This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json) Hash identifier: QPxizJ2MQ5RkVmW51XASv0CTQ5RV/tbdh+vuCDBEcyo= Subject key identifier: 90:12:4C:25:02:A3:43:15:F9:EA:43:4A:91:70:43:68:17:3B:F4:DA Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59 Certificate serial: 019B3C10841D92416D7FAAF9BFA0226DD05F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft Manifest number: 0699 Signing time: Sat 20 Dec 2025 14:01:13 +0000 Manifest this update: Sat 20 Dec 2025 14:01:13 +0000 Manifest next update: Sun 21 Dec 2025 14:01:13 +0000 Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=) 2: cBmPaf2oGu0_AMcsbNoq5Hph_V4.roa (hash: 9oqeFK2Tn1tYym9cWphxU57OSdAjV+OS6dUAD4eSIdI=) 3: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: EMeg6rRkrq2C34hl4wj5HUtE8phA7QM7WvDv5yM2TD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:84:1d:92:41:6d:7f:aa:f9:bf:a0:22:6d:d0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59 Validity Not Before: Dec 20 14:01:13 2025 GMT Not After : Dec 21 14:01:13 2025 GMT Subject: CN=90124c2502a34315f9ea434a91704368173bf4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:96:40:83:10:a4:96:8b:4c:04:25:ea:0f: 3c:4c:f3:72:5c:c0:b7:f3:fc:ad:fd:d1:ab:be:a7: a0:9c:f0:c3:98:fd:ff:9f:e3:50:9a:82:53:d7:c8: ca:1f:a6:f8:03:26:9b:96:fe:ee:d3:da:f7:39:69: 09:31:d7:ae:b0:79:76:18:73:c9:bc:b6:a5:e8:cc: 24:bb:4d:af:2c:71:20:9a:86:4e:a1:6f:5b:1e:44: e5:92:32:e2:0e:c0:2e:93:e0:29:db:db:71:31:dd: de:d0:8d:d3:e1:4d:55:25:40:c4:47:d4:06:56:1a: 2b:88:fd:39:bb:02:ce:66:92:ed:97:ff:a1:fb:23: 59:c1:f4:e9:c3:eb:1a:1e:2b:6c:04:1c:ac:70:d3: 6d:39:59:47:ad:87:55:e6:5c:6b:7b:06:13:80:55: 6d:0d:b5:9c:f6:38:48:45:14:a3:6d:ef:00:a5:b5: 08:e8:ea:05:b8:02:75:89:f2:70:eb:8e:d4:af:81: e7:4d:45:c8:3a:63:f1:4a:a5:30:9f:ae:0a:13:6d: 3f:95:58:8c:e8:c5:13:41:61:9c:fa:ee:d2:08:f2: f5:18:8d:47:00:e4:cf:bd:b4:ec:00:bc:5c:98:8f: e5:8f:c9:e0:b6:d5:7b:a8:6f:09:78:33:85:3e:a8: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:12:4C:25:02:A3:43:15:F9:EA:43:4A:91:70:43:68:17:3B:F4:DA X509v3 Authority Key Identifier: keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:04:70:02:88:54:ae:7a:21:01:91:ec:05:e3:9d:e5:49:f3: ef:08:bd:2b:fb:fb:80:21:e1:bd:0c:d9:94:4c:db:b1:4b:77: ce:98:11:10:e6:14:e7:06:01:13:b3:81:e9:69:fe:3f:0d:49: d0:f3:17:64:98:0d:96:a2:67:66:6b:97:3b:59:83:74:72:38: 19:d4:3c:41:36:ad:f5:b7:9d:11:02:09:28:7f:c5:4c:de:ce: ba:23:b9:a6:94:ac:64:07:19:1d:c6:d6:c8:70:83:79:12:c6: 68:ee:2f:ed:92:bc:4c:2e:5d:94:e0:0f:1b:45:96:3a:93:99: c6:09:ca:03:6e:7d:09:09:74:9f:83:df:85:d8:99:31:f4:7c: 65:7c:83:17:72:d2:cf:57:52:9f:89:66:2a:33:17:38:8e:30: 16:58:b9:c7:80:5e:8e:4f:30:8c:c7:2e:09:31:d0:98:61:ce: 08:ec:cc:d1:33:39:43:34:15:02:32:0a:ee:18:da:48:79:6f: 2c:f7:d4:0f:82:e7:ed:a2:44:19:e5:dd:79:37:e4:07:5c:a1: c8:b2:a3:9e:27:5b:0c:9d:ec:fa:f1:fc:96:82:82:0f:d2:dd: 86:3f:72:90:37:15:6d:ad:37:b3:cc:43:a4:c3:24:26:18:b6: c7:e7:b0:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIQdkkFtf6r5v6AibdBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAxMDc3ZGI4MGQ1MmIxNmQ0OWY4NjNhNjFlYTQxYTEy NGJjNTkwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD Eyg5MDEyNGMyNTAyYTM0MzE1ZjllYTQzNGE5MTcwNDM2ODE3M2JmNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MyWQIMQpJaLTAQl6g88TPNyXMC3 8/yt/dGrvqegnPDDmP3/n+NQmoJT18jKH6b4Ayablv7u09r3OWkJMdeusHl2GHPJ vLal6Mwku02vLHEgmoZOoW9bHkTlkjLiDsAuk+Ap29txMd3e0I3T4U1VJUDER9QG VhoriP05uwLOZpLtl/+h+yNZwfTpw+saHitsBByscNNtOVlHrYdV5lxrewYTgFVt DbWc9jhIRRSjbe8ApbUI6OoFuAJ1ifJw647Ur4HnTUXIOmPxSqUwn64KE20/lViM 6MUTQWGc+u7SCPL1GI1HAOTPvbTsALxcmI/lj8ngttV7qG8JeDOFPqiWkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJASTCUCo0MV+epDSpFwQ2gXO/TaMB8GA1UdIwQY MBaAFJNQEHfbgNUrFtSfhjph6kGhJLxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUt NzlkMWEyN2NkOTkzLzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUtNzlkMWEyN2NkOTkz LzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQRwAohU rnohAZHsBeOd5Unz7wi9K/v7gCHhvQzZlEzbsUt3zpgREOYU5wYBE7OB6Wn+Pw1J 0PMXZJgNlqJnZmuXO1mDdHI4GdQ8QTat9bedEQIJKH/FTN7OuiO5ppSsZAcZHcbW yHCDeRLGaO4v7ZK8TC5dlOAPG0WWOpOZxgnKA259CQl0n4PfhdiZMfR8ZXyDF3LS z1dSn4lmKjMXOI4wFli5x4Bejk8wjMcuCTHQmGHOCOzM0TM5QzQVAjIK7hjaSHlv LPfUD4Ln7aJEGeXdeTfkB1yhyLKjnidbDJ3s+vH8loKCD9Ldhj9ykDcVba03s8xD pMMkJhi2x+ewIA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:01:23 2025 by rpki-client