This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft File: 5kdeNHqvK1nU7oU6ilS05L03R-s.mft (raw, json) Hash identifier: tpAfPNY08fEv3dBx88tsVRmZeQgVgMZ+hLl3Lx7ywUY= Subject key identifier: A2:96:88:87:8C:8C:AC:BB:1D:90:38:5E:7F:12:E3:37:D9:09:38:74 Authority key identifier: E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB Certificate issuer: /CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb Certificate serial: 019B51F376119243D39A2C9ABC5881BD72F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft Manifest number: 02DD Signing time: Wed 24 Dec 2025 20:01:08 +0000 Manifest this update: Wed 24 Dec 2025 20:01:08 +0000 Manifest next update: Thu 25 Dec 2025 20:01:08 +0000 Files and hashes: 1: 5kdeNHqvK1nU7oU6ilS05L03R-s.crl (hash: LIPUUMwOW/i6PmX5xOc5qPxpY1WpEg//tkrRB1z/BwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:76:11:92:43:d3:9a:2c:9a:bc:58:81:bd:72:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6475e347aaf2b59d4ee853a8a54b4e4bd3747eb Validity Not Before: Dec 24 20:01:08 2025 GMT Not After : Dec 25 20:01:08 2025 GMT Subject: CN=a29688878c8cacbb1d90385e7f12e337d9093874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b8:47:28:4b:a3:cb:17:8a:b6:7a:93:28:2c: 8f:89:3f:38:26:23:0e:5f:20:66:04:50:81:ec:a4: 43:85:dc:ed:74:bb:4c:08:91:88:37:03:b9:d9:99: f7:73:30:5a:ab:9e:68:4e:08:c1:ad:01:73:55:81: 7c:06:e7:77:70:33:2a:aa:d0:7e:2b:94:78:6e:e0: 71:ca:25:73:fa:6d:3c:08:2f:e9:a0:c6:6c:9c:1b: 77:26:a8:27:9a:12:bc:92:f5:32:04:d8:80:58:eb: b9:0d:12:2d:f3:d4:24:be:e8:ae:5b:7a:c0:a7:25: 9d:0c:8f:e1:28:8f:00:28:9d:51:21:fc:f2:97:de: 9a:f9:f4:fc:f9:83:ff:41:e2:8d:53:53:05:48:29: c0:9d:3f:50:a5:31:16:d3:08:cb:d3:83:38:aa:ec: d4:bf:aa:1c:46:f4:e6:44:1d:0b:37:fe:fc:86:9e: ed:3c:6d:fe:87:71:b4:06:76:db:b6:71:d7:83:4c: ac:c3:f6:70:77:d3:10:f7:d5:09:58:1f:2b:2c:e6: f5:ee:82:28:31:14:01:63:79:b1:ff:f5:33:ac:7b: fe:c9:e5:a1:9d:1f:d9:be:69:1d:28:9e:c8:ce:ca: fe:06:4b:60:73:45:fe:03:44:36:3a:d8:94:3d:e0: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:96:88:87:8C:8C:AC:BB:1D:90:38:5E:7F:12:E3:37:D9:09:38:74 X509v3 Authority Key Identifier: keyid:E6:47:5E:34:7A:AF:2B:59:D4:EE:85:3A:8A:54:B4:E4:BD:37:47:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kdeNHqvK1nU7oU6ilS05L03R-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a3a299-ce28-4c35-ac64-c8c20f25de88/1/5kdeNHqvK1nU7oU6ilS05L03R-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9d:b6:83:e8:7a:0d:b3:4d:13:ca:9b:77:c1:5e:8b:69:1a: 