This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json) Hash identifier: K6DCubg8WL+dFDF2cBuubgZ4m77I3REoBEESbxuDVSw= Subject key identifier: B7:F9:00:1C:D7:48:3B:37:DC:57:BD:21:A7:34:4E:D0:D6:D2:B6:03 Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Certificate serial: 019B3E6CF2CA60731D75DB80006D5126C97C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft Manifest number: 01FE Signing time: Sun 21 Dec 2025 01:01:25 +0000 Manifest this update: Sun 21 Dec 2025 01:01:25 +0000 Manifest next update: Mon 22 Dec 2025 01:01:25 +0000 Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=) 2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: OqrDEUGO6AS/CCVBwSwtoiM2T6Fgm8luZTCLzir5aso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:f2:ca:60:73:1d:75:db:80:00:6d:51:26:c9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Validity Not Before: Dec 21 01:01:25 2025 GMT Not After : Dec 22 01:01:25 2025 GMT Subject: CN=b7f9001cd7483b37dc57bd21a7344ed0d6d2b603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:31:ec:fe:03:71:5e:e0:a3:68:0b:c3:0f: 0a:0f:7e:48:64:9e:44:ba:0f:e1:3a:64:3a:7f:d7: be:02:ea:11:54:fa:8c:d2:f2:b4:27:ca:06:fb:47: 1d:89:9a:af:3f:2c:ff:6a:02:c5:ba:1e:5d:3b:3d: 98:26:9b:09:18:38:b5:97:21:22:32:d8:8c:79:99: a4:66:e5:32:8c:bb:d5:61:c4:7c:3c:86:eb:8e:d3: 25:3f:57:3b:77:e2:25:e2:59:6d:55:ae:56:69:4b: b8:95:87:23:a4:d4:d8:de:ed:f5:63:ab:6c:bb:af: be:6c:7d:6c:52:a7:4d:bc:4c:a7:29:e8:16:83:c5: dc:a1:1f:36:5b:c7:fe:cb:ef:68:1f:54:f6:0b:67: b1:ff:83:0c:7e:d4:a3:2d:33:7b:30:d3:a9:dc:5e: 8d:27:0c:7c:d4:e2:1a:e1:99:46:93:16:7a:7f:f1: 78:d5:05:a6:3e:22:66:01:47:1e:1c:16:6e:43:fc: dc:77:e8:27:e3:b6:33:29:1d:23:22:4b:6d:6a:c9: b1:3c:a3:de:04:da:f6:59:9f:3e:d5:86:6e:59:64: 42:0c:91:8d:3f:c0:e4:fa:7b:72:f5:15:59:21:b4: 29:ed:d8:55:c6:60:71:87:50:2f:1b:9b:24:31:d5: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:00:1C:D7:48:3B:37:DC:57:BD:21:A7:34:4E:D0:D6:D2:B6:03 X509v3 Authority Key Identifier: keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c6:53:bf:91:ae:5a:58:87:0f:7f:d8:f5:03:8b:0d:ee:a5: 5c:29:23:a6:6a:ae:94:27:e0:70:4a:9d:6e:3b:a0:83:bb:a6: 90:48:04:78:7d:81:7b:df:6c:c0:a4:ac:55:e8:ea:0e:9c:ee: 6f:56:2f:e2:80:96:0a:5c:13:1f:41:82:2b:dd:f8:a8:9f:5e: 03:7e:3d:c9:37:cf:28:ba:77:d7:9f:5e:59:06:2f:6e:a7:93: f3:18:d7:a2:6f:58:67:91:83:6d:a3:96:d7:7f:29:21:91:eb: 1c:ca:7e:39:4c:82:f7:c5:b6:d9:f8:a9:78:7f:05:28:ff:73: fc:7d:58:f0:c2:69:74:76:e0:1f:82:4c:0d:5f:29:fd:e4:95: ec:bd:3e:fe:e4:19:4f:80:92:e7:7c:1a:58:2a:f3:34:7b:84: f0:5a:d5:11:da:26:63:8b:81:85:16:fc:02:ff:d3:16:35:d2: a1:a4:01:84:7b:cc:31:c2:d2:16:73:08:3f:ee:4a:55:07:34: ec:f2:c2:84:4f:0a:db:56:ef:c3:2a:9a:79:40:8b:75:b3:a8: ea:d1:b1:0a:55:17:d2:be:1b:68:1a:a3:b1:7e:b9:b6:0b:9a: 4b:1d:2d:c9:97:39:f6:46:24:61:a8:ce:d8:ed:a7:d2:91:1f: a7:57:2b:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPLKYHMddduAAG1RJsl8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni ZGU0MzgwHhcNMjUxMjIxMDEwMTI1WhcNMjUxMjIyMDEwMTI1WjAzMTEwLwYDVQQD EyhiN2Y5MDAxY2Q3NDgzYjM3ZGM1N2JkMjFhNzM0NGVkMGQ2ZDJiNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Mx7P4DcV7go2gLww8KD35IZJ5E ug/hOmQ6f9e+AuoRVPqM0vK0J8oG+0cdiZqvPyz/agLFuh5dOz2YJpsJGDi1lyEi MtiMeZmkZuUyjLvVYcR8PIbrjtMlP1c7d+Il4lltVa5WaUu4lYcjpNTY3u31Y6ts u6++bH1sUqdNvEynKegWg8XcoR82W8f+y+9oH1T2C2ex/4MMftSjLTN7MNOp3F6N Jwx81OIa4ZlGkxZ6f/F41QWmPiJmAUceHBZuQ/zcd+gn47YzKR0jIkttasmxPKPe BNr2WZ8+1YZuWWRCDJGNP8Dk+nty9RVZIbQp7dhVxmBxh1AvG5skMdUOcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf5ABzXSDs33Fe9Iac0TtDW0rYDMB8GA1UdIwQY MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt MTNjMmVhOTJhYTllLzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcZTv5Gu WliHD3/Y9QOLDe6lXCkjpmqulCfgcEqdbjugg7umkEgEeH2Be99swKSsVejqDpzu b1Yv4oCWClwTH0GCK934qJ9eA349yTfPKLp3159eWQYvbqeT8xjXom9YZ5GDbaOW 138pIZHrHMp+OUyC98W22fipeH8FKP9z/H1Y8MJpdHbgH4JMDV8p/eSV7L0+/uQZ T4CS53waWCrzNHuE8FrVEdomY4uBhRb8Av/TFjXSoaQBhHvMMcLSFnMIP+5KVQc0 7PLChE8K21bvwyqaeUCLdbOo6tGxClUX0r4baBqjsX65tguaSx0tyZc59kYkYajO 2O2n0pEfp1crWw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:21 2025 by rpki-client