This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json) Hash identifier: t79v1JnYYqee92OXmjnVn5giKVKX6bzd57IOY/Ahsm0= Subject key identifier: 2A:5E:A6:C4:F1:A0:4E:B1:C2:E0:12:DD:BC:96:9C:91:32:59:BD:E2 Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b Certificate serial: 019B3BD9219ACB2FBF475AFFD7532102B84D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft Manifest number: 09ED Signing time: Sat 20 Dec 2025 13:00:44 +0000 Manifest this update: Sat 20 Dec 2025 13:00:44 +0000 Manifest next update: Sun 21 Dec 2025 13:00:44 +0000 Files and hashes: 1: eUO5ySVwcP9_G0v6iAlEgACbaIE.roa (hash: iPv7iNvhmBCQA31XIl1TxzIvDTe0R7e3zG8RhS2DPPs=) 2: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: AD9y8X37UuLNvQcTkTX229i+qSGhEDmHOPkJS7YmbV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:21:9a:cb:2f:bf:47:5a:ff:d7:53:21:02:b8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b Validity Not Before: Dec 20 13:00:44 2025 GMT Not After : Dec 21 13:00:44 2025 GMT Subject: CN=2a5ea6c4f1a04eb1c2e012ddbc969c913259bde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:c9:0c:91:3d:d6:bd:33:7d:b2:55:d8:5a: a9:ff:e5:ea:a7:a9:93:43:8d:b6:ec:e8:ac:8f:29: 84:21:55:86:5e:2c:c2:ca:19:52:ff:71:81:2d:9d: a0:7f:19:5c:07:b2:c9:59:1f:15:58:12:99:e6:7d: 86:bc:66:ad:74:7b:ef:36:a9:d6:17:18:1b:16:7a: 5b:7d:0e:c0:7f:05:0e:0c:d6:be:d7:d4:56:5b:28: 32:61:dc:75:3b:cd:2a:76:26:fd:c0:60:e8:bc:2b: 12:fd:0e:9c:f2:7a:65:b8:df:d0:de:43:a2:50:c7: 91:91:c1:97:4b:db:2f:28:f9:46:b4:6e:86:e8:4d: 4c:96:61:90:be:7d:4d:7d:33:22:54:4c:e6:c3:65: 27:2d:04:85:63:63:6b:5f:ff:56:34:7e:63:1a:e7: e7:fe:cd:36:9b:ff:71:89:65:bb:f4:4f:fb:1b:a0: ab:c6:94:ca:3b:0f:c2:0e:d8:a9:3e:c3:3c:54:fd: 26:f2:0b:69:86:d0:cd:d4:8b:4d:13:46:83:c1:d2: 27:1e:d1:d2:c2:71:61:b4:b9:b6:01:73:c1:a6:f2: 9f:a9:f7:9b:63:22:aa:dc:b4:d0:5d:c1:c5:c3:98: 76:12:a2:09:ef:24:d4:78:48:35:37:02:48:3a:dd: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5E:A6:C4:F1:A0:4E:B1:C2:E0:12:DD:BC:96:9C:91:32:59:BD:E2 X509v3 Authority Key Identifier: keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:da:9d:fe:8b:a3:51:85:94:f8:f2:7a:b9:de:b5:9b:6a:c4: ca:e2:0c:04:43:e7:e9:06:af:3e:a5:d3:54:a5:18:a3:41:cf: be:1c:fd:d2:2b:57:05:2c:af:74:7f:32:b8:5a:7b:54:f9:20: 47:01:38:8b:01:08:c0:7c:44:49:9b:98:a4:21:07:b0:bf:9b: d7:ba:23:81:0c:d3:05:d0:e3:2b:0b:6a:4d:ff:49:68:17:50: d9:49:5e:8b:42:01:01:3b:76:07:15:56:f8:f9:1f:ec:fc:88: 93:2d:1f:a3:71:22:ce:cf:ca:49:92:da:53:bf:d7:28:ce:5e: 7b:c6:05:af:32:ad:fd:1e:84:34:07:7d:39:99:5d:71:97:cc: 83:00:83:49:42:46:9a:c7:75:e2:88:7d:18:b4:e5:51:5c:2c: 3e:02:24:06:80:2c:95:7a:47:82:f5:6b:89:4d:91:03:a6:38: f9:83:ad:0a:71:84:ce:d4:62:46:e0:1d:af:89:79:bc:73:63: 05:b1:f0:18:cf:9d:8c:95:0a:6a:26:28:80:36:70:3f:62:26: ff:6c:46:16:dc:2e:26:59:4c:6b:47:e1:c6:6c:f2:90:a0:25: e7:06:dd:3c:01:06:d4:ee:da:c5:b0:25:63:88:43:fa:22:7d: f0:90:90:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72SGayy+/R1r/11MhArhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTk1OWMyNWRiYmMzNjdjYWE4OTgyNWU4YmZmNWI0YjRm MTFjOWIwHhcNMjUxMjIwMTMwMDQ0WhcNMjUxMjIxMTMwMDQ0WjAzMTEwLwYDVQQD EygyYTVlYTZjNGYxYTA0ZWIxYzJlMDEyZGRiYzk2OWM5MTMyNTliZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC7JDJE91r0zfbJV2Fqp/+Xqp6mT Q4227OisjymEIVWGXizCyhlS/3GBLZ2gfxlcB7LJWR8VWBKZ5n2GvGatdHvvNqnW FxgbFnpbfQ7AfwUODNa+19RWWygyYdx1O80qdib9wGDovCsS/Q6c8npluN/Q3kOi UMeRkcGXS9svKPlGtG6G6E1MlmGQvn1NfTMiVEzmw2UnLQSFY2NrX/9WNH5jGufn /s02m/9xiWW79E/7G6CrxpTKOw/CDtipPsM8VP0m8gtphtDN1ItNE0aDwdInHtHS wnFhtLm2AXPBpvKfqfebYyKq3LTQXcHFw5h2EqIJ7yTUeEg1NwJIOt0CcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpepsTxoE6xwuAS3byWnJEyWb3iMB8GA1UdIwQY MBaAFJOpWcJdu8NnyqiYJei/9bS08RybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZsWndsMjd3MmZLcUpnbDZMXzF0TFR4SEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYTQ2ZWUtZjhkOS00NGRhLTk5ODIt MDNmNWViMTQ4Njg4LzEvazZsWndsMjd3MmZLcUpnbDZMXzF0TFR4SEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kYTQ2ZWUtZjhkOS00NGRhLTk5ODItMDNmNWViMTQ4Njg4 LzEvazZsWndsMjd3MmZLcUpnbDZMXzF0TFR4SEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtqd/ouj UYWU+PJ6ud61m2rEyuIMBEPn6QavPqXTVKUYo0HPvhz90itXBSyvdH8yuFp7VPkg RwE4iwEIwHxESZuYpCEHsL+b17ojgQzTBdDjKwtqTf9JaBdQ2Ulei0IBATt2BxVW +Pkf7PyIky0fo3Eizs/KSZLaU7/XKM5ee8YFrzKt/R6ENAd9OZldcZfMgwCDSUJG msd14oh9GLTlUVwsPgIkBoAslXpHgvVriU2RA6Y4+YOtCnGEztRiRuAdr4l5vHNj BbHwGM+djJUKaiYogDZwP2Im/2xGFtwuJllMa0fhxmzykKAl5wbdPAEG1O7axbAl Y4hD+iJ98JCQ9A== -----END CERTIFICATE-----Generated at Sat Dec 20 20:27:37 2025 by rpki-client