This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json) Hash identifier: DjF20k/uzC5iMS4N5R3GNKRu9wWqNEMhcGaR/GW0ZiU= Subject key identifier: 4D:96:24:D3:21:DC:6B:9B:A6:E3:52:18:1B:01:78:5A:08:35:AF:FE Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019AF276C4FFB14659CB30E1D54B9C9F7778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft Manifest number: 1242 Signing time: Sat 06 Dec 2025 07:01:01 +0000 Manifest this update: Sat 06 Dec 2025 07:01:01 +0000 Manifest next update: Sun 07 Dec 2025 07:01:01 +0000 Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: dBgpmD+U0qvDNY09SpqI21EScmf/FHcd+A3+gZNtbSI=) 2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=) 3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=) 4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c4:ff:b1:46:59:cb:30:e1:d5:4b:9c:9f:77:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Dec 6 07:01:01 2025 GMT Not After : Dec 7 07:01:01 2025 GMT Subject: CN=4d9624d321dc6b9ba6e352181b01785a0835affe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:95:b3:a7:c7:aa:cc:e4:19:51:3f:a3:73: 48:d2:30:4a:56:e5:30:8c:fe:4b:4a:51:29:2d:9b: 4a:9b:af:45:49:d8:0d:3e:ac:a2:1b:9a:f9:7a:78: 1d:09:ce:8f:81:91:b8:31:af:d1:da:aa:24:d5:c2: 61:d1:fd:e3:23:4a:73:27:63:7c:61:15:9a:45:1b: a1:60:e3:64:2c:eb:82:7a:d3:9e:ef:7a:59:41:77: c7:58:0f:e9:8d:9b:c2:df:ea:fa:a5:d8:17:36:bb: 3d:97:50:37:f4:6b:0d:84:e9:be:dd:11:b1:a4:18: d9:f1:45:55:e8:fd:94:32:2a:9e:74:60:4a:b3:db: 5f:99:95:a3:c9:eb:1f:c9:38:19:d1:45:b1:52:9a: 1c:18:f9:d0:89:df:a3:49:ef:e8:c5:fb:0e:f6:b5: 71:32:5c:3d:a9:77:91:0a:08:99:19:a7:ca:84:41: 90:3c:92:b8:a7:18:64:ed:a5:8d:91:5a:74:74:52: c4:fb:c6:24:e7:d3:00:b9:78:50:b3:74:20:0c:68: ac:77:f4:ef:f4:ca:59:dc:34:9c:a7:b2:eb:04:fc: be:51:fb:e9:cc:75:36:39:dd:23:42:56:40:fc:a8: 49:82:7e:26:ee:5a:33:72:b7:7d:c3:96:6f:0c:99: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:96:24:D3:21:DC:6B:9B:A6:E3:52:18:1B:01:78:5A:08:35:AF:FE X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:ee:4a:fa:06:70:b8:b1:71:2a:ae:12:92:f5:f7:38:a1:d8: aa:32:21:45:b9:1d:21:9c:9f:5b:8e:76:7f:f8:17:56:71:4b: a3:db:da:fd:c8:e3:18:09:d1:68:bb:42:95:75:c1:6f:d8:5d: cc:45:26:17:85:ba:d6:f3:70:58:d9:7d:24:5f:3b:6f:f4:3a: b9:8c:5b:52:ff:04:08:b7:67:64:57:70:8f:24:51:4c:d5:ca: 43:60:c0:0e:2f:e0:5f:cd:4b:a8:2d:68:51:ed:55:bd:f8:dd: 42:96:bf:d8:0d:91:f9:86:cd:8a:f5:ad:b6:6a:71:b7:6c:b2: 4b:54:fc:2b:57:15:6d:81:29:9a:f6:dd:24:06:6d:93:a0:6a: 35:a1:23:b4:9a:30:e9:cc:07:9d:0f:00:e4:a5:a1:5f:31:79: 11:4b:1d:69:7a:91:7f:34:3b:89:43:5c:3c:a2:6e:24:e9:05: d9:5e:2a:7e:85:f6:85:d1:81:7b:99:7e:ac:b6:5d:cc:f0:01: 86:4f:c0:28:c1:20:78:45:55:d9:0c:9f:e0:9a:3e:63:65:be: 51:50:6d:87:b7:00:8d:75:00:a0:5c:7f:db:d4:06:e7:c0:84: 93:81:e8:c3:f4:b0:84:62:32:23:1f:b2:83:d6:6a:fb:2f:df: 7f:a3:d2:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsT/sUZZyzDh1Uucn3d4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjUxMjA2MDcwMTAxWhcNMjUxMjA3MDcwMTAxWjAzMTEwLwYDVQQD Eyg0ZDk2MjRkMzIxZGM2YjliYTZlMzUyMTgxYjAxNzg1YTA4MzVhZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JCVs6fHqszkGVE/o3NI0jBKVuUw jP5LSlEpLZtKm69FSdgNPqyiG5r5engdCc6PgZG4Ma/R2qok1cJh0f3jI0pzJ2N8 YRWaRRuhYONkLOuCetOe73pZQXfHWA/pjZvC3+r6pdgXNrs9l1A39GsNhOm+3RGx pBjZ8UVV6P2UMiqedGBKs9tfmZWjyesfyTgZ0UWxUpocGPnQid+jSe/oxfsO9rVx Mlw9qXeRCgiZGafKhEGQPJK4pxhk7aWNkVp0dFLE+8Yk59MAuXhQs3QgDGisd/Tv 9MpZ3DScp7LrBPy+UfvpzHU2Od0jQlZA/KhJgn4m7lozcrd9w5ZvDJm7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2WJNMh3GubpuNSGBsBeFoINa/+MB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1e5K+gZw uLFxKq4SkvX3OKHYqjIhRbkdIZyfW452f/gXVnFLo9va/cjjGAnRaLtClXXBb9hd zEUmF4W61vNwWNl9JF87b/Q6uYxbUv8ECLdnZFdwjyRRTNXKQ2DADi/gX81LqC1o Ue1VvfjdQpa/2A2R+YbNivWttmpxt2yyS1T8K1cVbYEpmvbdJAZtk6BqNaEjtJow 6cwHnQ8A5KWhXzF5EUsdaXqRfzQ7iUNcPKJuJOkF2V4qfoX2hdGBe5l+rLZdzPAB hk/AKMEgeEVV2Qyf4Jo+Y2W+UVBth7cAjXUAoFx/29QG58CEk4How/SwhGIyIx+y g9Zq+y/ff6PS0w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:30 2025 by rpki-client