This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json) Hash identifier: x15thB3n50QQuALboZJCdbhmPF6eJ12vfru78ZbLWWk= Subject key identifier: 72:5E:34:90:F2:5F:30:98:AB:E2:5D:58:C2:10:06:03:4B:86:92:6F Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Certificate serial: 019AF12D6E7A2E821F76BF55B21ACF67C05C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=) 2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: 7JL4hV1hL/+LD/d5QXGnsidEx3yC4KLrF76njGDwPh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6e:7a:2e:82:1f:76:bf:55:b2:1a:cf:67:c0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=725e3490f25f3098abe25d58c21006034b86926f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:1d:e7:b2:64:7a:6d:1c:f3:7b:3c:a4:f9: c7:89:20:90:a2:bc:40:02:e6:98:01:c8:e3:1e:8e: a9:ea:fb:e6:85:0e:48:66:62:62:80:7b:1f:a6:75: a9:25:1e:8d:7d:f9:a6:cc:20:cc:20:59:3e:e4:cc: 0e:f8:d9:32:88:34:bb:b1:e3:17:42:e1:71:62:5f: b0:ce:e2:9e:11:a1:1b:8a:ce:dc:f7:52:88:de:24: 92:84:cf:29:33:80:7a:72:44:49:cb:f3:03:77:48: bf:01:26:58:a6:42:85:c9:38:27:12:6d:b2:da:3e: 08:9e:87:50:f3:60:00:e5:84:a7:5d:7e:8b:86:c0: f2:73:5e:19:39:e3:46:b6:51:42:01:d3:50:51:ae: c0:68:1c:73:ea:a9:85:85:5c:2c:ad:37:23:85:34: 2c:b5:b3:17:6f:7a:5d:66:33:e9:e2:8a:6d:c1:bc: 5f:4c:1d:a4:6a:01:34:05:d0:de:7d:29:c3:99:a4: aa:69:16:23:bc:00:f5:f1:d8:60:aa:d8:49:06:22: b5:de:a1:98:42:5a:e1:e6:19:7c:c8:34:c7:ed:82: 65:65:ef:82:20:91:20:19:14:a1:b5:8b:a3:b2:ab: d8:16:37:78:3d:7c:cf:c3:7b:2c:9f:89:da:2c:28: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:34:90:F2:5F:30:98:AB:E2:5D:58:C2:10:06:03:4B:86:92:6F X509v3 Authority Key Identifier: keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fd:36:91:e3:ff:05:8f:38:c0:65:8c:5c:ba:f7:a3:7b:35: f4:5a:e3:e7:8e:88:f8:54:df:2a:4c:54:40:70:d2:fc:13:fb: f4:16:8d:bb:ee:6a:fc:0e:90:9d:1d:da:30:74:9d:b4:d6:8b: 73:10:52:79:36:96:52:db:d3:1e:4f:ea:7b:25:45:21:a2:d3: 67:91:71:4d:e0:c3:3d:e8:4d:1e:1b:2f:40:b2:be:fc:dc:7e: 72:b6:c2:8e:02:83:f7:1f:9b:cd:4d:87:70:29:82:9d:89:ff: 19:fc:d5:22:5c:ab:ee:d6:08:05:91:5c:9d:2e:ae:4a:cc:0a: d8:80:04:17:53:fd:9b:5f:7c:41:40:6d:f4:52:5d:69:b1:b8: d8:2a:fe:10:31:c2:7a:62:1b:4c:d5:ae:76:48:58:63:d9:56: a6:5a:80:d2:07:6f:67:15:e5:f5:de:34:94:ff:96:8a:3e:3a: 99:b6:f8:72:5b:4e:ff:2e:ab:d2:a0:d8:c5:d1:b5:ca:6c:26: 91:4b:53:4d:21:19:55:2d:55:30:61:e0:7a:b6:38:dc:89:c5: a4:9a:cd:e4:18:5a:65:fa:e4:ad:5b:90:db:2a:d2:c1:7e:1a: 6b:b8:35:51:76:ab:51:2a:0c:ee:c6:24:b1:37:e6:dd:2e:99: 00:3a:30:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLW56LoIfdr9VshrPZ8BcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj MDdjMzkwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD Eyg3MjVlMzQ5MGYyNWYzMDk4YWJlMjVkNThjMjEwMDYwMzRiODY5MjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YQd57Jkem0c83s8pPnHiSCQorxA AuaYAcjjHo6p6vvmhQ5IZmJigHsfpnWpJR6NffmmzCDMIFk+5MwO+NkyiDS7seMX QuFxYl+wzuKeEaEbis7c91KI3iSShM8pM4B6ckRJy/MDd0i/ASZYpkKFyTgnEm2y 2j4InodQ82AA5YSnXX6LhsDyc14ZOeNGtlFCAdNQUa7AaBxz6qmFhVwsrTcjhTQs tbMXb3pdZjPp4optwbxfTB2kagE0BdDefSnDmaSqaRYjvAD18dhgqthJBiK13qGY Qlrh5hl8yDTH7YJlZe+CIJEgGRShtYujsqvYFjd4PXzPw3ssn4naLCj6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJeNJDyXzCYq+JdWMIQBgNLhpJvMB8GA1UdIwQY MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/02keP/ BY84wGWMXLr3o3s19Frj546I+FTfKkxUQHDS/BP79BaNu+5q/A6QnR3aMHSdtNaL cxBSeTaWUtvTHk/qeyVFIaLTZ5FxTeDDPehNHhsvQLK+/Nx+crbCjgKD9x+bzU2H cCmCnYn/GfzVIlyr7tYIBZFcnS6uSswK2IAEF1P9m198QUBt9FJdabG42Cr+EDHC emIbTNWudkhYY9lWplqA0gdvZxXl9d40lP+Wij46mbb4cltO/y6r0qDYxdG1ymwm kUtTTSEZVS1VMGHgerY43InFpJrN5BhaZfrkrVuQ2yrSwX4aa7g1UXarUSoM7sYk sTfm3S6ZADowhg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:22 2025 by rpki-client