This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json) Hash identifier: weqAZ+ReWmuDiYag0j0P5qrYzADNuNxw3i5YPtBJJR0= Subject key identifier: 51:68:68:10:0F:A0:6D:4F:A8:6A:3F:E5:82:2D:BE:66:12:BD:02:3C Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b Certificate serial: 019B470239113DB8293145BEFA438FC8F2C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft Manifest number: 179F Signing time: Mon 22 Dec 2025 17:01:26 +0000 Manifest this update: Mon 22 Dec 2025 17:01:26 +0000 Manifest next update: Tue 23 Dec 2025 17:01:26 +0000 Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: nZT6zjA8oQGNADjKRzpN9mpkxOK0kMU/OvOGfgwPOIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:39:11:3d:b8:29:31:45:be:fa:43:8f:c8:f2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b Validity Not Before: Dec 22 17:01:26 2025 GMT Not After : Dec 23 17:01:26 2025 GMT Subject: CN=516868100fa06d4fa86a3fe5822dbe6612bd023c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:6b:ec:1f:b5:0d:aa:5e:59:ed:00:9e:9e: 97:87:81:6c:89:f3:07:ea:2a:ea:34:34:87:4a:42: 1b:7e:41:79:53:34:83:8a:d7:8b:42:0a:28:66:e1: d3:8a:da:04:11:0f:2b:a2:7f:2c:70:45:3d:bd:49: f8:b6:dc:3c:bf:11:a1:be:ac:e2:7b:7b:59:5c:af: 10:40:df:53:99:7c:aa:9f:cb:b6:c9:53:07:06:ac: a7:66:06:16:b4:4c:4d:60:5d:6f:7d:90:e8:f1:46: d0:23:c6:2a:de:6c:5a:3a:39:73:76:52:05:6a:86: 95:e0:3d:c6:dd:1b:57:b7:b5:d2:b1:5a:ab:81:3d: b0:ca:e3:2c:72:d6:5f:23:63:19:fd:26:6a:93:45: 26:ac:41:e9:00:e8:d4:e6:86:0e:6c:79:4d:a8:88: 68:29:1d:b8:9d:c0:53:cc:dd:c3:4c:60:5e:30:e1: aa:6e:94:10:dc:05:14:b2:86:ee:88:e8:5f:6f:83: 59:c9:32:35:dd:f1:4a:3a:c0:5f:64:f7:d1:f5:03: 28:26:0a:20:ef:0b:2b:45:76:49:c0:f3:3a:68:49: c9:1f:8c:f3:da:75:54:9a:a8:81:64:bd:0b:9d:30: 4c:b3:7e:28:22:5c:24:ef:58:8c:b5:ba:b5:19:db: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:68:10:0F:A0:6D:4F:A8:6A:3F:E5:82:2D:BE:66:12:BD:02:3C X509v3 Authority Key Identifier: keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:bd:2a:d7:6a:7d:24:26:bc:58:ef:20:75:dc:16:4a:27:f6: dd:3e:cf:91:6a:be:9f:00:0e:1e:6d:ee:ed:31:ff:dc:5a:ac: e6:10:31:d1:63:32:a8:d8:ad:a1:dd:95:f4:58:76:77:40:0e: 6f:28:ca:9b:1f:10:17:2a:d8:c2:27:42:e3:e8:47:4b:ff:79: f7:a6:5b:99:70:62:5d:b9:31:e6:30:3d:cb:0c:08:6c:1d:5f: 62:29:39:dd:7d:f5:6c:38:d4:ee:7a:8a:03:07:8a:31:3e:a3: ef:eb:2f:03:cc:c9:d9:2c:c6:8d:af:b5:62:91:86:af:ec:50: 7b:46:2f:e4:93:fb:f8:51:d1:79:dd:27:ed:ce:df:be:54:28: d5:59:ea:42:44:25:51:87:f5:69:28:66:fc:5b:c0:4d:f7:01: d6:52:ad:b8:a5:17:bc:9f:ae:fa:96:75:a1:1b:dd:15:4e:a6: b7:bf:de:1b:8c:f1:d7:47:e0:f4:b1:b4:b7:58:32:b9:ef:a4: 70:82:e0:8a:d6:d4:92:94:05:e6:8e:7d:4b:1d:45:81:db:72: 70:0a:d6:a7:f9:55:32:98:9e:7e:99:37:20:f5:69:68:ad:ae: 4f:e2:7a:f8:8e:71:97:53:9a:60:74:57:38:a6:97:a5:7a:05: 69:87:fd:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAjkRPbgpMUW++kOPyPLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTIyOWUyNjZiMjU1ODg5OWYzNTQ3ZWU2M2Q4NGVkNjU5 NDc2OGIwHhcNMjUxMjIyMTcwMTI2WhcNMjUxMjIzMTcwMTI2WjAzMTEwLwYDVQQD Eyg1MTY4NjgxMDBmYTA2ZDRmYTg2YTNmZTU4MjJkYmU2NjEyYmQwMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0epr7B+1DapeWe0Anp6Xh4FsifMH 6irqNDSHSkIbfkF5UzSDiteLQgooZuHTitoEEQ8ron8scEU9vUn4ttw8vxGhvqzi e3tZXK8QQN9TmXyqn8u2yVMHBqynZgYWtExNYF1vfZDo8UbQI8Yq3mxaOjlzdlIF aoaV4D3G3RtXt7XSsVqrgT2wyuMsctZfI2MZ/SZqk0UmrEHpAOjU5oYObHlNqIho KR24ncBTzN3DTGBeMOGqbpQQ3AUUsobuiOhfb4NZyTI13fFKOsBfZPfR9QMoJgog 7wsrRXZJwPM6aEnJH4zz2nVUmqiBZL0LnTBMs34oIlwk71iMtbq1GdtLSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFoaBAPoG1PqGo/5YItvmYSvQI8MB8GA1UdIwQY MBaAFJOiKeJmslWImfNUfuY9hO1llHaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYt NGQ3NzdjYWNkOWE0LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYtNGQ3NzdjYWNkOWE0 LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdb0q12p9 JCa8WO8gddwWSif23T7PkWq+nwAOHm3u7TH/3Fqs5hAx0WMyqNitod2V9Fh2d0AO byjKmx8QFyrYwidC4+hHS/9596ZbmXBiXbkx5jA9ywwIbB1fYik53X31bDjU7nqK AweKMT6j7+svA8zJ2SzGja+1YpGGr+xQe0Yv5JP7+FHRed0n7c7fvlQo1VnqQkQl UYf1aShm/FvATfcB1lKtuKUXvJ+u+pZ1oRvdFU6mt7/eG4zx10fg9LG0t1gyue+k cILgitbUkpQF5o59Sx1FgdtycArWp/lVMpiefpk3IPVpaK2uT+J6+I5xl1OaYHRX OKaXpXoFaYf96Q== -----END CERTIFICATE-----Generated at Mon Dec 22 18:54:58 2025 by rpki-client