37:b7:ab:bc:58:9a:b7:c0:ad:2d:dc:ed:ca:2f:09:57:26:3b: d7:51:d8:b4:1f:03:ed:50:cc:0a:00:1f:f2:6e:15:94:a8:b3: 50:03:f1:f1:30:c8:a9:fa:54:04:99:3a:bd:40:d2:a7:ad:e3: dc:7b:cc:51:ab:51:38:1f:e5:e7:bb:56:d9:81:71:84:a6:cc: 6e:7e:88:20:b9:72:81:6f:a9:03:d2:d9:e1:ff:c6:be:31:ec: 9e:67:54:a2:8f:1b:b4:49:53:99:2d:38:81:2c:6f:e4:43:8f: 39:a1:16:2f:43:1a:ca:86:72:03:89:c2:f0:b6:ac:bb:72:81: 03:d3:09:28:fa:ff:0a:11:e4:ec:3f:77:33:20:ab:2f:5f:d9: f8:7e:bc:b1:bd:d6:61:21:1d:29:a4:5a:17:03:d6:42:c1:1c: 25:2a:73:91:af:1b:2c:12:10:ad:9a:42:17:2b:51:b4:3e:0e: 9f:6a:ce:ab:3f:45:3d:7d:8f:f7:5a:44:ef:88:d2:b6:a8:50: 4a:d8:80:e5:c1:47:78:45:15:bc:8c:a8:af:38:de:47:e5:c9: b7:44:21:70:95:e3:27:cb:a1:1f:6a:bb:d4:fb:d5:80:5d:29: 5d:ce:48:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR83YRkkPTmiyavFiBvXLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NDc1ZTM0N2FhZjJiNTlkNGVlODUzYThhNTRiNGU0YmQz NzQ3ZWIwHhcNMjUxMjI0MjAwMTA4WhcNMjUxMjI1MjAwMTA4WjAzMTEwLwYDVQQD EyhhMjk2ODg4NzhjOGNhY2JiMWQ5MDM4NWU3ZjEyZTMzN2Q5MDkzODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57hHKEujyxeKtnqTKCyPiT84JiMO XyBmBFCB7KRDhdztdLtMCJGINwO52Zn3czBaq55oTgjBrQFzVYF8Bud3cDMqqtB+ K5R4buBxyiVz+m08CC/poMZsnBt3JqgnmhK8kvUyBNiAWOu5DRIt89QkvuiuW3rA pyWdDI/hKI8AKJ1RIfzyl96a+fT8+YP/QeKNU1MFSCnAnT9QpTEW0wjL04M4quzU v6ocRvTmRB0LN/78hp7tPG3+h3G0BnbbtnHXg0ysw/Zwd9MQ99UJWB8rLOb17oIo MRQBY3mx//UzrHv+yeWhnR/ZvmkdKJ7Izsr+Bktgc0X+A0Q2OtiUPeCWGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKWiIeMjKy7HZA4Xn8S4zfZCTh0MB8GA1UdIwQY MBaAFOZHXjR6rytZ1O6FOopUtOS9N0frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hM2EyOTktY2UyOC00YzM1LWFjNjQt YzhjMjBmMjVkZTg4LzEvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hM2EyOTktY2UyOC00YzM1LWFjNjQtYzhjMjBmMjVkZTg4 LzEvNWtkZU5IcXZLMW5VN29VNmlsUzA1TDAzUi1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP522g+h6 DbNNE8qbd8Fei2kaN7ervFiat8CtLdztyi8JVyY711HYtB8D7VDMCgAf8m4VlKiz UAPx8TDIqfpUBJk6vUDSp63j3HvMUatROB/l57tW2YFxhKbMbn6IILlygW+pA9LZ 4f/GvjHsnmdUoo8btElTmS04gSxv5EOPOaEWL0MayoZyA4nC8Lasu3KBA9MJKPr/ ChHk7D93MyCrL1/Z+H68sb3WYSEdKaRaFwPWQsEcJSpzka8bLBIQrZpCFytRtD4O n2rOqz9FPX2P91pE74jStqhQStiA5cFHeEUVvIyorzjeR+XJt0QhcJXjJ8uhH2q7 1PvVgF0pXc5I0A== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:28 2025 by rpki-client