This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft File: k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json) Hash identifier: Dv8RfU0JfbfvsgkdCMNeyMQ5NR/bfwer3HFeGwuhMkg= Subject key identifier: A8:FA:13:94:F5:A2:3C:C4:16:5B:A2:15:AF:A3:EE:B4:F1:98:37:DE Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc Certificate serial: 019AF163F56387D8B46085630F995CCF17FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft Manifest number: 0699 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: 3mhUHTDwirkASDro6wKMo1llreY.roa (hash: QT1aX+pCloLwOlM8acjw8SNDGfs+bhgEOJUGdyQm/5A=) 2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: TnR4maF0UZVPSXhOfpZHNN/V1McgmJlTatJksbXp0xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f5:63:87:d8:b4:60:85:63:0f:99:5c:cf:17:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=a8fa1394f5a23cc4165ba215afa3eeb4f19837de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:7e:fe:d4:51:61:2a:f7:5c:c3:5b:84:21: 13:57:97:2f:4e:e0:d5:9e:ab:32:48:e7:82:07:e7: 71:a0:42:49:55:3a:56:5a:d8:44:52:fd:81:91:15: 77:c5:71:12:5f:a1:3c:6c:3e:f0:5d:ab:4a:76:6c: d0:a4:d3:93:0f:c8:02:ed:2b:b8:b4:a9:e7:80:3e: 93:04:c9:92:a2:66:00:10:4b:f7:4a:1b:b2:bf:bc: 6b:a4:44:d3:2a:ea:6b:6d:72:e3:cb:8f:e1:e2:6b: e7:7e:55:25:b8:8f:84:ca:3a:86:94:87:f4:a4:74: 1c:14:fa:73:e7:ad:a1:07:21:a0:fc:d9:cd:fa:5f: 09:f6:8b:b9:cd:b5:2c:fa:1f:1f:c8:8a:98:cb:e6: 8b:09:f5:6b:18:4e:91:eb:3a:fb:62:e4:17:67:2d: 3a:1e:6d:3a:b1:a6:9e:9c:fa:86:ec:a9:d6:3b:bb: c4:b4:43:13:38:0c:62:02:c3:61:96:c5:69:4c:ba: ea:87:be:30:0b:e3:c9:05:2b:88:48:e3:96:78:85: 91:1e:0d:1f:6c:35:29:ab:73:8b:74:d6:ad:b0:ee: 03:61:2e:79:c8:9c:71:4c:17:d1:c0:53:7b:7e:4e: 7a:3b:f6:0c:bc:c0:0f:d9:da:3f:91:61:c4:b1:c6: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FA:13:94:F5:A2:3C:C4:16:5B:A2:15:AF:A3:EE:B4:F1:98:37:DE X509v3 Authority Key Identifier: keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:65:68:cf:1c:a1:4d:18:6a:55:be:70:72:b3:0f:28:80:8f: 01:72:44:3b:89:f2:aa:fd:e9:60:34:80:3e:cf:73:a3:78:13: 6b:0c:b7:4a:4d:cb:43:42:09:bf:57:07:5b:89:5f:63:12:57: 45:e0:d4:8f:99:af:90:59:58:31:2c:d2:10:98:b2:40:bf:34: bd:9c:1c:d8:3e:d0:f4:30:8d:5e:93:53:00:9a:8e:2a:fd:1c: a3:59:0e:5c:21:f4:9c:99:a3:74:86:3d:5e:00:a7:92:d4:50: 70:bd:3a:8c:13:85:ca:be:fd:f8:98:c8:1c:a8:6c:14:1a:09: f8:79:77:e0:5b:95:ef:24:5b:85:6f:bc:4d:f8:65:cf:5b:7b: 6d:13:85:02:43:3d:58:e5:0b:ab:64:fa:6a:16:7d:75:59:7e: 78:62:52:bc:7b:66:2a:70:f2:65:e9:26:69:21:68:8e:98:ec: 6c:46:90:a9:f8:d6:57:71:84:39:98:2d:4c:fc:1a:8e:23:1a: c2:bf:f4:53:24:ec:02:a8:e3:9b:89:88:27:d1:ed:f5:50:cb: 15:19:9c:c1:b1:fe:67:50:ff:f7:da:2e:ce:fb:4f:f6:cc:22: 7a:4c:35:94:48:46:63:19:e2:dc:9d:15:84:8d:b7:c9:26:16: 2c:c4:a3:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Vjh9i0YIVjD5lczxf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTlmOTA4MzBmZTIyNmM5MDhlYWRkYjY3YjViOTA5NmM1 ZTkxYmMwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EyhhOGZhMTM5NGY1YTIzY2M0MTY1YmEyMTVhZmEzZWViNGYxOTgzN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgZ+/tRRYSr3XMNbhCETV5cvTuDV nqsySOeCB+dxoEJJVTpWWthEUv2BkRV3xXESX6E8bD7wXatKdmzQpNOTD8gC7Su4 tKnngD6TBMmSomYAEEv3Shuyv7xrpETTKuprbXLjy4/h4mvnflUluI+EyjqGlIf0 pHQcFPpz562hByGg/NnN+l8J9ou5zbUs+h8fyIqYy+aLCfVrGE6R6zr7YuQXZy06 Hm06saaenPqG7KnWO7vEtEMTOAxiAsNhlsVpTLrqh74wC+PJBSuISOOWeIWRHg0f bDUpq3OLdNatsO4DYS55yJxxTBfRwFN7fk56O/YMvMAP2do/kWHEscZyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj6E5T1ojzEFluiFa+j7rTxmDfeMB8GA1UdIwQY MBaAFJOp+Qgw/iJskI6t22e1uQlsXpG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQt MDY4MDZhMGJkMTgxLzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQtMDY4MDZhMGJkMTgx LzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimVozxyh TRhqVb5wcrMPKICPAXJEO4nyqv3pYDSAPs9zo3gTawy3Sk3LQ0IJv1cHW4lfYxJX ReDUj5mvkFlYMSzSEJiyQL80vZwc2D7Q9DCNXpNTAJqOKv0co1kOXCH0nJmjdIY9 XgCnktRQcL06jBOFyr79+JjIHKhsFBoJ+Hl34FuV7yRbhW+8Tfhlz1t7bROFAkM9 WOULq2T6ahZ9dVl+eGJSvHtmKnDyZekmaSFojpjsbEaQqfjWV3GEOZgtTPwajiMa wr/0UyTsAqjjm4mIJ9Ht9VDLFRmcwbH+Z1D/99ouzvtP9swiekw1lEhGYxni3J0V hI23ySYWLMSjnw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:00 2025 by rpki-client