This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft File: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft (raw, json) Hash identifier: eztJkQb7KZagsGVM7+e8Xb/fkkf3KJtFxATDRKa/epU= Subject key identifier: 83:1A:31:63:65:BB:25:88:07:40:DF:E3:FB:4B:B9:84:2C:F1:E4:25 Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Certificate serial: 019AF50B197D552F6C1B3094D4A867A6B84B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft Manifest number: 17A7 Signing time: Sat 06 Dec 2025 19:02:16 +0000 Manifest this update: Sat 06 Dec 2025 19:02:16 +0000 Manifest next update: Sun 07 Dec 2025 19:02:16 +0000 Files and hashes: 1: 5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl (hash: KvcMP/qnBXc2IjcrSK4a2PaqXfTYRCKVTTFFNPNiIEU=) 2: GiKH9gL8ye93yrUhAFVdFya-unI.roa (hash: g8FT8QsMqpi65wH/WW7aR7HdjKyCnBwRtXcglUHLc58=) 3: YYYjBm1cHK07qbUZvnPjiWS8SJc.roa (hash: MDsHneIlPDU9EFijEVHpgaP4TeikhndTgWyCvxSYX5M=) 4: ZLyEHguTDj7_eAwLYTv1l-ESnW8.roa (hash: kfxLXEBdhl8n9+7tXLKP0Rx1fp10fHwf5ZErtSpKDqE=) 5: np5ApzvF3lA5ni3WwjjgrcdZ2Tk.roa (hash: jhCq+3Rux2qXuCc1aEm0+2wjAzlzRIc5exfEKvJ2iL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:19:7d:55:2f:6c:1b:30:94:d4:a8:67:a6:b8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d Validity Not Before: Dec 6 19:02:16 2025 GMT Not After : Dec 7 19:02:16 2025 GMT Subject: CN=831a316365bb25880740dfe3fb4bb9842cf1e425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:24:61:a7:d2:33:60:9f:ea:14:64:43:42: e4:dc:af:6d:a4:e1:58:3a:20:43:01:6e:2d:e7:29: 86:f9:52:63:6d:77:62:3a:57:8e:8a:7d:5b:77:ba: 38:ee:fb:ac:19:6d:59:ec:6b:7c:a0:60:76:db:31: f6:b5:8a:fe:80:d7:5e:5f:fe:e3:25:f0:a7:c8:04: f4:1f:12:e9:db:93:d6:a1:4d:6b:c4:eb:87:cd:a0: 82:34:11:5c:58:a9:64:72:9f:e4:47:df:36:a7:5e: 7e:2e:ef:2a:44:11:cd:2c:f3:31:35:b8:d3:8b:50: 5b:37:54:8c:3e:15:34:b2:07:09:f9:d5:a4:0d:bb: bd:f8:7f:28:5f:c3:f2:45:e2:4f:8e:9a:14:95:34: 76:3a:45:34:20:0e:f1:8c:df:48:6b:7f:a4:2f:9d: 88:3b:87:5a:d2:0d:0a:e7:66:de:fd:95:60:aa:34: bf:d5:28:8a:75:04:7b:bb:42:11:79:e4:53:b7:cd: e0:80:19:33:a4:e8:89:c2:e7:95:f0:25:3f:4b:db: 14:3e:2b:42:9d:ee:04:0a:99:fc:d9:4f:59:9b:e3: a4:64:12:7c:bb:00:31:3b:10:5a:8f:76:f0:a4:83: 08:78:39:ad:f2:12:66:5f:00:94:05:ac:ea:85:16: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:31:63:65:BB:25:88:07:40:DF:E3:FB:4B:B9:84:2C:F1:E4:25 X509v3 Authority Key