This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json) Hash identifier: 0+x/usNXN4Zi4Q6PDs3dxUPx2iAMYTcxh7ocuRKhIfs= Subject key identifier: D3:6D:B6:0F:B8:68:BB:2C:EA:79:F6:4C:BE:34:3E:6D:6B:6A:98:D1 Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23 Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23 Certificate serial: 019B2B1D2D74280E82B4E5E45C0481EACB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 07:01:30 +0000 Manifest this update: Wed 17 Dec 2025 07:01:30 +0000 Manifest next update: Thu 18 Dec 2025 07:01:30 +0000 Files and hashes: 1: IRjrM71OJM5QObnZgNNrFRUyuDg.roa (hash: KDXjEC5+jgnVgR7YLpm66IF8Y8cfv8DKQxOxQp+OnTk=) 2: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: WxPltWbdVjw97i/3wo/he73Tm3sv/+cwtdCk/aFyIE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:2d:74:28:0e:82:b4:e5:e4:5c:04:81:ea:cb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23 Validity Not Before: Dec 17 07:01:30 2025 GMT Not After : Dec 18 07:01:30 2025 GMT Subject: CN=d36db60fb868bb2cea79f64cbe343e6d6b6a98d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:99:7d:62:90:c0:d6:54:86:f0:93:3b:86: 02:93:08:79:b3:6b:f5:9d:0d:03:5e:26:5f:0a:6b: a0:d2:ac:a0:2c:ce:60:c3:9c:64:3d:a3:27:b0:37: 2a:3c:a5:e5:77:4e:a1:15:98:45:03:40:a1:19:ba: 22:13:86:4f:74:27:8c:9b:8d:9b:01:13:16:84:b7: 81:c7:0a:3e:6c:12:56:b5:ef:72:38:c2:46:43:cd: 30:07:42:cb:f0:5b:a0:02:f5:ff:a4:33:93:5d:24: 2c:38:30:9c:e1:04:a7:df:72:9e:88:a9:75:28:f6: 6d:7c:f7:84:6f:a5:13:a1:a3:8b:4a:32:4b:06:7a: ca:0f:4f:80:7a:0a:61:55:eb:d5:b5:15:fe:cd:66: a8:66:12:85:5d:3e:60:fc:b6:00:8f:f4:91:18:6b: 5d:2f:7c:a6:44:70:0f:81:1d:34:a3:ab:90:75:24: 97:02:96:d4:39:c7:13:4e:c0:ef:a5:65:01:af:0b: 79:d7:84:3a:91:74:5a:9d:47:89:7e:ef:af:fc:a2: 8a:f9:a4:39:fa:ec:69:7e:51:67:98:bf:81:37:b9: 43:fa:fd:93:40:d2:c2:0d:f5:1e:6a:0c:51:8c:98: 5f:5a:36:cf:95:16:6a:da:eb:7a:38:f9:65:d8:ae: 3a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6D:B6:0F:B8:68:BB:2C:EA:79:F6:4C:BE:34:3E:6D:6B:6A:98:D1 X509v3 Authority Key Identifier: keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e4:df:d3:28:ec:42:cf:40:3f:39:ad:dc:3b:4b:dc:03:59: fa:b6:0f:f6:51:61:ec:4b:c2:7f:e8:ab:32:f6:3a:c2:46:31: dc:06:18:43:b9:83:1c:c1:be:eb:79:a0:a7:1a:81:4a:75:0d: 97:62:90:06:51:7f:95:cb:ba:15:51:b8:55:af:3e:32:42:07: 7e:47:19:23:18:a3:7d:df:13:e7:46:44:33:f1:29:98:1e:b0: 9d:97:f2:52:1c:17:f6:c3:11:c0:dd:85:d8:cc:0c:f6:c4:0a: eb:21:ef:21:3d:a4:94:fd:bf:37:0f:52:10:a9:84:3f:fd:1b: c0:4c:0f:62:28:b6:e0:d1:56:dc:a5:ce:7b:ce:be:8c:8b:f2: 5f:da:02:5b:1e:09:54:88:91:70:2a:1b:11:d9:f8:8d:eb:d9: 0c:9b:c7:bc:00:67:d5:e3:28:a2:e7:14:2c:fd:23:36:23:67: 31:da:cb:a2:30:f6:a0:fb:96:ea:42:84:07:d4:00:dd:66:72: 92:be:d3:86:20:7e:1b:35:fb:c0:83:52:a3:7b:b0:ae:1a:20: ce:40:f7:5f:a8:f1:0a:40:b4:02:e1:9a:4e:cc:d5:26:31:92: a6:26:66:ab:59:5d:59:a6:05:91:f3:99:b2:54:75:3c:c8:fd: 2a:b9:c0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHS10KA6CtOXkXASB6sufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl ZTNiMjMwHhcNMjUxMjE3MDcwMTMwWhcNMjUxMjE4MDcwMTMwWjAzMTEwLwYDVQQD EyhkMzZkYjYwZmI4NjhiYjJjZWE3OWY2NGNiZTM0M2U2ZDZiNmE5OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqOZfWKQwNZUhvCTO4YCkwh5s2v1 nQ0DXiZfCmug0qygLM5gw5xkPaMnsDcqPKXld06hFZhFA0ChGboiE4ZPdCeMm42b ARMWhLeBxwo+bBJWte9yOMJGQ80wB0LL8FugAvX/pDOTXSQsODCc4QSn33KeiKl1 KPZtfPeEb6UToaOLSjJLBnrKD0+AegphVevVtRX+zWaoZhKFXT5g/LYAj/SRGGtd L3ymRHAPgR00o6uQdSSXApbUOccTTsDvpWUBrwt514Q6kXRanUeJfu+v/KKK+aQ5 +uxpflFnmL+BN7lD+v2TQNLCDfUeagxRjJhfWjbPlRZq2ut6OPll2K46yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNttg+4aLss6nn2TL40Pm1rapjRMB8GA1UdIwQY MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt ZTAxYTU2ZjU4ZDM3LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3 LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOTf0yjs Qs9APzmt3DtL3ANZ+rYP9lFh7EvCf+irMvY6wkYx3AYYQ7mDHMG+63mgpxqBSnUN l2KQBlF/lcu6FVG4Va8+MkIHfkcZIxijfd8T50ZEM/EpmB6wnZfyUhwX9sMRwN2F 2MwM9sQK6yHvIT2klP2/Nw9SEKmEP/0bwEwPYii24NFW3KXOe86+jIvyX9oCWx4J VIiRcCobEdn4jevZDJvHvABn1eMooucULP0jNiNnMdrLojD2oPuW6kKEB9QA3WZy kr7ThiB+GzX7wINSo3uwrhogzkD3X6jxCkC0AuGaTszVJjGSpiZmq1ldWaYFkfOZ slR1PMj9KrnAfw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:25:25 2025 by rpki-client