This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json) Hash identifier: d4Ms/ixEVb3bWfCTZMZH1cPKvnwikVFG23GraxUpVkE= Subject key identifier: 78:D9:DF:11:A4:38:1B:1C:49:A2:C8:90:87:47:6D:E5:67:EC:D6:83 Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740 Certificate serial: 019AF31B8B1B3F29D99C8052F2206B2EF892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: PJd0NSoWEaWTBXyWpHFuOqEBpeDa7CbJgX9iIQpOyKE=) 2: LM4PEm0ffK75EUFTgpXPbuoAKZ8.roa (hash: d7gyd2tIHJ6HJ/7vl5EHNlkX+eVBttxlbWWHGFZ3xxQ=) 3: _w36PBooYvePauBkPOTldD_qNZc.roa (hash: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8b:1b:3f:29:d9:9c:80:52:f2:20:6b:2e:f8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=78d9df11a4381b1c49a2c89087476de567ecd683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:9e:7a:04:27:15:a1:af:96:5d:17:44:1f: 83:f3:12:d0:ec:44:87:ce:e9:8f:e9:8e:c1:5d:cc: 91:fd:1b:7c:89:df:ee:a7:24:b6:c5:12:cd:9e:ee: f4:c0:cf:c8:2e:fc:79:b5:f5:38:fe:58:a2:75:ce: 49:1e:4f:a0:35:1b:8b:e4:a7:a2:d5:e5:41:97:2c: 90:9e:84:46:f5:8e:7f:82:5a:30:3d:55:66:5b:3e: a0:95:3e:a8:18:a0:88:d3:d9:f4:f0:ae:c4:9e:1a: 87:0d:4e:b2:f7:43:df:1e:5d:63:9b:26:fd:a4:90: f4:d3:15:f8:26:73:09:55:e1:0f:bb:57:32:16:f0: 2f:65:31:9a:83:38:b0:c9:21:d3:84:96:d9:f6:e1: 8d:d1:0c:29:d2:9d:a2:7c:27:83:d4:1e:37:12:1b: d5:c7:04:8b:02:26:00:75:15:1e:2d:a1:31:60:aa: ab:61:af:ff:3f:a1:fc:0f:6b:5c:ed:61:4e:37:1d: 20:19:05:70:30:f9:2b:fc:64:39:f3:39:d8:09:17: c5:4d:5f:61:75:fe:ae:07:4f:20:e7:9a:da:81:78: ee:ad:b7:02:59:70:dd:ab:51:31:db:75:9c:da:ba: ed:47:6d:bb:18:19:be:71:b1:c3:51:a6:03:10:4a: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D9:DF:11:A4:38:1B:1C:49:A2:C8:90:87:47:6D:E5:67:EC:D6:83 X509v3 Authority Key Identifier: keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:08:6b:a7:27:61:f7:8e:8c:ff:87:b4:d6:25:2f:d4:95:49: e5:15:82:a8:0b:51:3a:65:ec:d1:9b:d6:3d:6d:de:14:99:9d: dc:e8:0c:7a:47:3b:a3:52:60:bf:f9:91:89:57:73:74:5c:35: 9d:9c:ff:08:3c:8a:10:9c:2b:e4:cb:ca:e4:4a:a9:08:29:f7: 3a:32:2d:d1:7c:48:f4:ec:28:c9:4a:58:58:2c:c1:25:e6:89: f5:25:4c:b3:7a:47:6f:93:08:84:05:cd:24:9d:46:bc:b7:fa: c1:ba:f7:43:f4:09:5f:70:8d:9f:c4:da:29:dc:4c:75:f5:6e: 3c:a3:94:1a:8c:02:cb:30:75:04:48:b6:70:91:25:42:c3:b6: 36:79:d3:8e:50:e5:21:e0:6b:94:e1:b4:aa:dc:a0:6c:18:49: ac:b7:09:42:53:a9:91:f8:be:a3:65:b5:92:85:1d:78:70:aa: e4:55:9d:c9:1c:96:ae:3c:a8:8a:2c:fd:31:25:33:6d:c4:99: 23:42:eb:4a:d8:e9:3f:f0:a4:4c:1c:3e:e5:30:ce:b5:b6:f7: 69:d1:a7:dc:31:0d:72:76:f1:01:ae:1e:56:ff:ea:66:a4:59: 09:5e:23:46:38:81:ba:ea:59:de:a3:e4:56:d7:e2:d5:ad:6c: bd:82:b6:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4sbPynZnIBS8iBrLviSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1 MDc3NDAwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD Eyg3OGQ5ZGYxMWE0MzgxYjFjNDlhMmM4OTA4NzQ3NmRlNTY3ZWNkNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC2eegQnFaGvll0XRB+D8xLQ7ESH zumP6Y7BXcyR/Rt8id/upyS2xRLNnu70wM/ILvx5tfU4/liidc5JHk+gNRuL5Kei 1eVBlyyQnoRG9Y5/glowPVVmWz6glT6oGKCI09n08K7EnhqHDU6y90PfHl1jmyb9 pJD00xX4JnMJVeEPu1cyFvAvZTGagziwySHThJbZ9uGN0Qwp0p2ifCeD1B43EhvV xwSLAiYAdRUeLaExYKqrYa//P6H8D2tc7WFONx0gGQVwMPkr/GQ58znYCRfFTV9h df6uB08g55ragXjurbcCWXDdq1Ex23Wc2rrtR227GBm+cbHDUaYDEEpkUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjZ3xGkOBscSaLIkIdHbeVn7NaDMB8GA1UdIwQY MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt ZDViMGY5MWQ5N2MyLzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwhrpydh 946M/4e01iUv1JVJ5RWCqAtROmXs0ZvWPW3eFJmd3OgMekc7o1Jgv/mRiVdzdFw1 nZz/CDyKEJwr5MvK5EqpCCn3OjIt0XxI9OwoyUpYWCzBJeaJ9SVMs3pHb5MIhAXN JJ1GvLf6wbr3Q/QJX3CNn8TaKdxMdfVuPKOUGowCyzB1BEi2cJElQsO2NnnTjlDl IeBrlOG0qtygbBhJrLcJQlOpkfi+o2W1koUdeHCq5FWdyRyWrjyoiiz9MSUzbcSZ I0LrStjpP/CkTBw+5TDOtbb3adGn3DENcnbxAa4eVv/qZqRZCV4jRjiBuupZ3qPk Vtfi1a1svYK2hw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:43 2025 by rpki-client