This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json) Hash identifier: mTihRRzsQwcv2V+PMEGEH1FPw7+lq6jqaBya04WvUyM= Subject key identifier: 51:96:5F:94:FA:91:B8:26:67:93:6E:EC:40:09:88:F4:8D:97:6C:06 Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75 Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475 Certificate serial: 019B5C095E9D07B8E2C99DC660676A0B239E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft Manifest number: 06BE Signing time: Fri 26 Dec 2025 19:01:16 +0000 Manifest this update: Fri 26 Dec 2025 19:01:16 +0000 Manifest next update: Sat 27 Dec 2025 19:01:16 +0000 Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: cGBDacsZjwA/jODqRKp5L8pgDA1kEskMroK92WlsTYM=) 2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:5e:9d:07:b8:e2:c9:9d:c6:60:67:6a:0b:23:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475 Validity Not Before: Dec 26 19:01:16 2025 GMT Not After : Dec 27 19:01:16 2025 GMT Subject: CN=51965f94fa91b82667936eec400988f48d976c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:45:03:0c:9c:c6:23:23:df:d5:bf:e5:a4: 95:fe:f1:07:e7:93:25:38:a8:8d:ac:eb:52:e6:a1: ea:a9:bc:cc:ed:2a:e1:d0:2a:4b:53:a9:41:42:ac: a3:9d:6b:ab:05:46:ee:c0:b7:28:36:8f:52:41:cf: 8d:17:21:1b:2e:f2:db:52:c3:4c:0e:12:bb:1b:4f: c4:47:6f:f0:53:57:71:95:8a:d6:a0:7f:16:1d:97: 1d:78:97:98:98:8d:d9:a5:47:93:66:12:f8:c2:42: 5b:11:cf:e9:3e:83:8f:73:8b:43:2e:d6:5e:4c:df: 0b:c6:6f:5d:fe:26:a3:7c:fe:48:99:8f:fb:70:e9: 47:26:8b:f8:eb:2c:f1:a3:66:26:7a:4c:27:d3:9b: 3a:c5:7f:a3:cf:b6:42:b7:6d:fe:fd:08:3c:05:90: 88:e9:56:70:0d:b0:ea:ee:76:78:a7:d1:67:fe:df: b6:ef:29:e4:f4:9d:3e:e1:08:b1:94:72:06:51:ae: 48:2b:af:7d:f8:8c:fb:47:37:1a:cb:2c:65:ee:48: fe:ee:83:a5:9f:7b:42:20:99:40:52:31:40:c9:51: 82:f8:6d:5a:41:6c:cc:63:e5:e0:db:1e:e6:a1:d2: 90:8a:6c:6a:f8:77:d0:75:30:be:8e:1f:3b:a3:47: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:96:5F:94:FA:91:B8:26:67:93:6E:EC:40:09:88:F4:8D:97:6C:06 X509v3 Authority Key Identifier: keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c1:d5:49:49:bd:e1:a4:97:89:c4:22:ab:d6:6a:4b:fd:be: 21:98:85:7a:23:1b:1f:64:64:9c:77:4a:d4:6d:a7:e9:b8:5a: 1e:6d:b8:90:88:a4:df:78:2a:f8:46:9c:58:78:90:1a:52:cf: 18:e2:62:19:19:21:d6:f5:2d:35:62:f2:8f:eb:fb:47:b6:1a: 5a:49:4d:a2:fb:aa:d9:39:b7:aa:30:fa:91:f5:eb:ff:43:2b: 2c:7f:1c:fe:01:d8:28:85:af:b3:97:f6:5d:7e:21:b3:13:eb: 1d:6a:d9:b5:53:e9:c1:4d:45:81:a7:83:55:2f:a4:d8:41:08: 7d:c8:10:16:09:46:51:77:19:30:b7:04:1e:e8:7c:67:7a:07: e6:c1:80:20:29:9f:b2:45:77:97:dc:ab:02:f5:ec:96:11:e6: 64:93:46:02:eb:e3:74:67:dc:67:cd:f0:5f:1c:50:9d:28:db: d9:84:3d:6f:19:0f:fa:d0:a2:25:5c:1b:4e:9b:b3:47:d2:de: 63:95:ef:99:e0:63:39:d6:21:07:28:ad:94:c7:44:ec:02:dc: 0b:69:ac:ba:60:8e:bd:17:6f:8c:88:79:d1:6a:fb:7b:e9:ad: bc:a0:78:37:87:85:06:20:d6:0c:58:4d:73:5c:b5:02:5c:a3: ab:13:02:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCV6dB7jiyZ3GYGdqCyOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNDU5MDY1ZjcyODExN2QxYzcwYjhjNTRjZGE4ZjQ2MWRi ODA0NzUwHhcNMjUxMjI2MTkwMTE2WhcNMjUxMjI3MTkwMTE2WjAzMTEwLwYDVQQD Eyg1MTk2NWY5NGZhOTFiODI2Njc5MzZlZWM0MDA5ODhmNDhkOTc2YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4NFAwycxiMj39W/5aSV/vEH55Ml OKiNrOtS5qHqqbzM7Srh0CpLU6lBQqyjnWurBUbuwLcoNo9SQc+NFyEbLvLbUsNM DhK7G0/ER2/wU1dxlYrWoH8WHZcdeJeYmI3ZpUeTZhL4wkJbEc/pPoOPc4tDLtZe TN8Lxm9d/iajfP5ImY/7cOlHJov46yzxo2Ymekwn05s6xX+jz7ZCt23+/Qg8BZCI 6VZwDbDq7nZ4p9Fn/t+27ynk9J0+4QixlHIGUa5IK699+Iz7Rzcayyxl7kj+7oOl n3tCIJlAUjFAyVGC+G1aQWzMY+Xg2x7modKQimxq+HfQdTC+jh87o0eBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGWX5T6kbgmZ5Nu7EAJiPSNl2wGMB8GA1UdIwQY MBaAFP5FkGX3KBF9HHC4xUzaj0YduAR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAyMjItNTc0MS00ZTIzLTk3ZDYt ZDYzYTIzY2YxMTRjLzEvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wNjAyMjItNTc0MS00ZTIzLTk3ZDYtZDYzYTIzY2YxMTRj LzEvX2tXUVpmY29FWDBjY0xqRlROcVBSaDI0QkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8HVSUm9 4aSXicQiq9ZqS/2+IZiFeiMbH2RknHdK1G2n6bhaHm24kIik33gq+EacWHiQGlLP GOJiGRkh1vUtNWLyj+v7R7YaWklNovuq2Tm3qjD6kfXr/0MrLH8c/gHYKIWvs5f2 XX4hsxPrHWrZtVPpwU1FgaeDVS+k2EEIfcgQFglGUXcZMLcEHuh8Z3oH5sGAICmf skV3l9yrAvXslhHmZJNGAuvjdGfcZ83wXxxQnSjb2YQ9bxkP+tCiJVwbTpuzR9Le Y5XvmeBjOdYhByitlMdE7ALcC2msumCOvRdvjIh50Wr7e+mtvKB4N4eFBiDWDFhN c1y1AlyjqxMCag== -----END CERTIFICATE-----Generated at Sat Dec 27 02:36:12 2025 by rpki-client