This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json) Hash identifier: nIA3JDlKVgi5kLGBURBF9flQA2mBV72h541h75BF/ig= Subject key identifier: 06:BA:19:C0:27:80:38:48:BE:B6:B2:3E:90:C7:AF:4F:C7:85:E6:89 Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d Certificate serial: 019B52612C1B50561E067F03C39D484CA3B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft Manifest number: 14D5 Signing time: Wed 24 Dec 2025 22:00:58 +0000 Manifest this update: Wed 24 Dec 2025 22:00:58 +0000 Manifest next update: Thu 25 Dec 2025 22:00:58 +0000 Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=) 2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=) 3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: h299XcFTlc26ClxCsCEAW1/B1n8XsE7XHFxPA5WzAB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:2c:1b:50:56:1e:06:7f:03:c3:9d:48:4c:a3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d Validity Not Before: Dec 24 22:00:58 2025 GMT Not After : Dec 25 22:00:58 2025 GMT Subject: CN=06ba19c027803848beb6b23e90c7af4fc785e689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:b7:e7:5b:19:f0:64:b2:fa:06:87:38:fe: d0:49:6b:df:ec:ad:6d:2d:9c:d1:53:f4:f9:1b:ec: 0d:6e:dd:77:11:db:86:6d:6d:ae:7d:2e:30:98:d0: 30:97:58:15:d1:d6:0e:4a:a3:73:31:02:c6:ee:b0: 61:4b:d2:c9:c6:b0:0c:74:a0:99:24:6e:86:a3:b9: aa:8b:c6:32:54:df:7d:d4:3b:2d:56:14:2d:0c:00: c1:6e:9b:45:86:4b:69:48:8c:73:92:0b:17:d9:42: 1e:1a:b1:2d:ee:3c:26:7a:f7:6a:e2:a0:a4:fb:5a: e3:05:08:a1:bd:2e:09:20:94:82:c4:0f:13:a8:d6: 8f:a3:6b:ad:f1:6a:44:45:5d:43:36:bb:fd:13:3d: 16:d7:26:42:75:d5:f6:9d:91:13:ab:c1:d8:21:41: 8f:9b:65:db:bc:65:ff:f4:19:78:64:62:e5:53:ae: 0e:d0:85:d5:2f:9c:3c:82:86:0c:e7:4b:59:60:a0: 19:46:3d:56:13:a2:e0:5b:f1:60:2c:eb:35:97:0a: e4:94:95:a2:ae:21:43:1c:cc:e1:80:97:5e:aa:f8: 0a:15:31:19:40:61:2a:0d:a9:a5:80:1b:97:74:4b: 58:f0:02:95:f8:3c:37:4b:ad:20:7e:48:67:4f:76: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BA:19:C0:27:80:38:48:BE:B6:B2:3E:90:C7:AF:4F:C7:85:E6:89 X509v3 Authority Key Identifier: keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1f:55:38:2e:93:bf:2d:3b:22:19:55:53:53:8f:07:8f:44: cc:8b:bd:d4:63:63:0f:23:88:e8:88:62:0a:ff:da:53:31:b6: 66:d7:75:d4:fc:0b:27:6d:78:7f:26:82:87:54:24:d1:92:c4: 0b:18:9f:fe:2a:b6:aa:81:1d:64:0e:1b:e3:6c:9d:cf:0d:d2: 83:de:2f:fc:36:e7:97:cc:7c:30:a5:0d:cb:fc:01:9c:75:a7: 1a:fa:42:b7:7a:c8:3d:89:59:90:3b:3e:f0:49:60:be:e7:95: 95:f0:41:67:53:b2:11:8c:44:fa:c3:30:73:66:cc:ff:2a:54: 91:6c:cc:ec:66:e4:2a:9f:d1:0a:67:71:16:25:4d:be:d8:90: 08:c2:cb:68:1a:eb:e5:31:f0:42:13:1d:bf:a7:ef:6c:57:e6: 1d:04:d0:75:b8:65:84:cb:4c:f9:00:c0:c4:ae:29:15:41:8f: 09:40:7d:b3:70:f6:c2:27:84:6e:e6:43:df:5b:36:f5:7d:eb: 76:29:68:46:f1:e5:4a:0b:cf:e1:09:c8:7a:2f:bc:03:3e:a9: 1f:e9:a0:7e:5e:09:fe:51:91:14:f2:1f:e9:a9:4a:65:43:03: 6d:3b:f2:8a:49:d9:9b:b1:0b:16:2f:77:1a:56:3d:26:c4:20: 65:8d:d6:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYSwbUFYeBn8Dw51ITKO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTUyMThiNjllNTUxMTQzYzUxZmExZDkxOTUxMmUxYTQ0 YzVjOWQwHhcNMjUxMjI0MjIwMDU4WhcNMjUxMjI1MjIwMDU4WjAzMTEwLwYDVQQD EygwNmJhMTljMDI3ODAzODQ4YmViNmIyM2U5MGM3YWY0ZmM3ODVlNjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIi351sZ8GSy+gaHOP7QSWvf7K1t LZzRU/T5G+wNbt13EduGbW2ufS4wmNAwl1gV0dYOSqNzMQLG7rBhS9LJxrAMdKCZ JG6Go7mqi8YyVN991DstVhQtDADBbptFhktpSIxzkgsX2UIeGrEt7jwmevdq4qCk +1rjBQihvS4JIJSCxA8TqNaPo2ut8WpERV1DNrv9Ez0W1yZCddX2nZETq8HYIUGP m2XbvGX/9Bl4ZGLlU64O0IXVL5w8goYM50tZYKAZRj1WE6LgW/FgLOs1lwrklJWi riFDHMzhgJdeqvgKFTEZQGEqDamlgBuXdEtY8AKV+Dw3S60gfkhnT3ZnKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAa6GcAngDhIvrayPpDHr0/HheaJMB8GA1UdIwQY MBaAFJJVIYtp5VEUPFH6HZGVEuGkTFydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYt YWZmYmEyZGYzZDYyLzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYtYWZmYmEyZGYzZDYy LzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMR9VOC6T vy07IhlVU1OPB49EzIu91GNjDyOI6IhiCv/aUzG2Ztd11PwLJ214fyaCh1Qk0ZLE Cxif/iq2qoEdZA4b42ydzw3Sg94v/Dbnl8x8MKUNy/wBnHWnGvpCt3rIPYlZkDs+ 8ElgvueVlfBBZ1OyEYxE+sMwc2bM/ypUkWzM7GbkKp/RCmdxFiVNvtiQCMLLaBrr 5THwQhMdv6fvbFfmHQTQdbhlhMtM+QDAxK4pFUGPCUB9s3D2wieEbuZD31s29X3r diloRvHlSgvP4QnIei+8Az6pH+mgfl4J/lGRFPIf6alKZUMDbTvyiknZm7ELFi93 GlY9JsQgZY3WjA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:19:22 2025 by rpki-client