This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json) Hash identifier: sMoamWS5lss7XGCDt9Sk6HSh3++CmljBRMDzX/3vKdg= Subject key identifier: 57:31:E6:BC:A6:AC:16:7D:A4:88:BD:5D:88:E3:99:BE:C2:49:27:CB Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101 Certificate serial: 019AF0886DD508303142F0CF55EF5E561F83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft Manifest number: 12EF Signing time: Fri 05 Dec 2025 22:01:04 +0000 Manifest this update: Fri 05 Dec 2025 22:01:04 +0000 Manifest next update: Sat 06 Dec 2025 22:01:04 +0000 Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=) 2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=) 3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: /A01H3vgfZzWo8MXiUMNyf5lCWo+7vG3yKJHVmjncLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6d:d5:08:30:31:42:f0:cf:55:ef:5e:56:1f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101 Validity Not Before: Dec 5 22:01:04 2025 GMT Not After : Dec 6 22:01:04 2025 GMT Subject: CN=5731e6bca6ac167da488bd5d88e399bec24927cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:55:c8:fa:00:ca:14:3c:0d:af:d7:f1:d8: 84:69:a5:0e:37:5f:a3:14:90:e8:ba:37:c3:b5:08: 48:91:3f:4f:24:b8:aa:7d:e7:f5:d7:a1:37:cd:65: 78:1b:ba:86:5b:ed:32:cd:f9:ee:8d:42:34:95:28: 54:ac:4a:2e:5d:ea:e6:78:d1:c3:96:0e:60:20:0b: 51:8d:86:b6:d3:c9:91:8b:79:cb:e5:c4:f0:f7:e6: 5b:ef:14:20:5b:e7:06:84:71:45:1b:7c:77:fd:5a: d6:7d:66:4a:12:10:8f:da:68:04:92:90:75:3b:ba: d7:c3:f6:33:f5:7f:ff:6e:54:dd:00:61:bf:6f:38: 9b:e6:ba:c7:29:f7:0f:6b:19:55:04:b2:77:c6:5a: c7:c6:73:5f:8e:98:5c:91:01:99:13:54:5f:e0:81: 0e:be:d0:9b:14:49:13:4a:58:a9:7a:d9:52:4b:32: bc:c7:13:06:c7:ac:f9:46:65:6a:59:ad:58:af:01: df:7c:7d:58:13:17:1c:eb:dd:5e:c5:a4:9c:99:d3: df:42:85:e6:6a:60:0a:99:b4:37:e8:ec:a3:79:e9: 53:a5:4f:75:3e:90:dc:3f:c3:4a:a8:d5:83:71:0f: 62:ca:cc:76:c3:93:a3:df:28:82:6d:b5:10:21:ea: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:31:E6:BC:A6:AC:16:7D:A4:88:BD:5D:88:E3:99:BE:C2:49:27:CB X509v3 Authority Key Identifier: keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ef:d2:7c:21:f8:ea:f3:a1:1c:a1:eb:e8:13:99:9a:91:78: 6b:84:f3:c5:b6:e0:3f:09:d7:11:76:21:69:94:69:cf:15:6b: 52:fb:82:a5:bb:6c:6e:31:c1:29:95:d1:e8:fa:d1:2f:66:cc: 8d:81:12:f2:66:38:95:e4:2a:37:1a:72:a9:9f:58:c9:b6:08: f9:d0:d6:49:94:7d:cd:18:0d:25:01:44:2e:f9:6a:6f:d8:0a: c3:06:e5:dc:a9:4c:a6:3a:bb:7a:07:cd:68:dd:17:f3:88:db: e9:1b:7a:35:91:00:c7:38:47:99:4e:5a:e7:f0:c6:fc:81:ee: 49:56:81:ce:d8:61:08:59:af:2f:7f:0f:14:94:a8:8a:69:69: 72:2b:99:00:17:e9:23:8e:42:4b:aa:db:fa:2d:26:6a:b2:e8: 3e:b2:58:00:a2:f8:ab:74:7d:50:e2:0b:1a:d3:c9:d3:15:3c: 39:ac:e7:1e:a9:a5:05:31:93:33:6d:89:8c:b7:2b:6f:b6:b1: 12:7a:a6:e9:57:ef:ae:88:f0:30:95:d1:2f:96:bd:17:c4:1c: 3d:b8:54:f0:54:e4:ce:f9:74:f9:ce:09:07:af:84:ae:5b:ae: 20:69:b9:6b:0b:ca:62:9e:81:71:20:f4:bb:bf:64:84:e6:96: 15:00:2a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiG3VCDAxQvDPVe9eVh+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTA2OWE1ZDc2NGRhMjU1OTU0ZGIyZWU5ZDEyNDNkZTE2 YjkxMDEwHhcNMjUxMjA1MjIwMTA0WhcNMjUxMjA2MjIwMTA0WjAzMTEwLwYDVQQD Eyg1NzMxZTZiY2E2YWMxNjdkYTQ4OGJkNWQ4OGUzOTliZWMyNDkyN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBRVyPoAyhQ8Da/X8diEaaUON1+j FJDoujfDtQhIkT9PJLiqfef116E3zWV4G7qGW+0yzfnujUI0lShUrEouXermeNHD lg5gIAtRjYa208mRi3nL5cTw9+Zb7xQgW+cGhHFFG3x3/VrWfWZKEhCP2mgEkpB1 O7rXw/Yz9X//blTdAGG/bzib5rrHKfcPaxlVBLJ3xlrHxnNfjphckQGZE1Rf4IEO vtCbFEkTSlipetlSSzK8xxMGx6z5RmVqWa1YrwHffH1YExcc691exaScmdPfQoXm amAKmbQ36OyjeelTpU91PpDcP8NKqNWDcQ9iysx2w5Oj3yiCbbUQIeryMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcx5rymrBZ9pIi9XYjjmb7CSSfLMB8GA1UdIwQY MBaAFJJQaaXXZNolWVTbLunRJD3ha5EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTkt YTliOGRlNjExYTk2LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTktYTliOGRlNjExYTk2 LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+/SfCH4 6vOhHKHr6BOZmpF4a4TzxbbgPwnXEXYhaZRpzxVrUvuCpbtsbjHBKZXR6PrRL2bM jYES8mY4leQqNxpyqZ9YybYI+dDWSZR9zRgNJQFELvlqb9gKwwbl3KlMpjq7egfN aN0X84jb6Rt6NZEAxzhHmU5a5/DG/IHuSVaBzthhCFmvL38PFJSoimlpciuZABfp I45CS6rb+i0marLoPrJYAKL4q3R9UOILGtPJ0xU8OaznHqmlBTGTM22JjLcrb7ax Enqm6VfvrojwMJXRL5a9F8QcPbhU8FTkzvl0+c4JB6+ErluuIGm5awvKYp6BcSD0 u79khOaWFQAqgg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:57 2025 by rpki-client