This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json) Hash identifier: hZhl8HP2Ke+C8974oABZtmEgCVCy7ukzsVBGSW5FNWM= Subject key identifier: 87:D6:94:C5:73:EC:0F:E1:B2:B4:F8:81:E7:5D:60:19:32:FF:2E:DF Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc Certificate serial: 019B3EA36A9EDBFAA9091CC9064785DD143B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft Manifest number: 06C1 Signing time: Sun 21 Dec 2025 02:00:55 +0000 Manifest this update: Sun 21 Dec 2025 02:00:55 +0000 Manifest next update: Mon 22 Dec 2025 02:00:55 +0000 Files and hashes: 1: 3mhUHTDwirkASDro6wKMo1llreY.roa (hash: QT1aX+pCloLwOlM8acjw8SNDGfs+bhgEOJUGdyQm/5A=) 2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: 0HEauBThZecigO8AcScCsKZ4KRa3oScxikW1ikTnH3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:6a:9e:db:fa:a9:09:1c:c9:06:47:85:dd:14:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc Validity Not Before: Dec 21 02:00:55 2025 GMT Not After : Dec 22 02:00:55 2025 GMT Subject: CN=87d694c573ec0fe1b2b4f881e75d601932ff2edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d2:5f:27:1e:64:b4:97:87:0b:ce:d1:a7:75: 0a:68:8f:91:60:43:32:4f:63:3f:5a:d3:de:32:28: f2:87:9d:87:d4:24:75:15:94:2f:74:25:78:5f:65: 6f:4a:74:3c:05:82:fc:78:78:b3:38:8f:f5:43:16: 84:fc:74:ac:b6:f4:de:da:a8:b9:0d:dd:37:4d:6d: 18:45:0c:9a:11:41:cc:59:5d:9f:86:0f:9e:36:f5: ce:da:e9:38:d2:ef:b0:b8:63:c9:e6:2c:af:2f:40: 27:a0:ad:ed:15:5c:92:cc:9c:c8:70:b0:53:49:8c: f7:01:7d:4b:fc:c9:56:18:91:e0:09:96:b9:ff:e4: 27:e5:3e:f3:29:53:d9:00:7d:5b:c0:1d:9e:a7:57: 71:2f:91:a6:2c:0e:77:0e:8a:34:6e:d6:4b:12:9c: d1:30:e2:c9:23:b6:70:c0:70:28:a5:5d:ca:df:3c: 4e:29:ab:60:c0:f7:16:5b:9e:54:e4:06:f7:be:94: 4e:63:55:f1:57:c0:09:06:0d:e3:9e:4b:d6:18:53: 33:0e:aa:71:12:12:a3:74:f5:3f:56:f0:a7:91:db: b0:b9:b5:7e:30:e5:b5:72:66:06:27:e2:53:59:31: 98:ab:34:58:ab:d3:f2:1f:fc:05:cd:c0:80:35:76: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:94:C5:73:EC:0F:E1:B2:B4:F8:81:E7:5D:60:19:32:FF:2E:DF X509v3 Authority Key Identifier: keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6e:99:14:8d:97:b1:58:17:2e:40:e6:63:f1:15:20:bd:a0: 13:82:cb:c2:d0:59:2d:e4:19:a0:c6:13:48:47:0c:f8:4c:88: b9:3f:8b:43:2c:9d:3a:cb:b3:e5:9a:7c:93:2e:5b:9d:99:4b: 53:c7:37:fb:53:dc:2a:b4:cc:e2:62:b2:58:25:53:77:c1:fe: bc:05:6a:71:e4:42:b6:62:51:55:d9:70:1b:7d:ea:a6:80:12: e0:3c:fc:79:e1:9d:fc:91:96:55:e3:1c:a7:0c:3c:d7:00:fe: 98:33:2b:15:dd:38:7e:e0:56:0d:aa:8f:f5:f5:f2:f4:b9:40: 6c:ab:c9:a4:27:65:7b:d8:ca:a0:4a:3e:2f:30:c7:c2:67:e5: b2:f7:1c:d8:5f:9b:87:1d:5c:c6:b8:92:ab:5e:1a:53:b4:ef: 41:b2:31:8e:40:89:06:fe:92:c2:da:cd:de:bc:5e:de:3c:11: a5:3d:17:60:e7:bd:b3:d4:11:a8:c5:ed:bd:5e:77:24:e8:40: 44:2a:6a:58:84:81:f9:84:33:11:79:0c:ec:e1:90:ab:0a:fc: 49:96:e2:fa:71:19:41:69:e7:8c:1c:56:36:54:8c:a9:e7:30: a4:65:ce:6c:e2:32:5d:d8:ab:60:53:4e:7d:36:ed:10:86:ab: 67:bc:4b:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o2qe2/qpCRzJBkeF3RQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTlmOTA4MzBmZTIyNmM5MDhlYWRkYjY3YjViOTA5NmM1 ZTkxYmMwHhcNMjUxMjIxMDIwMDU1WhcNMjUxMjIyMDIwMDU1WjAzMTEwLwYDVQQD Eyg4N2Q2OTRjNTczZWMwZmUxYjJiNGY4ODFlNzVkNjAxOTMyZmYyZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99JfJx5ktJeHC87Rp3UKaI+RYEMy T2M/WtPeMijyh52H1CR1FZQvdCV4X2VvSnQ8BYL8eHizOI/1QxaE/HSstvTe2qi5 Dd03TW0YRQyaEUHMWV2fhg+eNvXO2uk40u+wuGPJ5iyvL0AnoK3tFVySzJzIcLBT SYz3AX1L/MlWGJHgCZa5/+Qn5T7zKVPZAH1bwB2ep1dxL5GmLA53Doo0btZLEpzR MOLJI7ZwwHAopV3K3zxOKatgwPcWW55U5Ab3vpROY1XxV8AJBg3jnkvWGFMzDqpx EhKjdPU/VvCnkduwubV+MOW1cmYGJ+JTWTGYqzRYq9PyH/wFzcCANXY9awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfWlMVz7A/hsrT4geddYBky/y7fMB8GA1UdIwQY MBaAFJOp+Qgw/iJskI6t22e1uQlsXpG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQt MDY4MDZhMGJkMTgxLzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQtMDY4MDZhMGJkMTgx LzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ26ZFI2X sVgXLkDmY/EVIL2gE4LLwtBZLeQZoMYTSEcM+EyIuT+LQyydOsuz5Zp8ky5bnZlL U8c3+1PcKrTM4mKyWCVTd8H+vAVqceRCtmJRVdlwG33qpoAS4Dz8eeGd/JGWVeMc pww81wD+mDMrFd04fuBWDaqP9fXy9LlAbKvJpCdle9jKoEo+LzDHwmflsvcc2F+b hx1cxriSq14aU7TvQbIxjkCJBv6SwtrN3rxe3jwRpT0XYOe9s9QRqMXtvV53JOhA RCpqWISB+YQzEXkM7OGQqwr8SZbi+nEZQWnnjBxWNlSMqecwpGXObOIyXdirYFNO fTbtEIarZ7xLbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:59 2025 by rpki-client