D4A07D521FEBA300ABD2D23F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft Manifest number: 17EF Signing time: Fri 12 Dec 2025 02:00:41 +0000 Manifest this update: Fri 12 Dec 2025 02:00:41 +0000 Manifest next update: Sat 13 Dec 2025 02:00:41 +0000 Files and hashes: 1: 0u7gO643pRxwZOenmWbBBqxLLKc.roa (hash: Pwxkn1Waj35vlmyRK88HUeSVQq2AHGthsf9UpYwjYbc=) 2: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: 5/bZCMqYzCp83SpnkBg+PVvk3bCQmTpXgODf+rl1dL0=) 3: g0xFMT2GrYAMoL-inLUwLmSSyCA.roa (hash: HeRO7kuNoFHZ7OzgXdJj0leOybKMhQ/z6+NNz3N69Ns=) 4: wFQP_vODEY-W3eIkfxHByblOUq8.roa (hash: n1ZQqwSA0BtVLGIlganeJnOqb9x+AOjSB94Cm0wXocg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:f7:89:d4:a0:7d:52:1f:eb:a3:00:ab:d2:d2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34 Validity Not Before: Dec 12 02:00:41 2025 GMT Not After : Dec 13 02:00:41 2025 GMT Subject: CN=eb23df7c51dbfb147cfc06843430d1485cf882df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:df:d7:ad:a3:32:e0:a2:56:4d:f5:c2:fa: 59:25:55:b3:68:1d:d8:25:d1:fa:05:4d:c7:f5:bd: 41:20:9d:6c:46:f0:c2:cf:f1:1d:4d:cf:07:ad:86: 12:68:a5:0e:35:12:bf:71:60:52:55:05:34:2f:d6: d7:aa:fb:83:aa:7f:5a:6c:c7:9c:f7:f0:a7:8b:d9: 4e:31:80:93:1a:f2:0f:73:7f:e3:eb:85:d5:47:90: 2d:02:b4:e8:28:67:0b:dd:23:b1:ad:e6:25:25:c7: 12:a1:68:e3:34:97:fc:23:18:cd:b1:3b:85:7c:66: 8e:d2:ca:3d:e4:2e:a4:6c:58:6a:14:f8:6a:f6:b2: d9:4a:27:e0:9a:93:54:a3:73:6c:af:d5:9f:75:9d: 4e:47:1f:86:50:bd:0c:ec:a6:25:e7:66:34:b7:c3: d7:56:cb:0d:fc:2b:6f:ff:39:e6:a7:2b:c7:fe:18: f8:e4:46:e9:4e:90:a0:a5:2d:8a:1e:04:f5:44:7b: 65:a6:dd:16:45:5a:db:3c:57:f2:67:dd:1c:95:7b: 87:77:ff:7d:c2:e5:9a:67:61:35:a7:7c:23:4d:3d: 38:68:f8:af:62:ea:9c:9a:28:ca:6c:34:ae:d7:57: 06:14:02:6f:5c:80:8d:32:cd:b1:f3:b1:f0:c0:18: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:23:DF:7C:51:DB:FB:14:7C:FC:06:84:34:30:D1:48:5C:F8:82:DF X509v3 Authority Key Identifier: keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b2:24:52:2b:2e:af:9f:db:07:76:ce:3f:8f:c4:dd:17:42: 5c:be:2e:2e:c8:a9:04:6c:e6:28:87:76:4e:b2:b9:3f:22:9a: 0a:41:3a:7e:bd:2e:0c:02:2b:4d:43:fa:6a:0f:7d:23:4c:a4: 3a:91:7c:21:94:e8:c4:18:6b:58:e7:3b:39:ca:ab:f4:df:ae: e9:5e:d3:81:d5:ba:cb:81:35:82:6c:f3:54:c4:7e:86:07:26: 97:ff:ba:e7:a8:21:c3:dd:e0:38:47:44:f0:35:ac:ee:54:a4: 79:57:25:4c:1d:e9:96:c7:6e:e3:27:2d:c1:de:6a:b7:9b:ca: 1a:fd:07:9f:ca:09:50:45:65:9d:8e:70:ff:25:72:15:e3:cd: 39:09:3a:35:a3:fe:50:d4:bf:5b:f4:73:74:c4:67:00:fb:c0: b7:2c:4f:dc:4a:de:25:da:c5:65:cd:c5:16:5a:51:c5:22:20: 60:50:4d:dc:1e:a5:dc:e3:55:1f:d8:84:80:01:76:38:8a:ee: f0:5c:af:de:41:ef:59:51:28:9d:df:72:5e:d1:b0:08:e8:c7: 53:2c:22:4b:7a:7b:90:5f:20:54:91:1d:17:6d:54:93:60:e1: d6:27:6a:71:8b:29:f3:d2:f0:c0:82:b1:33:3e:dd:01:05:11: 6b:0c:d3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSfeJ1KB9Uh/rowCr0tI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5 YTFlMzQwHhcNMjUxMjEyMDIwMDQxWhcNMjUxMjEzMDIwMDQxWjAzMTEwLwYDVQQD EyhlYjIzZGY3YzUxZGJmYjE0N2NmYzA2ODQzNDMwZDE0ODVjZjg4MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDjf162jMuCiVk31wvpZJVWzaB3Y JdH6BU3H9b1BIJ1sRvDCz/EdTc8HrYYSaKUONRK/cWBSVQU0L9bXqvuDqn9abMec 9/Cni9lOMYCTGvIPc3/j64XVR5AtArToKGcL3SOxreYlJccSoWjjNJf8IxjNsTuF fGaO0so95C6kbFhqFPhq9rLZSifgmpNUo3Nsr9WfdZ1ORx+GUL0M7KYl52Y0t8PX VssN/Ctv/znmpyvH/hj45EbpTpCgpS2KHgT1RHtlpt0WRVrbPFfyZ90clXuHd/99 wuWaZ2E1p3wjTT04aPivYuqcmijKbDSu11cGFAJvXICNMs2x87HwwBjh/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsj33xR2/sUfPwGhDQw0Uhc+ILfMB8GA1UdIwQY MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt ZWM1Yjg4ZDAxMzhhLzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbIkUisu r5/bB3bOP4/E3RdCXL4uLsipBGzmKId2TrK5PyKaCkE6fr0uDAIrTUP6ag99I0yk OpF8IZToxBhrWOc7Ocqr9N+u6V7TgdW6y4E1gmzzVMR+hgcml/+656ghw93gOEdE 8DWs7lSkeVclTB3plsdu4yctwd5qt5vKGv0Hn8oJUEVlnY5w/yVyFePNOQk6NaP+ UNS/W/RzdMRnAPvAtyxP3EreJdrFZc3FFlpRxSIgYFBN3B6l3ONVH9iEgAF2OIru 8Fyv3kHvWVEond9yXtGwCOjHUywiS3p7kF8gVJEdF21Uk2Dh1idqcYsp89LwwIKx Mz7dAQURawzT+A== -----END CERTIFICATE-----Generated at Fri Dec 12 09:25:36 2025 by rpki-client