This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json) Hash identifier: fVYaHGq4OwdeG/AGTL3vjACz/uLJ2aQX6pA+fmNINek= Subject key identifier: 3D:E3:2C:71:44:44:B1:B1:0F:41:BE:32:E8:7B:3F:34:0B:BE:AD:8D Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Certificate serial: 019B3CEC1B03F3D95D2DF85B9E55F8080710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft Manifest number: 0D87 Signing time: Sat 20 Dec 2025 18:01:04 +0000 Manifest this update: Sat 20 Dec 2025 18:01:04 +0000 Manifest next update: Sun 21 Dec 2025 18:01:04 +0000 Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=) 2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: P1TsHyriiFy1/HU1y6tdGjeH8e3ZOFIabDaFhZPXq7M=) 3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:1b:03:f3:d9:5d:2d:f8:5b:9e:55:f8:08:07:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Validity Not Before: Dec 20 18:01:04 2025 GMT Not After : Dec 21 18:01:04 2025 GMT Subject: CN=3de32c714444b1b10f41be32e87b3f340bbead8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:26:48:0e:56:b0:28:33:ee:5e:c4:b8:58:75: bf:a9:d6:df:bb:17:d9:6a:2b:cb:cc:e3:90:bc:9f: 7a:ea:09:91:29:8f:be:9a:c5:8e:54:1c:a6:ce:5e: 32:43:88:a1:cd:d7:97:7b:dc:67:1b:01:5c:68:cd: cd:73:3d:cf:a1:0a:ef:e1:ed:fe:4e:36:52:07:ea: 68:33:46:7f:8b:8e:e1:1e:ad:21:51:16:96:27:f1: 8e:52:0b:d0:ec:48:97:e3:54:b2:95:aa:77:e3:d4: 22:8f:42:8c:6f:fa:fe:fe:f8:bf:84:3f:8f:c6:15: 82:9d:9d:48:dc:fc:a5:14:6c:e0:21:1e:31:07:7a: 29:24:c2:8d:b4:a9:c0:f9:80:4a:7a:1c:9c:9f:76: fa:f0:bf:91:f5:9e:f7:35:d8:b6:4f:28:9c:42:0d: f5:58:5d:d7:8c:e7:29:73:19:d3:2a:ef:90:32:12: 5a:5b:0b:6e:ee:87:47:d5:7d:b2:85:d3:f3:7e:e4: db:c3:76:ae:20:87:14:94:70:f2:59:4b:f3:69:4e: c9:5c:52:0f:7e:83:b1:ad:50:e5:76:38:35:e8:14: 41:2a:64:e7:42:be:28:09:4a:2c:5f:88:ca:d0:3e: 9f:40:e2:c3:a8:a7:65:f4:d5:bd:bc:06:1d:1b:24: 96:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E3:2C:71:44:44:B1:B1:0F:41:BE:32:E8:7B:3F:34:0B:BE:AD:8D X509v3 Authority Key Identifier: keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9f:ba:b3:0c:a4:8e:f4:be:e0:ad:5d:39:78:77:42:ce:2f: 2f:77:87:f8:30:e7:76:a6:a3:ef:a9:5f:d3:cb:6a:26:53:43: 72:4a:0d:26:f9:ca:2a:fb:dc:53:eb:20:ee:db:52:7b:81:25: 6b:d4:82:04:a5:ed:8d:dd:01:ad:98:f0:a0:01:3f:f6:19:0a: fa:c3:7c:12:37:b2:14:f2:41:68:33:28:6d:a8:b0:eb:89:8a: 26:f5:c4:d6:30:40:60:67:d5:7f:c8:97:a3:be:8a:77:80:f8: 7b:7b:57:33:b5:ca:69:6a:1d:43:42:af:4e:1d:e8:13:9b:5e: 0e:e4:fc:40:a6:58:53:21:bd:2c:7d:a6:38:90:db:fd:6b:e9: 2a:b6:81:f0:75:52:82:2f:aa:92:ca:40:14:d2:c6:e7:17:d4: 85:8d:7d:2f:7d:5b:97:6e:0f:7b:b7:e9:0a:8a:dd:6b:f5:a1: d3:ef:6a:c5:6b:96:07:0a:2d:18:c6:ec:a1:fd:5b:d4:40:59: 22:d6:71:14:16:81:1a:d3:8f:64:9b:ed:29:b4:f0:04:41:2b: a5:b0:c8:0c:02:82:dc:ad:98:4b:c1:4f:41:c5:63:60:21:53: d6:98:5c:0b:08:77:50:de:64:77:dc:7e:11:33:e9:cc:6c:58: 4e:48:a7:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87BsD89ldLfhbnlX4CAcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5 M2FjM2EwHhcNMjUxMjIwMTgwMTA0WhcNMjUxMjIxMTgwMTA0WjAzMTEwLwYDVQQD EygzZGUzMmM3MTQ0NDRiMWIxMGY0MWJlMzJlODdiM2YzNDBiYmVhZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiZIDlawKDPuXsS4WHW/qdbfuxfZ aivLzOOQvJ966gmRKY++msWOVBymzl4yQ4ihzdeXe9xnGwFcaM3Ncz3PoQrv4e3+ TjZSB+poM0Z/i47hHq0hURaWJ/GOUgvQ7EiX41Sylap349Qij0KMb/r+/vi/hD+P xhWCnZ1I3PylFGzgIR4xB3opJMKNtKnA+YBKehycn3b68L+R9Z73Ndi2TyicQg31 WF3XjOcpcxnTKu+QMhJaWwtu7odH1X2yhdPzfuTbw3auIIcUlHDyWUvzaU7JXFIP foOxrVDldjg16BRBKmTnQr4oCUosX4jK0D6fQOLDqKdl9NW9vAYdGySWKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3jLHFERLGxD0G+Muh7PzQLvq2NMB8GA1UdIwQY MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4 LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep+6swyk jvS+4K1dOXh3Qs4vL3eH+DDndqaj76lf08tqJlNDckoNJvnKKvvcU+sg7ttSe4El a9SCBKXtjd0BrZjwoAE/9hkK+sN8EjeyFPJBaDMobaiw64mKJvXE1jBAYGfVf8iX o76Kd4D4e3tXM7XKaWodQ0KvTh3oE5teDuT8QKZYUyG9LH2mOJDb/WvpKraB8HVS gi+qkspAFNLG5xfUhY19L31bl24Pe7fpCorda/Wh0+9qxWuWBwotGMbsof1b1EBZ ItZxFBaBGtOPZJvtKbTwBEErpbDIDAKC3K2YS8FPQcVjYCFT1phcCwh3UN5kd9x+ ETPpzGxYTkinog== -----END CERTIFICATE-----Generated at Sun Dec 21 00:27:33 2025 by rpki-client