This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json) Hash identifier: 1dpp4b5jj6Omg7dEVXtS2+JMUvX2z3/46dmVXP4UVfE= Subject key identifier: 2D:6B:99:FE:CF:DD:A4:85:75:89:BE:FA:E2:0F:02:F0:59:B5:F8:37 Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019B39EB4C7AAE33869A37C1363621E1A3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft Manifest number: 1267 Signing time: Sat 20 Dec 2025 04:01:20 +0000 Manifest this update: Sat 20 Dec 2025 04:01:20 +0000 Manifest next update: Sun 21 Dec 2025 04:01:20 +0000 Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: I/BCAisHgt71qPMi8D/t4dsQQ4DUIEX5FaNMV9MM5Vg=) 2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=) 3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=) 4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:4c:7a:ae:33:86:9a:37:c1:36:36:21:e1:a3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Dec 20 04:01:20 2025 GMT Not After : Dec 21 04:01:20 2025 GMT Subject: CN=2d6b99fecfdda4857589befae20f02f059b5f837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:46:e4:17:63:99:69:e5:59:ec:e2:9a:41: 24:bb:c2:82:3b:2a:ec:34:9d:d3:8c:f7:c3:71:4c: 3d:38:38:8c:e8:07:d5:67:d4:08:84:c4:ed:17:e6: f8:9e:1f:0f:11:7b:79:d8:69:fb:75:b4:9c:6d:47: c8:ec:59:af:3d:1d:6d:98:a1:86:ae:1d:73:3c:6c: a4:ea:b9:b1:f8:de:d2:06:60:dd:58:ba:72:a3:4e: cf:6d:6c:d6:da:76:ec:ad:b6:d2:71:58:f2:2d:aa: 04:63:c7:3c:37:b8:aa:a3:2f:0a:b6:c6:9e:89:b6: 9b:86:1d:d6:9b:1f:ee:7a:70:d5:64:68:1e:5c:d3: 2d:43:2c:c8:9f:9a:cd:4f:10:08:a7:69:2f:fc:6a: 43:ad:86:82:40:3e:69:45:21:4e:ae:4b:e3:66:8e: d6:f2:ee:3d:76:45:0c:da:ed:f6:52:04:1a:2d:fc: 4a:5f:bf:ac:73:17:b0:be:fd:a3:91:c2:44:c0:fa: a1:c3:84:ee:9f:a0:5a:41:f6:51:47:f1:86:ac:bc: 6d:b8:68:4a:79:cd:47:98:24:89:2d:30:47:be:87: 16:81:91:2a:a8:59:22:fd:97:1d:0b:0e:45:e6:af: 06:cc:27:d5:fb:99:13:e9:1a:a4:a0:10:62:46:b0: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6B:99:FE:CF:DD:A4:85:75:89:BE:FA:E2:0F:02:F0:59:B5:F8:37 X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:92:59:3a:bc:74:b5:a8:ad:63:14:85:de:ce:4b:ae:7e:78: 60:db:75:7d:3b:d8:a6:d8:bd:18:76:63:ca:31:fa:b0:b9:f6: 6e:03:18:e0:81:8c:96:f7:16:40:0d:ef:ba:1a:72:cf:a1:ec: 82:62:35:2b:98:21:69:30:74:bb:b6:da:9a:c4:50:cc:e4:b2: c3:26:3e:83:29:81:95:4b:ce:09:90:a3:dd:89:39:08:8e:f1: f0:ae:3b:b4:da:09:ec:43:53:ed:ff:75:f7:85:df:52:4e:d0: 29:df:3f:ea:e0:70:92:10:0e:ad:48:20:7a:08:7c:a6:9b:aa: e5:53:b3:9b:72:09:ea:ba:91:c0:bc:d7:6b:d8:51:42:5f:06: df:2e:d3:b7:82:90:b8:7c:d7:1b:51:2a:fe:7a:65:e4:9f:27: f9:8f:59:84:c6:b4:62:9c:4a:8d:34:8d:16:15:b9:c1:2c:55: bf:2c:8d:12:fa:79:25:c9:67:68:f1:e1:a5:2d:48:7e:67:af: 06:99:1c:35:e2:d2:34:cf:7d:1c:d3:d3:b6:b8:7e:fb:ce:b8: 15:ae:e4:4d:f1:43:06:62:12:c6:f6:09:52:82:7d:8c:a3:f1: f9:05:e8:dc:e6:fb:09:e2:e3:94:4e:1d:31:67:74:23:db:22: dd:64:88:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs560x6rjOGmjfBNjYh4aOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjUxMjIwMDQwMTIwWhcNMjUxMjIxMDQwMTIwWjAzMTEwLwYDVQQD EygyZDZiOTlmZWNmZGRhNDg1NzU4OWJlZmFlMjBmMDJmMDU5YjVmODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZdG5BdjmWnlWezimkEku8KCOyrs NJ3TjPfDcUw9ODiM6AfVZ9QIhMTtF+b4nh8PEXt52Gn7dbScbUfI7FmvPR1tmKGG rh1zPGyk6rmx+N7SBmDdWLpyo07PbWzW2nbsrbbScVjyLaoEY8c8N7iqoy8Ktsae ibabhh3Wmx/uenDVZGgeXNMtQyzIn5rNTxAIp2kv/GpDrYaCQD5pRSFOrkvjZo7W 8u49dkUM2u32UgQaLfxKX7+scxewvv2jkcJEwPqhw4Tun6BaQfZRR/GGrLxtuGhK ec1HmCSJLTBHvocWgZEqqFki/ZcdCw5F5q8GzCfV+5kT6RqkoBBiRrCtRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1rmf7P3aSFdYm++uIPAvBZtfg3MB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5JZOrx0 taitYxSF3s5Lrn54YNt1fTvYpti9GHZjyjH6sLn2bgMY4IGMlvcWQA3vuhpyz6Hs gmI1K5ghaTB0u7bamsRQzOSywyY+gymBlUvOCZCj3Yk5CI7x8K47tNoJ7ENT7f91 94XfUk7QKd8/6uBwkhAOrUggegh8ppuq5VOzm3IJ6rqRwLzXa9hRQl8G3y7Tt4KQ uHzXG1Eq/npl5J8n+Y9ZhMa0YpxKjTSNFhW5wSxVvyyNEvp5JclnaPHhpS1Ifmev BpkcNeLSNM99HNPTtrh++864Fa7kTfFDBmISxvYJUoJ9jKPx+QXo3Ob7CeLjlE4d MWd0I9si3WSIjA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:49 2025 by rpki-client