This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json) Hash identifier: 22cdJoBdmEfUrgxbIKsQxJyufHIy9BYO8ZMChFU/3fI= Subject key identifier: E9:8E:70:48:4E:4D:1A:F8:B7:EE:98:35:61:D7:91:AF:56:E7:A5:D0 Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74 Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74 Certificate serial: 019AF276560CC510FC0477C2D9E2941EEBE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft Manifest number: 091E Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: Jm_xi_s9C4HueOQpadAteqzC5iI.roa (hash: nbZ24fnK71pZ0lURFKjMf67hub71ZiuhlPq0UEHzTVw=) 2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: Xmk17rLDoQM+lJZiYdf1nopUiSjJKOmNxvEFTY4AfLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:56:0c:c5:10:fc:04:77:c2:d9:e2:94:1e:eb:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74 Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=e98e70484e4d1af8b7ee983561d791af56e7a5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:fd:43:bc:f1:8e:de:f3:e7:e8:96:73:36: 72:47:73:b8:b2:27:1f:c9:81:bb:00:75:e7:8d:05: 06:04:db:bb:14:6a:41:e2:1b:78:05:8f:60:ef:86: 65:fa:f2:d2:93:e7:ad:87:f3:74:37:d6:9d:d7:95: e3:09:79:10:27:bb:68:23:80:35:1a:7c:a0:a7:4c: eb:48:28:5d:48:25:42:4b:d7:5b:8a:d5:98:8d:25: 09:a0:a5:d3:bb:ac:41:a8:a5:9f:a8:53:5d:98:01: 56:0e:9e:92:b5:1b:12:1c:c1:48:50:31:34:18:88: db:25:b0:76:77:9f:9e:4d:34:de:a1:10:ff:8b:37: a1:4a:a8:0a:67:f5:e2:59:df:4d:ed:4f:4e:a9:4a: c7:9d:60:b9:f3:77:b6:58:ca:49:be:32:60:11:b4: 04:05:df:61:90:4e:31:ef:7a:38:1a:fc:4b:31:81: 70:a3:21:c3:e3:bd:c3:a1:9d:82:fc:66:cc:29:f4: 7f:03:e9:02:f2:33:15:44:f5:c7:45:0c:74:9f:e7: 19:16:8c:93:d9:55:06:6a:ce:61:e8:de:8b:df:31: 4d:e3:4b:1d:8b:6a:70:a6:39:d0:b6:b1:d4:14:69: fb:4a:8b:13:d7:49:0c:13:a0:64:57:6d:65:47:56: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8E:70:48:4E:4D:1A:F8:B7:EE:98:35:61:D7:91:AF:56:E7:A5:D0 X509v3 Authority Key Identifier: keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0f:d4:a5:d5:f3:03:a3:e8:1d:11:ec:2a:7c:e2:90:b7:9e: fa:e4:34:68:b9:33:ba:31:3d:93:73:90:02:20:da:87:ef:b6: 5a:d1:de:9b:50:f5:e8:55:59:f7:4c:75:9c:9c:5a:3a:ac:12: 92:ad:9e:1b:ff:29:6f:f8:cd:8c:7d:b0:e2:0a:1e:f8:e8:48: c6:bd:4d:8f:47:1b:4c:19:d1:06:1f:f7:23:3e:41:82:85:a2: ca:7e:ad:3f:77:bd:6b:d5:e1:8c:73:26:58:b7:6b:d7:71:c9: 93:fe:10:b4:02:b6:68:7b:40:3f:fd:25:4c:0e:a5:be:63:5a: f9:5c:61:30:2c:f4:14:39:57:e7:20:18:d4:3d:42:ed:b5:4a: 29:ff:ca:2c:8f:9a:c4:c3:13:33:2b:ef:83:56:e9:1c:39:d0: 74:4e:91:1e:c7:a6:dc:a7:f8:ed:d1:7c:33:c4:ed:9c:76:b6: a4:05:2d:67:cb:93:2f:81:b3:0b:97:41:9e:29:45:77:77:e5: 48:7f:2b:e9:8b:75:c9:c5:dd:6a:46:47:94:79:bf:85:e2:6d: 6f:63:6e:d3:6f:93:68:0a:8e:b3:b9:1e:06:cf:7d:02:bf:02: 9c:eb:84:c4:69:12:a6:a5:d5:be:6c:a3:5b:73:3f:00:b9:27: e2:a1:af:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlYMxRD8BHfC2eKUHuvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz OTBiNzQwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD EyhlOThlNzA0ODRlNGQxYWY4YjdlZTk4MzU2MWQ3OTFhZjU2ZTdhNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqz9Q7zxjt7z5+iWczZyR3O4sicf yYG7AHXnjQUGBNu7FGpB4ht4BY9g74Zl+vLSk+eth/N0N9ad15XjCXkQJ7toI4A1 Gnygp0zrSChdSCVCS9dbitWYjSUJoKXTu6xBqKWfqFNdmAFWDp6StRsSHMFIUDE0 GIjbJbB2d5+eTTTeoRD/izehSqgKZ/XiWd9N7U9OqUrHnWC583e2WMpJvjJgEbQE Bd9hkE4x73o4GvxLMYFwoyHD473DoZ2C/GbMKfR/A+kC8jMVRPXHRQx0n+cZFoyT 2VUGas5h6N6L3zFN40sdi2pwpjnQtrHUFGn7SosT10kME6BkV21lR1Y1ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmOcEhOTRr4t+6YNWHXka9W56XQMB8GA1UdIwQY MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt NzUyMWFmMWNlMjU5LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5 LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw/UpdXz A6PoHRHsKnzikLee+uQ0aLkzujE9k3OQAiDah++2WtHem1D16FVZ90x1nJxaOqwS kq2eG/8pb/jNjH2w4goe+OhIxr1Nj0cbTBnRBh/3Iz5BgoWiyn6tP3e9a9XhjHMm WLdr13HJk/4QtAK2aHtAP/0lTA6lvmNa+VxhMCz0FDlX5yAY1D1C7bVKKf/KLI+a xMMTMyvvg1bpHDnQdE6RHsem3Kf47dF8M8TtnHa2pAUtZ8uTL4GzC5dBnilFd3fl SH8r6Yt1ycXdakZHlHm/heJtb2Nu02+TaAqOs7keBs99Ar8CnOuExGkSpqXVvmyj W3M/ALkn4qGvZg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:42 2025 by rpki-client