This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft File: 5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json) Hash identifier: /tL8lGg7nU+HRzanOJP/5xrU1Lf5vNoHpxpIeZg/NpE= Subject key identifier: B1:37:21:5A:84:F1:6A:A6:C5:B9:98:81:85:35:00:20:D1:6E:6B:A7 Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E Certificate issuer: /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e Certificate serial: 019B19BC7925066D098563534BF9CD3F340A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft Manifest number: 1773 Signing time: Sat 13 Dec 2025 22:02:20 +0000 Manifest this update: Sat 13 Dec 2025 22:02:20 +0000 Manifest next update: Sun 14 Dec 2025 22:02:20 +0000 Files and hashes: 1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: UDCDMBFIM8raZ9FHKb5I2RLc80IMzbf4UcOwHUajXuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:79:25:06:6d:09:85:63:53:4b:f9:cd:3f:34:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e Validity Not Before: Dec 13 22:02:20 2025 GMT Not After : Dec 14 22:02:20 2025 GMT Subject: CN=b137215a84f16aa6c5b9988185350020d16e6ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:f3:c7:de:48:e8:0d:74:f1:0a:00:42:9f: 29:95:82:59:76:c0:62:d9:16:18:af:8f:16:9b:8a: 82:fb:fc:d1:d1:06:b1:3c:5e:87:67:a9:f5:5b:48: 9c:de:a2:6c:03:30:a2:7b:3a:4c:04:8c:b8:d2:7a: a7:82:51:5e:d8:a7:95:3e:57:20:b9:15:f3:e9:70: 6a:bd:be:69:61:e3:11:5b:7d:29:85:94:89:b3:bf: 18:87:27:79:6e:0e:7a:3a:5d:f5:4f:87:87:c1:04: b2:03:bc:b0:b8:f6:e4:9b:99:f1:26:71:41:da:66: a4:2a:6f:04:f3:a8:c9:5c:98:d7:35:f4:ef:49:41: 43:9f:28:9d:6a:b2:26:f5:9c:76:ca:8f:84:4d:96: cd:9d:4b:6a:7b:15:e4:de:0a:6d:84:3d:a8:7c:89: 69:b1:e6:21:2f:19:ef:40:94:aa:c4:ea:9f:ed:0f: 43:43:85:b1:45:8c:f0:f3:28:b4:02:77:c6:7a:7b: 6e:e3:e8:e2:02:06:f3:32:a9:0e:9a:d6:3c:68:00: 22:41:b9:60:8c:9c:da:ff:d0:0b:96:be:b9:1b:7f: 52:ff:31:a4:d8:2b:34:f2:58:4a:b2:30:17:b4:63: 4e:c8:f8:0a:f7:0e:be:d2:82:80:9d:72:94:02:3a: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:21:5A:84:F1:6A:A6:C5:B9:98:81:85:35:00:20:D1:6E:6B:A7 X509v3 Authority Key Identifier: keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6e:49:55:db:dd:9c:d8:ad:4e:e4:35:32:c5:7a:bd:8e:61: 6e:a9:7f:f0:9c:d3:cd:3e:28:68:78:b8:55:97:4d:07:b7:95: 6c:64:14:90:67:0a:7c:50:83:43:4a:93:dc:1a:52:a2:7c:71: 44:f6:a4:d7:c8:64:89:78:8a:6f:8b:55:a8:d4:93:3a:a6:19: 1a:27:0e:ed:95:60:a7:3f:83:c4:0f:0d:2f:2b:d0:3a:89:ff: 71:c1:20:96:4e:58:ab:7d:4d:a5:e9:5c:4e:d6:e0:52:e1:23: f9:a5:c1:98:b6:ee:37:35:d1:d5:07:a1:73:9a:36:e1:01:31: 61:15:e6:7c:9f:24:ea:83:92:94:e7:ad:d0:40:9e:46:e9:09: c7:8e:7c:dc:66:7c:be:ab:e5:f6:92:a5:dd:39:d8:6a:a3:cc: b8:34:b0:65:92:ac:d7:b0:ca:48:5e:d1:1a:da:c1:6f:3c:43: 64:ae:33:14:06:09:b8:49:a0:d0:c9:cb:5b:b0:f9:a7:c7:0b: 38:73:9b:4a:29:e7:9c:1e:52:7e:2f:00:84:33:38:13:42:d3: ae:d7:cd:6e:75:b5:e3:74:dd:71:78:b9:b0:27:86:07:a4:0a: 34:8d:19:4d:02:8f:a2:eb:a7:cb:e6:fc:12:b3:cd:9d:34:ba: a0:0f:7a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvHklBm0JhWNTS/nNPzQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ODI5OTU4ZDgwMGNhMWFkZTZlMTNjYTdiMjgwYjIyOWNl NjYwMmUwHhcNMjUxMjEzMjIwMjIwWhcNMjUxMjE0MjIwMjIwWjAzMTEwLwYDVQQD EyhiMTM3MjE1YTg0ZjE2YWE2YzViOTk4ODE4NTM1MDAyMGQxNmU2YmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqDzx95I6A108QoAQp8plYJZdsBi 2RYYr48Wm4qC+/zR0QaxPF6HZ6n1W0ic3qJsAzCiezpMBIy40nqnglFe2KeVPlcg uRXz6XBqvb5pYeMRW30phZSJs78Yhyd5bg56Ol31T4eHwQSyA7ywuPbkm5nxJnFB 2makKm8E86jJXJjXNfTvSUFDnyidarIm9Zx2yo+ETZbNnUtqexXk3gpthD2ofIlp seYhLxnvQJSqxOqf7Q9DQ4WxRYzw8yi0AnfGentu4+jiAgbzMqkOmtY8aAAiQblg jJza/9ALlr65G39S/zGk2Cs08lhKsjAXtGNOyPgK9w6+0oKAnXKUAjp0RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE3IVqE8WqmxbmYgYU1ACDRbmunMB8GA1UdIwQY MBaAFOSCmVjYAMoa3m4TynsoCyKc5mAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQt MWQ1YmMwMDFhMWRlLzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83M2FmN2MtNTY0Ny00MmQ3LWFhMWQtMWQ1YmMwMDFhMWRl LzEvNUlLWldOZ0F5aHJlYmhQS2V5Z0xJcHptWUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA25JVdvd nNitTuQ1MsV6vY5hbql/8JzTzT4oaHi4VZdNB7eVbGQUkGcKfFCDQ0qT3BpSonxx RPak18hkiXiKb4tVqNSTOqYZGicO7ZVgpz+DxA8NLyvQOon/ccEglk5Yq31Npelc TtbgUuEj+aXBmLbuNzXR1Qehc5o24QExYRXmfJ8k6oOSlOet0ECeRukJx4583GZ8 vqvl9pKl3TnYaqPMuDSwZZKs17DKSF7RGtrBbzxDZK4zFAYJuEmg0MnLW7D5p8cL OHObSinnnB5Sfi8AhDM4E0LTrtfNbnW143TdcXi5sCeGB6QKNI0ZTQKPouuny+b8 ErPNnTS6oA96FA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:39 2025 by rpki-client