This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json) Hash identifier: Ji20ZOjxEvZtE/9BgCYNWkCMERcFsl9wtji/KpwPxXo= Subject key identifier: 81:7B:6D:A2:F5:D6:25:C5:76:B3:38:E7:1D:72:95:D4:39:FA:5B:B0 Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52 Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352 Certificate serial: 019B51BD353D47BF184497F0D3DB04D5A172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 19:01:52 +0000 Manifest this update: Wed 24 Dec 2025 19:01:52 +0000 Manifest next update: Thu 25 Dec 2025 19:01:52 +0000 Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: gfbZxEasMEMZDOaa6W4vt6cliyDgaCT9IBx5JNxioog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:35:3d:47:bf:18:44:97:f0:d3:db:04:d5:a1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352 Validity Not Before: Dec 24 19:01:52 2025 GMT Not After : Dec 25 19:01:52 2025 GMT Subject: CN=817b6da2f5d625c576b338e71d7295d439fa5bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:77:f2:1a:6f:ce:8c:31:eb:88:e7:2b:56: c7:eb:74:a8:d8:17:09:ca:37:7e:35:0c:1e:c2:ab: 5b:ea:40:24:bc:5d:00:a9:7c:87:9c:63:f1:ed:35: 73:43:1a:21:f8:bb:f3:7b:ae:a7:73:1d:e7:2b:e2: c7:58:77:f9:31:8c:2a:81:92:75:8e:4a:59:ff:98: dd:79:ae:c9:1d:e4:ea:06:e7:4c:b4:a6:d1:7b:5e: 1a:ab:a8:1a:f5:2c:c0:9b:b4:97:27:ee:ad:09:71: a5:1f:b7:fa:20:06:a9:9b:d8:2e:cb:a0:2e:70:09: 7c:71:f8:ae:fd:41:f6:1a:cb:43:56:08:d9:af:1f: e6:95:5a:9b:c2:28:ca:b4:5b:34:a4:54:a3:3c:8c: 39:d3:4d:03:32:fc:fa:f9:d6:b2:80:dc:49:c1:88: 0c:e2:3f:4a:3d:10:a1:62:62:f2:ab:e6:44:a1:aa: a1:be:2b:36:f9:5c:36:dd:25:d2:1e:e3:67:40:e2: 73:f2:2b:8c:54:45:b6:3f:84:29:f2:d1:9b:2e:97: 9d:0a:32:25:4f:db:13:59:f1:63:95:f9:05:2a:27: 1b:f2:b5:58:bd:31:52:16:cf:0a:fe:8e:35:a3:96: 7a:c3:f2:1c:f2:bc:20:1d:6d:56:22:27:a1:33:cd: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7B:6D:A2:F5:D6:25:C5:76:B3:38:E7:1D:72:95:D4:39:FA:5B:B0 X509v3 Authority Key Identifier: keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ac:6b:e1:3f:f2:5b:b4:8a:d2:be:9e:bb:fc:8d:0f:4a:8d: b0:a9:da:fd:a1:3e:9c:86:4d:1e:16:00:7d:7a:11:ad:80:f4: 1d:f7:bf:cc:27:f7:ba:90:de:fb:7f:5c:aa:e9:08:e9:37:5d: ba:15:f0:e1:a1:78:9e:b1:00:f2:11:90:e4:96:75:6b:88:f7: 0d:be:75:27:ce:1e:bd:c8:68:e1:80:f0:8e:01:3b:4b:1e:4f: 39:54:fa:68:94:7a:74:bb:bb:dd:4d:c5:85:c9:f0:54:66:2d: f4:4c:69:a0:f9:97:2d:55:1c:07:84:8c:4d:a4:73:63:4f:f2: 1a:7e:b4:39:0b:0e:e1:41:bb:11:8c:d9:10:49:04:56:f6:ae: 69:01:08:40:b6:15:07:da:24:6b:41:6e:e8:96:8a:3d:f0:8d: 03:fd:30:a3:99:4e:94:bc:92:bb:ff:78:91:a8:c2:64:9f:94: a1:1c:d5:54:fd:be:9a:81:26:03:bd:50:ce:0e:4f:c0:5b:80: 9b:dd:47:04:57:59:f9:69:4f:f1:27:c4:80:0a:3b:54:d2:f8: de:85:31:4c:ee:4e:cd:6b:08:9c:07:7c:83:55:02:a0:38:ab: ee:b0:b2:b7:03:86:31:92:14:eb:36:8b:d7:1a:1b:4b:08:c1: 0d:88:16:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvTU9R78YRJfw09sE1aFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZmE3ZTAwOGVjNmIwMDIxMDNhMWJkMWVkNjk2YjE3NmY4 N2IzNTIwHhcNMjUxMjI0MTkwMTUyWhcNMjUxMjI1MTkwMTUyWjAzMTEwLwYDVQQD Eyg4MTdiNmRhMmY1ZDYyNWM1NzZiMzM4ZTcxZDcyOTVkNDM5ZmE1YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8J38hpvzowx64jnK1bH63So2BcJ yjd+NQwewqtb6kAkvF0AqXyHnGPx7TVzQxoh+Lvze66ncx3nK+LHWHf5MYwqgZJ1 jkpZ/5jdea7JHeTqBudMtKbRe14aq6ga9SzAm7SXJ+6tCXGlH7f6IAapm9guy6Au cAl8cfiu/UH2GstDVgjZrx/mlVqbwijKtFs0pFSjPIw5000DMvz6+daygNxJwYgM 4j9KPRChYmLyq+ZEoaqhvis2+Vw23SXSHuNnQOJz8iuMVEW2P4Qp8tGbLpedCjIl T9sTWfFjlfkFKicb8rVYvTFSFs8K/o41o5Z6w/Ic8rwgHW1WIiehM80drQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF7baL11iXFdrM45x1yldQ5+luwMB8GA1UdIwQY MBaAFJP6fgCOxrACEDob0e1paxdvh7NSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEt ZjdlOTFhYzBmYWQ5LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEtZjdlOTFhYzBmYWQ5 LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaxr4T/y W7SK0r6eu/yND0qNsKna/aE+nIZNHhYAfXoRrYD0Hfe/zCf3upDe+39cqukI6Tdd uhXw4aF4nrEA8hGQ5JZ1a4j3Db51J84evcho4YDwjgE7Sx5POVT6aJR6dLu73U3F hcnwVGYt9ExpoPmXLVUcB4SMTaRzY0/yGn60OQsO4UG7EYzZEEkEVvauaQEIQLYV B9oka0Fu6JaKPfCNA/0wo5lOlLySu/94kajCZJ+UoRzVVP2+moEmA71Qzg5PwFuA m91HBFdZ+WlP8SfEgAo7VNL43oUxTO5OzWsInAd8g1UCoDir7rCytwOGMZIU6zaL 1xobSwjBDYgWyw== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:16 2025 by rpki-client