This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json) Hash identifier: 5uSPdlOjiJ7S/6i9MORktu0nvCwkIR2He/udrJZitQ0= Subject key identifier: E4:77:89:98:99:6C:18:99:BC:EB:62:5E:82:9E:62:BB:BE:49:55:E9 Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d Certificate serial: 019B5072FD5FCA1F402AF243A05644887E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft Manifest number: 14D4 Signing time: Wed 24 Dec 2025 13:01:11 +0000 Manifest this update: Wed 24 Dec 2025 13:01:11 +0000 Manifest next update: Thu 25 Dec 2025 13:01:11 +0000 Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=) 2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=) 3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: A3a8JEuZoNKWkZUE8ykOwYeIXkXnc3wfqiz9a8S5Edg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:fd:5f:ca:1f:40:2a:f2:43:a0:56:44:88:7e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d Validity Not Before: Dec 24 13:01:11 2025 GMT Not After : Dec 25 13:01:11 2025 GMT Subject: CN=e4778998996c1899bceb625e829e62bbbe4955e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:d0:97:d2:a3:b3:ff:07:db:37:8c:81:02: ad:37:91:b6:27:0d:e3:9b:d9:25:19:4e:b4:de:d3: 82:21:56:6a:2a:c2:b3:46:51:be:87:ea:bc:0f:83: 36:59:ea:fc:bf:13:6a:eb:49:f4:d0:24:21:30:63: 0c:a2:00:76:1f:d1:02:55:a9:95:23:a0:05:33:81: 64:e1:b1:e4:bc:51:fd:43:74:9f:a3:a9:9e:23:91: 1b:5a:1c:29:d9:07:cf:c1:c1:cb:e7:c2:d1:f9:21: 3f:5b:65:9e:52:7b:ad:be:d4:04:26:4f:66:a5:3f: b7:a6:3f:6d:34:1b:ae:3e:b2:c6:8f:92:5b:2e:cf: 2c:37:48:de:73:89:b1:60:ae:aa:fb:c9:b1:c2:5c: 76:c8:47:ce:63:80:21:c6:ce:ca:32:94:7b:c4:73: 58:2b:b8:65:87:ca:7a:d3:10:19:c8:37:74:63:46: 86:f2:af:79:17:47:b3:36:1a:b1:38:d6:68:be:6e: 22:01:21:2d:d3:ee:f5:b2:96:7b:a4:fc:3b:3a:43: 50:2b:63:2d:1b:31:35:54:0d:36:9c:c9:29:69:8c: 9a:aa:26:2d:9e:c8:2e:de:43:51:b9:ad:39:cc:d6: 0c:84:74:4c:fb:8e:a9:26:73:43:c0:1e:4b:14:c8: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:77:89:98:99:6C:18:99:BC:EB:62:5E:82:9E:62:BB:BE:49:55:E9 X509v3 Authority Key Identifier: keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a4:19:e0:6c:ab:49:48:b7:8a:fc:72:ff:8c:bd:c0:db:ec: 24:1e:3d:f7:2e:81:67:3b:66:81:7e:12:48:5e:9f:5f:50:d3: 6b:b1:75:08:39:2f:bc:b2:08:dd:e0:da:31:52:e8:6b:30:a1: 8c:11:56:fd:af:24:8a:8c:ba:80:bc:d5:e2:fc:51:83:93:37: f5:8b:e8:e9:6b:57:b2:ba:65:35:73:f2:35:8d:87:34:ba:1f: 03:b2:3a:0d:dc:0c:1d:06:bb:92:b1:98:0d:44:5e:d2:3d:b4: 0e:0c:8e:f8:66:91:51:e1:ed:83:55:73:3e:ff:02:aa:55:22: fc:31:f1:b6:67:fa:f6:f9:23:6d:9a:d0:f2:22:94:67:f7:4f: 35:4f:13:42:c0:22:97:b6:d6:0c:52:ba:53:3b:c5:7b:20:7e: 88:fa:a7:8f:fa:d4:5f:1b:53:18:85:f0:e9:c5:41:3f:f1:62: d3:a0:b5:30:22:6f:e3:2d:21:fb:85:81:16:d0:f2:b6:f5:59: 7b:81:9a:c0:aa:2f:f8:ba:97:2e:54:b9:14:39:93:cc:29:f3: 02:f9:19:77:67:2f:87:ed:e1:ce:29:b5:4d:c1:a9:c2:06:90: 16:73:60:55:1e:2d:cf:8f:db:48:ef:fc:db:a3:f7:db:67:a5: f6:3f:fc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcv1fyh9AKvJDoFZEiH40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTUyMThiNjllNTUxMTQzYzUxZmExZDkxOTUxMmUxYTQ0 YzVjOWQwHhcNMjUxMjI0MTMwMTExWhcNMjUxMjI1MTMwMTExWjAzMTEwLwYDVQQD EyhlNDc3ODk5ODk5NmMxODk5YmNlYjYyNWU4MjllNjJiYmJlNDk1NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvvQl9Kjs/8H2zeMgQKtN5G2Jw3j m9klGU603tOCIVZqKsKzRlG+h+q8D4M2Wer8vxNq60n00CQhMGMMogB2H9ECVamV I6AFM4Fk4bHkvFH9Q3Sfo6meI5EbWhwp2QfPwcHL58LR+SE/W2WeUnutvtQEJk9m pT+3pj9tNBuuPrLGj5JbLs8sN0jec4mxYK6q+8mxwlx2yEfOY4Ahxs7KMpR7xHNY K7hlh8p60xAZyDd0Y0aG8q95F0ezNhqxONZovm4iASEt0+71spZ7pPw7OkNQK2Mt GzE1VA02nMkpaYyaqiYtnsgu3kNRua05zNYMhHRM+46pJnNDwB5LFMhPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOR3iZiZbBiZvOtiXoKeYru+SVXpMB8GA1UdIwQY MBaAFJJVIYtp5VEUPFH6HZGVEuGkTFydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYt YWZmYmEyZGYzZDYyLzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80ODI4OTYtODI2YS00YmVkLWIxNGYtYWZmYmEyZGYzZDYy LzEva2xVaGkybmxVUlE4VWZvZGtaVVM0YVJNWEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaQZ4Gyr SUi3ivxy/4y9wNvsJB499y6BZztmgX4SSF6fX1DTa7F1CDkvvLII3eDaMVLoazCh jBFW/a8kioy6gLzV4vxRg5M39Yvo6WtXsrplNXPyNY2HNLofA7I6DdwMHQa7krGY DURe0j20DgyO+GaRUeHtg1VzPv8CqlUi/DHxtmf69vkjbZrQ8iKUZ/dPNU8TQsAi l7bWDFK6UzvFeyB+iPqnj/rUXxtTGIXw6cVBP/Fi06C1MCJv4y0h+4WBFtDytvVZ e4GawKov+LqXLlS5FDmTzCnzAvkZd2cvh+3hzim1TcGpwgaQFnNgVR4tz4/bSO/8 26P322el9j/8/w== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:30 2025 by rpki-client