This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft File: k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json) Hash identifier: cvWtDRKw5876KlkXbhCHTlnM9rhOUTroRkpQTV2Ava0= Subject key identifier: 3F:C3:07:B1:11:8F:16:5E:9A:06:D1:6C:42:A0:A2:3B:E7:4F:61:09 Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40 Certificate issuer: /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640 Certificate serial: 019B40C8EA27593DEA4F13A6117CDAAA7985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft Manifest number: 09C3 Signing time: Sun 21 Dec 2025 12:01:07 +0000 Manifest this update: Sun 21 Dec 2025 12:01:07 +0000 Manifest next update: Mon 22 Dec 2025 12:01:07 +0000 Files and hashes: 1: ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa (hash: 9a5DYYLxOiKU0/Lz5D5+BYks2R+Do2ZNkpv4HeNltqY=) 2: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: j3Bxz/Pi49xfuwWkO7NP+tKgGq+5So5vLW4PN/87EC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ea:27:59:3d:ea:4f:13:a6:11:7c:da:aa:79:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640 Validity Not Before: Dec 21 12:01:07 2025 GMT Not After : Dec 22 12:01:07 2025 GMT Subject: CN=3fc307b1118f165e9a06d16c42a0a23be74f6109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:85:f6:3c:3a:09:9b:e1:cb:e4:8a:21:b5: 69:19:6e:4a:a1:1c:c1:b4:e0:14:b8:39:fa:ee:45: c0:eb:09:7a:29:8b:77:42:a9:8e:68:3b:bb:89:ee: 72:2b:1e:3f:93:99:66:46:21:b4:bf:af:30:91:76: 96:40:fd:b1:b5:af:1c:90:c6:2e:45:18:9e:c7:c2: b4:71:41:cf:57:fa:9d:60:62:c2:16:11:78:dd:43: bf:85:8d:77:fa:e8:d9:44:ab:22:3e:6c:ae:00:8f: cd:bd:04:b7:2e:03:71:3b:9b:1e:6b:9f:c8:8d:e5: e4:27:91:cb:b5:a0:80:39:7c:57:6c:87:47:c0:18: 1e:7f:01:69:12:1c:36:6e:2d:3e:5f:f4:7c:82:91: de:7f:e5:45:da:ce:0a:fc:7d:99:32:c3:f2:07:63: 75:6b:b8:5b:3e:ee:0e:55:f6:04:81:38:c1:bd:a1: fa:68:14:81:10:44:0b:cf:3f:41:77:d5:44:91:b9: 9a:8c:a4:93:a9:7b:0e:ad:2c:ed:9f:42:62:f4:35: d7:12:00:f7:6e:78:a0:ac:28:5a:0a:2c:63:05:ea: e4:e0:ad:ea:f4:d4:2a:98:f0:a1:1f:f6:25:14:81: 7e:86:e2:69:59:0e:46:4f:0a:b2:76:f3:6d:7b:f8: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C3:07:B1:11:8F:16:5E:9A:06:D1:6C:42:A0:A2:3B:E7:4F:61:09 X509v3 Authority Key Identifier: keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:67:32:8c:c3:8d:45:b7:b2:56:67:f2:dc:dc:d8:83:38:26: df:a2:61:e5:d3:4c:72:3d:fe:37:83:3d:e7:8f:08:80:95:87: ca:57:0a:ab:b0:c5:b4:92:2f:09:a8:c9:f6:7e:15:14:15:80: 59:54:99:c2:cb:51:38:0a:dd:ab:6d:66:e6:6d:4b:6a:53:38: 48:75:16:94:32:89:6c:45:ee:cd:68:dd:69:f3:66:03:53:2b: d1:cf:33:c7:dc:03:d9:49:c4:1a:ca:b4:f5:57:07:6d:9e:14: 51:c4:fa:92:9c:f5:38:9f:c0:f7:3e:a8:d8:02:87:28:c9:05: 26:52:ac:5e:d8:47:80:e4:5c:c1:c3:02:0b:a8:d2:f8:92:2a: af:92:d7:ba:b0:b5:04:3b:d6:e6:dd:8d:72:d2:fe:63:3f:78: ec:56:b8:dd:1e:b1:7f:90:aa:2c:ef:23:61:f9:03:a3:01:4f: 84:aa:55:10:0d:e3:69:5f:63:86:4e:8c:ba:55:08:9b:d1:29: 5b:cf:17:b2:3f:14:86:2a:50:85:d9:b3:6d:43:ee:f9:99:38: 45:c6:ae:27:7d:34:4c:9e:6b:30:16:4d:f8:88:eb:0b:84:b4: 71:f8:b4:22:a2:0c:de:ee:36:1b:f3:b0:f0:7a:53:2b:c0:1b: ff:b5:d9:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyOonWT3qTxOmEXzaqnmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZmQyNmQzYTBiNjkzYTAyOWJjNjJkY2I5ZGRhOTUxOWU0 Nzc2NDAwHhcNMjUxMjIxMTIwMTA3WhcNMjUxMjIyMTIwMTA3WjAzMTEwLwYDVQQD EygzZmMzMDdiMTExOGYxNjVlOWEwNmQxNmM0MmEwYTIzYmU3NGY2MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFyF9jw6CZvhy+SKIbVpGW5KoRzB tOAUuDn67kXA6wl6KYt3QqmOaDu7ie5yKx4/k5lmRiG0v68wkXaWQP2xta8ckMYu RRiex8K0cUHPV/qdYGLCFhF43UO/hY13+ujZRKsiPmyuAI/NvQS3LgNxO5sea5/I jeXkJ5HLtaCAOXxXbIdHwBgefwFpEhw2bi0+X/R8gpHef+VF2s4K/H2ZMsPyB2N1 a7hbPu4OVfYEgTjBvaH6aBSBEEQLzz9Bd9VEkbmajKSTqXsOrSztn0Ji9DXXEgD3 bnigrChaCixjBerk4K3q9NQqmPChH/YlFIF+huJpWQ5GTwqydvNte/jLOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/DB7ERjxZemgbRbEKgojvnT2EJMB8GA1UdIwQY MBaAFJP9JtOgtpOgKbxi3LndqVGeR3ZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYt NzNiYjkzMDBmNTc1LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYtNzNiYjkzMDBmNTc1 LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmcyjMON RbeyVmfy3NzYgzgm36Jh5dNMcj3+N4M9548IgJWHylcKq7DFtJIvCajJ9n4VFBWA WVSZwstROArdq21m5m1LalM4SHUWlDKJbEXuzWjdafNmA1Mr0c8zx9wD2UnEGsq0 9VcHbZ4UUcT6kpz1OJ/A9z6o2AKHKMkFJlKsXthHgORcwcMCC6jS+JIqr5LXurC1 BDvW5t2NctL+Yz947Fa43R6xf5CqLO8jYfkDowFPhKpVEA3jaV9jhk6MulUIm9Ep W88Xsj8UhipQhdmzbUPu+Zk4RcauJ300TJ5rMBZN+IjrC4S0cfi0IqIM3u42G/Ow 8HpTK8Ab/7XZXA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:11:42 2025 by rpki-client