This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json) Hash identifier: 0VWEjIWYYZ6p9VYgyNDyAyIW8HVIzG8v+/9Tp1nisZQ= Subject key identifier: C2:78:41:3A:C6:AB:EA:23:F5:FB:E1:53:99:D1:2A:C3:DD:AD:C6:BA Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7 Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7 Certificate serial: 019B522A61824B9D889C6B0D3173DF551A52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft Manifest number: 11CA Signing time: Wed 24 Dec 2025 21:01:07 +0000 Manifest this update: Wed 24 Dec 2025 21:01:07 +0000 Manifest next update: Thu 25 Dec 2025 21:01:07 +0000 Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: aV70awA5+/PUOlsqBBsaE/kaQ0+jo0cnEmJ8Bw0kH2E=) 2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:61:82:4b:9d:88:9c:6b:0d:31:73:df:55:1a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7 Validity Not Before: Dec 24 21:01:07 2025 GMT Not After : Dec 25 21:01:07 2025 GMT Subject: CN=c278413ac6abea23f5fbe15399d12ac3ddadc6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8a:2f:49:56:4d:65:22:4f:83:7f:e0:d6:0a: 55:15:d5:7b:ac:00:75:0d:cd:4b:2b:3d:d4:74:bf: 21:1b:de:6d:69:ec:eb:37:c5:86:a7:93:84:17:a6: f6:4e:fd:8b:15:29:96:03:ff:f2:5a:c8:40:4e:10: ab:34:a1:c8:d7:0e:59:45:8b:43:97:2c:0f:56:72: 08:d6:8c:eb:ff:21:4d:72:e0:35:89:a4:8b:1e:65: 25:cd:d6:c9:ef:0a:00:27:cc:3f:e5:bb:0e:3a:2c: de:08:f3:d7:bd:52:bd:30:b0:8c:4d:a2:65:d7:db: 6f:b5:e3:b3:a5:4f:ba:65:86:10:d8:c0:57:80:7c: b1:a0:ce:db:8f:6f:e2:51:45:68:71:ca:8f:1f:0c: 5b:a8:6a:02:40:d3:fd:f2:d7:98:e5:da:52:fb:28: e3:9b:d8:1f:cb:2b:f9:c1:b5:2e:b7:71:b5:ee:3f: b0:d0:5c:20:44:28:cf:7a:64:19:68:9d:50:2f:b8: 7d:b4:80:84:c9:00:95:34:ae:25:58:11:86:49:56: 19:8a:3d:a3:50:fa:34:43:6b:87:eb:7e:c0:0c:51: bc:91:71:b3:d3:3a:4a:88:00:2f:2c:cc:25:e9:05: 8e:5b:59:e0:b1:41:1c:73:a8:b5:1b:3b:83:d9:36: 31:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:41:3A:C6:AB:EA:23:F5:FB:E1:53:99:D1:2A:C3:DD:AD:C6:BA X509v3 Authority Key Identifier: keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8b:d7:d1:56:3a:4d:52:2b:92:7c:1f:79:6f:ac:26:bc:a8: f6:c0:d3:7a:fe:4f:b0:7c:c4:34:ed:19:00:c7:74:ba:26:ef: 64:88:f8:dd:b8:ab:7e:d1:88:b4:b6:95:8c:65:e1:7a:eb:83: 03:59:e3:fa:d8:a9:cd:78:0e:69:2e:5c:5c:af:aa:b0:5a:fd: b5:6b:1d:5e:0d:33:c6:7d:13:86:46:0d:38:1d:47:be:65:3d: f7:22:9d:93:9e:0b:17:d6:d8:d1:54:c9:f3:60:8b:09:fa:f3: 6b:5b:3d:f2:94:22:1a:a9:2a:0c:80:38:a9:fc:92:0e:fc:7a: e5:6f:f7:b4:e5:5d:08:37:af:2f:25:cc:55:33:ba:4d:dd:08: a4:cb:c1:23:38:68:6b:31:9d:ff:8c:b4:b5:2d:31:a1:ca:3e: a3:48:93:98:b5:07:3b:86:66:17:b4:ee:a9:0e:de:c4:37:a9: 22:db:fa:59:f0:28:df:8b:de:c1:c1:ac:a6:00:e7:b6:c6:5f: 73:6d:35:6c:ad:49:a3:98:05:81:4b:31:b3:f9:0d:e2:ed:68: a3:36:8b:eb:b0:97:39:51:50:af:64:99:90:b3:8d:92:15:83: cf:85:8c:21:81:b3:66:e6:a0:25:ce:b3:a8:11:72:fe:5d:ce: 2f:46:f2:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKmGCS52InGsNMXPfVRpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGU4YzYzOWFlYWYxMzJhMmZjMzNmY2U2ZTgxNDM0ZGZj YTY0YjcwHhcNMjUxMjI0MjEwMTA3WhcNMjUxMjI1MjEwMTA3WjAzMTEwLwYDVQQD EyhjMjc4NDEzYWM2YWJlYTIzZjVmYmUxNTM5OWQxMmFjM2RkYWRjNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54ovSVZNZSJPg3/g1gpVFdV7rAB1 Dc1LKz3UdL8hG95taezrN8WGp5OEF6b2Tv2LFSmWA//yWshAThCrNKHI1w5ZRYtD lywPVnII1ozr/yFNcuA1iaSLHmUlzdbJ7woAJ8w/5bsOOizeCPPXvVK9MLCMTaJl 19tvteOzpU+6ZYYQ2MBXgHyxoM7bj2/iUUVoccqPHwxbqGoCQNP98teY5dpS+yjj m9gfyyv5wbUut3G17j+w0FwgRCjPemQZaJ1QL7h9tICEyQCVNK4lWBGGSVYZij2j UPo0Q2uH637ADFG8kXGz0zpKiAAvLMwl6QWOW1ngsUEcc6i1GzuD2TYxIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ4QTrGq+oj9fvhU5nRKsPdrca6MB8GA1UdIwQY MBaAFK5OjGOa6vEyovwz/OboFDTfymS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MWQ0ZTgtZmE2ZS00NTA1LWI1N2Yt YzdjZTJlNDQ1MGE3LzEvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85MWQ0ZTgtZmE2ZS00NTA1LWI1N2YtYzdjZTJlNDQ1MGE3 LzEvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOovX0VY6 TVIrknwfeW+sJryo9sDTev5PsHzENO0ZAMd0uibvZIj43birftGItLaVjGXheuuD A1nj+tipzXgOaS5cXK+qsFr9tWsdXg0zxn0ThkYNOB1HvmU99yKdk54LF9bY0VTJ 82CLCfrza1s98pQiGqkqDIA4qfySDvx65W/3tOVdCDevLyXMVTO6Td0IpMvBIzho azGd/4y0tS0xoco+o0iTmLUHO4ZmF7TuqQ7exDepItv6WfAo34vewcGspgDntsZf c201bK1Jo5gFgUsxs/kN4u1oozaL67CXOVFQr2SZkLONkhWDz4WMIYGzZuagJc6z qBFy/l3OL0byAA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:25:55 2025 by rpki-client