This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft File: K5Ro565AOUbluk3mHMHEej2b794.mft (raw, json) Hash identifier: vpduFPgJPq2g+c3EfFuubk1Lh8InbMPJp4jr65h6EBk= Subject key identifier: A5:2B:33:A6:8B:D4:6E:AB:E8:AA:61:39:ED:91:62:CE:E9:DC:A7:D1 Authority key identifier: 2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE Certificate issuer: /CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde Certificate serial: 019AF12E6FFDF564EB60807D4D36D9BB4FB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft Manifest number: 0C1A Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: K5Ro565AOUbluk3mHMHEej2b794.crl (hash: zLFvU80R57nYwqjAXgQa7eMEHVEouaS14vfmubmH6Ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6f:fd:f5:64:eb:60:80:7d:4d:36:d9:bb:4f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9468e7ae403946e5ba4de61cc1c47a3d9befde Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=a52b33a68bd46eabe8aa6139ed9162cee9dca7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:83:64:2a:f4:d3:a1:ea:9a:c2:3a:1b:e4: e4:f7:87:e4:f5:be:8e:f5:b0:9e:cc:a9:87:02:ff: a5:8a:d0:06:cb:a8:b2:70:05:34:b4:4a:55:3c:5d: 2d:86:40:0d:ce:50:41:ff:23:1e:0c:20:77:80:48: ee:e8:fe:38:83:6e:bc:3a:7c:64:50:87:99:c1:dd: d0:29:b7:dd:38:74:23:32:60:45:b5:01:f9:f5:4d: 60:ad:d8:39:52:1c:d8:24:69:b3:80:da:b1:cb:29: 18:51:9d:a5:51:30:21:d3:05:87:bd:c1:6e:38:f4: de:07:2a:14:0a:a2:27:2d:1c:39:df:78:99:47:4d: de:d2:4a:4d:87:58:69:b3:8d:d0:db:bf:c4:7e:39: 78:f2:0a:73:4f:c9:8b:01:c3:a1:6f:12:b8:55:02: e6:71:b4:a7:b0:bd:e0:16:e8:95:60:2d:c1:73:f8: 54:2b:d2:11:0a:ba:dd:2b:aa:d4:91:08:a2:1b:65: 8e:e7:86:93:e9:81:5a:32:24:d1:32:9a:ec:d0:59: 7c:f6:27:99:69:dc:ad:a4:a0:29:c9:9e:ca:22:2b: c3:ad:d3:82:39:88:1e:b2:03:54:8b:69:1b:30:2b: 2c:10:8c:86:ab:f9:d1:e7:f7:8e:60:43:32:73:db: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2B:33:A6:8B:D4:6E:AB:E8:AA:61:39:ED:91:62:CE:E9:DC:A7:D1 X509v3 Authority Key Identifier: keyid:2B:94:68:E7:AE:40:39:46:E5:BA:4D:E6:1C:C1:C4:7A:3D:9B:EF:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Ro565AOUbluk3mHMHEej2b794.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4b5c18-8472-41db-b557-2269c1af2ad3/1/K5Ro565AOUbluk3mHMHEej2b794.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a7:49:16:fd:c8:fb:4d:b3:96:35:7c:40:8d:3d:e1:60:49: 2b:33:b4:49:cc:5f:a8:d2:01:05:3f:5e:99:fc:0e:72:e7:c4: 37:f4:7a:9e:60:e4:9a:a6:b1:d3:32:85:f5:c1:f6:4f:1b:95: f8:29:e2:6e:0f:2b:e3:c2:f0:1b:3a:e9:22:05:28:04:85:a1: 09:51:ab:f5:34:d9:00:20:1f:07:e4:70:b1:65:db:fb:ba:07: 26:af:22:20:db:cb:18:1d:89:08:c7:22:00:ee:d7:64:bd:49: ae:a7:17:e8:b4:79:db:01:55:26:82:4b:27:ed:ac:c2:97:f7: 72:17:96:74:49:6d:9b:be:0e:0b:10:27:57:8b:64:66:c6:96: b2:0a:e9:04:d2:42:59:dc:fd:f1:d7:3d:58:c6:ea:27:f6:82: 12:10:33:7b:86:69:c8:cc:69:f6:8b:99:39:34:62:49:6e:7b: 3d:9d:f6:e5:0e:62:9c:0a:55:ff:29:44:a8:cb:5e:5b:2b:1f: 75:0e:52:89:3a:cb:d6:a0:88:e4:f2:1f:50:34:3e:66:71:6d: d0:f8:16:ca:de:df:3f:f9:46:53:5e:de:c4:da:7f:35:99:36: 87:80:d0:8a:1b:ec:55:ca:ca:c7:38:d0:92:89:48:7d:3b:fa: a5:92:6b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm/99WTrYIB9TTbZu0+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTQ2OGU3YWU0MDM5NDZlNWJhNGRlNjFjYzFjNDdhM2Q5 YmVmZGUwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EyhhNTJiMzNhNjhiZDQ2ZWFiZThhYTYxMzllZDkxNjJjZWU5ZGNhN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXSDZCr006HqmsI6G+Tk94fk9b6O 9bCezKmHAv+litAGy6iycAU0tEpVPF0thkANzlBB/yMeDCB3gEju6P44g268Onxk UIeZwd3QKbfdOHQjMmBFtQH59U1grdg5UhzYJGmzgNqxyykYUZ2lUTAh0wWHvcFu OPTeByoUCqInLRw533iZR03e0kpNh1hps43Q27/Efjl48gpzT8mLAcOhbxK4VQLm cbSnsL3gFuiVYC3Bc/hUK9IRCrrdK6rUkQiiG2WO54aT6YFaMiTRMprs0Fl89ieZ adytpKApyZ7KIivDrdOCOYgesgNUi2kbMCssEIyGq/nR5/eOYEMyc9vh9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUrM6aL1G6r6KphOe2RYs7p3KfRMB8GA1UdIwQY MBaAFCuUaOeuQDlG5bpN5hzBxHo9m+/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80YjVjMTgtODQ3Mi00MWRiLWI1NTct MjI2OWMxYWYyYWQzLzEvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi80YjVjMTgtODQ3Mi00MWRiLWI1NTctMjI2OWMxYWYyYWQz LzEvSzVSbzU2NUFPVWJsdWszbUhNSEVlajJiNzk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6dJFv3I +02zljV8QI094WBJKzO0ScxfqNIBBT9emfwOcufEN/R6nmDkmqax0zKF9cH2TxuV +Cnibg8r48LwGzrpIgUoBIWhCVGr9TTZACAfB+RwsWXb+7oHJq8iINvLGB2JCMci AO7XZL1JrqcX6LR52wFVJoJLJ+2swpf3cheWdEltm74OCxAnV4tkZsaWsgrpBNJC Wdz98dc9WMbqJ/aCEhAze4ZpyMxp9ouZOTRiSW57PZ325Q5inApV/ylEqMteWysf dQ5SiTrL1qCI5PIfUDQ+ZnFt0PgWyt7fP/lGU17exNp/NZk2h4DQihvsVcrKxzjQ kolIfTv6pZJr0w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:49 2025 by rpki-client