This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json) Hash identifier: F9AojjGEzMTuJ01NF82pBal/38cw1yGO1Wt/CG1rbOE= Subject key identifier: 30:16:71:87:28:2F:DA:A4:FA:74:F6:AF:72:B9:C2:5E:4E:DF:BC:D1 Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Certificate serial: 019B6D3406DE1AAB54875AACEE3C1CCE7789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 03:01:24 +0000 Manifest this update: Tue 30 Dec 2025 03:01:24 +0000 Manifest next update: Wed 31 Dec 2025 03:01:24 +0000 Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: GxVWhpHkKvIdnju8VO86+U1sDL6TXEyuJxs70dv+M+U=) 2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:34:06:de:1a:ab:54:87:5a:ac:ee:3c:1c:ce:77:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0 Validity Not Before: Dec 30 03:01:24 2025 GMT Not After : Dec 31 03:01:24 2025 GMT Subject: CN=30167187282fdaa4fa74f6af72b9c25e4edfbcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:bb:a4:85:42:03:2d:75:41:e7:93:f8:b5: 18:08:17:fc:40:8a:ed:6c:18:e5:14:e2:19:39:73: 0c:c5:cd:78:ef:21:09:e9:fb:44:43:4a:a8:70:51: 6b:ab:53:59:f9:5f:cb:3b:02:d1:36:d4:1b:11:13: e0:65:48:da:84:df:87:3b:4f:c1:4e:fe:30:e6:e0: 1f:6a:a5:2d:60:bd:c5:2d:bf:aa:39:6a:b6:97:63: b5:14:e0:60:53:eb:aa:73:e4:d4:71:af:2a:5c:95: 40:bb:c2:25:04:5c:82:ca:4b:3b:e9:69:ee:24:3b: 1c:9d:2c:c0:a3:24:7f:62:ee:74:5f:92:cf:39:b2: f6:35:c6:53:3d:c5:70:a3:01:e7:82:7d:18:28:a4: 92:26:ca:14:95:2d:55:15:3e:b4:30:cd:fb:46:8b: 80:52:c1:90:22:5c:c2:46:1f:45:ff:49:59:29:15: b6:90:ce:e0:33:4d:a0:11:69:75:aa:6a:57:09:65: 4b:ca:72:11:4a:3b:34:ed:ef:7f:6b:c4:42:cd:36: 4e:b0:30:8c:e3:01:6e:2e:5a:4c:0b:8c:5c:84:28: c7:45:8f:8d:f6:64:e3:a4:c2:f6:f8:d0:e7:9b:53: cb:62:d8:af:86:c1:16:db:40:1f:b3:57:c6:b7:f8: 82:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:16:71:87:28:2F:DA:A4:FA:74:F6:AF:72:B9:C2:5E:4E:DF:BC:D1 X509v3 Authority Key Identifier: keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2e:15:2c:59:01:e2:3d:c7:21:6a:92:84:c2:3e:48:4b:a1: 0a:0c:81:6a:8b:69:31:51:35:d8:66:4d:ad:df:dc:7a:51:69: bb:87:d5:dc:b2:e5:d3:2e:9d:23:1f:39:d8:2d:cf:4f:7c:f8: bf:95:41:9b:0f:a9:3c:bd:6c:8e:42:77:fd:3a:79:e4:92:6a: 44:16:3b:c6:69:60:90:7b:bd:58:6e:84:d2:70:da:13:8e:cb: a1:c0:25:a5:ba:5c:83:63:96:dd:91:01:41:bf:b7:29:44:ca: d0:bc:a3:94:31:9a:5a:dc:30:0d:b2:4f:2e:74:f7:55:87:4a: 6a:9e:08:09:ba:72:74:67:bb:1b:e5:40:f3:dd:f7:3f:01:8d: e5:0e:88:d9:5b:2b:5b:a5:59:f4:fc:b4:72:a4:9d:c7:ea:0b: 04:6b:83:5c:3d:c4:e5:9f:9d:0c:a4:85:07:32:d8:09:cc:14: 5b:24:be:51:5a:a5:38:2e:c2:ff:54:ca:4a:07:49:99:50:1f: 63:03:7d:6c:cd:60:dc:20:fb:6a:f0:cf:bb:b6:22:dc:46:b7: 40:3b:e4:2d:e4:0c:87:4c:6c:ea:15:15:96:69:71:ae:bc:76: 00:c2:a7:4a:55:9b:7b:f2:98:60:6a:b5:cb:c8:58:72:38:ef: ff:20:65:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttNAbeGqtUh1qs7jwczneJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NDY4MmFkYjAyMzhjYzc3MmQxYzViNDk4NmM3YTMzOTg2 MzY0YTAwHhcNMjUxMjMwMDMwMTI0WhcNMjUxMjMxMDMwMTI0WjAzMTEwLwYDVQQD EygzMDE2NzE4NzI4MmZkYWE0ZmE3NGY2YWY3MmI5YzI1ZTRlZGZiY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkq7pIVCAy11QeeT+LUYCBf8QIrt bBjlFOIZOXMMxc147yEJ6ftEQ0qocFFrq1NZ+V/LOwLRNtQbERPgZUjahN+HO0/B Tv4w5uAfaqUtYL3FLb+qOWq2l2O1FOBgU+uqc+TUca8qXJVAu8IlBFyCyks76Wnu JDscnSzAoyR/Yu50X5LPObL2NcZTPcVwowHngn0YKKSSJsoUlS1VFT60MM37RouA UsGQIlzCRh9F/0lZKRW2kM7gM02gEWl1qmpXCWVLynIRSjs07e9/a8RCzTZOsDCM 4wFuLlpMC4xchCjHRY+N9mTjpML2+NDnm1PLYtivhsEW20Afs1fGt/iCWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAWcYcoL9qk+nT2r3K5wl5O37zRMB8GA1UdIwQY MBaAFOZGgq2wI4zHctHFtJhsejOYY2SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTIt YWNlY2FkNTNjODE1LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hOWNlYjgtMGM4Ni00OWFjLWEzOTItYWNlY2FkNTNjODE1 LzEvNWthQ3JiQWpqTWR5MGNXMG1HeDZNNWhqWktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARy4VLFkB 4j3HIWqShMI+SEuhCgyBaotpMVE12GZNrd/celFpu4fV3LLl0y6dIx852C3PT3z4 v5VBmw+pPL1sjkJ3/Tp55JJqRBY7xmlgkHu9WG6E0nDaE47LocAlpbpcg2OW3ZEB Qb+3KUTK0LyjlDGaWtwwDbJPLnT3VYdKap4ICbpydGe7G+VA8933PwGN5Q6I2Vsr W6VZ9Py0cqSdx+oLBGuDXD3E5Z+dDKSFBzLYCcwUWyS+UVqlOC7C/1TKSgdJmVAf YwN9bM1g3CD7avDPu7Yi3Ea3QDvkLeQMh0xs6hUVlmlxrrx2AMKnSlWbe/KYYGq1 y8hYcjjv/yBlXg== -----END CERTIFICATE-----Generated at Tue Dec 30 09:08:39 2025 by rpki-client