This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json) Hash identifier: L358hsjp83Pr/7rpkkG1XnkxMkq2+vo3bDND6g5ayKg= Subject key identifier: F9:86:4B:B9:49:41:C6:C6:B1:0A:6A:BC:F5:6D:0F:0A:BF:6C:B9:9E Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9 Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9 Certificate serial: 019B3DC74B4A689750F34A8C56418FD00FB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft Manifest number: 0E5B Signing time: Sat 20 Dec 2025 22:00:29 +0000 Manifest this update: Sat 20 Dec 2025 22:00:29 +0000 Manifest next update: Sun 21 Dec 2025 22:00:29 +0000 Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: T5grx8sHt+T4mL1l+J/hrJt5a03GntJgNtNl5evaw0U=) 2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:4b:4a:68:97:50:f3:4a:8c:56:41:8f:d0:0f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9 Validity Not Before: Dec 20 22:00:29 2025 GMT Not After : Dec 21 22:00:29 2025 GMT Subject: CN=f9864bb94941c6c6b10a6abcf56d0f0abf6cb99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:f4:50:4e:1c:16:d4:45:1b:98:b4:23:76: 69:37:61:9f:96:ae:7f:c7:dc:f3:cb:19:3c:8d:6a: 95:61:11:5c:f5:59:6b:34:97:ea:5a:d9:86:2c:d3: d6:e2:4b:c3:58:e2:27:d9:db:51:7a:8b:78:ac:db: 91:e6:56:42:94:d4:ea:2c:0e:aa:c3:69:a8:5a:6f: 8f:2d:fc:79:37:ff:0d:1b:9e:4b:47:a2:75:c6:af: 9d:d7:52:90:2c:fb:db:c0:99:69:16:03:22:b2:55: 1d:e2:3c:77:70:5b:d0:c7:11:71:92:3f:b4:c4:2f: bc:56:1b:70:48:d4:b7:02:af:de:99:7c:0a:2a:cf: d7:f8:0b:17:45:98:ba:9d:9d:ea:f0:94:34:6b:10: 3c:80:df:2a:2d:c8:0d:37:c7:20:7e:70:98:85:2d: 52:36:9f:71:51:3e:51:b4:f5:2d:ac:43:d4:a6:f8: 85:0c:c2:1b:98:aa:06:11:be:09:67:e4:bb:58:02: 6f:ce:e6:9d:dc:99:3b:37:a2:8d:af:0e:85:57:32: c5:3a:68:7b:b5:6b:d6:73:91:fe:36:08:03:bb:40: 12:4a:f9:ca:22:ed:3f:15:8d:03:b0:ff:83:17:59: 03:27:55:a4:d2:0d:2e:5c:36:1a:c4:19:8b:5f:2a: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:86:4B:B9:49:41:C6:C6:B1:0A:6A:BC:F5:6D:0F:0A:BF:6C:B9:9E X509v3 Authority Key Identifier: keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5f:4c:ea:e4:e7:d0:bf:71:b7:7e:4b:79:e6:60:47:d3:db: fd:ac:5f:81:f0:29:c8:67:c1:c6:5c:95:70:87:89:f1:d9:26: eb:b7:f6:8f:c0:a5:49:65:c0:db:8f:96:3e:83:fd:3f:8c:3c: c9:0b:82:70:b6:86:f0:90:a0:59:8f:6b:22:da:61:9d:33:fb: 5a:3f:18:65:69:94:b8:57:29:fa:7a:59:10:35:0f:be:bf:ee: fd:e6:a5:8d:da:b9:70:a6:81:ce:25:b9:4e:24:86:2a:49:5b: 7b:54:29:24:cf:48:3a:11:96:eb:f0:2a:85:a1:1e:3d:99:c4: 3d:4f:30:38:8f:94:45:0e:4e:71:51:cc:88:8b:ff:5c:78:4c: 7e:b2:b6:a1:21:72:96:8f:cf:e1:d9:18:e3:ec:71:7b:5e:66: 22:3b:87:d5:ab:0b:b3:78:27:60:e4:f5:6c:d6:35:2e:bc:0f: 19:54:b8:ea:77:26:f8:e6:f2:f3:15:b9:81:ab:b5:be:28:88: 29:e9:9a:07:51:0e:58:52:51:6a:f6:52:fd:15:4f:7f:74:fd: cf:58:b1:fa:c3:41:fd:a3:0d:47:94:85:38:87:e2:ed:1f:46: 56:f8:cf:56:da:35:52:d1:2b:73:4b:15:6d:54:d7:18:42:89: 48:3b:b2:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x0tKaJdQ80qMVkGP0A+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzA2NjI4NTIwZjdkZGFjZWY3MjQzNmVmYTU0NjM1YzUy Y2ZkYzkwHhcNMjUxMjIwMjIwMDI5WhcNMjUxMjIxMjIwMDI5WjAzMTEwLwYDVQQD EyhmOTg2NGJiOTQ5NDFjNmM2YjEwYTZhYmNmNTZkMGYwYWJmNmNiOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHL0UE4cFtRFG5i0I3ZpN2Gflq5/ x9zzyxk8jWqVYRFc9VlrNJfqWtmGLNPW4kvDWOIn2dtReot4rNuR5lZClNTqLA6q w2moWm+PLfx5N/8NG55LR6J1xq+d11KQLPvbwJlpFgMislUd4jx3cFvQxxFxkj+0 xC+8VhtwSNS3Aq/emXwKKs/X+AsXRZi6nZ3q8JQ0axA8gN8qLcgNN8cgfnCYhS1S Np9xUT5RtPUtrEPUpviFDMIbmKoGEb4JZ+S7WAJvzuad3Jk7N6KNrw6FVzLFOmh7 tWvWc5H+NggDu0ASSvnKIu0/FY0DsP+DF1kDJ1Wk0g0uXDYaxBmLXyrnowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmGS7lJQcbGsQpqvPVtDwq/bLmeMB8GA1UdIwQY MBaAFNdwZihSD33azvckNu+lRjXFLP3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNCbUtGSVBmZHJPOXlRMjc2VkdOY1VzX2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zNzUyOWUtZDk3Ni00N2I1LWI2OTAt Mzg5ZDIxNGFmODMwLzEvMTNCbUtGSVBmZHJPOXlRMjc2VkdOY1VzX2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zNzUyOWUtZDk3Ni00N2I1LWI2OTAtMzg5ZDIxNGFmODMw LzEvMTNCbUtGSVBmZHJPOXlRMjc2VkdOY1VzX2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV9M6uTn 0L9xt35LeeZgR9Pb/axfgfApyGfBxlyVcIeJ8dkm67f2j8ClSWXA24+WPoP9P4w8 yQuCcLaG8JCgWY9rItphnTP7Wj8YZWmUuFcp+npZEDUPvr/u/ealjdq5cKaBziW5 TiSGKklbe1QpJM9IOhGW6/AqhaEePZnEPU8wOI+URQ5OcVHMiIv/XHhMfrK2oSFy lo/P4dkY4+xxe15mIjuH1asLs3gnYOT1bNY1LrwPGVS46ncm+Oby8xW5gau1viiI KemaB1EOWFJRavZS/RVPf3T9z1ix+sNB/aMNR5SFOIfi7R9GVvjPVto1UtErc0sV bVTXGEKJSDuyAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:32 2025 by rpki-client