This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json) Hash identifier: ZkQ90oWewiKDk7bQUdy6JIJffhYSZsOZIH7EbadEyr4= Subject key identifier: 89:FE:BB:CE:89:6C:AB:DF:90:AD:CB:FF:4E:F8:A3:89:1C:9D:6D:F0 Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Certificate serial: 019B3DC8197C92DD82C386B83FC67D0911AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft Manifest number: 1615 Signing time: Sat 20 Dec 2025 22:01:22 +0000 Manifest this update: Sat 20 Dec 2025 22:01:22 +0000 Manifest next update: Sun 21 Dec 2025 22:01:22 +0000 Files and hashes: 1: G8x1vVBRYsXmZPS43ryzlAToalk.roa (hash: zv3fUNIgcV4McKQ1WqNZ3h6XRcK9qRBMGJRh2r54rtQ=) 2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: prY6wMTQocIP0vADEjM0mdvSWhywrUuioJki2TOL2EE=) 3: SG-oYWBeZ8PdnxfhbLJBRMxInjk.roa (hash: IQmUUHJFzP7J5Wi5OG22cXQ7JSU97X0TL3RWD8DykE4=) 4: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (hash: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=) 5: ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa (hash: tYZ97cgI+SOXirQ9qolsOlp5bgffydesZkrQgwP6yTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:19:7c:92:dd:82:c3:86:b8:3f:c6:7d:09:11:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Validity Not Before: Dec 20 22:01:22 2025 GMT Not After : Dec 21 22:01:22 2025 GMT Subject: CN=89febbce896cabdf90adcbff4ef8a3891c9d6df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:81:e5:4d:b9:54:0e:27:33:c1:7a:fe:fc:d1: c3:fc:c3:4f:85:bf:b9:27:d4:db:77:6e:e4:f4:4f: 26:81:cd:d6:ba:aa:cd:51:e3:8a:0a:05:c6:ec:09: ac:70:60:51:2e:2d:fa:c9:57:77:18:0f:5d:56:8c: c5:3f:0b:19:a9:46:e6:d4:00:47:04:be:f2:f7:e4: 2d:93:74:e5:a4:e0:dd:08:61:64:b8:d3:4a:63:8d: 07:ea:96:1d:f3:e1:eb:c5:2f:52:3e:5d:91:90:e0: 05:79:78:75:25:e3:b0:1d:36:92:a7:97:a9:c6:85: 36:67:92:f9:9c:24:8c:91:3a:a9:9f:af:14:23:eb: b0:30:a5:99:cc:29:fb:40:72:f1:e0:d1:a2:67:01: 09:6d:86:4d:85:30:e9:b6:0e:12:8f:33:e4:1e:44: 6a:f4:6b:8b:28:62:ca:e3:62:b6:45:1c:df:b9:84: f3:81:51:8a:de:fb:ec:d7:0a:14:ae:21:1c:51:99: a7:dc:1b:d4:81:85:85:51:00:a7:89:13:c8:20:80: 20:df:af:ee:88:33:d1:13:6b:38:88:45:5c:2e:69: 19:6d:b1:74:1c:e8:c8:9c:ad:bc:5e:b0:c1:ef:88: fc:cd:0a:fe:0b:0b:12:f5:2f:18:b4:05:e4:e6:30: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:BB:CE:89:6C:AB:DF:90:AD:CB:FF:4E:F8:A3:89:1C:9D:6D:F0 X509v3 Authority Key Identifier: keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:be:d3:6c:35:ff:62:3f:d8:79:eb:3b:21:6d:cf:f6:7c:aa: 53:53:99:65:15:7c:f9:4f:30:1a:0f:f1:0a:f0:a0:f1:42:00: 0d:c1:ba:0b:02:cc:e8:e8:89:a8:f7:0a:ef:fa:84:c5:39:d7: 09:7a:f4:53:eb:25:17:c3:9d:8f:df:e0:29:3c:47:5f:b8:45: 0a:37:fe:41:4e:12:b3:73:99:8f:37:24:48:02:b8:ef:71:89: 23:7b:d4:35:0f:a4:9e:91:ae:16:e7:41:2e:a0:82:e1:6b:d0: 30:ef:13:90:da:1a:b4:5b:18:79:9d:31:98:aa:10:4c:20:5e: d2:88:e5:bc:3b:2a:ac:a3:b8:a6:c8:d1:f5:1c:e6:1b:70:49: 1e:94:2a:7e:a7:16:b1:97:fe:6b:e3:6d:63:73:1f:93:21:40: 05:d1:e4:92:33:80:f9:38:84:a8:19:11:aa:f9:ab:d8:85:09: 2d:42:08:11:de:22:5c:66:ef:1a:d7:c1:9a:c9:33:32:71:e6: 63:52:3d:8f:40:7a:5f:ec:0a:3b:30:be:96:8c:36:a2:19:22: 0f:ad:50:be:55:6e:65:fc:61:52:4e:bc:2e:ee:e8:27:21:85: ca:55:3e:58:9c:60:4e:71:ed:65:0c:cf:a3:b2:07:53:33:28: 42:34:78:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBl8kt2Cw4a4P8Z9CRGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2 YmU2NDIwHhcNMjUxMjIwMjIwMTIyWhcNMjUxMjIxMjIwMTIyWjAzMTEwLwYDVQQD Eyg4OWZlYmJjZTg5NmNhYmRmOTBhZGNiZmY0ZWY4YTM4OTFjOWQ2ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54HlTblUDiczwXr+/NHD/MNPhb+5 J9Tbd27k9E8mgc3WuqrNUeOKCgXG7AmscGBRLi36yVd3GA9dVozFPwsZqUbm1ABH BL7y9+Qtk3TlpODdCGFkuNNKY40H6pYd8+HrxS9SPl2RkOAFeXh1JeOwHTaSp5ep xoU2Z5L5nCSMkTqpn68UI+uwMKWZzCn7QHLx4NGiZwEJbYZNhTDptg4SjzPkHkRq 9GuLKGLK42K2RRzfuYTzgVGK3vvs1woUriEcUZmn3BvUgYWFUQCniRPIIIAg36/u iDPRE2s4iEVcLmkZbbF0HOjInK28XrDB74j8zQr+CwsS9S8YtAXk5jCYmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn+u86JbKvfkK3L/074o4kcnW3wMB8GA1UdIwQY MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt NTc4OWRlNDI0YTQyLzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb7TbDX/ Yj/Yees7IW3P9nyqU1OZZRV8+U8wGg/xCvCg8UIADcG6CwLM6OiJqPcK7/qExTnX CXr0U+slF8Odj9/gKTxHX7hFCjf+QU4Ss3OZjzckSAK473GJI3vUNQ+knpGuFudB LqCC4WvQMO8TkNoatFsYeZ0xmKoQTCBe0ojlvDsqrKO4psjR9RzmG3BJHpQqfqcW sZf+a+NtY3MfkyFABdHkkjOA+TiEqBkRqvmr2IUJLUIIEd4iXGbvGtfBmskzMnHm Y1I9j0B6X+wKOzC+low2ohkiD61QvlVuZfxhUk68Lu7oJyGFylU+WJxgTnHtZQzP o7IHUzMoQjR4GA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:13:48 2025 by rpki-client