This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json) Hash identifier: MJuZoxRGsHSFw88rISodA4sHJA0cVXZWc34Rj37siLQ= Subject key identifier: A8:D9:C5:A9:9A:00:56:AB:BC:6A:5C:C3:CB:9B:1E:CA:B1:D4:80:F4 Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b Certificate serial: 019AF1641B4C95E9CB7F1382D0CF802F5AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft Manifest number: 14 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: 31LqXCpHojYx6Rt887DjR163xxo.roa (hash: Fk0wJvz9kNK6jsX7wBhWeVOLH39ghJFDMdON8iP/W5M=) 2: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: OnlPve+Yvohl4Xp9KFfrGAU9vNRb9x9wgykWvvrxXWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1b:4c:95:e9:cb:7f:13:82:d0:cf:80:2f:5a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=a8d9c5a99a0056abbc6a5cc3cb9b1ecab1d480f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:34:55:4f:b2:ea:8b:8e:d9:6c:17:59:55: 78:bd:5f:25:c1:f5:61:a5:74:cb:13:96:2e:a2:81: cc:2a:c2:e6:18:b5:ac:6e:7c:2f:16:b9:aa:4f:08: aa:38:50:e9:14:8c:08:1e:9d:1b:a7:dc:6a:0b:50: 35:48:69:e8:79:e4:af:eb:7c:31:29:3d:c0:69:f7: d8:46:12:4c:a1:00:95:d7:ff:ec:66:6a:80:18:0c: 36:c5:5a:b7:cb:f1:4f:9e:6b:4c:ae:6f:d7:2b:18: f4:dd:32:fe:fb:98:b1:a8:4d:9a:19:14:33:88:d2: ba:fd:77:fd:c9:72:8f:22:54:7d:09:f1:53:a3:1a: a3:a5:ec:df:e4:99:7a:5a:77:3c:33:12:f3:4c:88: 95:c3:19:30:99:5e:e7:dd:55:b5:22:2e:53:be:f8: 50:77:df:33:62:aa:5b:90:30:40:88:f8:c7:15:b8: 73:fc:e2:bf:49:97:b9:3b:01:4d:d3:e1:35:da:3f: 52:9f:99:87:54:ac:13:c7:16:5a:b3:6c:55:53:19: 56:51:44:63:14:a0:db:ca:08:66:a4:8f:9e:7e:29: 45:2e:ac:4a:48:9c:a7:ca:31:74:d5:76:b7:07:c5: 6b:ea:0b:71:6f:03:a7:37:98:19:a5:d2:3d:cc:a3: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D9:C5:A9:9A:00:56:AB:BC:6A:5C:C3:CB:9B:1E:CA:B1:D4:80:F4 X509v3 Authority Key Identifier: keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b6:b5:ed:04:46:bb:b8:0d:f0:fd:b3:db:15:59:50:14:0e: 2f:3c:77:aa:f5:37:f9:60:93:0d:95:a2:ce:d3:b0:6a:48:67: 2c:c7:7a:2b:bd:de:f0:aa:93:ea:1e:d7:20:f2:53:dd:e8:de: 00:3f:f0:39:72:77:e4:68:6d:57:23:0e:00:d2:08:bb:ed:b7: 3a:cc:9a:4a:2c:46:0a:1f:d4:5b:e9:27:b2:5b:c4:e0:fe:7b: 66:b7:6d:e3:7c:f1:ff:f0:32:4d:3f:b4:8f:af:ee:9f:2e:38: 5b:e0:61:fb:55:ac:fe:8f:00:90:07:b2:de:76:f6:41:c4:44: 66:36:93:66:f0:8a:97:84:be:a8:ca:92:dc:4a:e3:df:48:ec: b7:ca:cf:d6:3b:29:ce:f5:5a:32:2c:ce:54:75:6e:72:75:d4: 6e:d7:70:73:01:52:61:98:e2:78:e7:bc:3f:b8:26:01:f5:13: fb:96:ab:93:fb:b4:a3:b7:de:bb:ea:78:ef:56:08:96:95:eb: 83:05:77:d2:e3:fa:1b:1f:03:00:3e:eb:b6:80:2a:02:5c:7c: 61:e5:ee:97:dc:dd:40:3a:c2:6a:cd:19:34:a4:a1:e5:22:95: c7:83:72:5b:f3:4b:4d:6f:4d:08:c6:b0:2c:48:b8:c7:81:ee: b7:f0:ec:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBtMlenLfxOC0M+AL1rBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NGRlM2ViNzc1Y2EzYmUyZDU1MDNjOWM5Y2QzYjcyYmJj ZGE0OWIwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD EyhhOGQ5YzVhOTlhMDA1NmFiYmM2YTVjYzNjYjliMWVjYWIxZDQ4MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WU0VU+y6ouO2WwXWVV4vV8lwfVh pXTLE5YuooHMKsLmGLWsbnwvFrmqTwiqOFDpFIwIHp0bp9xqC1A1SGnoeeSv63wx KT3AaffYRhJMoQCV1//sZmqAGAw2xVq3y/FPnmtMrm/XKxj03TL++5ixqE2aGRQz iNK6/Xf9yXKPIlR9CfFToxqjpezf5Jl6Wnc8MxLzTIiVwxkwmV7n3VW1Ii5TvvhQ d98zYqpbkDBAiPjHFbhz/OK/SZe5OwFN0+E12j9Sn5mHVKwTxxZas2xVUxlWUURj FKDbyghmpI+efilFLqxKSJynyjF01Xa3B8Vr6gtxbwOnN5gZpdI9zKNIVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjZxamaAFarvGpcw8ubHsqx1ID0MB8GA1UdIwQY MBaAFOZN4+t3XKO+LVUDycnNO3K7zaSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYt MzQxNjU4MjQzYjRlLzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYtMzQxNjU4MjQzYjRl LzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbba17QRG u7gN8P2z2xVZUBQOLzx3qvU3+WCTDZWiztOwakhnLMd6K73e8KqT6h7XIPJT3eje AD/wOXJ35GhtVyMOANIIu+23OsyaSixGCh/UW+knslvE4P57Zrdt43zx//AyTT+0 j6/uny44W+Bh+1Ws/o8AkAey3nb2QcREZjaTZvCKl4S+qMqS3Erj30jst8rP1jsp zvVaMizOVHVucnXUbtdwcwFSYZjieOe8P7gmAfUT+5ark/u0o7feu+p471YIlpXr gwV30uP6Gx8DAD7rtoAqAlx8YeXul9zdQDrCas0ZNKSh5SKVx4NyW/NLTW9NCMaw LEi4x4Hut/DsYA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:43 2025 by rpki-client