This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json) Hash identifier: 37D6a8ID0Y0dI91dsWRUIQ24kB0A1e9Ar/DcCbZINX8= Subject key identifier: E1:CE:83:7E:06:0B:A8:46:A4:92:03:83:C6:C4:7E:CC:48:16:ED:DB Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6 Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6 Certificate serial: 019AF31BD44665A611E6DAC8FD508420D49F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: 7foTiyBDk1dlNdjP4YxI60ImzMfU1Gh9x9QXXP69Lp4=) 2: qG28szwgzKPw-jxxXZAb6g2XGqU.roa (hash: izxZJRDh1PNPhAdwizTZ+zNrbkp/H2QNfLC0QfnH8sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d4:46:65:a6:11:e6:da:c8:fd:50:84:20:d4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6 Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=e1ce837e060ba846a4920383c6c47ecc4816eddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:e5:c2:64:68:6b:74:e8:88:27:ae:9a:5f: 95:30:ae:24:aa:6a:bc:e1:a8:2e:4b:5d:b1:ea:cd: b1:63:1a:b9:e7:28:43:10:7f:6d:ef:fc:2e:b6:91: 0a:c0:6c:db:39:e9:d2:16:c5:9d:4f:be:42:3d:08: 8e:57:7e:37:f4:d6:6f:90:92:e4:2d:92:bf:33:4a: 18:d5:97:03:fc:6b:65:f3:20:6b:08:61:06:f5:47: c1:1b:02:ec:b2:3b:fc:b8:af:b3:d7:e7:41:e9:62: e5:cb:21:8d:0f:e5:8a:44:e4:cb:09:71:49:6e:c9: c2:9e:45:df:85:66:0b:59:53:f3:d4:5b:0b:df:cd: 4b:02:b0:2d:9b:68:fd:41:66:ae:69:02:da:35:5b: d3:b5:ec:85:a1:20:c6:11:ea:0d:49:04:74:c3:85: 1c:cf:a3:32:5a:4c:4b:da:b4:57:a4:08:f0:23:c6: ad:9b:c0:a7:11:16:3b:5b:ff:bb:ad:cb:b9:1e:e8: 20:ea:72:aa:8f:c3:66:43:cf:b8:a1:24:a2:4d:c4: 11:85:cc:85:e3:b1:c4:c0:aa:39:d9:e6:d0:bc:bc: 36:5e:5a:46:61:44:d3:3b:4a:09:f7:3c:2a:61:71: ac:7c:94:02:ba:60:21:6f:1a:0b:7a:f3:30:53:fc: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:83:7E:06:0B:A8:46:A4:92:03:83:C6:C4:7E:CC:48:16:ED:DB X509v3 Authority Key Identifier: keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ab:54:64:a9:89:9c:f5:40:3b:45:38:9b:6e:d2:e2:02:79: 6b:7d:7f:30:ff:e4:f3:c7:b4:cf:af:b2:bb:92:08:64:7d:ba: 2f:20:64:3f:4f:bc:21:40:25:16:ca:03:15:98:ed:4a:56:0d: cb:c8:2d:b4:1e:be:1c:9a:17:62:4f:80:1a:6e:fd:6b:89:be: aa:23:77:45:03:32:b3:48:f0:11:0f:82:97:af:f8:e2:f4:02: 35:e5:b1:53:ac:94:84:bf:f7:8a:26:43:78:69:06:03:97:ad: 84:d0:a6:05:d8:da:1a:93:31:2d:d6:42:53:ae:07:9a:5d:f5: 7e:08:b3:25:e2:9e:78:15:4a:30:cb:0f:e0:40:24:2a:f3:f4: e1:c2:30:a7:b8:c0:3f:62:4b:76:1d:f9:77:9d:c0:b2:07:01: cb:b9:f5:60:e1:16:25:14:da:ed:3a:b9:2d:29:74:f2:12:d3: df:41:58:79:59:25:9a:e5:e4:a5:d6:c7:6a:09:1c:f2:ba:2f: 62:20:c8:a6:ef:10:aa:08:d1:20:0d:56:b4:07:c3:12:04:a4: d7:b7:6d:7c:bc:4e:5e:e7:3e:7e:27:20:61:e7:ed:4f:6e:0f: 74:53:16:44:19:e7:61:be:e7:46:80:42:4e:e8:68:40:33:51: 77:31:b6:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9RGZaYR5trI/VCEINSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWFkZTNjMTkxMjc4YjJhYThhZDc2NzQyZWViYmRlZmU3 Mjg1ZTYwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD EyhlMWNlODM3ZTA2MGJhODQ2YTQ5MjAzODNjNmM0N2VjYzQ4MTZlZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MLlwmRoa3ToiCeuml+VMK4kqmq8 4aguS12x6s2xYxq55yhDEH9t7/wutpEKwGzbOenSFsWdT75CPQiOV3439NZvkJLk LZK/M0oY1ZcD/Gtl8yBrCGEG9UfBGwLssjv8uK+z1+dB6WLlyyGND+WKROTLCXFJ bsnCnkXfhWYLWVPz1FsL381LArAtm2j9QWauaQLaNVvTteyFoSDGEeoNSQR0w4Uc z6MyWkxL2rRXpAjwI8atm8CnERY7W/+7rcu5Hugg6nKqj8NmQ8+4oSSiTcQRhcyF 47HEwKo52ebQvLw2XlpGYUTTO0oJ9zwqYXGsfJQCumAhbxoLevMwU/wZiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHOg34GC6hGpJIDg8bEfsxIFu3bMB8GA1UdIwQY MBaAFCua3jwZEniyqorXZ0Luu97+coXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMt Y2MwNTNmNmExZWU2LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wZTQyZTgtNzQ2Yy00YTNhLThkNjMtY2MwNTNmNmExZWU2 LzEvSzVyZVBCa1NlTEtxaXRkblF1NjczdjV5aGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqtUZKmJ nPVAO0U4m27S4gJ5a31/MP/k88e0z6+yu5IIZH26LyBkP0+8IUAlFsoDFZjtSlYN y8gttB6+HJoXYk+AGm79a4m+qiN3RQMys0jwEQ+Cl6/44vQCNeWxU6yUhL/3iiZD eGkGA5ethNCmBdjaGpMxLdZCU64Hml31fgizJeKeeBVKMMsP4EAkKvP04cIwp7jA P2JLdh35d53AsgcBy7n1YOEWJRTa7Tq5LSl08hLT30FYeVklmuXkpdbHagkc8rov YiDIpu8QqgjRIA1WtAfDEgSk17dtfLxOXuc+ficgYeftT24PdFMWRBnnYb7nRoBC TuhoQDNRdzG2ww== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:13 2025 by rpki-client