This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft File: k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft (raw, json) Hash identifier: 5e6mqk1+/r/Axdkilfky6pbttZC8IIWXcM6+fll1SLM= Subject key identifier: C4:7D:FD:47:47:2D:A6:E0:A1:48:82:9B:DE:C5:50:75:08:B7:66:06 Authority key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39 Certificate issuer: /CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639 Certificate serial: 019AF2E441885D4E8B9CD1D68E5BD7BC149E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft Manifest number: 8C Signing time: Sat 06 Dec 2025 09:00:36 +0000 Manifest this update: Sat 06 Dec 2025 09:00:36 +0000 Manifest next update: Sun 07 Dec 2025 09:00:36 +0000 Files and hashes: 1: jj1_6ec2f2AWeD40St3we1tbDXE.roa (hash: dC+bz8YnKwWKOYnAkcDkCn/jxU0wAcfSc4U4fn0FwDs=) 2: k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl (hash: B2r4Dn74hduqALziZrJ73ardcPFLpwZsCfxLS5T/fgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:41:88:5d:4e:8b:9c:d1:d6:8e:5b:d7:bc:14:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639 Validity Not Before: Dec 6 09:00:36 2025 GMT Not After : Dec 7 09:00:36 2025 GMT Subject: CN=c47dfd47472da6e0a148829bdec5507508b76606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:d4:cc:c4:5a:c1:dd:eb:b4:03:a3:53:b6: 0e:6a:c7:37:09:b0:4a:c3:ba:1a:e9:d5:af:61:d0: db:14:ef:f9:e4:70:22:5a:82:12:e8:24:ac:03:91: 5a:64:e8:48:ff:b4:44:8f:e2:fe:3c:c4:1a:a5:e6: 24:c9:fa:de:57:32:6f:30:ad:f2:dc:17:57:77:ab: 27:cb:45:71:85:fa:88:58:2e:d5:02:35:06:26:7c: 6c:46:1a:cb:7b:82:1c:b1:54:43:22:81:9b:07:fa: 21:69:ef:a6:8b:d4:31:71:e6:81:fe:e8:ad:1f:5c: 4b:63:d0:70:1f:b7:4f:bf:d3:94:4a:2e:1a:63:0d: ee:58:4e:95:00:be:6e:c3:4f:88:9b:a4:26:82:0b: 80:53:a8:d5:a9:e6:a8:99:c4:38:a5:3a:7d:cc:17: e6:c1:90:13:e8:8f:44:35:91:9a:6b:1d:b2:48:7f: 68:12:f2:9c:be:c2:06:fb:06:83:45:8f:6f:0f:6c: aa:b7:06:25:f7:b2:08:e2:4a:61:bb:2a:e3:d5:b3: 23:a7:cd:5f:6e:34:0b:f9:ac:eb:19:7b:02:47:05: 48:85:41:2d:73:53:7d:01:ff:4e:aa:9c:18:01:52: 08:69:92:ff:d0:01:2f:72:c9:04:02:83:da:9a:82: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:FD:47:47:2D:A6:E0:A1:48:82:9B:DE:C5:50:75:08:B7:66:06 X509v3 Authority Key Identifier: keyid:93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:19:59:3f:1e:fa:17:d2:24:ec:b4:71:c1:c6:67:34:a1:28: 96:30:ed:bc:02:6b:b9:a0:8e:2a:32:6d:21:30:44:58:49:05: 25:f0:a9:00:18:af:6e:8f:ea:1d:b3:fa:4a:69:bd:58:39:86: e1:72:78:b8:7f:ca:0d:05:4a:a2:e5:e5:cc:9e:1c:94:c3:74: ae:dc:91:e1:25:fd:47:69:35:45:77:e9:59:15:b8:8c:2b:ef: 85:ec:c0:00:9e:7a:1b:aa:fb:91:0c:3f:f9:76:3e:51:6e:8a: 32:06:2b:31:f8:18:01:8c:e2:ad:67:27:cb:1f:5b:45:76:fc: 8c:04:77:5d:3a:0a:f3:61:3e:3f:c9:90:50:e0:b7:b6:3c:c3: 40:63:75:a6:37:63:ae:d7:c1:8a:b7:9c:2f:5e:84:bf:9d:8c: 74:7d:4e:c8:b2:24:6f:b9:aa:48:20:59:e9:96:42:6a:4b:f5: 14:61:02:c8:ba:5f:ca:38:42:8a:c1:e5:e7:99:3d:52:24:45: b3:75:cb:b9:51:c9:03:e1:30:03:f5:2c:81:9f:03:3d:30:78: 4d:f0:a9:03:48:02:ec:dc:3a:96:fc:45:19:05:2e:cc:d4:c5: ad:d5:d4:e9:66:8e:86:07:e3:db:2c:01:e4:10:a7:57:db:24: 57:0b:a4:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EGIXU6LnNHWjlvXvBSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTNmYTRiNzhlNTBmNGFmOTdiZTI4NWUyZTkxMGE1ZDFl ZGM2MzkwHhcNMjUxMjA2MDkwMDM2WhcNMjUxMjA3MDkwMDM2WjAzMTEwLwYDVQQD EyhjNDdkZmQ0NzQ3MmRhNmUwYTE0ODgyOWJkZWM1NTA3NTA4Yjc2NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk3UzMRawd3rtAOjU7YOasc3CbBK w7oa6dWvYdDbFO/55HAiWoIS6CSsA5FaZOhI/7REj+L+PMQapeYkyfreVzJvMK3y 3BdXd6sny0VxhfqIWC7VAjUGJnxsRhrLe4IcsVRDIoGbB/ohae+mi9QxceaB/uit H1xLY9BwH7dPv9OUSi4aYw3uWE6VAL5uw0+Im6QmgguAU6jVqeaomcQ4pTp9zBfm wZAT6I9ENZGaax2ySH9oEvKcvsIG+waDRY9vD2yqtwYl97II4kphuyrj1bMjp81f bjQL+azrGXsCRwVIhUEtc1N9Af9OqpwYAVIIaZL/0AEvcskEAoPamoKFkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR9/UdHLabgoUiCm97FUHUIt2YGMB8GA1UdIwQY MBaAFJOj+kt45Q9K+XviheLpEKXR7cY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNTJhZTEtMDlhNi00NDU4LTlkMDYt MGI2OTA4NzM3ZDdmLzEvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNTJhZTEtMDlhNi00NDU4LTlkMDYtMGI2OTA4NzM3ZDdm LzEvazZQNlMzamxEMHI1ZS1LRjR1a1FwZEh0eGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBlZPx76 F9Ik7LRxwcZnNKEoljDtvAJruaCOKjJtITBEWEkFJfCpABivbo/qHbP6Smm9WDmG 4XJ4uH/KDQVKouXlzJ4clMN0rtyR4SX9R2k1RXfpWRW4jCvvhezAAJ56G6r7kQw/ +XY+UW6KMgYrMfgYAYzirWcnyx9bRXb8jAR3XToK82E+P8mQUOC3tjzDQGN1pjdj rtfBirecL16Ev52MdH1OyLIkb7mqSCBZ6ZZCakv1FGECyLpfyjhCisHl55k9UiRF s3XLuVHJA+EwA/UsgZ8DPTB4TfCpA0gC7Nw6lvxFGQUuzNTFrdXU6WaOhgfj2ywB 5BCnV9skVwukLg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:39 2025 by rpki-client