This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json) Hash identifier: QpavA7XRGeKJ3ZCu8gO3NalfQ4UuI74zif2rzK0FIjs= Subject key identifier: E0:3F:42:0F:B3:BC:0B:CC:B8:CF:B7:38:F3:E1:58:71:D0:59:5E:64 Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed Certificate serial: 019B67D6CBD52420EC3EBE8F1EBB9D383094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft Manifest number: 067C Signing time: Mon 29 Dec 2025 02:01:28 +0000 Manifest this update: Mon 29 Dec 2025 02:01:28 +0000 Manifest next update: Tue 30 Dec 2025 02:01:28 +0000 Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=) 2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: LZtKIg2s0sZIT9hcpR8uIP/47HyLeA6JXLnKlXGOqLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d6:cb:d5:24:20:ec:3e:be:8f:1e:bb:9d:38:30:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed Validity Not Before: Dec 29 02:01:28 2025 GMT Not After : Dec 30 02:01:28 2025 GMT Subject: CN=e03f420fb3bc0bccb8cfb738f3e15871d0595e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:ca:58:28:c3:a4:f5:9b:44:fd:ee:e6:ec: 8c:2d:1e:ff:26:60:c2:8a:48:b7:fa:59:4b:54:b1: 6e:84:28:b8:45:a5:89:56:b6:21:13:3a:6f:45:eb: d6:23:64:6e:06:c6:b3:59:d7:fc:9e:b9:58:ec:25: a1:f0:1c:68:f0:5b:e9:e0:73:5c:21:61:49:85:ec: ce:3c:50:c9:eb:ce:c9:a1:d1:05:42:dc:66:4d:61: c2:0f:09:90:b2:dd:10:d6:05:da:a0:f2:f9:2c:f7: c8:c2:c9:f7:c4:7e:cd:5d:83:99:29:c4:c4:35:5f: dc:4f:88:a7:18:da:b5:44:de:4c:42:ca:3a:21:db: e4:90:4f:cc:f0:1b:17:3d:7d:48:8c:c1:59:c3:d5: 86:81:75:f6:87:47:8d:c6:08:dd:5a:93:40:f7:4c: bd:e3:e1:f8:b9:53:a5:b7:bf:0e:b9:e7:c2:a5:8e: c4:9c:31:e2:e7:0e:92:b3:1d:8e:cb:4e:54:45:bd: 48:98:b0:6b:5e:48:b7:67:0a:2f:30:2e:5a:8e:8c: 8e:1f:64:17:6a:8c:b3:da:ab:0d:52:bc:36:e2:2b: 48:44:97:3d:cd:39:a7:bd:c9:c2:72:26:c8:44:94: 0b:37:45:df:45:2c:82:b2:6a:0e:6b:9b:a7:d0:30: 04:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3F:42:0F:B3:BC:0B:CC:B8:CF:B7:38:F3:E1:58:71:D0:59:5E:64 X509v3 Authority Key Identifier: keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:75:f9:63:ff:09:6b:cd:7e:43:45:90:34:52:28:f8:74:3c: ee:57:a1:1d:cc:f5:eb:c8:d2:6f:5a:d6:8c:9c:79:33:23:6d: fb:34:f1:12:9b:c5:60:9e:ea:25:03:a6:48:33:6d:bd:18:34: f0:83:4c:3a:4a:be:95:12:e6:56:71:e8:af:c3:7b:33:fc:1b: bf:09:ae:12:8b:e5:96:73:4e:35:00:0f:e8:a8:0d:d7:13:46: b2:e3:de:fa:12:a6:b5:75:3f:7f:2c:1a:aa:15:aa:44:97:7c: 13:5c:1f:dd:1b:3a:19:a3:38:05:b8:dc:af:93:5f:c1:d0:0e: ee:52:38:6c:af:28:b5:00:6b:c2:d8:d1:7c:38:23:be:86:bb: 52:8f:81:67:10:82:ad:70:95:17:ea:47:eb:22:f4:92:9f:31: cd:0e:e8:f3:c1:36:ec:5b:74:d6:cd:0a:3a:df:fe:15:45:3e: d7:fa:36:e1:21:c1:18:70:b5:e3:8e:7f:a4:89:b2:6a:ad:04: de:4a:45:29:bd:53:65:fb:98:a0:58:2f:a7:f6:ef:e5:99:75: 53:d0:9f:74:62:ad:84:d2:6e:59:6e:5b:85:af:ff:36:02:92: 19:46:d5:a0:48:4e:54:10:3d:77:f8:8f:00:69:7d:34:12:53: d5:6c:2c:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1svVJCDsPr6PHrudODCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZGM3NWU2MWU0ODNmMGQ0NzkyMjFmM2NhNzVmYzcyMjA5 NmE3ZWQwHhcNMjUxMjI5MDIwMTI4WhcNMjUxMjMwMDIwMTI4WjAzMTEwLwYDVQQD EyhlMDNmNDIwZmIzYmMwYmNjYjhjZmI3MzhmM2UxNTg3MWQwNTk1ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvDKWCjDpPWbRP3u5uyMLR7/JmDC iki3+llLVLFuhCi4RaWJVrYhEzpvRevWI2RuBsazWdf8nrlY7CWh8Bxo8Fvp4HNc IWFJhezOPFDJ687JodEFQtxmTWHCDwmQst0Q1gXaoPL5LPfIwsn3xH7NXYOZKcTE NV/cT4inGNq1RN5MQso6IdvkkE/M8BsXPX1IjMFZw9WGgXX2h0eNxgjdWpNA90y9 4+H4uVOlt78OuefCpY7EnDHi5w6Ssx2Oy05URb1ImLBrXki3ZwovMC5ajoyOH2QX aoyz2qsNUrw24itIRJc9zTmnvcnCcibIRJQLN0XfRSyCsmoOa5un0DAETQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA/Qg+zvAvMuM+3OPPhWHHQWV5kMB8GA1UdIwQY MBaAFJPcdeYeSD8NR5Ih88p1/HIglqftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2Ut MzM4OTc1ODI5ZThiLzEvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2UtMzM4OTc1ODI5ZThi LzEvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnX5Y/8J a81+Q0WQNFIo+HQ87lehHcz168jSb1rWjJx5MyNt+zTxEpvFYJ7qJQOmSDNtvRg0 8INMOkq+lRLmVnHor8N7M/wbvwmuEovllnNONQAP6KgN1xNGsuPe+hKmtXU/fywa qhWqRJd8E1wf3Rs6GaM4Bbjcr5NfwdAO7lI4bK8otQBrwtjRfDgjvoa7Uo+BZxCC rXCVF+pH6yL0kp8xzQ7o88E27Ft01s0KOt/+FUU+1/o24SHBGHC1445/pImyaq0E 3kpFKb1TZfuYoFgvp/bv5Zl1U9CfdGKthNJuWW5bha//NgKSGUbVoEhOVBA9d/iP AGl9NBJT1WwsIw== -----END CERTIFICATE-----Generated at Mon Dec 29 05:23:10 2025 by rpki-client