This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json) Hash identifier: /AOIo8nl9NO5UZv9RP8fiF/lREqMN4IvXtt0qmdF35c= Subject key identifier: B8:87:9F:0C:98:05:41:06:36:7B:85:70:51:C7:3D:EE:37:B7:5F:24 Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91 Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91 Certificate serial: 019B4581CABD3975AEF01A5BEC9DCD8F0227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft Manifest number: 1187 Signing time: Mon 22 Dec 2025 10:01:32 +0000 Manifest this update: Mon 22 Dec 2025 10:01:32 +0000 Manifest next update: Tue 23 Dec 2025 10:01:32 +0000 Files and hashes: 1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=) 2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: ZrSXADljC7utNOq19L5I4RhicbgON3UHvzNpCev51jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:ca:bd:39:75:ae:f0:1a:5b:ec:9d:cd:8f:02:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91 Validity Not Before: Dec 22 10:01:32 2025 GMT Not After : Dec 23 10:01:32 2025 GMT Subject: CN=b8879f0c98054106367b857051c73dee37b75f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:00:b5:cc:25:0b:7b:c0:de:56:34:42:26: b0:80:97:33:45:25:1a:15:74:3c:80:0c:af:7a:e3: 57:38:f9:d3:27:7b:c1:1d:c0:09:6e:0f:0d:ca:0f: e8:3b:92:c3:ee:2d:0d:c6:df:38:a8:cd:65:56:a2: 92:85:9f:1b:96:1f:6e:ce:2a:cb:7f:54:30:0c:ea: c8:c5:33:f8:fc:6b:4b:f7:c9:3c:a0:e9:15:28:b9: 0f:b5:5b:43:be:91:1d:37:43:79:be:b2:58:45:dc: f5:63:a4:74:65:21:69:ef:0e:c0:7d:98:c4:b3:0c: ed:3d:5a:03:ea:0b:7c:75:3e:46:ae:b8:3e:f9:3d: ca:4b:23:70:4c:55:1a:cd:35:a5:42:d6:1d:a7:e7: 14:7b:9b:0b:8b:bf:66:e1:4a:48:5d:91:7e:6f:7c: c8:1c:9d:5e:62:73:21:9f:09:10:85:39:70:9b:c7: 7a:71:66:0e:69:2e:cc:0f:4c:b7:fb:2a:2c:8a:08: 3f:57:24:4e:52:df:64:ac:47:3f:a9:1d:83:6b:38: eb:26:09:1e:be:75:1c:30:78:2a:4c:db:4f:2c:ee: d7:31:5d:49:4e:71:fd:91:eb:de:17:4a:fc:71:e8: cd:9e:7c:62:9f:38:3f:5e:b3:23:9b:b7:19:fb:c5: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:87:9F:0C:98:05:41:06:36:7B:85:70:51:C7:3D:EE:37:B7:5F:24 X509v3 Authority Key Identifier: keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f2:de:2a:19:06:1a:0e:56:6c:b9:7b:8f:1f:a1:6b:83:1c: e6:19:f1:7b:fc:93:4a:fb:dc:14:a6:53:66:eb:a7:fd:c1:8e: 10:f0:cc:1b:e7:2f:6d:fa:f9:61:ad:00:b0:4f:ac:23:91:50: 4d:1b:f8:7b:4d:48:7f:e3:2f:3d:57:b5:8a:95:5b:f6:7f:04: 9f:2c:88:d2:f8:9d:98:f9:e2:99:70:5e:9b:83:70:e0:fc:d6: 32:90:b8:f2:bf:b1:f1:66:98:aa:f2:99:44:1a:d2:6a:5e:41: ef:76:a8:8b:65:39:82:7a:4a:2f:9b:d7:ec:ad:a8:05:b3:ea: b6:42:28:75:2a:e7:f0:93:9d:50:aa:bc:56:8d:8a:9d:9b:67: b5:b2:88:42:7a:43:84:0d:b1:91:71:17:16:85:02:15:70:57: cc:32:ae:d9:98:af:10:dc:96:eb:55:81:a7:61:05:ae:1d:c5: 36:4b:8c:12:cf:a0:28:52:9a:8a:4e:c5:f8:3c:59:91:59:29: 75:bd:43:fc:61:66:ac:d6:6c:20:1b:07:5d:61:9a:a3:c8:61: 3f:06:c8:83:2f:29:85:df:ce:2e:4c:22:a7:4c:82:da:58:f4: b5:59:41:e8:9d:72:ef:a1:60:14:5e:6c:c2:92:97:ef:91:60: f1:71:4b:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgcq9OXWu8Bpb7J3NjwInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZGM0YmYxZjg5MTJiZWI3Y2RlZTQwOTMwMjk4OGM2MTEz ODhlOTEwHhcNMjUxMjIyMTAwMTMyWhcNMjUxMjIzMTAwMTMyWjAzMTEwLwYDVQQD EyhiODg3OWYwYzk4MDU0MTA2MzY3Yjg1NzA1MWM3M2RlZTM3Yjc1ZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxoAtcwlC3vA3lY0QiawgJczRSUa FXQ8gAyveuNXOPnTJ3vBHcAJbg8Nyg/oO5LD7i0Nxt84qM1lVqKShZ8blh9uzirL f1QwDOrIxTP4/GtL98k8oOkVKLkPtVtDvpEdN0N5vrJYRdz1Y6R0ZSFp7w7AfZjE swztPVoD6gt8dT5Grrg++T3KSyNwTFUazTWlQtYdp+cUe5sLi79m4UpIXZF+b3zI HJ1eYnMhnwkQhTlwm8d6cWYOaS7MD0y3+yosigg/VyROUt9krEc/qR2DazjrJgke vnUcMHgqTNtPLO7XMV1JTnH9keveF0r8cejNnnxinzg/XrMjm7cZ+8Wi8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiHnwyYBUEGNnuFcFHHPe43t18kMB8GA1UdIwQY MBaAFJPcS/H4kSvrfN7kCTApiMYROI6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazl4TDhmaVJLLXQ4M3VRSk1DbUl4aEU0anBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hYjY1YzAtNDgyOC00MWRkLWIzZGEt ZWQ4ZGI2MmIzNTMzLzEvazl4TDhmaVJLLXQ4M3VRSk1DbUl4aEU0anBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hYjY1YzAtNDgyOC00MWRkLWIzZGEtZWQ4ZGI2MmIzNTMz LzEvazl4TDhmaVJLLXQ4M3VRSk1DbUl4aEU0anBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPLeKhkG Gg5WbLl7jx+ha4Mc5hnxe/yTSvvcFKZTZuun/cGOEPDMG+cvbfr5Ya0AsE+sI5FQ TRv4e01If+MvPVe1ipVb9n8EnyyI0vidmPnimXBem4Nw4PzWMpC48r+x8WaYqvKZ RBrSal5B73aoi2U5gnpKL5vX7K2oBbPqtkIodSrn8JOdUKq8Vo2KnZtntbKIQnpD hA2xkXEXFoUCFXBXzDKu2ZivENyW61WBp2EFrh3FNkuMEs+gKFKaik7F+DxZkVkp db1D/GFmrNZsIBsHXWGao8hhPwbIgy8phd/OLkwip0yC2lj0tVlB6J1y76FgFF5s wpKX75Fg8XFLCA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:13:14 2025 by rpki-client