This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json) Hash identifier: lfx9dcmZrvnxh719W0kRssVZvFfJuK/Mshrf+Qb+tkc= Subject key identifier: B0:76:B1:D9:25:A3:6E:64:20:5A:5C:F4:E3:EF:77:F7:F5:BB:E1:7C Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Certificate serial: 019B32D713F10D25EE61371ECB731903F03D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft Manifest number: 0E95 Signing time: Thu 18 Dec 2025 19:01:54 +0000 Manifest this update: Thu 18 Dec 2025 19:01:54 +0000 Manifest next update: Fri 19 Dec 2025 19:01:54 +0000 Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=) 2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: dnvnC/RwWCivT59pA6V2xq4SVt28/+l6J27EB5BokiY=) 3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:13:f1:0d:25:ee:61:37:1e:cb:73:19:03:f0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Validity Not Before: Dec 18 19:01:54 2025 GMT Not After : Dec 19 19:01:54 2025 GMT Subject: CN=b076b1d925a36e64205a5cf4e3ef77f7f5bbe17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:49:8c:2d:c4:96:d4:fc:ef:4c:50:3a:83: 66:60:4b:5f:2e:e3:9e:ac:80:45:f8:84:33:49:00: 79:5d:60:0a:51:e0:3a:ed:d7:13:dc:d3:8b:ba:a1: 56:40:38:af:44:36:f1:26:9e:f5:a8:38:7e:50:68: b7:e6:d9:9f:1c:6d:a2:cc:8c:c2:e0:78:cc:43:b6: 41:5f:2c:3e:78:c2:c8:43:27:35:e0:b0:c2:f9:db: 6e:3a:4e:ed:40:52:c7:1e:fb:13:1f:a6:57:86:01: 6d:27:50:26:1b:88:ec:2f:36:2e:ab:ab:80:c7:6f: 32:b6:9e:ed:07:91:18:a7:89:e0:a9:fc:65:ff:86: 1d:a1:a6:1d:2d:97:b2:3e:b0:3e:75:06:b0:9a:5d: 37:08:6a:1e:ea:38:1c:c0:b1:fa:a9:61:f5:32:21: c9:f5:60:36:8f:18:b2:3c:6f:60:30:e2:88:80:d9: 40:d1:1b:e8:f1:ea:c2:83:38:67:6e:36:45:c6:ea: be:0d:22:03:a7:fc:e1:22:b1:ff:c5:77:be:44:1c: 69:87:8a:53:74:47:7b:a4:a8:a0:94:c9:9c:62:7f: 2a:f4:d8:15:90:fe:a0:69:bf:51:48:c5:10:59:9d: 87:50:38:2e:58:78:18:96:29:c6:9c:6d:81:ca:89: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:76:B1:D9:25:A3:6E:64:20:5A:5C:F4:E3:EF:77:F7:F5:BB:E1:7C X509v3 Authority Key Identifier: keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3f:e9:c0:16:11:8b:bf:fc:a6:47:58:23:57:49:e0:93:1d: 6b:03:f8:64:19:46:2a:61:7e:18:f5:67:df:0f:a5:21:c3:aa: 65:e9:59:68:d1:3b:7b:95:80:39:7b:91:47:4f:86:b4:55:89: 78:6d:fd:9f:ad:8f:6f:1d:5e:81:d9:a9:0a:33:76:a4:9e:4f: c4:2e:44:18:b4:e4:a5:70:fd:83:73:71:cd:a9:55:37:dc:85: 61:75:6a:7c:52:6f:51:3d:5e:a7:82:9f:10:7f:a1:80:2a:30: 10:4e:f5:71:78:a2:a8:17:4f:bd:9f:cc:25:ed:77:f6:9e:ac: 30:da:ed:d7:7d:d3:22:26:d9:4c:38:83:df:3b:cd:b9:51:60: ba:86:9b:cd:45:99:75:f2:86:c2:b7:73:d6:0f:f9:db:39:dc: 22:c9:6d:38:06:37:4b:71:0e:34:c6:65:be:c5:5c:48:18:db: 82:8c:25:75:91:08:dd:96:10:a5:42:da:61:4a:bb:f5:10:6a: 22:7f:51:b2:d7:30:37:10:ee:99:6c:5b:aa:73:c7:b7:dc:3d: 4c:81:09:bb:3c:b1:ed:37:ae:7b:3e:79:26:ab:d1:c2:1b:6e: 59:ff:40:10:e5:9a:95:84:2f:75:7f:6a:cf:4a:ab:7f:59:99: be:dc:23:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xPxDSXuYTcey3MZA/A9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzI0NGJlNmIzYWZmYjZkNGU1NDdmMmUxZTNjNWVhYzFi MjZhYjIwHhcNMjUxMjE4MTkwMTU0WhcNMjUxMjE5MTkwMTU0WjAzMTEwLwYDVQQD EyhiMDc2YjFkOTI1YTM2ZTY0MjA1YTVjZjRlM2VmNzdmN2Y1YmJlMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZxJjC3EltT870xQOoNmYEtfLuOe rIBF+IQzSQB5XWAKUeA67dcT3NOLuqFWQDivRDbxJp71qDh+UGi35tmfHG2izIzC 4HjMQ7ZBXyw+eMLIQyc14LDC+dtuOk7tQFLHHvsTH6ZXhgFtJ1AmG4jsLzYuq6uA x28ytp7tB5EYp4ngqfxl/4YdoaYdLZeyPrA+dQawml03CGoe6jgcwLH6qWH1MiHJ 9WA2jxiyPG9gMOKIgNlA0Rvo8erCgzhnbjZFxuq+DSIDp/zhIrH/xXe+RBxph4pT dEd7pKiglMmcYn8q9NgVkP6gab9RSMUQWZ2HUDguWHgYlinGnG2Byolh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB2sdklo25kIFpc9OPvd/f1u+F8MB8GA1UdIwQY MBaAFJPCRL5rOv+21OVH8uHjxerBsmqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMt NjZkNzRlNzNmMjU0LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMtNjZkNzRlNzNmMjU0 LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT/pwBYR i7/8pkdYI1dJ4JMdawP4ZBlGKmF+GPVn3w+lIcOqZelZaNE7e5WAOXuRR0+GtFWJ eG39n62Pbx1egdmpCjN2pJ5PxC5EGLTkpXD9g3NxzalVN9yFYXVqfFJvUT1ep4Kf EH+hgCowEE71cXiiqBdPvZ/MJe139p6sMNrt133TIibZTDiD3zvNuVFguoabzUWZ dfKGwrdz1g/52zncIsltOAY3S3EONMZlvsVcSBjbgowldZEI3ZYQpULaYUq79RBq In9RstcwNxDumWxbqnPHt9w9TIEJuzyx7Teuez55JqvRwhtuWf9AEOWalYQvdX9q z0qrf1mZvtwjNw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:22:35 2025 by rpki-client