This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json) Hash identifier: 9P6+JpPATBQ54PSSwkV7QcYRCwpwCGRoXXcf5cbbYX8= Subject key identifier: 85:69:44:55:A9:FB:6D:D8:3F:82:47:61:0B:18:87:11:90:95:9B:62 Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d Certificate serial: 019B3BA21307662B54867AF3C58A9C8BAB5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 12:00:35 +0000 Manifest this update: Sat 20 Dec 2025 12:00:35 +0000 Manifest next update: Sun 21 Dec 2025 12:00:35 +0000 Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=) 2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=) 3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: gcU0fsAp7wDzMch8QCrNWbDX1aTHExReJ4MsUZTt4G0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:13:07:66:2b:54:86:7a:f3:c5:8a:9c:8b:ab:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d Validity Not Before: Dec 20 12:00:35 2025 GMT Not After : Dec 21 12:00:35 2025 GMT Subject: CN=85694455a9fb6dd83f8247610b18871190959b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b0:5a:db:a3:4e:45:7e:94:99:e0:35:7e:89: d1:da:fd:7e:49:36:b4:45:81:f7:b5:57:d7:5f:75: 87:ea:dc:58:59:d3:aa:17:06:13:83:c2:34:92:16: 03:ad:b5:8e:c5:dd:71:19:a5:bc:93:f3:0d:5d:bb: 3a:15:12:1a:0c:8b:c0:c3:e6:15:36:17:5a:34:2f: 70:9d:17:3e:0c:00:6d:61:17:02:40:cb:a9:65:a6: c8:61:7b:0f:32:39:49:32:74:16:2a:c8:51:f1:f1: 67:47:01:6d:a8:7c:61:22:65:66:e9:ed:77:eb:ed: fa:19:b5:23:3e:55:a9:9a:d1:54:ca:c0:21:60:90: 47:b3:ff:fc:78:f6:25:0c:b6:9a:d3:fd:b2:73:cb: a6:36:94:9a:46:fd:4a:1b:32:7b:95:c7:f3:fd:60: be:c6:12:c0:e7:1f:74:90:ed:80:d6:ef:8c:b8:4d: cd:4b:f8:91:83:97:c6:e8:6c:3e:64:16:c9:29:34: 45:1d:69:fc:4e:aa:45:d8:60:6b:2f:d2:cf:db:97: bb:1b:a5:78:4a:e3:3c:a2:11:63:f6:87:c7:f3:ad: 12:63:57:98:fd:1d:94:cb:d5:6c:42:fc:b7:d8:ce: 4f:7e:98:09:2d:9a:12:12:c2:bd:09:71:77:e2:a9: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:69:44:55:A9:FB:6D:D8:3F:82:47:61:0B:18:87:11:90:95:9B:62 X509v3 Authority Key Identifier: keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:b0:88:63:02:38:80:ab:c5:19:05:8f:c6:9b:fb:79:be: 6c:bc:dc:0c:28:39:ae:41:46:2e:91:39:a6:1a:2d:00:39:4f: 94:37:07:81:19:0b:85:b4:ff:00:26:8b:25:06:43:88:22:61: c9:df:a1:83:25:86:d1:bb:a0:ef:2c:20:0b:5d:30:bd:bd:7d: 21:9d:66:0e:80:95:1f:a3:55:f4:ec:7a:2f:40:d3:87:ca:3f: 6d:2b:d7:a5:61:05:c6:7a:fb:19:fc:22:83:dc:7e:88:97:3f: 0e:9a:a4:c8:3a:d0:2d:28:ba:67:a3:0b:97:7c:3c:ef:33:70: 19:75:6e:1d:5f:aa:3e:d0:44:c4:3d:ea:a6:9c:38:3f:05:97: 6f:b3:03:a9:5d:2f:d4:70:df:7a:4c:4c:3a:8a:38:7e:e4:66: 39:23:b6:17:06:a4:ab:a9:ee:57:28:c6:e4:f7:1a:b7:bf:ed: 13:25:79:36:5a:c0:de:c9:25:65:35:40:de:35:af:a8:78:8e: 9d:60:ed:29:a6:03:8c:73:e2:85:4c:4a:72:bb:df:0b:aa:8f: 90:a0:d9:88:e8:00:3c:b9:26:1e:00:35:4f:de:54:83:63:a3: b5:2e:62:d8:ad:17:38:0f:f9:87:53:b0:5e:f6:b1:ed:79:ef: a8:63:34:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohMHZitUhnrzxYqci6tcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjkxZWVmYTZkODA0NmQ5MThlMzY0MDQ1NjA0OTUyNjQw YmMxNWQwHhcNMjUxMjIwMTIwMDM1WhcNMjUxMjIxMTIwMDM1WjAzMTEwLwYDVQQD Eyg4NTY5NDQ1NWE5ZmI2ZGQ4M2Y4MjQ3NjEwYjE4ODcxMTkwOTU5YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LBa26NORX6UmeA1fonR2v1+STa0 RYH3tVfXX3WH6txYWdOqFwYTg8I0khYDrbWOxd1xGaW8k/MNXbs6FRIaDIvAw+YV NhdaNC9wnRc+DABtYRcCQMupZabIYXsPMjlJMnQWKshR8fFnRwFtqHxhImVm6e13 6+36GbUjPlWpmtFUysAhYJBHs//8ePYlDLaa0/2yc8umNpSaRv1KGzJ7lcfz/WC+ xhLA5x90kO2A1u+MuE3NS/iRg5fG6Gw+ZBbJKTRFHWn8TqpF2GBrL9LP25e7G6V4 SuM8ohFj9ofH860SY1eY/R2Uy9VsQvy32M5PfpgJLZoSEsK9CXF34qnJeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVpRFWp+23YP4JHYQsYhxGQlZtiMB8GA1UdIwQY MBaAFJO5Hu+m2ARtkY42QEVgSVJkC8FdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEt MzU4NmFhZTEzZGE3LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEtMzU4NmFhZTEzZGE3 LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcOwiGMC OICrxRkFj8ab+3m+bLzcDCg5rkFGLpE5photADlPlDcHgRkLhbT/ACaLJQZDiCJh yd+hgyWG0bug7ywgC10wvb19IZ1mDoCVH6NV9Ox6L0DTh8o/bSvXpWEFxnr7Gfwi g9x+iJc/DpqkyDrQLSi6Z6MLl3w87zNwGXVuHV+qPtBExD3qppw4PwWXb7MDqV0v 1HDfekxMOoo4fuRmOSO2Fwakq6nuVyjG5Pcat7/tEyV5NlrA3sklZTVA3jWvqHiO nWDtKaYDjHPihUxKcrvfC6qPkKDZiOgAPLkmHgA1T95Ug2OjtS5i2K0XOA/5h1Ow Xvax7XnvqGM03g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:26:16 2025 by rpki-client