This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft File: KE5esRLhOkJwPbs4e6V3oueTrDo.mft (raw, json) Hash identifier: SqGHuNwwm8qAwFQomLgwZ5+LqCZKHdR8DtOAkCheQaU= Subject key identifier: CD:30:65:1E:AF:FC:14:B5:2B:14:9B:CB:96:CB:52:61:7F:48:45:B9 Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Certificate serial: 019AF19B16554F2A8356D34EFF1C3594138B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft Manifest number: 0D60 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: 25RJ6ZVs0Rq2vgAnn5qDuc50gBc.roa (hash: E2CGstsnfAcGk1lBYwpyCPeNPt0F4yT/sEC2c5F9t8o=) 2: KE5esRLhOkJwPbs4e6V3oueTrDo.crl (hash: kQirgKz/9CoFEkpYizE1XR8GFrFal55m25B60XsuyLc=) 3: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (hash: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:16:55:4f:2a:83:56:d3:4e:ff:1c:35:94:13:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=cd30651eaffc14b52b149bcb96cb52617f4845b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:11:a8:96:f7:7e:55:f5:66:4e:72:53:9f:24: fa:a3:00:ba:cd:da:ac:99:8f:6b:30:cf:8a:f4:35: e3:cc:3f:4c:d9:60:57:95:4a:35:2f:44:a7:57:c4: 3e:7c:c3:88:e6:03:7f:2f:cc:5f:59:c1:ab:f4:70: 75:98:5c:4d:ad:b2:52:48:5e:e5:ba:aa:ba:29:fe: ba:84:eb:5b:3b:67:ff:9b:f9:1e:e3:9a:fa:34:11: a7:d3:4c:d4:f4:13:28:79:c1:51:f2:ce:84:dc:de: a6:f5:33:8e:11:50:2f:3b:87:72:56:19:33:12:5a: dd:61:3d:9e:88:59:73:7a:9d:b3:e8:4d:c7:c7:30: b0:0c:61:cf:fe:c2:50:51:e7:4b:c4:d8:68:f5:7f: ef:39:a6:91:69:1d:89:a2:40:06:88:8d:8c:40:9c: cc:0c:95:bf:4d:c5:ce:81:8a:9e:5b:b5:62:69:02: 7a:ed:ad:86:bc:d8:bf:2b:ea:bd:40:f8:81:7c:ce: 93:9f:08:c1:c0:f3:95:1c:a5:45:24:c0:33:cf:aa: a5:d0:db:dc:25:7b:c2:93:dd:d9:f2:98:05:6c:15: 80:09:61:43:a1:70:38:35:85:7e:c3:2c:64:84:df: 9c:21:61:e8:e9:c2:c1:02:9c:c9:56:b5:d1:de:24: ae:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:30:65:1E:AF:FC:14:B5:2B:14:9B:CB:96:CB:52:61:7F:48:45:B9 X509v3 Authority Key Identifier: keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:84:95:47:eb:c4:16:e3:c5:11:da:43:2a:b5:59:3c:cb:29: 82:f0:91:b9:20:46:5e:ca:fa:f1:99:5b:91:bf:c7:37:fb:6d: f7:68:29:a4:fc:46:98:8f:2f:76:20:35:e5:20:e6:9f:e6:c7: 27:a7:ef:25:8f:b5:6b:20:da:42:46:93:cd:45:2d:8c:21:aa: 23:74:b4:4d:c9:69:c6:30:e7:00:6f:dd:94:00:15:0c:0a:eb: 00:4f:e6:3c:63:41:3e:19:9e:a1:76:e1:65:8b:82:19:c8:08: e9:a2:2c:45:ce:15:cb:84:7c:b3:6e:70:14:3a:3d:86:e7:b0: 32:0c:3e:57:64:b3:ab:85:20:bb:1f:d8:3b:2d:eb:c2:ef:cf: 1b:60:79:45:7e:11:5e:a2:80:01:ed:4a:4b:ce:fb:b6:74:63: fd:6d:cd:da:2f:bc:54:ae:ad:c5:ac:d8:94:5c:9c:b1:ec:13: 4d:70:1a:76:4e:ae:be:6c:4a:b9:f2:59:8c:e9:3a:71:18:1e: c0:25:19:8f:95:5e:ec:b5:6f:4a:82:2f:8e:05:d9:23:62:e9: ae:47:a5:67:e9:35:ff:72:05:4e:d6:e3:83:79:89:b5:2d:bb: 46:48:f6:19:6c:e9:c3:1b:16:f2:0b:c7:39:99:61:4a:0a:17: 7c:88:c7:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxZVTyqDVtNO/xw1lBOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NGU1ZWIxMTJlMTNhNDI3MDNkYmIzODdiYTU3N2EyZTc5 M2FjM2EwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhjZDMwNjUxZWFmZmMxNGI1MmIxNDliY2I5NmNiNTI2MTdmNDg0NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xGolvd+VfVmTnJTnyT6owC6zdqs mY9rMM+K9DXjzD9M2WBXlUo1L0SnV8Q+fMOI5gN/L8xfWcGr9HB1mFxNrbJSSF7l uqq6Kf66hOtbO2f/m/ke45r6NBGn00zU9BMoecFR8s6E3N6m9TOOEVAvO4dyVhkz ElrdYT2eiFlzep2z6E3HxzCwDGHP/sJQUedLxNho9X/vOaaRaR2JokAGiI2MQJzM DJW/TcXOgYqeW7ViaQJ67a2GvNi/K+q9QPiBfM6TnwjBwPOVHKVFJMAzz6ql0Nvc JXvCk93Z8pgFbBWACWFDoXA4NYV+wyxkhN+cIWHo6cLBApzJVrXR3iSu7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0wZR6v/BS1KxSby5bLUmF/SEW5MB8GA1UdIwQY MBaAFChOXrES4TpCcD27OHuld6Lnk6w6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYt MDdjYmVkZGQ2NDE4LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNmRlZjEtZjQyNS00OWE1LWFhYWYtMDdjYmVkZGQ2NDE4 LzEvS0U1ZXNSTGhPa0p3UGJzNGU2VjNvdWVUckRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoSVR+vE FuPFEdpDKrVZPMspgvCRuSBGXsr68Zlbkb/HN/tt92gppPxGmI8vdiA15SDmn+bH J6fvJY+1ayDaQkaTzUUtjCGqI3S0TclpxjDnAG/dlAAVDArrAE/mPGNBPhmeoXbh ZYuCGcgI6aIsRc4Vy4R8s25wFDo9huewMgw+V2Szq4Ugux/YOy3rwu/PG2B5RX4R XqKAAe1KS877tnRj/W3N2i+8VK6txazYlFycsewTTXAadk6uvmxKufJZjOk6cRge wCUZj5Ve7LVvSoIvjgXZI2LprkelZ+k1/3IFTtbjg3mJtS27Rkj2GWzpwxsW8gvH OZlhSgoXfIjHtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:27 2025 by rpki-client