This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json) Hash identifier: bJE+qVXmzkV/rtZKJ/qkELMzPVeYXhYIYni5PwYFSjM= Subject key identifier: 0D:D7:A9:FD:8D:93:4A:52:BF:CA:F4:2A:23:2F:53:05:C3:AD:3F:B2 Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b Certificate serial: 019B3CB5095CE214392A97170ACFF5711808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft Manifest number: 3B Signing time: Sat 20 Dec 2025 17:00:55 +0000 Manifest this update: Sat 20 Dec 2025 17:00:55 +0000 Manifest next update: Sun 21 Dec 2025 17:00:55 +0000 Files and hashes: 1: 31LqXCpHojYx6Rt887DjR163xxo.roa (hash: Fk0wJvz9kNK6jsX7wBhWeVOLH39ghJFDMdON8iP/W5M=) 2: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: LbmIWMr+gsbadZJ6pvJmNYB6yKcrI0WLLoep8qR2KpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:09:5c:e2:14:39:2a:97:17:0a:cf:f5:71:18:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b Validity Not Before: Dec 20 17:00:55 2025 GMT Not After : Dec 21 17:00:55 2025 GMT Subject: CN=0dd7a9fd8d934a52bfcaf42a232f5305c3ad3fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:39:a6:f0:14:c1:1d:be:94:ed:36:80:da:8c: d7:f5:ac:e7:e8:32:23:c7:57:a7:4b:16:8b:b8:57: 08:9e:6a:59:69:96:5f:b5:e0:c9:9e:d8:fc:77:6a: 6c:e3:40:5e:c8:7d:24:78:d8:f2:2e:d6:5d:9f:87: ed:fc:0e:3f:a4:d9:88:8a:3b:bd:29:83:11:0c:7b: 8c:33:8f:5f:71:e9:77:a5:c7:fe:d8:ad:83:f4:2e: c2:a6:f1:e7:81:c0:6d:f6:53:bd:5b:75:45:f6:4b: d7:d7:24:71:85:c4:7c:67:ff:86:7e:83:27:5f:f4: 16:58:62:97:78:ac:20:0e:cd:c2:d2:9c:08:61:c5: d9:33:92:af:03:8e:11:de:f0:11:a6:84:a5:b5:db: e0:17:30:af:e0:d2:4c:c1:18:39:1a:f9:a3:21:0b: 3b:15:bd:8f:ca:67:49:cd:1c:06:b5:7a:b6:48:98: 58:a9:62:77:b1:a4:4e:56:67:78:c2:4a:01:e5:10: 16:2a:5f:00:24:d5:60:60:16:4d:a9:47:41:b4:00: bf:8c:24:3c:9b:68:5a:8d:46:49:f1:c7:d7:cf:33: 34:c3:1e:3a:cc:5a:76:29:84:96:1a:7b:5a:13:97: ea:5d:c9:ca:98:81:66:f7:60:fa:35:4b:90:4e:95: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D7:A9:FD:8D:93:4A:52:BF:CA:F4:2A:23:2F:53:05:C3:AD:3F:B2 X509v3 Authority Key Identifier: keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:93:dd:50:af:4d:18:d9:d6:e5:75:3d:7f:8a:ce:0c:78:b0: 37:f5:cc:59:63:1d:8e:b6:86:83:1d:b4:90:aa:df:22:e3:6f: fe:03:49:25:f6:49:a4:9c:0d:98:34:98:73:75:0d:ff:a5:7a: bd:a8:a9:81:aa:3a:53:be:c8:15:4f:b0:cd:ca:53:a8:18:3c: 61:1e:52:6a:3b:78:19:74:1e:6d:d8:89:bd:76:56:cb:f7:bc: b7:ba:90:32:a5:31:ea:07:db:0b:2c:f3:6e:bb:a5:e7:b6:88: 43:40:d3:ff:14:74:c1:21:ac:8c:44:f7:32:66:28:07:19:ef: 24:9b:96:05:f4:93:43:a5:d3:ed:12:1f:98:ff:e6:47:f5:24: 61:97:ea:cf:4d:5e:26:e5:3a:44:72:5f:7b:ce:db:03:47:08: e8:93:e2:46:58:5f:fb:29:4b:58:63:cf:b4:ca:3b:a0:0b:dc: e2:39:7e:ac:66:fa:2a:98:b2:22:c6:0e:14:b9:dc:75:e5:43: 0f:eb:ad:72:c6:c7:46:a2:55:56:8e:35:41:f1:d0:14:35:bb: 41:a2:d2:a4:52:4b:01:7e:44:22:c1:58:1c:fc:eb:57:9e:c7: 68:16:65:89:d9:88:6f:fb:69:42:85:c5:76:d1:30:2d:cf:e5: 29:c0:5d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQlc4hQ5KpcXCs/1cRgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NGRlM2ViNzc1Y2EzYmUyZDU1MDNjOWM5Y2QzYjcyYmJj ZGE0OWIwHhcNMjUxMjIwMTcwMDU1WhcNMjUxMjIxMTcwMDU1WjAzMTEwLwYDVQQD EygwZGQ3YTlmZDhkOTM0YTUyYmZjYWY0MmEyMzJmNTMwNWMzYWQzZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dmm8BTBHb6U7TaA2ozX9azn6DIj x1enSxaLuFcInmpZaZZfteDJntj8d2ps40BeyH0keNjyLtZdn4ft/A4/pNmIiju9 KYMRDHuMM49fcel3pcf+2K2D9C7CpvHngcBt9lO9W3VF9kvX1yRxhcR8Z/+GfoMn X/QWWGKXeKwgDs3C0pwIYcXZM5KvA44R3vARpoSltdvgFzCv4NJMwRg5GvmjIQs7 Fb2PymdJzRwGtXq2SJhYqWJ3saROVmd4wkoB5RAWKl8AJNVgYBZNqUdBtAC/jCQ8 m2hajUZJ8cfXzzM0wx46zFp2KYSWGntaE5fqXcnKmIFm92D6NUuQTpXoRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3Xqf2Nk0pSv8r0KiMvUwXDrT+yMB8GA1UdIwQY MBaAFOZN4+t3XKO+LVUDycnNO3K7zaSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYt MzQxNjU4MjQzYjRlLzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYtMzQxNjU4MjQzYjRl LzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJPdUK9N GNnW5XU9f4rODHiwN/XMWWMdjraGgx20kKrfIuNv/gNJJfZJpJwNmDSYc3UN/6V6 vaipgao6U77IFU+wzcpTqBg8YR5Sajt4GXQebdiJvXZWy/e8t7qQMqUx6gfbCyzz brul57aIQ0DT/xR0wSGsjET3MmYoBxnvJJuWBfSTQ6XT7RIfmP/mR/UkYZfqz01e JuU6RHJfe87bA0cI6JPiRlhf+ylLWGPPtMo7oAvc4jl+rGb6KpiyIsYOFLncdeVD D+utcsbHRqJVVo41QfHQFDW7QaLSpFJLAX5EIsFYHPzrV57HaBZlidmIb/tpQoXF dtEwLc/lKcBdlA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:07:04 2025 by rpki-client