Identifier: keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:00:77:2a:4e:d8:4e:c2:a0:6a:f0:38:0e:fd:d4:b6:31:af: 2c:6e:47:25:08:fc:dc:49:ee:8a:4f:a3:ef:97:21:cb:b7:de: 00:95:a0:28:bc:d9:ba:58:23:ac:92:ca:47:08:ba:f8:cd:55: d3:a6:11:e3:7d:84:58:eb:b6:0a:34:02:7c:e4:94:10:2d:38: fc:b0:a8:bf:b5:1d:62:31:d0:e4:bd:31:a2:f3:a7:7d:fc:df: 3f:53:90:ea:e4:d3:03:ec:dc:79:d1:1a:d4:51:fa:a0:95:e6: 8d:88:e3:4f:08:d9:c2:1f:a4:40:42:7e:99:44:d0:cb:a1:75: 40:35:42:cb:86:6b:ea:52:97:f9:37:32:5b:8a:72:cd:39:b6: f9:b1:4a:7f:8f:ab:33:fb:b7:33:07:4f:28:e9:8d:b4:a3:b3: 5f:47:9d:aa:65:a7:97:48:97:64:57:a7:ff:13:77:d1:00:97: ec:9d:65:67:ec:ac:6d:38:73:0b:e5:3e:d4:96:3a:fe:c3:ab: 0a:78:c2:d9:2a:43:05:9a:c8:5e:bf:df:03:a5:d2:05:b2:1c: 58:25:c8:0a:10:20:42:85:bd:4e:60:0f:7b:26:cd:6d:bb:dc: fb:23:27:44:19:32:8b:86:6a:8f:0e:20:83:21:2e:25:16:8a: 4f:82:bd:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cxl9VS9sGzCU1KhnprhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTJiOGU5MGQxNTdlYTAyMmY4ZTcwMDAyNGE5M2RjMzU2 YTUxNGQwHhcNMjUxMjA2MTkwMjE2WhcNMjUxMjA3MTkwMjE2WjAzMTEwLwYDVQQD Eyg4MzFhMzE2MzY1YmIyNTg4MDc0MGRmZTNmYjRiYjk4NDJjZjFlNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7gkYafSM2Cf6hRkQ0Lk3K9tpOFY OiBDAW4t5ymG+VJjbXdiOleOin1bd7o47vusGW1Z7Gt8oGB22zH2tYr+gNdeX/7j JfCnyAT0HxLp25PWoU1rxOuHzaCCNBFcWKlkcp/kR982p15+Lu8qRBHNLPMxNbjT i1BbN1SMPhU0sgcJ+dWkDbu9+H8oX8PyReJPjpoUlTR2OkU0IA7xjN9Ia3+kL52I O4da0g0K52be/ZVgqjS/1SiKdQR7u0IReeRTt83ggBkzpOiJwueV8CU/S9sUPitC ne4ECpn82U9Zm+OkZBJ8uwAxOxBaj3bwpIMIeDmt8hJmXwCUBazqhRbnwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMaMWNluyWIB0Df4/tLuYQs8eQlMB8GA1UdIwQY MBaAFOSiuOkNFX6gIvjnAAJKk9w1alFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTct ZGY0YTJlNzYwY2NiLzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82OTllODUtMTAyNy00YzdlLThhZTctZGY0YTJlNzYwY2Ni LzEvNUtLNDZRMFZmcUFpLU9jQUFrcVQzRFZxVVUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgB3Kk7Y TsKgavA4Dv3UtjGvLG5HJQj83Enuik+j75chy7feAJWgKLzZulgjrJLKRwi6+M1V 06YR432EWOu2CjQCfOSUEC04/LCov7UdYjHQ5L0xovOnffzfP1OQ6uTTA+zcedEa 1FH6oJXmjYjjTwjZwh+kQEJ+mUTQy6F1QDVCy4Zr6lKX+TcyW4pyzTm2+bFKf4+r M/u3MwdPKOmNtKOzX0edqmWnl0iXZFen/xN30QCX7J1lZ+ysbThzC+U+1JY6/sOr CnjC2SpDBZrIXr/fA6XSBbIcWCXIChAgQoW9TmAPeybNbbvc+yMnRBkyi4Zqjw4g gyEuJRaKT4K9gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:50 2025 by rpki-client