This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json) Hash identifier: 7JVSNckbU+OBph8RHql3/eKdyJPb+xDjng+hre6RHOc= Subject key identifier: AC:68:55:05:F4:69:17:CC:95:47:EA:F0:92:74:8C:45:2C:58:8F:4E Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101 Certificate serial: 019B5ABF39E5D5103947B9A25EE46E13334C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft Manifest number: 1326 Signing time: Fri 26 Dec 2025 13:00:40 +0000 Manifest this update: Fri 26 Dec 2025 13:00:40 +0000 Manifest next update: Sat 27 Dec 2025 13:00:40 +0000 Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=) 2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=) 3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: wmojV8k9IbJjQYUYWMCI2nMCtJsxKBkNXXH0KoLUSDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:39:e5:d5:10:39:47:b9:a2:5e:e4:6e:13:33:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101 Validity Not Before: Dec 26 13:00:40 2025 GMT Not After : Dec 27 13:00:40 2025 GMT Subject: CN=ac685505f46917cc9547eaf092748c452c588f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:91:f4:76:7e:5a:3e:d8:0b:4e:a3:17:15: f5:57:5a:7e:23:a6:39:1d:e5:07:16:79:b0:f6:07: 2b:ad:91:4f:65:66:ce:aa:a9:42:06:d5:18:dc:b9: df:c6:a7:b2:db:68:58:02:59:a0:8d:b4:03:f4:8f: a7:61:7b:b3:d0:31:e8:0c:e9:de:cf:f0:ef:4a:ff: 3b:e2:b5:3c:3b:37:b1:a6:e3:db:02:0f:2b:3b:5f: 54:3d:c2:b0:2b:79:30:fb:a2:71:fd:2c:28:a0:99: e5:1f:fb:c5:ae:fa:a5:58:4c:13:30:74:61:0c:ed: 83:fa:be:6c:dc:ec:15:ae:a3:4b:92:f5:10:08:9b: 5a:f2:84:f8:ce:d0:98:74:2f:73:82:38:ef:90:4f: 98:53:bb:71:44:4e:8f:80:89:27:25:cd:4a:bb:1b: 93:36:c3:0c:e7:26:93:fe:3a:b1:79:5d:c1:70:56: 19:e8:21:79:fd:a4:27:22:ef:23:58:74:58:d2:eb: 33:1a:56:62:aa:13:dc:f2:80:4a:52:d6:32:36:94: 16:6c:34:53:f6:cc:bb:70:1e:f9:bc:f5:14:8d:7d: b1:c6:26:fa:a4:71:f5:32:e1:b9:31:fb:f1:50:f0: 00:eb:ff:21:fc:46:2a:ea:6e:c9:a6:b2:a6:3a:0c: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:68:55:05:F4:69:17:CC:95:47:EA:F0:92:74:8C:45:2C:58:8F:4E X509v3 Authority Key Identifier: keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b4:15:e2:eb:a4:50:c8:39:81:d1:4e:bd:d2:c6:18:33:e8: 59:6f:02:53:14:f3:4f:6f:ba:1d:46:4d:50:74:43:43:e4:8a: 9e:f6:85:88:1a:3d:5e:82:39:90:24:d7:90:3b:c4:ae:46:19: c6:df:e5:6e:36:59:c6:69:2f:36:d5:5c:38:a6:32:a0:58:c1: 93:d2:72:70:5e:65:8b:fa:d5:ef:c3:df:4e:12:bf:f9:a1:c1: 90:b8:51:07:06:f0:38:3d:c4:73:15:02:1a:95:1e:cb:af:68: 58:a6:ac:a1:b1:d3:b7:72:ec:e8:b5:d6:5f:0f:d0:df:04:4c: ac:d5:5f:ad:b9:35:a0:1a:23:d1:aa:ab:95:7c:9e:13:d4:ca: 1b:2c:90:79:0c:df:3b:73:e6:cb:b5:5c:55:c4:3e:b5:0e:68: ba:6c:da:f0:44:5c:f5:66:d7:88:8a:f1:be:11:91:95:17:f5: e1:10:66:68:81:c1:8b:50:d6:81:6c:6d:16:dc:52:88:3c:d7: 7c:37:dd:48:ff:9e:ca:57:3c:c4:61:4b:45:41:84:62:62:5a: 8c:db:32:a3:20:0e:cc:fd:5d:f4:e8:77:fa:8d:4b:9c:4c:9c: 95:88:d3:58:24:dc:e6:75:25:a0:bf:7b:1f:4c:5a:5a:cd:1d: b5:eb:86:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavznl1RA5R7miXuRuEzNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTA2OWE1ZDc2NGRhMjU1OTU0ZGIyZWU5ZDEyNDNkZTE2 YjkxMDEwHhcNMjUxMjI2MTMwMDQwWhcNMjUxMjI3MTMwMDQwWjAzMTEwLwYDVQQD EyhhYzY4NTUwNWY0NjkxN2NjOTU0N2VhZjA5Mjc0OGM0NTJjNTg4ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq6R9HZ+Wj7YC06jFxX1V1p+I6Y5 HeUHFnmw9gcrrZFPZWbOqqlCBtUY3Lnfxqey22hYAlmgjbQD9I+nYXuz0DHoDOne z/DvSv874rU8OzexpuPbAg8rO19UPcKwK3kw+6Jx/SwooJnlH/vFrvqlWEwTMHRh DO2D+r5s3OwVrqNLkvUQCJta8oT4ztCYdC9zgjjvkE+YU7txRE6PgIknJc1KuxuT NsMM5yaT/jqxeV3BcFYZ6CF5/aQnIu8jWHRY0uszGlZiqhPc8oBKUtYyNpQWbDRT 9sy7cB75vPUUjX2xxib6pHH1MuG5MfvxUPAA6/8h/EYq6m7JprKmOgxnLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxoVQX0aRfMlUfq8JJ0jEUsWI9OMB8GA1UdIwQY MBaAFJJQaaXXZNolWVTbLunRJD3ha5EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTkt YTliOGRlNjExYTk2LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTktYTliOGRlNjExYTk2 LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLQV4uuk UMg5gdFOvdLGGDPoWW8CUxTzT2+6HUZNUHRDQ+SKnvaFiBo9XoI5kCTXkDvErkYZ xt/lbjZZxmkvNtVcOKYyoFjBk9JycF5li/rV78PfThK/+aHBkLhRBwbwOD3EcxUC GpUey69oWKasobHTt3Ls6LXWXw/Q3wRMrNVfrbk1oBoj0aqrlXyeE9TKGyyQeQzf O3Pmy7VcVcQ+tQ5oumza8ERc9WbXiIrxvhGRlRf14RBmaIHBi1DWgWxtFtxSiDzX fDfdSP+eylc8xGFLRUGEYmJajNsyoyAOzP1d9Oh3+o1LnEyclYjTWCTc5nUloL97 H0xaWs0dteuGKA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:23 2025 by rpki-client