This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json) Hash identifier: n7b/SucVjOXf+z1VO4klbtzILstB9KyDLaKlRgfPFZI= Subject key identifier: 30:D7:D5:D8:3F:01:DF:26:B0:F4:97:35:3D:CA:D4:26:6B:C0:92:37 Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75 Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475 Certificate serial: 019B5A1A8C3BC9EC7BF4070E345EAD3F4638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft Manifest number: 06BD Signing time: Fri 26 Dec 2025 10:00:47 +0000 Manifest this update: Fri 26 Dec 2025 10:00:47 +0000 Manifest next update: Sat 27 Dec 2025 10:00:47 +0000 Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: G4cqYX1yuZwYeIHWsmxp0rTfp2z97E0CZRYaLPhcbYM=) 2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:8c:3b:c9:ec:7b:f4:07:0e:34:5e:ad:3f:46:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475 Validity Not Before: Dec 26 10:00:47 2025 GMT Not After : Dec 27 10:00:47 2025 GMT Subject: CN=30d7d5d83f01df26b0f497353dcad4266bc09237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:7c:52:17:2d:ed:0c:87:0c:53:04:8d:dc: 82:67:74:c3:c8:ad:49:65:28:44:d9:83:2f:7d:e3: 5d:41:e7:f8:25:28:90:e6:48:f8:f4:29:d7:a0:da: c0:25:22:66:c5:5b:1a:bd:9a:ec:1b:df:a5:70:6c: 56:71:37:ae:ae:f7:ab:80:9a:aa:13:a9:fb:20:9c: 17:1d:3a:a3:17:51:2c:09:10:2f:fb:33:37:85:bd: 61:3c:8d:c3:6e:e4:b9:94:ec:37:2c:1b:53:e7:c3: e1:05:bb:8d:9d:aa:33:0b:db:b1:c1:35:24:8b:38: 4f:71:39:09:9a:6c:34:72:22:1c:90:b7:10:2a:31: 95:8c:bf:bb:ec:b9:f1:65:59:42:b4:da:3a:36:b7: 9a:0a:a8:56:fc:e8:06:30:5a:3b:d5:7a:c5:52:e5: 8f:5b:27:f6:a3:5a:ff:6e:3a:8c:9a:4b:52:84:68: 46:02:77:41:ae:c6:a9:49:e2:92:c4:99:fb:fc:31: 98:cf:bc:7d:98:42:8f:06:6c:87:de:e9:19:41:21: 8b:32:cb:98:f2:76:0d:53:39:bd:9d:2c:ae:ba:d9: b1:93:c6:f4:4a:e9:f4:e7:ef:60:4f:5a:05:95:85: 93:47:f4:f9:66:1b:7f:e5:86:bb:c9:bc:5f:ed:f4: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D7:D5:D8:3F:01:DF:26:B0:F4:97:35:3D:CA:D4:26:6B:C0:92:37 X509v3 Authority Key Identifier: keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a4:d5:5d:c3:f4:c3:09:12:a1:f6:89:3c:45:d9:74:ab:08: e7:f2:a4:53:48:20:29:a5:85:a2:d9:6a:91:0b:14:e8:46:7c: 86:c1:99:ba:de:25:78:fa:20:0d:2d:a4:4e:6e:c6:bb:96:b5: 62:27:48:24:e4:71:65:ef:3c:92:9f:82:74:50:c0:7e:6a:89: 55:d1:a6:dc:22:62:8e:4f:3b:1a:ff:1c:ac:0e:91:0c:ef:26: d9:3f:2a:84:e9:e6:78:ca:2f:f9:1e:71:5e:bb:cc:02:13:0e: c1:66:b8:7f:76:f6:f3:d2:d5:5e:12:1e:7a:d0:5c:19:e6:74: e8:be:95:6c:ab:f9:9b:3d:a4:58:90:ab:e1:46:bc:36:bd:83: 79:7b:2a:22:06:84:ea:2c:a2:2b:e6:ba:70:08:a0:d1:cc:47: 65:3c:db:66:55:4a:31:01:ca:df:c3:65:17:72:3f:d8:48:16: fc:cf:82:00:ac:08:03:4c:a7:9c:7e:a2:55:b8:38:a6:79:ad: 23:e5:5b:f9:41:ac:67:af:b3:12:5a:46:8e:9b:52:b6:df:d6: cb:35:31:f0:97:ac:07:89:22:d5:4b:83:32:74:09:77:08:f8: 11:4e:76:ee:c1:46:7b:5d:c9:4a:be:6f:9d:b0:84:c1:5b:97: 1c:58:2b:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGow7yex79AcONF6tP0Y4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNDU5MDY1ZjcyODExN2QxYzcwYjhjNTRjZGE4ZjQ2MWRi ODA0NzUwHhcNMjUxMjI2MTAwMDQ3WhcNMjUxMjI3MTAwMDQ3WjAzMTEwLwYDVQQD EygzMGQ3ZDVkODNmMDFkZjI2YjBmNDk3MzUzZGNhZDQyNjZiYzA5MjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/d8Uhct7QyHDFMEjdyCZ3TDyK1J ZShE2YMvfeNdQef4JSiQ5kj49CnXoNrAJSJmxVsavZrsG9+lcGxWcTeurvergJqq E6n7IJwXHTqjF1EsCRAv+zM3hb1hPI3DbuS5lOw3LBtT58PhBbuNnaozC9uxwTUk izhPcTkJmmw0ciIckLcQKjGVjL+77LnxZVlCtNo6NreaCqhW/OgGMFo71XrFUuWP Wyf2o1r/bjqMmktShGhGAndBrsapSeKSxJn7/DGYz7x9mEKPBmyH3ukZQSGLMsuY 8nYNUzm9nSyuutmxk8b0Sun05+9gT1oFlYWTR/T5Zht/5Ya7ybxf7fTdTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDX1dg/Ad8msPSXNT3K1CZrwJI3MB8GA1UdIwQY MBaAFP5FkGX3KBF9HHC4xUzaj0YduAR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAyMjItNTc0MS00ZTIzLTk3ZDYt ZDYzYTIzY2YxMTRjLzEvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wNjAyMjItNTc0MS00ZTIzLTk3ZDYtZDYzYTIzY2YxMTRj LzEvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6TVXcP0 wwkSofaJPEXZdKsI5/KkU0ggKaWFotlqkQsU6EZ8hsGZut4lePogDS2kTm7Gu5a1 YidIJORxZe88kp+CdFDAfmqJVdGm3CJijk87Gv8crA6RDO8m2T8qhOnmeMov+R5x XrvMAhMOwWa4f3b289LVXhIeetBcGeZ06L6VbKv5mz2kWJCr4Ua8Nr2DeXsqIgaE 6iyiK+a6cAig0cxHZTzbZlVKMQHK38NlF3I/2EgW/M+CAKwIA0ynnH6iVbg4pnmt I+Vb+UGsZ6+zElpGjptStt/WyzUx8JesB4ki1UuDMnQJdwj4EU527sFGe13JSr5v nbCEwVuXHFgrCw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:03 2025 by rpki-client