This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json) Hash identifier: VF3bHwnOL9fifRQYfSyWNz9o/ydkOCVcymRiPN0tDx0= Subject key identifier: A9:7D:7B:1D:C0:98:15:97:9A:8A:5B:53:23:E0:EB:F0:C2:F3:8A:EA Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a Certificate serial: 019B2E1D55D89D6FBE89ABC84777A5F4CA88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft Manifest number: 058C Signing time: Wed 17 Dec 2025 21:00:32 +0000 Manifest this update: Wed 17 Dec 2025 21:00:32 +0000 Manifest next update: Thu 18 Dec 2025 21:00:32 +0000 Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=) 2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: 9DORWaVaY5DFw1/c7Xe/CBgEpDAHXj4RQSWAC0z/05U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:55:d8:9d:6f:be:89:ab:c8:47:77:a5:f4:ca:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a Validity Not Before: Dec 17 21:00:32 2025 GMT Not After : Dec 18 21:00:32 2025 GMT Subject: CN=a97d7b1dc09815979a8a5b5323e0ebf0c2f38aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:4c:fb:54:7f:8e:54:5d:d9:be:38:bc:33: df:06:9d:33:d3:11:92:92:f4:10:ff:1a:6a:7b:51: 89:f1:ee:3c:0b:f7:08:8d:b5:46:61:35:a8:63:fb: fc:a9:9f:05:85:0c:2a:28:5e:81:67:fb:2a:71:5f: 6f:07:2c:7c:70:58:a0:1a:e5:ed:9b:ea:ed:32:6c: 9a:56:de:33:25:de:22:f6:29:43:7a:43:af:23:a0: f0:a3:ba:bb:f6:af:c7:4f:2a:41:8d:36:de:c0:a5: e0:06:70:32:f3:44:e0:f1:e7:6d:e8:ae:16:69:39: bc:3a:12:af:0f:67:3d:61:8e:3e:47:09:4a:40:11: 1b:3f:ec:c7:f7:f9:49:eb:d2:4f:df:91:45:b3:61: ac:7d:ce:ac:0b:c6:15:be:9b:cd:1c:f9:b7:00:20: 49:f2:cb:7a:a3:a4:5a:41:68:a8:1f:d9:09:37:df: 69:30:d0:ac:01:27:67:0e:5f:1a:72:17:8e:37:83: 95:27:50:cc:67:a2:f0:80:67:0d:be:57:ef:95:9a: 12:68:bc:09:40:18:09:d4:e7:81:d6:d4:1a:2e:21: bd:bc:ed:c8:21:80:2d:8c:fe:90:64:ee:1a:48:39: bb:aa:d6:66:d9:92:6d:b6:6c:21:36:56:51:f8:2e: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7D:7B:1D:C0:98:15:97:9A:8A:5B:53:23:E0:EB:F0:C2:F3:8A:EA X509v3 Authority Key Identifier: keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:02:81:cf:bc:10:6f:e4:32:c6:2e:e4:5f:1a:bf:fc:c9:48: 07:e8:ae:03:79:05:b6:2f:1f:d3:70:ce:10:b6:65:2c:af:39: 32:4e:9b:8b:ac:9c:b9:18:a8:b8:2a:ba:0a:26:2d:39:c2:c8: c2:5c:51:9d:e9:4e:25:3a:e9:67:06:ee:84:ef:9a:75:1d:da: 01:42:c7:55:18:7c:4d:51:f5:1a:98:7a:09:4c:fc:4f:7a:ff: 85:2e:cc:01:cf:da:bb:0e:1d:70:6a:c9:ec:c9:c3:ea:7d:61: 3e:f2:a9:bd:e0:cb:46:3c:d2:f3:61:31:37:1a:2d:ad:61:12: f6:34:00:67:c2:4c:21:50:15:cb:49:88:de:72:d6:2a:ba:ad: 8f:30:e6:cb:95:54:3f:1f:70:2e:85:d5:eb:0b:fb:9c:3c:d1: 5d:99:14:1a:cc:19:60:51:f3:b8:8c:d4:b4:2b:cb:b0:25:51: 9c:b7:76:21:cd:a0:09:2a:63:91:a9:45:4c:59:d7:ce:18:a1: 28:f6:ab:ac:14:9e:98:b4:b3:e2:41:f3:34:57:5a:d3:c3:7f: 00:66:94:47:06:d4:48:2d:4b:bf:0b:ff:ad:30:86:43:90:2a: 0e:7b:19:be:7a:44:36:18:3d:e7:7a:fa:61:a6:6e:50:ed:d2: 9d:fb:7a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHVXYnW++iavIR3el9MqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZTlmNGJkZGY0YjJkZjExMGFjMzA4MzQ2ZjQ2ZDk0NTBm MTNiM2EwHhcNMjUxMjE3MjEwMDMyWhcNMjUxMjE4MjEwMDMyWjAzMTEwLwYDVQQD EyhhOTdkN2IxZGMwOTgxNTk3OWE4YTViNTMyM2UwZWJmMGMyZjM4YWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtlM+1R/jlRd2b44vDPfBp0z0xGS kvQQ/xpqe1GJ8e48C/cIjbVGYTWoY/v8qZ8FhQwqKF6BZ/sqcV9vByx8cFigGuXt m+rtMmyaVt4zJd4i9ilDekOvI6Dwo7q79q/HTypBjTbewKXgBnAy80Tg8edt6K4W aTm8OhKvD2c9YY4+RwlKQBEbP+zH9/lJ69JP35FFs2Gsfc6sC8YVvpvNHPm3ACBJ 8st6o6RaQWioH9kJN99pMNCsASdnDl8acheON4OVJ1DMZ6LwgGcNvlfvlZoSaLwJ QBgJ1OeB1tQaLiG9vO3IIYAtjP6QZO4aSDm7qtZm2ZJttmwhNlZR+C4JwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKl9ex3AmBWXmopbUyPg6/DC84rqMB8GA1UdIwQY MBaAFJPp9L3fSy3xEKwwg0b0bZRQ8Ts6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgt YzJiNjFmODZiMGFhLzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgtYzJiNjFmODZiMGFh LzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAKBz7wQ b+Qyxi7kXxq//MlIB+iuA3kFti8f03DOELZlLK85Mk6bi6ycuRiouCq6CiYtOcLI wlxRnelOJTrpZwbuhO+adR3aAULHVRh8TVH1Gph6CUz8T3r/hS7MAc/auw4dcGrJ 7MnD6n1hPvKpveDLRjzS82ExNxotrWES9jQAZ8JMIVAVy0mI3nLWKrqtjzDmy5VU Px9wLoXV6wv7nDzRXZkUGswZYFHzuIzUtCvLsCVRnLd2Ic2gCSpjkalFTFnXzhih KParrBSemLSz4kHzNFda08N/AGaURwbUSC1Lvwv/rTCGQ5AqDnsZvnpENhg953r6 YaZuUO3Snft6Bw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:42 2025 by rpki-client