This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft File: k9xL8fiRK-t83uQJMCmIxhE4jpE.mft (raw, json) Hash identifier: Xf4F0oLNzTrHxWpZ2ClbSwSGlinHobBf5nstTYx8e4Q= Subject key identifier: 39:1F:FA:84:35:4E:F8:6C:51:23:10:9C:1B:62:22:4F:FA:CB:BE:E4 Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91 Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91 Certificate serial: 019B6C20A797FE2B8411045BA5F35FE6C15F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft Manifest number: 119B Signing time: Mon 29 Dec 2025 22:00:37 +0000 Manifest this update: Mon 29 Dec 2025 22:00:37 +0000 Manifest next update: Tue 30 Dec 2025 22:00:37 +0000 Files and hashes: 1: aEy_zqNzomjBOnysb7pwIws5H9M.roa (hash: 5K5cuFuAW+cdRm7n0/ZKC9QHmYwbcOfw6xnQYUg53PE=) 2: k9xL8fiRK-t83uQJMCmIxhE4jpE.crl (hash: 3lzUwHAkUnUCwYqcyDsGsfcH50M8hsu03OpzipUq45w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:a7:97:fe:2b:84:11:04:5b:a5:f3:5f:e6:c1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91 Validity Not Before: Dec 29 22:00:37 2025 GMT Not After : Dec 30 22:00:37 2025 GMT Subject: CN=391ffa84354ef86c5123109c1b62224ffacbbee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0a:e0:56:64:dc:0b:0c:46:d9:fb:38:2b:a4: 57:7b:61:a9:4e:d2:cd:82:47:2a:d9:90:64:e9:70: 12:d1:e3:c2:0e:25:ed:94:43:0a:09:9f:8c:06:e1: 89:d8:ee:1d:bb:19:76:6f:01:39:5c:a4:11:46:13: da:63:ed:b8:5e:9a:4d:0f:10:a5:b5:85:60:0b:60: 24:1c:f3:9d:9d:ba:09:cd:72:ea:27:00:c9:4d:a6: d6:d3:47:5f:56:0f:e0:41:f3:4b:2b:3b:68:82:71: 86:f3:81:b3:57:46:35:b3:7f:91:04:86:24:08:3e: 06:d9:75:1a:4e:6e:1c:4e:ea:db:8c:74:b9:72:88: 10:19:11:b2:42:f5:9e:8d:61:06:b5:09:ed:33:0c: 7f:0a:ea:a6:11:ee:c4:0c:fa:1a:44:af:3d:8b:31: 4d:6d:e9:c9:4c:4c:26:95:7d:12:85:e7:2f:f7:b4: 75:ad:a9:6d:89:48:7e:bd:88:7a:e4:bd:1a:53:41: 3f:df:a5:b1:06:5a:98:06:8a:29:8b:13:2e:65:15: 07:66:e9:80:83:9f:5c:b6:26:89:66:b6:3e:69:1f: f7:53:ab:56:01:a2:8a:88:aa:7c:03:de:37:8c:5a: 02:65:8e:d5:9d:f4:20:73:44:8d:56:03:37:f1:b6: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:FA:84:35:4E:F8:6C:51:23:10:9C:1B:62:22:4F:FA:CB:BE:E4 X509v3 Authority Key Identifier: keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:37:a2:ba:74:33:90:64:17:a0:62:f1:d1:93:bc:63:e9:79: c8:44:21:48:77:3e:c7:7d:14:5a:b3:1c:f2:b3:85:f6:e2:5b: 53:6d:17:f8:cd:ee:9c:75:24:74:73:62:e1:74:54:4d:d3:55: