This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json) Hash identifier: RWcKTAQ5DnA66mBcoFemLSdq8w7tB8IY5Khf4povuo4= Subject key identifier: F2:58:8D:1F:AA:B1:0E:EA:14:61:7F:89:C7:3B:64:32:A9:58:67:61 Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50 Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150 Certificate serial: 019B5D52BAACEEC53A280928452388785D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 01:01:01 +0000 Manifest this update: Sat 27 Dec 2025 01:01:01 +0000 Manifest next update: Sun 28 Dec 2025 01:01:01 +0000 Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=) 2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: YkCcTIAhUPCbbQU+dWkx0DLnhBr/iQFN5bn3eeOfikk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:ba:ac:ee:c5:3a:28:09:28:45:23:88:78:5d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150 Validity Not Before: Dec 27 01:01:01 2025 GMT Not After : Dec 28 01:01:01 2025 GMT Subject: CN=f2588d1faab10eea14617f89c73b6432a9586761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:a8:67:10:6a:30:89:cd:4a:fc:a0:bc:01: aa:8e:c8:2f:2b:ca:1d:ab:6d:b9:95:a1:f7:6c:c4: 01:3b:f4:21:26:38:1d:1e:54:04:b2:81:37:4f:24: 0d:41:38:79:be:82:70:ce:0d:d3:a1:5c:e5:4e:63: 17:27:a4:f5:05:d5:3b:43:23:3b:f7:6c:38:2d:ae: fc:ef:3b:b2:00:40:53:c0:08:ee:11:c3:9c:3d:1e: 83:75:de:60:d8:1f:8f:27:16:24:13:77:62:cf:9a: 60:d9:06:27:64:18:25:e4:a3:a6:66:2e:2a:e2:18: e9:c4:43:3e:5c:56:e2:0b:2a:18:32:78:6a:c0:7a: 46:0a:71:f4:c7:69:6f:fe:3a:59:3d:c8:d9:43:01: 0c:0d:44:38:71:0d:e6:b7:58:00:28:c6:dd:7a:46: 94:b8:29:8f:c9:db:60:d4:4b:53:48:d0:17:a1:88: 40:f5:13:fe:4d:01:a9:45:5b:e8:bb:db:0b:f5:d2: 67:56:42:fc:9e:af:50:46:90:1e:04:94:ba:2c:20: 50:6b:05:af:ee:32:10:77:ec:3a:86:df:2d:8a:43: 1a:45:3c:64:e9:62:ef:e5:27:ae:d4:9b:db:4b:a5: a1:b3:3f:cc:2d:59:29:30:ab:34:57:67:1a:22:16: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:58:8D:1F:AA:B1:0E:EA:14:61:7F:89:C7:3B:64:32:A9:58:67:61 X509v3 Authority Key Identifier: keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4a:a6:ef:e2:38:72:66:e6:ff:f6:e2:2f:2d:f8:5b:08:3f: 4b:71:f6:ef:1f:a3:e4:bc:5f:8e:0a:a4:8a:f0:7a:8a:59:7f: e2:50:12:79:d4:59:a0:ca:63:e3:d1:97:15:8b:05:ba:71:32: 04:12:b6:c7:5f:07:f1:f6:00:b5:3d:8a:54:dc:25:c1:af:ab: 84:ef:ae:3f:b1:f9:67:08:9b:d1:b9:07:bd:69:7a:0e:db:3d: 1e:fc:49:0a:7b:41:69:92:2b:ba:93:39:1e:ae:67:18:cd:79: 68:80:32:b2:40:fb:62:a5:68:8b:6a:74:da:7a:ab:ed:f6:88: 24:9a:a6:d5:ba:6e:f1:61:67:57:ea:74:5f:bc:5a:6b:71:5b: 2b:c0:38:b4:05:6a:cb:47:dc:8c:d8:a7:64:85:1b:a7:93:07: 4b:f1:f1:02:44:e6:18:d4:44:f3:65:11:f0:aa:86:97:9c:cb: 65:58:f1:09:21:85:4a:01:8e:4c:d5:7b:b2:22:02:8d:52:28: 88:66:e6:a3:cd:e0:14:b5:18:81:c4:22:9a:85:f6:0b:1f:65: 85:5b:e0:da:13:6e:7a:eb:cc:0a:97:01:ba:c4:14:29:3b:70: 50:ca:f9:46:34:53:90:aa:f5:c9:1d:da:57:e0:70:3d:dc:6f: ff:b4:56:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUrqs7sU6KAkoRSOIeF0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTllZTc0ZjJkOTg0Yzg4YWIzYjk5YWU3MWQwYjdjN2Jh ZjgxNTAwHhcNMjUxMjI3MDEwMTAxWhcNMjUxMjI4MDEwMTAxWjAzMTEwLwYDVQQD EyhmMjU4OGQxZmFhYjEwZWVhMTQ2MTdmODljNzNiNjQzMmE5NTg2NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEKoZxBqMInNSvygvAGqjsgvK8od q225laH3bMQBO/QhJjgdHlQEsoE3TyQNQTh5voJwzg3ToVzlTmMXJ6T1BdU7QyM7 92w4La787zuyAEBTwAjuEcOcPR6Ddd5g2B+PJxYkE3diz5pg2QYnZBgl5KOmZi4q 4hjpxEM+XFbiCyoYMnhqwHpGCnH0x2lv/jpZPcjZQwEMDUQ4cQ3mt1gAKMbdekaU uCmPydtg1EtTSNAXoYhA9RP+TQGpRVvou9sL9dJnVkL8nq9QRpAeBJS6LCBQawWv 7jIQd+w6ht8tikMaRTxk6WLv5Seu1JvbS6Whsz/MLVkpMKs0V2caIhZUfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJYjR+qsQ7qFGF/icc7ZDKpWGdhMB8GA1UdIwQY MBaAFOSp7nTy2YTIirO5mucdC3x7r4FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgt ZDJjMGJlNDQ4NTYxLzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgtZDJjMGJlNDQ4NTYx LzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUqm7+I4 cmbm//biLy34Wwg/S3H27x+j5LxfjgqkivB6ill/4lASedRZoMpj49GXFYsFunEy BBK2x18H8fYAtT2KVNwlwa+rhO+uP7H5Zwib0bkHvWl6Dts9HvxJCntBaZIrupM5 Hq5nGM15aIAyskD7YqVoi2p02nqr7faIJJqm1bpu8WFnV+p0X7xaa3FbK8A4tAVq y0fcjNinZIUbp5MHS/HxAkTmGNRE82UR8KqGl5zLZVjxCSGFSgGOTNV7siICjVIo iGbmo83gFLUYgcQimoX2Cx9lhVvg2hNueuvMCpcBusQUKTtwUMr5RjRTkKr1yR3a V+BwPdxv/7RW0Q== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:32 2025 by rpki-client