This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json) Hash identifier: x5WuytMWTEeGI+2D/XJuQPdFE77DPc2yIUIFHH/HDDc= Subject key identifier: DF:9B:DB:76:79:C0:4D:9A:5A:2B:A6:E3:7A:BE:91:CE:0B:3B:0C:5C Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f Certificate serial: 019B3D599A8F6DF21DAE331CC983F9253BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft Manifest number: 16B6 Signing time: Sat 20 Dec 2025 20:00:40 +0000 Manifest this update: Sat 20 Dec 2025 20:00:40 +0000 Manifest next update: Sun 21 Dec 2025 20:00:40 +0000 Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=) 2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=) 3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: txRJTlirpZM+I7icdOBEVnh97CwoUYvHMyHqZZVP5Wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:9a:8f:6d:f2:1d:ae:33:1c:c9:83:f9:25:3b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f Validity Not Before: Dec 20 20:00:40 2025 GMT Not After : Dec 21 20:00:40 2025 GMT Subject: CN=df9bdb7679c04d9a5a2ba6e37abe91ce0b3b0c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:56:27:58:19:42:84:40:3e:e0:f4:b0:31: f5:9b:a8:af:59:af:61:da:52:90:f1:f0:1d:15:64: 63:2a:73:88:9c:ec:12:66:52:9f:25:bb:07:c5:a0: b1:ef:d9:3a:2f:48:50:24:8d:de:64:42:92:45:e1: bd:5f:2d:a7:5e:e8:77:17:26:9a:9e:d2:2a:02:45: ea:d3:47:b9:9a:e6:5b:30:9c:f8:82:32:96:3b:ab: 8b:c0:b2:7d:89:90:55:3b:11:eb:80:4f:e3:19:33: 47:c8:c1:8d:6f:b2:99:3c:9a:af:19:69:2b:46:9d: 01:bc:41:67:fb:ee:32:be:57:68:bf:41:1c:65:27: a3:88:7e:b4:2c:0e:26:04:63:eb:4e:0b:91:03:92: 32:ea:99:37:b4:a5:b7:61:6c:7c:7c:2f:b5:7a:2a: c4:fd:6e:47:ca:45:cd:f7:cd:45:a0:3a:6c:b2:97: 3b:7c:a0:b4:0a:21:7a:b1:15:ec:50:d4:70:65:c3: b2:b5:65:f8:4f:56:f2:e6:d0:52:23:3d:a2:0f:a2: 6a:57:b7:56:fc:34:1c:07:ea:49:83:54:11:ef:6f: 63:98:f8:e0:24:5a:6f:ee:a9:97:cd:80:52:a5:b1: 19:70:06:a7:ec:52:4d:4b:e0:31:a1:20:a1:8a:a5: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9B:DB:76:79:C0:4D:9A:5A:2B:A6:E3:7A:BE:91:CE:0B:3B:0C:5C X509v3 Authority Key Identifier: keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:03:83:b1:a6:16:d6:ac:1b:df:30:45:17:63:20:3d:bc:33: 27:df:f7:e6:e6:c9:8e:d4:d8:6f:80:62:40:fd:f1:1f:33:1f: a7:03:52:24:c6:76:b6:54:38:57:9e:25:72:94:56:cd:7d:7b: 3f:c2:f8:d7:b8:a4:9d:c2:71:17:de:73:8d:28:89:1f:4a:91: 43:4f:0c:3b:0d:f4:db:f4:e7:33:c2:e2:fc:25:b7:78:d1:39: b1:85:fe:1f:ba:27:2f:f6:2e:89:8d:2d:46:67:e6:20:cd:5c: 1e:dc:0e:c7:bb:3b:58:07:34:0a:ee:3b:c3:ce:93:33:97:f7: 0d:7e:55:d0:ce:2b:3f:98:11:bb:88:54:72:d5:65:db:bf:d4: 9b:c7:89:a9:e5:51:6a:b4:9e:d5:e3:b2:01:d4:a8:a9:5a:99: 94:00:e3:f2:ef:f3:22:ef:d8:dd:a4:b6:92:25:9e:9e:fb:35: fd:8d:f1:0f:db:da:d0:3c:5c:72:bc:a0:e1:eb:13:5b:9a:14: bb:43:86:99:fb:45:a6:04:e8:f3:52:c2:ce:a1:f0:12:1f:b8: e7:a9:f9:00:2a:81:cb:1b:5a:c9:cc:12:26:8c:7d:bf:93:e2: 5b:15:f3:97:4b:39:be:ab:b8:56:0a:75:93:21:dc:16:60:0a: ac:3b:c9:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZqPbfIdrjMcyYP5JTvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDAxYzQ3ZjAwZTY0ZjM1Y2M3NTJkMDNiMzRhNzFiNzE0 MDZiM2YwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD EyhkZjliZGI3Njc5YzA0ZDlhNWEyYmE2ZTM3YWJlOTFjZTBiM2IwYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuhWJ1gZQoRAPuD0sDH1m6ivWa9h 2lKQ8fAdFWRjKnOInOwSZlKfJbsHxaCx79k6L0hQJI3eZEKSReG9Xy2nXuh3Fyaa ntIqAkXq00e5muZbMJz4gjKWO6uLwLJ9iZBVOxHrgE/jGTNHyMGNb7KZPJqvGWkr Rp0BvEFn++4yvldov0EcZSejiH60LA4mBGPrTguRA5Iy6pk3tKW3YWx8fC+1eirE /W5HykXN981FoDpsspc7fKC0CiF6sRXsUNRwZcOytWX4T1by5tBSIz2iD6JqV7dW /DQcB+pJg1QR729jmPjgJFpv7qmXzYBSpbEZcAan7FJNS+AxoSChiqXCEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+b23Z5wE2aWium43q+kc4LOwxcMB8GA1UdIwQY MBaAFJHQHEfwDmTzXMdS0Ds0pxtxQGs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWIt NTZiMDA2ZWYwZDNiLzEva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWItNTZiMDA2ZWYwZDNi LzEva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggODsaYW 1qwb3zBFF2MgPbwzJ9/35ubJjtTYb4BiQP3xHzMfpwNSJMZ2tlQ4V54lcpRWzX17 P8L417ikncJxF95zjSiJH0qRQ08MOw302/TnM8Li/CW3eNE5sYX+H7onL/YuiY0t RmfmIM1cHtwOx7s7WAc0Cu47w86TM5f3DX5V0M4rP5gRu4hUctVl27/Um8eJqeVR arSe1eOyAdSoqVqZlADj8u/zIu/Y3aS2kiWenvs1/Y3xD9va0Dxccryg4esTW5oU u0OGmftFpgTo81LCzqHwEh+456n5ACqByxtaycwSJox9v5PiWxXzl0s5vqu4Vgp1 kyHcFmAKrDvJmg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:09 2025 by rpki-client