This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json) Hash identifier: tkI1iyZYIzR3efT4S1X3ttNip8Re4vJ/hsANEUfKDjI= Subject key identifier: F9:43:D0:DC:85:40:D7:6A:40:E4:B5:06:D4:16:41:52:C1:11:EB:DE Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34 Certificate serial: 019B3A8FA018BD3E323E841946B193946367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft Manifest number: 1806 Signing time: Sat 20 Dec 2025 07:00:49 +0000 Manifest this update: Sat 20 Dec 2025 07:00:49 +0000 Manifest next update: Sun 21 Dec 2025 07:00:49 +0000 Files and hashes: 1: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: SL3seVFxQULa3WZjoHSkySq9dcPuVAS2dvtYEtZYzJ4=) 2: YK0GTlkHN0kh6rSYw6cXJN4kmYk.roa (hash: /UVV34zbmH/gnz5UJBbOqmKp8zbRJOsJ9TYWbLX+6R0=) 3: g0xFMT2GrYAMoL-inLUwLmSSyCA.roa (hash: HeRO7kuNoFHZ7OzgXdJj0leOybKMhQ/z6+NNz3N69Ns=) 4: wFQP_vODEY-W3eIkfxHByblOUq8.roa (hash: n1ZQqwSA0BtVLGIlganeJnOqb9x+AOjSB94Cm0wXocg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:a0:18:bd:3e:32:3e:84:19:46:b1:93:94:63:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34 Validity Not Before: Dec 20 07:00:49 2025 GMT Not After : Dec 21 07:00:49 2025 GMT Subject: CN=f943d0dc8540d76a40e4b506d4164152c111ebde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:99:57:6c:aa:cc:e0:97:b4:12:85:f5:89: f5:f1:c1:aa:32:45:34:c4:f4:fe:f4:c2:8d:e4:de: f7:19:26:8e:18:a9:c3:0f:70:5b:77:30:93:35:ae: cd:74:7e:23:63:15:48:d5:bc:62:54:e6:12:01:dd: a4:b2:83:36:cc:cc:bb:2b:95:2f:a3:01:d2:86:b6: a2:7b:28:dd:04:ee:22:14:44:2a:89:65:bf:8b:09: 25:de:d2:93:61:d9:19:a8:71:0b:fe:20:b1:7d:0f: 78:9a:56:2c:f4:90:e0:51:6e:46:ef:a4:32:c2:73: 58:73:71:b9:c6:0a:30:c5:51:19:3d:4e:3e:2b:57: 9b:e4:44:e4:35:cd:28:a9:be:a7:d4:16:57:47:ab: d8:49:2d:69:56:49:22:c9:78:11:0a:23:cf:c3:06: 93:59:4a:15:1e:ce:19:98:73:3e:ce:58:22:f1:c9: 7f:69:02:03:8b:79:dc:a1:c0:4f:e6:ca:4b:3c:45: 1a:2b:39:5f:c0:b6:17:cd:4a:45:52:f3:e8:23:ce: 9e:e2:4e:e9:a3:dc:43:85:31:a5:fc:95:de:14:b2: e1:95:0d:6f:f6:84:d7:e5:10:f4:64:18:ba:66:45: 67:7f:68:77:68:d1:48:db:65:ca:54:a3:53:65:74: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:43:D0:DC:85:40:D7:6A:40:E4:B5:06:D4:16:41:52:C1:11:EB:DE X509v3 Authority Key Identifier: keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e6:57:18:91:81:8a:d7:27:d0:8e:93:87:30:0e:09:06:75: 52:10:3f:95:8c:94:13:b6:fa:95:e3:c0:82:a5:b0:69:07:41: 68:a3:70:2b:97:c5:02:b0:f5:bc:87:c0:a8:b4:6e:30:e8:bb: fb:15:5d:ad:9b:ec:ce:dd:0d:f7:8d:25:b2:15:52:dd:08:4a: 37:a7:52:ae:43:e2:6e:19:19:19:b8:44:76:40:90:d7:b9:3a: fd:43:f5:b8:f3:67:0b:20:7f:9a:a0:b0:d3:d5:ab:4c:1c:4f: ae:ae:dc:d4:5a:0e:ab:65:44:68:13:da:62:38:c0:24:93:81: b5:b1:94:bb:12:0e:1f:00:8a:09:18:3a:dc:ee:6d:52:06:a4: 0b:7c:f6:59:53:05:0d:c2:95:4e:58:88:db:fb:ea:01:de:18: 72:8a:47:bd:22:a0:ff:cf:42:07:4f:c0:31:89:a9:75:76:75: e5:63:35:35:87:d0:6a:62:d5:74:7a:41:ea:15:99:68:38:51: 20:47:ff:d3:e8:42:56:f3:8d:00:6b:a4:07:77:d8:b7:d7:5e: 7c:62:92:af:0f:33:00:86:7b:0a:4a:41:2e:58:68:fe:2d:28: a6:c3:ff:a6:08:47:45:ae:0d:2c:97:b5:d2:6a:98:41:c5:11: ff:64:4b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j6AYvT4yPoQZRrGTlGNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5 YTFlMzQwHhcNMjUxMjIwMDcwMDQ5WhcNMjUxMjIxMDcwMDQ5WjAzMTEwLwYDVQQD EyhmOTQzZDBkYzg1NDBkNzZhNDBlNGI1MDZkNDE2NDE1MmMxMTFlYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1iZV2yqzOCXtBKF9Yn18cGqMkU0 xPT+9MKN5N73GSaOGKnDD3BbdzCTNa7NdH4jYxVI1bxiVOYSAd2ksoM2zMy7K5Uv owHShraieyjdBO4iFEQqiWW/iwkl3tKTYdkZqHEL/iCxfQ94mlYs9JDgUW5G76Qy wnNYc3G5xgowxVEZPU4+K1eb5ETkNc0oqb6n1BZXR6vYSS1pVkkiyXgRCiPPwwaT WUoVHs4ZmHM+zlgi8cl/aQIDi3ncocBP5spLPEUaKzlfwLYXzUpFUvPoI86e4k7p o9xDhTGl/JXeFLLhlQ1v9oTX5RD0ZBi6ZkVnf2h3aNFI22XKVKNTZXRuBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlD0NyFQNdqQOS1BtQWQVLBEeveMB8GA1UdIwQY MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt ZWM1Yjg4ZDAxMzhhLzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuZXGJGB itcn0I6ThzAOCQZ1UhA/lYyUE7b6lePAgqWwaQdBaKNwK5fFArD1vIfAqLRuMOi7 +xVdrZvszt0N940lshVS3QhKN6dSrkPibhkZGbhEdkCQ17k6/UP1uPNnCyB/mqCw 09WrTBxPrq7c1FoOq2VEaBPaYjjAJJOBtbGUuxIOHwCKCRg63O5tUgakC3z2WVMF DcKVTliI2/vqAd4YcopHvSKg/89CB0/AMYmpdXZ15WM1NYfQamLVdHpB6hWZaDhR IEf/0+hCVvONAGukB3fYt9defGKSrw8zAIZ7CkpBLlho/i0opsP/pghHRa4NLJe1 0mqYQcUR/2RLog== -----END CERTIFICATE-----Generated at Sat Dec 20 17:01:16 2025 by rpki-client