This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json) Hash identifier: DG44HLqgIQqxxLZfW3KyTsar0/OEc8cpB6W/Mg1kM+0= Subject key identifier: 63:7C:6E:A1:97:5B:0F:D3:48:5B:53:EA:F5:7B:89:89:9B:58:A3:58 Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99 Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799 Certificate serial: 019B59ACE9B9DFE3C2D8FB2D44BBC724AAF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft Manifest number: 0619 Signing time: Fri 26 Dec 2025 08:01:02 +0000 Manifest this update: Fri 26 Dec 2025 08:01:02 +0000 Manifest next update: Sat 27 Dec 2025 08:01:02 +0000 Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: GekaLy2fK2omc6qEKmiTLF8/ww19c51hp2AwytF06SU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e9:b9:df:e3:c2:d8:fb:2d:44:bb:c7:24:aa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799 Validity Not Before: Dec 26 08:01:02 2025 GMT Not After : Dec 27 08:01:02 2025 GMT Subject: CN=637c6ea1975b0fd3485b53eaf57b89899b58a358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:ec:62:0d:a5:04:b4:34:45:7f:34:50:05: 54:9d:cd:f4:be:53:76:28:b9:60:a9:8d:5b:72:ad: 07:c5:b3:ba:11:ae:99:18:96:85:7a:80:1e:60:ea: 82:bd:95:64:1c:81:98:d2:7c:be:20:09:8f:0b:45: 30:db:8b:04:cd:d7:b6:68:56:fb:a2:10:d2:d0:53: 2f:c7:31:9e:fe:8d:04:c3:3e:1d:94:8e:18:e0:04: 73:d3:b7:a5:f9:a4:6a:76:4b:e8:f3:b6:de:c6:47: 37:99:58:b0:6c:41:36:56:95:be:af:37:29:23:44: a8:19:70:fc:20:0e:30:69:62:52:08:b9:6d:bc:0b: d9:bf:fd:d4:2f:e4:f9:07:a9:0c:d6:15:51:d6:a2: 78:d9:24:dc:ec:28:da:6d:f6:05:11:27:ab:84:b3: e9:53:0a:51:c6:a7:45:88:e0:9b:7f:f1:1e:69:2c: e3:ed:dc:91:21:ef:b9:a8:cf:2e:2d:92:a3:cc:ce: 61:5a:70:69:32:11:f9:c1:39:65:d1:6e:5d:f7:dc: 3d:ba:a0:f4:64:90:28:1b:f4:cf:7b:7a:9d:6f:be: d8:15:44:ab:34:4a:be:00:a7:38:37:41:84:5d:38: 13:88:3c:ea:01:a5:3a:2b:80:83:c8:9a:ff:a7:8f: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7C:6E:A1:97:5B:0F:D3:48:5B:53:EA:F5:7B:89:89:9B:58:A3:58 X509v3 Authority Key Identifier: keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:66:a3:8f:69:6e:5d:7a:fd:e5:cd:b9:5b:ec:3c:e2:d6:12: c8:6e:28:57:66:e1:0a:66:5c:6c:66:ae:d9:c0:a4:a2:67:7f: 40:1d:be:d6:13:7a:dd:e9:13:23:a9:dc:68:cc:36:c3:a3:38: f5:f8:de:e3:a1:a3:40:b8:0c:a7:55:6a:80:ba:e3:7d:a6:ba: 6e:e9:94:61:4e:78:52:72:44:52:c3:03:c9:d2:12:fc:54:c9: 18:09:26:b8:0a:f8:07:c9:b8:41:16:70:a8:18:e3:d2:91:b7: 4d:9b:c6:ce:f9:80:e3:79:a3:0c:99:b0:c1:f6:55:21:b7:66: e1:fc:c1:e5:b2:2c:9b:65:27:33:b0:e2:71:a0:99:ef:d5:f8: 87:00:3d:2d:6e:a9:13:15:09:1f:9d:9f:bf:09:f4:77:89:cf: c4:58:af:55:62:14:db:21:16:1b:01:d1:cd:a2:49:5e:a5:55: fc:35:b7:28:9a:7d:d6:09:aa:fe:81:f1:da:58:06:6a:d9:72: de:b4:5b:af:75:9b:56:25:81:1a:46:f7:4a:c5:5d:c1:6a:31: 1e:8b:5a:ea:04:f4:2d:0f:37:4b:19:ee:1c:b8:42:c0:a9:41: 31:17:1c:b7:8d:d2:5d:d3:92:d2:fa:ee:e4:03:f5:eb:9c:17: 0e:59:e7:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOm53+PC2PstRLvHJKrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmY2ZTVjYTVkYjQzNzc5ZTczYWNlN2NlMTZlY2UwZWU3 OTQ3OTkwHhcNMjUxMjI2MDgwMTAyWhcNMjUxMjI3MDgwMTAyWjAzMTEwLwYDVQQD Eyg2MzdjNmVhMTk3NWIwZmQzNDg1YjUzZWFmNTdiODk4OTliNThhMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv7sYg2lBLQ0RX80UAVUnc30vlN2 KLlgqY1bcq0HxbO6Ea6ZGJaFeoAeYOqCvZVkHIGY0ny+IAmPC0Uw24sEzde2aFb7 ohDS0FMvxzGe/o0Ewz4dlI4Y4ARz07el+aRqdkvo87bexkc3mViwbEE2VpW+rzcp I0SoGXD8IA4waWJSCLltvAvZv/3UL+T5B6kM1hVR1qJ42STc7CjabfYFESerhLPp UwpRxqdFiOCbf/EeaSzj7dyRIe+5qM8uLZKjzM5hWnBpMhH5wTll0W5d99w9uqD0 ZJAoG/TPe3qdb77YFUSrNEq+AKc4N0GEXTgTiDzqAaU6K4CDyJr/p4+yRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN8bqGXWw/TSFtT6vV7iYmbWKNYMB8GA1UdIwQY MBaAFCpvblyl20N3nnOs584W7ODueUeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGE2MTEtZjZmNC00MGY3LTg2Mjgt NzJlOTllZTQ3NjZkLzEvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMGE2MTEtZjZmNC00MGY3LTg2MjgtNzJlOTllZTQ3NjZk LzEvS205dVhLWGJRM2VlYzZ6bnpoYnM0TzU1UjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmajj2lu XXr95c25W+w84tYSyG4oV2bhCmZcbGau2cCkomd/QB2+1hN63ekTI6ncaMw2w6M4 9fje46GjQLgMp1VqgLrjfaa6bumUYU54UnJEUsMDydIS/FTJGAkmuAr4B8m4QRZw qBjj0pG3TZvGzvmA43mjDJmwwfZVIbdm4fzB5bIsm2UnM7DicaCZ79X4hwA9LW6p ExUJH52fvwn0d4nPxFivVWIU2yEWGwHRzaJJXqVV/DW3KJp91gmq/oHx2lgGatly 3rRbr3WbViWBGkb3SsVdwWoxHota6gT0LQ83SxnuHLhCwKlBMRcct43SXdOS0vru 5AP165wXDlnnUw== -----END CERTIFICATE-----Generated at Fri Dec 26 09:30:49 2025 by rpki-client