This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft File: k61uOZkaLowJwa3lO-WV-LipQl4.mft (raw, json) Hash identifier: tqfpzOYwyfOOy+zrvLwjhVOQ8NZYiWEUP/2Y4ZdyHx8= Subject key identifier: 0A:7D:79:EF:24:34:02:C1:E7:E0:DA:4D:40:8F:F5:F5:03:CA:FC:08 Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E Certificate issuer: /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e Certificate serial: 019B6BE9BB8B4B97DD5752BA04CE9766FB78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft Manifest number: 05A2 Signing time: Mon 29 Dec 2025 21:00:38 +0000 Manifest this update: Mon 29 Dec 2025 21:00:38 +0000 Manifest next update: Tue 30 Dec 2025 21:00:38 +0000 Files and hashes: 1: 6ignIb5OCDRZa9htQBKWaTGmU9o.roa (hash: zSgV1vtphKXfQn8b1eScbKSqpXfajJgXTewaQSsjXpw=) 2: k61uOZkaLowJwa3lO-WV-LipQl4.crl (hash: 10M+ArYUNYUDcUQLWtGgsSSpcQW+SOIFa78WvN++Org=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:bb:8b:4b:97:dd:57:52:ba:04:ce:97:66:fb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e Validity Not Before: Dec 29 21:00:38 2025 GMT Not After : Dec 30 21:00:38 2025 GMT Subject: CN=0a7d79ef243402c1e7e0da4d408ff5f503cafc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:80:a6:66:70:4f:ee:10:32:66:db:29:2b: 0a:7a:04:ef:59:bf:e0:bf:d6:32:88:f9:80:f3:8e: ee:18:27:07:ce:ca:6d:1b:a9:3b:bf:7f:b2:02:b1: ca:c9:37:8f:0e:35:ea:ee:88:83:76:ef:3d:c4:32: a3:d4:72:f3:be:11:a3:4c:72:c6:c7:ea:01:04:73: dd:43:55:d4:e6:db:5b:df:36:77:96:38:fc:b1:2c: 04:7d:0c:8e:9c:6a:fd:41:bc:7b:f9:1f:d2:78:54: 42:05:e7:95:c0:4a:a7:6b:36:eb:73:0d:61:f9:d2: bf:4d:d7:c9:63:c0:9c:58:a1:d5:c0:f8:f5:11:4d: 51:d9:61:7b:d8:d9:17:12:77:3a:b9:68:8e:15:fe: 46:6c:e5:8b:61:06:c9:34:ee:bf:d0:d6:81:15:b4: 45:f4:1e:c1:52:2a:ca:0c:09:7e:73:54:f9:03:f8: f1:f1:c1:ca:dc:d1:d5:ec:87:a3:e7:71:ee:58:ad: 2a:c1:6f:f7:b7:9b:82:2b:1f:01:e6:bb:65:a3:60: 27:8d:70:b8:40:e8:79:5e:e7:9d:0d:31:99:ae:92: 88:f7:84:76:6a:76:f4:32:7d:51:df:71:0f:a2:ce: 96:16:9a:fa:c5:97:0e:82:9e:4d:12:a8:a8:04:69: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:79:EF:24:34:02:C1:E7:E0:DA:4D:40:8F:F5:F5:03:CA:FC:08 X509v3 Authority Key Identifier: keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:80:90:64:1e:a0:80:a7:63:57:da:3a:b8:8a:ed:17:58:c5: ac:a8:2a:41:d8:6c:0f:8e:a3:44:fb:b0:47:df:ba:45:9a:a7: fe:c7:69:4e:77:4e:9d:80:94:40:9c:ab:fb:17:50:82:a6:47: b3:7f:c4:4c:b2:88:db:30:36:0b:f6:7b:03:d2:53:56:ff:30: 24:cd:95:38:d3:4f:50:03:6e:f0:4d:ae:e7:89:de:ac:ce:26: 21:9a:93:9d:fa:b6:ea:d1:d9:e6:f0:28:3a:bf:c7:fc:32:ca: 72:2f:f6:6f:59:92:e1:10:70:ee:53:8a:0a:12:d0:34:dd:5b: f2:7e:67:14:4e:c5:64:d0:a2:fe:3c:00:da:c1:d5:42:08:e6: ea:5b:b9:59:4f:96:9d:05:f3:c8:e8:84:a4:3f:b4:98:91:2b: 21:d8:37:74:44:11:09:43:3c:03:ca:ad:a9:88:fa:c7:07:3d: c4:38:62:b5:7d:ec:0f:b0:11:90:b7:8a:59:b9:5a:4a:16:4e: 2d:4c:b2:bc:8b:ad:04:74:ae:50:76:e1:9f:00:ec:5d:a0:fc: 26:0e:9c:99:ed:39:b5:30:e1:20:e1:c1:1c:66:0d:65:4d:46: f1:ab:19:9f:95:d1:20:80:d8:0f:f3:32:8c:4f:54:32:f5:cc: 42:a0:1c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6buLS5fdV1K6BM6XZvt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYWQ2ZTM5OTkxYTJlOGMwOWMxYWRlNTNiZTU5NWY4Yjhh OTQyNWUwHhcNMjUxMjI5MjEwMDM4WhcNMjUxMjMwMjEwMDM4WjAzMTEwLwYDVQQD EygwYTdkNzllZjI0MzQwMmMxZTdlMGRhNGQ0MDhmZjVmNTAzY2FmYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr92ApmZwT+4QMmbbKSsKegTvWb/g v9YyiPmA847uGCcHzsptG6k7v3+yArHKyTePDjXq7oiDdu89xDKj1HLzvhGjTHLG x+oBBHPdQ1XU5ttb3zZ3ljj8sSwEfQyOnGr9Qbx7+R/SeFRCBeeVwEqnazbrcw1h +dK/TdfJY8CcWKHVwPj1EU1R2WF72NkXEnc6uWiOFf5GbOWLYQbJNO6/0NaBFbRF 9B7BUirKDAl+c1T5A/jx8cHK3NHV7Iej53HuWK0qwW/3t5uCKx8B5rtlo2AnjXC4 QOh5XuedDTGZrpKI94R2anb0Mn1R33EPos6WFpr6xZcOgp5NEqioBGmyBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp9ee8kNALB5+DaTUCP9fUDyvwIMB8GA1UdIwQY MBaAFJOtbjmZGi6MCcGt5Tvllfi4qUJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQt Zjc3NmM5MjIwN2I3LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQtZjc3NmM5MjIwN2I3 LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4CQZB6g gKdjV9o6uIrtF1jFrKgqQdhsD46jRPuwR9+6RZqn/sdpTndOnYCUQJyr+xdQgqZH s3/ETLKI2zA2C/Z7A9JTVv8wJM2VONNPUANu8E2u54nerM4mIZqTnfq26tHZ5vAo Or/H/DLKci/2b1mS4RBw7lOKChLQNN1b8n5nFE7FZNCi/jwA2sHVQgjm6lu5WU+W nQXzyOiEpD+0mJErIdg3dEQRCUM8A8qtqYj6xwc9xDhitX3sD7ARkLeKWblaShZO LUyyvIutBHSuUHbhnwDsXaD8Jg6cme05tTDhIOHBHGYNZU1G8asZn5XRIIDYD/My jE9UMvXMQqAcAg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:09:58 2025 by rpki-client