This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json) Hash identifier: 4eT9xxAIkO0O2wYTxxV/7CytqP/iIigO9POO9CJjAWI= Subject key identifier: D7:86:1F:53:A6:EA:B2:A0:FA:7A:5D:10:38:6D:FB:47:AD:A5:D5:E5 Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa Certificate serial: 019AF12DEA3EED1E1F3E2A0E4E2EC6BBF610 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft Manifest number: 0DA0 Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: qVKqAmQ6qvWiz9IuSeHTTF+Mndj56Y/IBJd40FYKg48=) 2: xdJCZN2-B2T_CDkACtSXidGS3do.roa (hash: s0jqLGTlnozuwukxMNuj9trb2i8A2O+cFtDeELQzX9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ea:3e:ed:1e:1f:3e:2a:0e:4e:2e:c6:bb:f6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=d7861f53a6eab2a0fa7a5d10386dfb47ada5d5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:21:5a:66:ac:9c:af:ce:95:30:84:8d:73: 04:09:b5:c5:e4:e9:1d:a1:96:5e:67:6a:6f:70:23: 09:35:f9:f1:2c:b3:fb:63:18:19:c1:62:af:22:27: 81:59:86:67:2a:2e:2b:af:32:69:3f:c6:91:e1:28: 33:a0:36:4e:30:ee:43:9c:8f:cb:4b:8b:e3:09:1b: d2:ab:9a:56:2e:f8:a5:0b:54:af:8b:e8:76:64:39: 67:e0:e8:f1:07:69:6b:fb:25:e0:99:39:56:f9:33: 13:68:d2:30:18:70:96:9c:8e:97:ae:a2:66:41:27: 06:af:18:87:59:3f:cf:44:2d:6d:5d:87:c1:9e:4e: e8:d1:cf:d8:05:73:f9:5b:1b:63:f2:69:97:8c:38: 5e:f8:1f:f6:8a:c1:90:2f:ca:e5:06:7d:29:92:61: c3:48:2f:8a:03:cb:6a:3f:a5:4f:4b:32:73:bc:05: 80:30:5d:b8:33:a1:82:c8:ed:be:10:c2:ea:8c:56: 15:f0:e0:b1:14:26:94:9e:0a:a0:95:e3:9d:13:0d: a9:68:8f:13:df:6d:e7:c3:9d:1c:71:bb:35:3a:9b: e8:9a:22:c2:53:65:a6:d9:10:bc:6d:c7:1b:af:ac: 03:b0:eb:08:79:fe:31:52:c3:53:a7:dc:c8:53:a4: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:86:1F:53:A6:EA:B2:A0:FA:7A:5D:10:38:6D:FB:47:AD:A5:D5:E5 X509v3 Authority Key Identifier: keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:1b:f7:f2:40:95:6e:24:a0:ba:e3:bb:f2:98:32:0a:58:51: d3:5d:40:1e:2f:32:98:f1:f4:81:85:c3:6c:93:fb:85:3a:fb: 7d:10:5d:92:4d:f0:21:97:da:06:f3:f0:ba:7a:00:f6:81:72: e8:df:36:c7:de:85:52:09:f7:fb:b7:ea:32:29:24:8f:a0:8e: c6:e9:a9:80:62:a8:af:3e:23:88:dc:21:4a:f3:38:94:0c:d4: 18:19:ef:9c:dd:72:b4:58:e6:be:bf:38:50:be:7f:e7:09:d0: ac:c5:54:eb:e9:d9:b1:e6:1e:00:45:df:21:9c:45:28:6d:cf: b2:d0:e9:90:b3:69:92:fc:8f:b6:f7:98:a8:69:a9:1a:03:e7: e6:cb:72:f7:c5:84:57:bb:1c:ff:d6:9f:61:75:23:84:96:0f: a7:b5:fc:42:d8:ca:f0:36:f9:d5:9f:5b:33:d5:29:cf:c6:da: 53:53:51:0b:33:c7:dc:1d:2b:c7:64:31:28:b6:f6:9c:e0:84: b5:e8:e0:28:3b:14:c9:b4:cb:a8:c1:b2:3e:a3:f2:c0:d3:35: f4:bc:a8:11:c9:99:d3:0d:1d:d9:ec:bc:1a:f9:27:b7:14:22: 50:59:fe:b8:ff:7a:8d:1d:a9:e3:87:6c:3a:64:9c:96:2a:ca: 35:23:f3:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeo+7R4fPioOTi7Gu/YQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWJiYTBiMDA1MmFlN2JkMzQ5MjM1NjQ3YTJlZDczMTUw NmNjYWEwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD EyhkNzg2MWY1M2E2ZWFiMmEwZmE3YTVkMTAzODZkZmI0N2FkYTVkNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/UhWmasnK/OlTCEjXMECbXF5Okd oZZeZ2pvcCMJNfnxLLP7YxgZwWKvIieBWYZnKi4rrzJpP8aR4SgzoDZOMO5DnI/L S4vjCRvSq5pWLvilC1Svi+h2ZDln4OjxB2lr+yXgmTlW+TMTaNIwGHCWnI6XrqJm QScGrxiHWT/PRC1tXYfBnk7o0c/YBXP5Wxtj8mmXjDhe+B/2isGQL8rlBn0pkmHD SC+KA8tqP6VPSzJzvAWAMF24M6GCyO2+EMLqjFYV8OCxFCaUngqgleOdEw2paI8T 323nw50ccbs1OpvomiLCU2Wm2RC8bccbr6wDsOsIef4xUsNTp9zIU6TqCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeGH1Om6rKg+npdEDht+0etpdXlMB8GA1UdIwQY MBaAFKyrugsAUq5700kjVkei7XMVBsyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85M2RiZTctZGIyZi00YzM1LWIwYTct ZTViNDk5NDdlZDA3LzEvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85M2RiZTctZGIyZi00YzM1LWIwYTctZTViNDk5NDdlZDA3 LzEvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxv38kCV biSguuO78pgyClhR011AHi8ymPH0gYXDbJP7hTr7fRBdkk3wIZfaBvPwunoA9oFy 6N82x96FUgn3+7fqMikkj6COxumpgGKorz4jiNwhSvM4lAzUGBnvnN1ytFjmvr84 UL5/5wnQrMVU6+nZseYeAEXfIZxFKG3PstDpkLNpkvyPtveYqGmpGgPn5sty98WE V7sc/9afYXUjhJYPp7X8QtjK8Db51Z9bM9Upz8baU1NRCzPH3B0rx2QxKLb2nOCE tejgKDsUybTLqMGyPqPywNM19LyoEcmZ0w0d2ey8GvkntxQiUFn+uP96jR2p44ds OmSclirKNSPzkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:54 2025 by rpki-client