This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json) Hash identifier: y4657iTLj3XQJ4PvIJZhWvjNQctq7twfW4HIXFjZdz8= Subject key identifier: 1E:70:38:4B:1D:41:A0:7C:44:DB:55:4B:03:3D:96:2D:DF:8C:6A:1C Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34 Certificate serial: 019AF352997AC6DE675E98324D9C96E252DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft Manifest number: 17E0 Signing time: Sat 06 Dec 2025 11:01:07 +0000 Manifest this update: Sat 06 Dec 2025 11:01:07 +0000 Manifest next update: Sun 07 Dec 2025 11:01:07 +0000 Files and hashes: 1: 0u7gO643pRxwZOenmWbBBqxLLKc.roa (hash: Pwxkn1Waj35vlmyRK88HUeSVQq2AHGthsf9UpYwjYbc=) 2: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: SsR1hnF8ruw8Cvw0zGX0Obh4+s2eGH812uC6Sa7iLvA=) 3: g0xFMT2GrYAMoL-inLUwLmSSyCA.roa (hash: HeRO7kuNoFHZ7OzgXdJj0leOybKMhQ/z6+NNz3N69Ns=) 4: wFQP_vODEY-W3eIkfxHByblOUq8.roa (hash: n1ZQqwSA0BtVLGIlganeJnOqb9x+AOjSB94Cm0wXocg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:99:7a:c6:de:67:5e:98:32:4d:9c:96:e2:52:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34 Validity Not Before: Dec 6 11:01:07 2025 GMT Not After : Dec 7 11:01:07 2025 GMT Subject: CN=1e70384b1d41a07c44db554b033d962ddf8c6a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1d:2b:1c:0d:a1:b2:51:d4:2c:9f:f9:30:99: 91:5b:8b:ea:15:60:07:bc:3c:d4:6f:3b:f6:f8:a9: f7:b2:24:88:41:21:39:6d:33:ed:a0:ba:32:23:b7: fa:9d:db:c7:79:63:30:56:23:5d:90:9e:7d:84:b0: 46:2d:4d:55:d5:a9:fa:35:f7:47:5b:28:5d:56:cd: fc:b2:6b:21:7f:5a:74:02:d8:ad:e5:17:53:95:09: 16:e5:b1:bd:22:36:42:9e:6e:d2:f7:1b:5d:68:e7: 81:ad:a0:47:4b:b9:26:49:d7:94:c8:48:40:78:70: 2b:eb:e5:18:40:ab:5e:f9:dc:53:48:26:0d:3e:04: aa:42:39:d0:57:41:66:fe:75:34:d5:94:91:1d:c3: 67:bc:0b:7b:f0:e9:6f:7f:82:b8:66:d4:47:52:6d: a7:13:16:6e:aa:c2:8e:92:37:aa:f5:bb:5a:fc:79: c9:76:07:d3:ed:13:c8:f5:8b:60:f3:5e:b1:e2:7f: 50:25:18:a4:0e:d6:57:b9:91:cb:b6:69:b3:0c:32: 5d:ec:80:f1:b8:b9:e7:41:99:e4:4f:56:41:87:3d: 0a:7c:61:4c:b4:5c:f1:56:2b:b6:0b:a7:04:cf:03: c6:8b:6b:73:1f:52:66:17:b9:52:cd:46:89:35:e3: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:70:38:4B:1D:41:A0:7C:44:DB:55:4B:03:3D:96:2D:DF:8C:6A:1C X509v3 Authority Key Identifier: keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:99:86:f6:cd:0c:11:7c:05:97:19:ae:b7:5e:09:b4:eb:fc: b6:11:cd:b9:75:31:7d:e1:9f:87:1c:11:e1:61:18:43:51:91: 14:c5:2c:36:a1:8c:3a:62:af:4a:8e:51:ab:49:03:f5:7e:99: cf:6a:53:66:9a:eb:10:56:d6:a8:82:1a:c5:f4:98:11:a0:7f: 54:db:b5:70:af:ff:5e:05:cc:50:c8:08:1a:b2:3b:7e:47:52: dc:30:90:d9:54:93:8f:57:40:d2:e7:86:15:00:a7:b7:c3:aa: 99:ef:1e:12:37:a4:58:ed:aa:53:1b:d0:4a:1b:3d:84:36:83: 40:5c:c9:e9:ab:1f:d9:cb:fb:77:3a:e1:b6:fc:8f:bd:3c:91: a6:ff:de:be:87:70:12:0c:72:a7:42:20:6c:a6:ba:52:5d:4f: 3c:14:8a:22:e1:91:c1:e3:fa:a4:64:08:4b:1e:88:ae:c1:5c: f0:a9:84:07:7d:66:4f:44:50:f3:aa:2d:c6:13:7a:26:9e:3c: af:95:40:a9:b3:dd:7a:c6:04:c5:be:6e:23:71:e1:90:16:0b: bb:bb:a3:63:59:5c:40:d6:f8:03:4b:4d:e8:c7:ac:4d:b4:27: b1:cb:53:f6:7a:ca:17:be:93:b0:42:41:91:74:58:f7:8a:98: bf:91:22:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpl6xt5nXpgyTZyW4lLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5 YTFlMzQwHhcNMjUxMjA2MTEwMTA3WhcNMjUxMjA3MTEwMTA3WjAzMTEwLwYDVQQD EygxZTcwMzg0YjFkNDFhMDdjNDRkYjU1NGIwMzNkOTYyZGRmOGM2YTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R0rHA2hslHULJ/5MJmRW4vqFWAH vDzUbzv2+Kn3siSIQSE5bTPtoLoyI7f6ndvHeWMwViNdkJ59hLBGLU1V1an6NfdH WyhdVs38smshf1p0Atit5RdTlQkW5bG9IjZCnm7S9xtdaOeBraBHS7kmSdeUyEhA eHAr6+UYQKte+dxTSCYNPgSqQjnQV0Fm/nU01ZSRHcNnvAt78Olvf4K4ZtRHUm2n ExZuqsKOkjeq9bta/HnJdgfT7RPI9Ytg816x4n9QJRikDtZXuZHLtmmzDDJd7IDx uLnnQZnkT1ZBhz0KfGFMtFzxViu2C6cEzwPGi2tzH1JmF7lSzUaJNeMvCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5wOEsdQaB8RNtVSwM9li3fjGocMB8GA1UdIwQY MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt ZWM1Yjg4ZDAxMzhhLzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJmG9s0M EXwFlxmut14JtOv8thHNuXUxfeGfhxwR4WEYQ1GRFMUsNqGMOmKvSo5Rq0kD9X6Z z2pTZprrEFbWqIIaxfSYEaB/VNu1cK//XgXMUMgIGrI7fkdS3DCQ2VSTj1dA0ueG FQCnt8Oqme8eEjekWO2qUxvQShs9hDaDQFzJ6asf2cv7dzrhtvyPvTyRpv/evodw Egxyp0IgbKa6Ul1PPBSKIuGRweP6pGQISx6IrsFc8KmEB31mT0RQ86otxhN6Jp48 r5VAqbPdesYExb5uI3HhkBYLu7ujY1lcQNb4A0tN6MesTbQnsctT9nrKF76TsEJB kXRY94qYv5EiMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:38 2025 by rpki-client