This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json) Hash identifier: C6Rjg6MPYZQUry8sqfadk8lj/iXo0KLnlYI8927xaGc= Subject key identifier: 58:CD:C5:53:99:A4:60:3D:58:B6:8F:60:44:D1:3E:18:4B:8D:67:E1 Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Certificate serial: 019B3A222A8FE31FE4F6522AE97144CF5A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft Manifest number: 0E67 Signing time: Sat 20 Dec 2025 05:01:16 +0000 Manifest this update: Sat 20 Dec 2025 05:01:16 +0000 Manifest next update: Sun 21 Dec 2025 05:01:16 +0000 Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=) 2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: phku4IgzUTK7gWWlhf6AtbbEoI6JoRD974Y2oxwc6EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:2a:8f:e3:1f:e4:f6:52:2a:e9:71:44:cf:5a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Validity Not Before: Dec 20 05:01:16 2025 GMT Not After : Dec 21 05:01:16 2025 GMT Subject: CN=58cdc55399a4603d58b68f6044d13e184b8d67e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:d3:31:45:d9:fe:d1:5a:c8:ee:14:c7:51: 1b:56:24:df:4f:da:d8:58:d4:6b:c1:66:6a:2a:9c: 22:3a:db:60:ba:6a:a6:61:77:9b:67:1c:f2:b2:f5: 45:5a:15:d3:eb:b5:df:3f:e7:4c:b7:5c:24:f4:e8: c5:0e:c2:86:a2:6f:48:91:5b:64:65:ca:56:5b:84: 97:d7:9a:b4:39:92:ba:27:fd:7f:5a:8a:f6:95:72: f8:d0:3e:45:5e:77:99:35:3f:7e:26:79:dc:22:7f: 3e:74:de:c9:70:7c:d2:22:fb:56:ff:69:62:37:8d: 9b:e2:ab:f2:7d:06:9d:34:f7:a7:97:41:ee:e9:81: 38:90:f2:8b:5d:af:da:68:09:b7:89:04:c4:10:b9: 1e:8e:48:c8:c9:bc:c2:e3:69:7a:75:2c:a4:12:44: 49:2a:ec:e6:23:84:36:4e:62:0f:f7:3f:f5:63:42: c4:62:f6:37:31:ca:69:f1:4b:77:99:bf:62:95:0f: 44:1d:ec:52:91:25:d9:da:f4:13:d2:61:a6:c4:c0: 92:60:e7:b3:51:c6:e7:ea:dc:7a:88:be:c0:45:8f: ac:51:b1:28:bf:3e:15:7b:40:b8:91:a6:7a:6d:c7: e7:99:4e:56:43:80:58:f9:c5:de:56:ec:b7:5e:9c: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:C5:53:99:A4:60:3D:58:B6:8F:60:44:D1:3E:18:4B:8D:67:E1 X509v3 Authority Key Identifier: keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bd:2c:06:ba:7a:43:8b:1d:49:c3:0a:ab:e2:20:83:ae:7e: 68:88:59:27:8d:d0:47:a1:08:23:0d:8f:84:5b:b2:b6:03:d3: cd:0d:fe:43:87:d7:83:d0:64:8d:b6:83:e7:4a:1f:5b:08:24: 3c:e2:10:31:1c:3a:1a:ec:9e:1c:10:42:98:b1:dc:99:1c:2a: be:0d:f8:3e:5a:b3:12:cb:12:54:44:b5:6e:82:c4:2b:8c:39: b5:0b:ac:84:bc:65:21:f5:72:a0:c8:dd:29:43:bd:b2:ab:7c: 4a:03:8b:70:86:10:1f:fd:10:0f:c1:da:d8:15:28:4e:6d:ab: b1:44:93:1c:c2:a8:56:50:dc:8c:dd:2a:4f:97:cd:0a:46:e3: ed:e0:e1:b5:bb:cf:73:08:dd:07:7b:90:a2:72:fd:88:da:7d: d2:0e:a8:b1:b2:cb:fc:cb:e5:34:5b:4c:47:b5:fb:e4:a6:34: 0f:76:0c:81:87:4b:c8:bd:e1:3d:3e:1f:0e:cd:9c:c7:5f:b2: 68:1d:1b:11:51:d4:df:cc:f0:3c:ad:56:ef:9b:27:92:de:6c: 4e:55:ed:64:67:7e:9c:dc:96:f3:cb:7b:5d:77:be:2b:d8:33: e5:07:57:8d:58:a7:27:f2:ed:f4:14:5c:71:99:e8:99:b8:c8: 9c:c0:f0:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IiqP4x/k9lIq6XFEz1ptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjNmYzk2NzhjZTViMDI3MzUzOGM3OGIwYjk2YTEzZWIw ODYyZDkwHhcNMjUxMjIwMDUwMTE2WhcNMjUxMjIxMDUwMTE2WjAzMTEwLwYDVQQD Eyg1OGNkYzU1Mzk5YTQ2MDNkNThiNjhmNjA0NGQxM2UxODRiOGQ2N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ3TMUXZ/tFayO4Ux1EbViTfT9rY WNRrwWZqKpwiOttgumqmYXebZxzysvVFWhXT67XfP+dMt1wk9OjFDsKGom9IkVtk ZcpWW4SX15q0OZK6J/1/Wor2lXL40D5FXneZNT9+JnncIn8+dN7JcHzSIvtW/2li N42b4qvyfQadNPenl0Hu6YE4kPKLXa/aaAm3iQTEELkejkjIybzC42l6dSykEkRJ KuzmI4Q2TmIP9z/1Y0LEYvY3Mcpp8Ut3mb9ilQ9EHexSkSXZ2vQT0mGmxMCSYOez Ucbn6tx6iL7ARY+sUbEovz4Ve0C4kaZ6bcfnmU5WQ4BY+cXeVuy3XpwwRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjNxVOZpGA9WLaPYETRPhhLjWfhMB8GA1UdIwQY MBaAFJPz/JZ4zlsCc1OMeLC5ahPrCGLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYt YmEwZDNiMmQzNmUwLzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYtYmEwZDNiMmQzNmUw LzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS70sBrp6 Q4sdScMKq+Igg65+aIhZJ43QR6EIIw2PhFuytgPTzQ3+Q4fXg9BkjbaD50ofWwgk POIQMRw6GuyeHBBCmLHcmRwqvg34PlqzEssSVES1boLEK4w5tQushLxlIfVyoMjd KUO9sqt8SgOLcIYQH/0QD8Ha2BUoTm2rsUSTHMKoVlDcjN0qT5fNCkbj7eDhtbvP cwjdB3uQonL9iNp90g6osbLL/MvlNFtMR7X75KY0D3YMgYdLyL3hPT4fDs2cx1+y aB0bEVHU38zwPK1W75snkt5sTlXtZGd+nNyW88t7XXe+K9gz5QdXjVinJ/Lt9BRc cZnombjInMDw0g== -----END CERTIFICATE-----Generated at Sat Dec 20 10:00:47 2025 by rpki-client