d6:d7:77:49:74:a4:cb:11:b7:07:19:7a:12:4d:d1:84:a5:34: dd:30:ae:5b:2d:ad:42:0a:19:e1:35:e2:8c:b4:aa:ee:d1:d4: a8:7d:37:91:28:4f:4c:8b:9d:09:53:2d:03:10:08:15:a0:79: 7d:6a:2e:1a:27:e3:06:a4:bb:8d:2f:73:c2:9b:42:fd:c5:d7: 5a:4f:6c:09:a8:ff:44:5f:22:b8:ad:32:a3:e6:a2:47:1f:91: d6:4b:95:1b:db:19:d6:cb:55:de:62:e3:33:0f:6f:e6:86:8d: 08:6b:13:1d:72:ce:84:20:77:10:b0:59:ca:a7:7a:94:58:0e: a5:94:34:eb:df:ee:6d:91:31:40:11:a3:3b:09:95:af:3c:71: 64:9a:35:ff:75:fe:c6:8e:13:d9:6b:bd:d1:da:ff:d6:3f:df: b6:42:df:fd:d3:72:49:7d:20:ff:7d:5f:ec:87:38:a5:1f:f4: 4d:f4:76:b0:fc:cc:21:d8:43:a6:5e:f2:fe:29:bc:94:d2:a8: 44:35:f5:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIKeX/iuEEQRbpfNf5sFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZGM0YmYxZjg5MTJiZWI3Y2RlZTQwOTMwMjk4OGM2MTEz ODhlOTEwHhcNMjUxMjI5MjIwMDM3WhcNMjUxMjMwMjIwMDM3WjAzMTEwLwYDVQQD EygzOTFmZmE4NDM1NGVmODZjNTEyMzEwOWMxYjYyMjI0ZmZhY2JiZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QrgVmTcCwxG2fs4K6RXe2GpTtLN gkcq2ZBk6XAS0ePCDiXtlEMKCZ+MBuGJ2O4duxl2bwE5XKQRRhPaY+24XppNDxCl tYVgC2AkHPOdnboJzXLqJwDJTabW00dfVg/gQfNLKztognGG84GzV0Y1s3+RBIYk CD4G2XUaTm4cTurbjHS5cogQGRGyQvWejWEGtQntMwx/CuqmEe7EDPoaRK89izFN benJTEwmlX0Shecv97R1raltiUh+vYh65L0aU0E/36WxBlqYBoopixMuZRUHZumA g59ctiaJZrY+aR/3U6tWAaKKiKp8A943jFoCZY7VnfQgc0SNVgM38bYaAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkf+oQ1TvhsUSMQnBtiIk/6y77kMB8GA1UdIwQY MBaAFJPcS/H4kSvrfN7kCTApiMYROI6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazl4TDhmaVJLLXQ4M3VRSk1DbUl4aEU0anBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hYjY1YzAtNDgyOC00MWRkLWIzZGEt ZWQ4ZGI2MmIzNTMzLzEvazl4TDhmaVJLLXQ4M3VRSk1DbUl4aEU0anBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hYjY1YzAtNDgyOC00MWRkLWIzZGEtZWQ4ZGI2MmIzNTMz LzEvazl4TDhmaVJLLXQ4M3VRSk1DbUl4aEU0anBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDeiunQz kGQXoGLx0ZO8Y+l5yEQhSHc+x30UWrMc8rOF9uJbU20X+M3unHUkdHNi4XRUTdNV 1td3SXSkyxG3Bxl6Ek3RhKU03TCuWy2tQgoZ4TXijLSq7tHUqH03kShPTIudCVMt AxAIFaB5fWouGifjBqS7jS9zwptC/cXXWk9sCaj/RF8iuK0yo+aiRx+R1kuVG9sZ 1stV3mLjMw9v5oaNCGsTHXLOhCB3ELBZyqd6lFgOpZQ069/ubZExQBGjOwmVrzxx ZJo1/3X+xo4T2Wu90dr/1j/ftkLf/dNySX0g/31f7Ic4pR/0TfR2sPzMIdhDpl7y /im8lNKoRDX15Q== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:18 2025 by rpki-client