This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json) Hash identifier: KVeVs7Eb943t9yqR1OYlhVDMJdXrYktSHgLIb7SiBxs= Subject key identifier: B0:D9:A4:12:31:13:0F:09:EB:4A:83:92:EF:AD:B0:74:FA:C3:C5:C0 Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a Certificate serial: 019AF389475021BD1DBDCE1B340C694CF8AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft Manifest number: 11C7 Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=) 2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: 88qYAe/YCvnU/qlBT2le/opFHZp6V5jVKJyoR7vYce0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:47:50:21:bd:1d:bd:ce:1b:34:0c:69:4c:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=b0d9a41231130f09eb4a8392efadb074fac3c5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:78:ad:37:82:f9:7d:c3:0b:3a:96:c6:a4: 4d:d9:4c:8e:8a:6b:79:f2:80:95:5d:a1:dc:d1:04: 7a:f8:9e:b3:f5:65:6a:18:45:2d:be:c9:80:40:6c: 0d:c5:50:8a:47:07:45:aa:9b:50:ae:fb:3c:47:2a: 5e:ca:b1:65:de:cb:1c:b3:d6:15:fa:12:af:7e:61: 6e:d7:fa:b4:22:10:95:61:6f:b5:c8:a9:43:6b:75: c0:3e:d4:8a:38:24:f8:24:88:9a:5e:d6:04:dd:6a: 51:a6:1d:ed:a9:12:93:6c:0f:97:80:af:17:9c:86: 10:16:ed:02:6e:ee:dc:1c:13:80:12:07:63:f7:70: 56:2d:2a:bc:f3:4e:ae:b0:be:e3:fa:31:62:f9:78: 83:ce:c9:54:9c:6f:fc:70:b5:24:08:35:6e:da:2b: 31:a3:6b:05:c1:a9:0d:ce:e7:3c:96:29:3a:65:2b: 13:09:ca:4f:88:89:a1:1f:39:5f:e6:81:92:b2:af: 18:42:a6:ae:61:15:4a:ca:ed:75:5e:c4:44:92:f5: cb:c0:68:f1:20:20:5f:03:13:ad:d3:67:bf:bb:e4: db:aa:ea:85:6d:5b:4e:8f:b5:8a:35:a3:97:15:de: 7b:29:cd:c8:6d:0a:bf:e8:0e:e3:99:13:14:f2:83: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D9:A4:12:31:13:0F:09:EB:4A:83:92:EF:AD:B0:74:FA:C3:C5:C0 X509v3 Authority Key Identifier: keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:63:ca:68:38:dd:b5:3d:06:3f:d3:3a:7c:e3:27:c0:f7:6f: 94:3d:00:90:e4:b5:83:53:c3:6b:c6:97:4a:24:1c:a0:a7:92: 43:b1:b2:9f:99:95:5d:bf:f9:4b:2b:76:ea:e7:17:d2:d7:2a: c9:a3:0d:1e:cd:78:21:e5:72:53:88:f9:eb:e3:70:ae:ec:82: f5:ee:5f:8c:93:0e:7f:9c:f3:bd:78:b7:a8:49:9a:44:94:55: 7f:5a:9f:7b:e0:47:04:41:69:c4:c1:fb:fc:df:1b:e6:4d:9b: 6d:17:29:3e:cd:28:de:28:44:5c:98:41:a7:92:1e:a8:a2:6f: db:d2:26:e9:f9:51:b4:b0:47:04:92:d3:f0:ae:83:4b:96:ee: af:4c:a1:c6:ae:0e:7f:11:13:69:cf:79:f3:1e:eb:cb:7e:fa: 2b:02:c6:37:92:e8:e0:c3:18:e9:00:e4:34:d3:8c:8d:17:e3: 34:01:1d:b1:52:9a:fb:61:ed:6e:a4:88:3e:5f:c2:26:fa:6f: 83:09:42:e2:41:ba:42:a7:dd:d5:de:55:24:6c:b1:2f:9c:dd: 93:8f:8c:19:07:63:5a:8f:0f:62:0d:fe:76:ba:08:a1:23:83: 7b:95:6e:78:4c:06:18:2c:9a:9d:f5:60:2f:a5:61:f6:d2:ab: f7:45:64:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUdQIb0dvc4bNAxpTPitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZmU4YTk1ZTU1MjlkNzhlNzIwNDdkNGUzNWQxYTdlOWFk NWMxMWEwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhiMGQ5YTQxMjMxMTMwZjA5ZWI0YTgzOTJlZmFkYjA3NGZhYzNjNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ54rTeC+X3DCzqWxqRN2UyOimt5 8oCVXaHc0QR6+J6z9WVqGEUtvsmAQGwNxVCKRwdFqptQrvs8RypeyrFl3sscs9YV +hKvfmFu1/q0IhCVYW+1yKlDa3XAPtSKOCT4JIiaXtYE3WpRph3tqRKTbA+XgK8X nIYQFu0Cbu7cHBOAEgdj93BWLSq8806usL7j+jFi+XiDzslUnG/8cLUkCDVu2isx o2sFwakNzuc8lik6ZSsTCcpPiImhHzlf5oGSsq8YQqauYRVKyu11XsREkvXLwGjx ICBfAxOt02e/u+TbquqFbVtOj7WKNaOXFd57Kc3IbQq/6A7jmRMU8oMO0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDZpBIxEw8J60qDku+tsHT6w8XAMB8GA1UdIwQY MBaAFJP+ipXlUp145yBH1ONdGn6a1cEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAt ZmE3MDlhMjNhYzc0LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAtZmE3MDlhMjNhYzc0 LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWPKaDjd tT0GP9M6fOMnwPdvlD0AkOS1g1PDa8aXSiQcoKeSQ7Gyn5mVXb/5Syt26ucX0tcq yaMNHs14IeVyU4j56+NwruyC9e5fjJMOf5zzvXi3qEmaRJRVf1qfe+BHBEFpxMH7 /N8b5k2bbRcpPs0o3ihEXJhBp5IeqKJv29Im6flRtLBHBJLT8K6DS5bur0yhxq4O fxETac958x7ry376KwLGN5Lo4MMY6QDkNNOMjRfjNAEdsVKa+2HtbqSIPl/CJvpv gwlC4kG6Qqfd1d5VJGyxL5zdk4+MGQdjWo8PYg3+droIoSODe5VueEwGGCyanfVg L6Vh9tKr90VkxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:10 2025 by rpki-client