This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json) Hash identifier: hAKmNtRo3MTdcEX+VsAOGKHcbDEVj9ZdHl2VWHHO5y4= Subject key identifier: EC:82:4F:A6:44:E7:F2:12:90:4F:94:D7:12:B9:CE:45:C5:A6:60:1D Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740 Certificate serial: 019B3C7FBA3510035728F5BDD22909C6E55E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:02:42 +0000 Manifest this update: Sat 20 Dec 2025 16:02:42 +0000 Manifest next update: Sun 21 Dec 2025 16:02:42 +0000 Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: aYGz2UnzWhGKScPtteolIJxT+mNujdU1myqteQNa6uU=) 2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=) 3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:ba:35:10:03:57:28:f5:bd:d2:29:09:c6:e5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740 Validity Not Before: Dec 20 16:02:42 2025 GMT Not After : Dec 21 16:02:42 2025 GMT Subject: CN=ec824fa644e7f212904f94d712b9ce45c5a6601d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:34:28:82:bc:8c:8c:d9:0e:5a:9a:2e:5f: a6:73:65:cc:d5:27:2f:e6:0c:31:c7:ec:d7:27:8b: 2d:4f:07:79:65:08:e4:aa:dc:c1:35:5d:90:b1:4f: 6f:c9:76:ff:8e:fd:fb:1a:37:98:d9:7b:94:7f:7a: fb:a7:ed:ff:7c:6f:c2:ff:fd:ea:3f:6e:5e:67:2a: f6:a0:a5:23:93:b6:34:45:c7:ff:e5:00:7d:1d:4f: de:56:be:a3:18:fa:6f:26:1d:0e:48:30:3a:5e:93: ae:20:01:cf:ac:94:eb:61:7d:fe:18:ad:90:0e:b1: e1:d2:4f:c7:cf:fe:c2:c1:a9:e8:ad:02:ec:0d:6e: 53:32:25:03:a5:12:fe:26:e4:a9:28:91:66:b4:d9: b0:4d:06:5f:b9:a9:4e:e3:2c:39:66:34:75:2e:e6: e7:8e:9b:31:48:3f:44:86:1e:b9:6a:d2:cf:79:54: 45:51:3d:7f:28:a3:f7:20:4f:5b:52:41:74:1e:04: 22:53:91:25:bd:93:1c:73:b5:18:11:5a:e8:b0:a6: 94:d5:e0:cd:6e:df:0a:1f:b8:38:6e:da:65:bf:15: d3:4d:3a:b9:18:c5:c4:7c:93:22:93:48:5e:6d:1a: 1e:07:1d:2d:1b:3c:a9:38:76:b4:b6:75:6d:a5:71: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:82:4F:A6:44:E7:F2:12:90:4F:94:D7:12:B9:CE:45:C5:A6:60:1D X509v3 Authority Key Identifier: keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e3:44:b9:17:e2:a2:e7:10:ec:23:4c:93:cc:37:08:6a:da: d7:7d:42:0b:19:72:1d:ef:e1:90:7d:d1:bd:14:0b:96:02:58: 75:a5:6b:f6:17:27:00:ef:36:dd:77:ec:74:d9:a9:04:af:73: 92:04:d6:53:21:2a:f3:da:86:d8:16:4f:71:92:76:99:3b:07: ea:a3:11:6a:32:03:44:09:8f:04:4e:e2:2b:8a:2f:cb:01:1a: c6:4f:a8:c1:60:b3:3b:0c:12:07:f7:ed:04:50:1b:6a:f5:8d: a0:94:ae:e5:a5:3e:88:87:dd:7a:2f:9a:99:63:2d:0c:a4:e8: 83:fd:50:38:ad:3f:ee:05:68:e8:d2:5e:b7:63:20:6d:ba:c9: 5c:28:5c:8c:e9:aa:53:6b:f8:91:7d:eb:57:49:ab:fd:f1:c5: ea:88:b7:37:96:15:74:31:e9:80:da:29:7b:6c:26:8b:78:80: f8:3b:8c:38:00:cc:c4:fb:50:10:3c:e7:99:38:f2:77:9e:32: a5:87:c8:25:03:2a:1c:ba:b9:e3:c4:7a:83:95:d0:6a:e2:51: 7b:8d:38:a7:3a:35:11:40:d2:09:75:02:a5:67:1d:45:0b:b7: e3:1e:8b:f4:99:3d:f6:fb:db:3e:93:37:98:c0:c8:ee:03:45: cf:a0:4b:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7o1EANXKPW90ikJxuVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1 MDc3NDAwHhcNMjUxMjIwMTYwMjQyWhcNMjUxMjIxMTYwMjQyWjAzMTEwLwYDVQQD EyhlYzgyNGZhNjQ0ZTdmMjEyOTA0Zjk0ZDcxMmI5Y2U0NWM1YTY2MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0A0KIK8jIzZDlqaLl+mc2XM1Scv 5gwxx+zXJ4stTwd5ZQjkqtzBNV2QsU9vyXb/jv37GjeY2XuUf3r7p+3/fG/C//3q P25eZyr2oKUjk7Y0Rcf/5QB9HU/eVr6jGPpvJh0OSDA6XpOuIAHPrJTrYX3+GK2Q DrHh0k/Hz/7CwanorQLsDW5TMiUDpRL+JuSpKJFmtNmwTQZfualO4yw5ZjR1Lubn jpsxSD9Ehh65atLPeVRFUT1/KKP3IE9bUkF0HgQiU5ElvZMcc7UYEVrosKaU1eDN bt8KH7g4btplvxXTTTq5GMXEfJMik0hebRoeBx0tGzypOHa0tnVtpXFCIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyCT6ZE5/ISkE+U1xK5zkXFpmAdMB8GA1UdIwQY MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt ZDViMGY5MWQ5N2MyLzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjONEuRfi oucQ7CNMk8w3CGra131CCxlyHe/hkH3RvRQLlgJYdaVr9hcnAO823XfsdNmpBK9z kgTWUyEq89qG2BZPcZJ2mTsH6qMRajIDRAmPBE7iK4ovywEaxk+owWCzOwwSB/ft BFAbavWNoJSu5aU+iIfdei+amWMtDKTog/1QOK0/7gVo6NJet2MgbbrJXChcjOmq U2v4kX3rV0mr/fHF6oi3N5YVdDHpgNope2wmi3iA+DuMOADMxPtQEDznmTjyd54y pYfIJQMqHLq548R6g5XQauJRe404pzo1EUDSCXUCpWcdRQu34x6L9Jk99vvbPpM3 mMDI7gNFz6BLbg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:30:57 2025 by rpki-client