This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json) Hash identifier: O6T4kUBF3NvD0BAP/lrC4KwgliXduITLRHgKdTvJNoo= Subject key identifier: E0:15:8E:33:5F:4A:63:0B:E0:FE:33:56:C4:F8:E9:E4:5C:8B:18:A2 Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d Certificate serial: 019AF209815AD30F49FF8CE7E4B8970E2BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft Manifest number: D8 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: myV1xx+NhZzx8LK5U6mBiI9IDHdbQyX/IycP2lLl0Oc=) 2: r23feT6NV4gkY4zPASAiQfbYf2Y.roa (hash: ReD3jPU9ih7dYlCC9A/HHv2ji9KRX8p8gAkXwzlwEc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:81:5a:d3:0f:49:ff:8c:e7:e4:b8:97:0e:2b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=e0158e335f4a630be0fe3356c4f8e9e45c8b18a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:22:d1:87:68:7b:08:28:f9:a4:bf:84:84: 69:06:a7:b5:eb:62:93:cf:bc:3d:cd:fe:e9:38:ee: 9c:39:ad:a3:01:fc:fd:5d:9e:99:b2:06:ab:d6:06: c9:03:78:95:40:8e:72:cc:60:3e:cc:e9:1c:d0:a7: 0b:54:ed:b0:36:4f:d2:8a:f3:08:1c:1b:b6:7c:d9: e9:6b:9c:1e:e8:65:1a:90:63:77:c1:d2:e8:d4:73: 03:86:b3:99:f5:27:8f:b0:5f:0e:85:51:45:6a:a6: 04:4c:81:3a:7e:26:7e:b6:32:30:c4:49:77:b4:d0: e8:48:72:20:27:dd:0c:4f:4b:cd:39:2d:b5:cb:6a: 19:95:35:71:20:0d:96:97:52:8c:8c:45:54:16:4c: 2d:19:74:cb:75:aa:fb:54:77:31:cb:ec:c8:3b:e3: c7:ed:58:2f:fa:bd:13:25:79:de:9a:96:f7:13:e8: cd:8c:b4:ce:d2:ae:58:11:11:4d:e5:f5:90:6c:c8: 86:0e:92:2a:f7:32:cc:de:c2:b5:21:61:08:83:27: c4:98:ca:1d:de:a1:8d:dc:ba:af:03:38:13:ab:42: 7a:5b:31:6c:1f:bd:5a:75:f9:c1:1c:ce:44:0b:dc: 44:cc:18:f0:f0:b1:a9:aa:58:0b:72:c5:61:e1:b3: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:15:8E:33:5F:4A:63:0B:E0:FE:33:56:C4:F8:E9:E4:5C:8B:18:A2 X509v3 Authority Key Identifier: keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3a:5b:ee:6a:82:bc:da:ac:8c:64:ee:ec:13:45:bc:9c:19: 5c:ab:88:74:b0:4d:1e:cb:2f:48:c9:3a:9d:01:25:4a:ed:25: 14:2f:4c:e0:ef:84:3d:95:7a:58:d8:5b:f1:80:60:f3:ed:6c: fa:95:ca:0a:eb:10:a4:2d:ef:c1:e5:cc:70:d5:01:7b:3d:b0: 14:07:2a:68:b3:ae:68:c1:b3:51:2c:9f:8f:8a:40:43:e9:25: 9e:b4:cf:f6:6e:9a:0f:95:cd:1a:f3:4a:3c:70:13:18:bc:17: c5:ab:51:15:7d:2e:8a:b4:3e:af:f8:c9:49:40:33:a5:f4:22: 4b:dc:a0:9d:92:17:2a:3e:17:3b:a3:51:46:9d:9d:b7:72:aa: 63:5d:6a:e6:38:64:76:31:8d:e7:ab:c8:1a:ad:cd:bf:eb:1b: 71:ff:3e:bf:3e:02:c2:93:e7:27:87:42:5a:30:66:ff:d6:d5: 4b:8a:ec:e1:b0:66:e2:f3:95:54:50:60:b9:bc:38:70:3f:e8: 04:d1:b8:de:1f:a1:5d:9b:1a:e2:7c:40:22:ee:3e:a9:05:2a: 95:2a:3a:67:78:b0:d8:41:ff:46:09:99:28:5b:71:69:2e:44: f3:d3:3c:dd:64:06:55:1f:bf:82:b9:77:81:b2:e2:14:7a:e9: 22:b9:70:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYFa0w9J/4zn5LiXDivqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTM2MTQ5NjU3YTYyYmUzMmUwZTE1NzE4MjdjMmIyZjM1 YTBkM2QwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EyhlMDE1OGUzMzVmNGE2MzBiZTBmZTMzNTZjNGY4ZTllNDVjOGIxOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P0i0Ydoewgo+aS/hIRpBqe162KT z7w9zf7pOO6cOa2jAfz9XZ6Zsgar1gbJA3iVQI5yzGA+zOkc0KcLVO2wNk/SivMI HBu2fNnpa5we6GUakGN3wdLo1HMDhrOZ9SePsF8OhVFFaqYETIE6fiZ+tjIwxEl3 tNDoSHIgJ90MT0vNOS21y2oZlTVxIA2Wl1KMjEVUFkwtGXTLdar7VHcxy+zIO+PH 7Vgv+r0TJXnempb3E+jNjLTO0q5YERFN5fWQbMiGDpIq9zLM3sK1IWEIgyfEmMod 3qGN3LqvAzgTq0J6WzFsH71adfnBHM5EC9xEzBjw8LGpqlgLcsVh4bNY4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAVjjNfSmML4P4zVsT46eRcixiiMB8GA1UdIwQY MBaAFCuTYUllemK+MuDhVxgnwrLzWg09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGIt NzgyMGE1MWVkODM0LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGItNzgyMGE1MWVkODM0 LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzpb7mqC vNqsjGTu7BNFvJwZXKuIdLBNHssvSMk6nQElSu0lFC9M4O+EPZV6WNhb8YBg8+1s +pXKCusQpC3vweXMcNUBez2wFAcqaLOuaMGzUSyfj4pAQ+klnrTP9m6aD5XNGvNK PHATGLwXxatRFX0uirQ+r/jJSUAzpfQiS9ygnZIXKj4XO6NRRp2dt3KqY11q5jhk djGN56vIGq3Nv+sbcf8+vz4CwpPnJ4dCWjBm/9bVS4rs4bBm4vOVVFBgubw4cD/o BNG43h+hXZsa4nxAIu4+qQUqlSo6Z3iw2EH/RgmZKFtxaS5E89M83WQGVR+/grl3 gbLiFHrpIrlwnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:40 2025 by rpki-client