This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json) Hash identifier: 5jMj84VPg92DM0HYZTpPpBbogsHNZe2wHFYHMFPDGh4= Subject key identifier: 9A:39:64:B2:1E:77:C4:42:0C:65:7D:9A:E4:A7:8D:56:E4:12:3D:87 Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a Certificate serial: 019B3AFD320A88CCD13830659D4C2785E463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft Manifest number: 11EC Signing time: Sat 20 Dec 2025 09:00:30 +0000 Manifest this update: Sat 20 Dec 2025 09:00:30 +0000 Manifest next update: Sun 21 Dec 2025 09:00:30 +0000 Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=) 2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: p9dhUlPES/edOVb8UGLzyhYZp9lr22m+eoh4PF1frhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:32:0a:88:cc:d1:38:30:65:9d:4c:27:85:e4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a Validity Not Before: Dec 20 09:00:30 2025 GMT Not After : Dec 21 09:00:30 2025 GMT Subject: CN=9a3964b21e77c4420c657d9ae4a78d56e4123d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:c9:bc:a5:bf:5d:04:02:4e:6a:f0:dd:40: b7:9f:4e:77:59:6b:ea:b3:0f:d7:c7:a6:dd:26:35: 8b:ac:20:0b:44:ed:cc:d4:26:03:16:52:cf:cd:72: 70:ca:e6:ae:11:ad:b6:ef:ea:c1:6b:4e:ab:bd:dc: 11:c0:55:b1:82:be:bd:22:c8:64:08:fb:26:63:73: 70:84:75:51:17:a4:cc:66:b8:34:33:93:0d:b6:64: 9f:5a:7c:40:c6:15:7b:06:dd:79:f5:04:06:80:e9: 50:5d:bc:4d:77:9a:13:2d:81:bc:c9:a1:36:c7:5f: ca:43:9b:60:0e:ea:85:6b:a1:4a:0a:bc:bb:ea:87: 5d:f5:c7:45:a5:fc:01:fa:b0:db:2d:69:79:c0:e5: f6:40:e7:d5:7f:1b:b8:8a:1b:e3:e6:0b:e0:83:96: 62:7e:dd:12:dd:85:a1:09:fe:1d:a9:fb:ed:ac:45: 5d:b7:c7:15:d9:a0:be:fb:47:c3:79:77:df:2e:5c: 45:a4:a0:3d:c0:4e:a5:a5:8e:b2:4e:e1:46:7e:7c: 53:6b:95:17:5b:4f:0c:68:e9:d3:8c:ed:bf:a7:5f: 97:9e:80:cf:8d:82:33:51:34:40:31:27:b9:c0:d9: 32:86:61:62:be:3c:2f:af:f7:e1:ab:fa:52:14:e0: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:39:64:B2:1E:77:C4:42:0C:65:7D:9A:E4:A7:8D:56:E4:12:3D:87 X509v3 Authority Key Identifier: keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e5:b7:ca:42:bb:5c:3f:97:31:0d:7f:5f:bd:69:c0:f0:0f: 0d:89:94:17:c9:68:22:94:c8:f6:05:e0:ef:e4:dd:7b:1c:e7: 62:b4:23:8d:99:87:ad:7e:0a:b2:a6:ef:41:aa:e1:6e:c6:4d: f0:67:81:7a:7b:3c:a7:e9:a1:1a:7c:6b:28:77:87:53:d5:3d: 88:de:f4:2d:62:15:55:c5:e5:09:30:d5:1e:25:84:31:66:60: 6f:5d:fe:bd:9c:86:c7:8c:bc:dd:7e:1a:dd:a6:8d:1d:fd:83: b8:5c:fc:2e:04:5a:bf:ac:ea:f9:cf:17:f2:fd:16:e3:34:02: c3:57:33:2d:fd:18:9b:19:b3:d5:00:55:b8:79:fd:c4:bf:1c: fc:d3:fa:18:2f:2b:eb:2d:b6:48:0a:14:3b:dc:77:81:b4:50: 1e:8e:b0:04:29:9a:15:2e:b8:de:ff:6d:dc:fc:de:d9:20:e1: 81:af:0c:9f:71:df:49:03:29:33:a1:0e:e4:e5:37:d7:77:34: aa:fa:84:39:ae:d9:48:ec:46:41:9f:9a:56:c9:0c:de:d2:a4: 8d:fd:7c:bc:a3:11:17:c6:bd:31:72:89:6f:bb:6b:94:78:a7: b6:78:81:a8:d8:c9:b9:9b:ce:dc:95:56:30:8a:88:32:d3:ef: 58:83:fd:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/TIKiMzRODBlnUwnheRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZmU4YTk1ZTU1MjlkNzhlNzIwNDdkNGUzNWQxYTdlOWFk NWMxMWEwHhcNMjUxMjIwMDkwMDMwWhcNMjUxMjIxMDkwMDMwWjAzMTEwLwYDVQQD Eyg5YTM5NjRiMjFlNzdjNDQyMGM2NTdkOWFlNGE3OGQ1NmU0MTIzZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aXJvKW/XQQCTmrw3UC3n053WWvq sw/Xx6bdJjWLrCALRO3M1CYDFlLPzXJwyuauEa227+rBa06rvdwRwFWxgr69Ishk CPsmY3NwhHVRF6TMZrg0M5MNtmSfWnxAxhV7Bt159QQGgOlQXbxNd5oTLYG8yaE2 x1/KQ5tgDuqFa6FKCry76odd9cdFpfwB+rDbLWl5wOX2QOfVfxu4ihvj5gvgg5Zi ft0S3YWhCf4dqfvtrEVdt8cV2aC++0fDeXffLlxFpKA9wE6lpY6yTuFGfnxTa5UX W08MaOnTjO2/p1+XnoDPjYIzUTRAMSe5wNkyhmFivjwvr/fhq/pSFOCRoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo5ZLIed8RCDGV9muSnjVbkEj2HMB8GA1UdIwQY MBaAFJP+ipXlUp145yBH1ONdGn6a1cEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAt ZmE3MDlhMjNhYzc0LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAtZmE3MDlhMjNhYzc0 LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuW3ykK7 XD+XMQ1/X71pwPAPDYmUF8loIpTI9gXg7+TdexznYrQjjZmHrX4KsqbvQarhbsZN 8GeBens8p+mhGnxrKHeHU9U9iN70LWIVVcXlCTDVHiWEMWZgb13+vZyGx4y83X4a 3aaNHf2DuFz8LgRav6zq+c8X8v0W4zQCw1czLf0Ymxmz1QBVuHn9xL8c/NP6GC8r 6y22SAoUO9x3gbRQHo6wBCmaFS643v9t3Pze2SDhga8Mn3HfSQMpM6EO5OU313c0 qvqEOa7ZSOxGQZ+aVskM3tKkjf18vKMRF8a9MXKJb7trlHintniBqNjJuZvO3JVW MIqIMtPvWIP9UA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:58:23 2025 by rpki-client