This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json) Hash identifier: tWLtZTZ3mhY7bzvX+71d+rZH0FRoIQdJnAZp99NKpU8= Subject key identifier: 3E:75:28:C6:7C:2E:A6:18:60:6E:3C:7B:B5:77:47:56:84:40:81:4B Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7 Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7 Certificate serial: 019B2B8B1482B7BFD6629BC5C86928181865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft Manifest number: 11B6 Signing time: Wed 17 Dec 2025 09:01:33 +0000 Manifest this update: Wed 17 Dec 2025 09:01:33 +0000 Manifest next update: Thu 18 Dec 2025 09:01:33 +0000 Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: oob9/bbQcGF6mt0Egoj0HXe9YNhWZrbn7z1nZWaHCPE=) 2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:14:82:b7:bf:d6:62:9b:c5:c8:69:28:18:18:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7 Validity Not Before: Dec 17 09:01:33 2025 GMT Not After : Dec 18 09:01:33 2025 GMT Subject: CN=3e7528c67c2ea618606e3c7bb57747568440814b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:04:d2:bf:a5:c6:9c:8e:6a:9b:5e:48:7b: d8:00:00:6f:c8:f0:61:cc:ec:f2:ea:ad:3e:69:75: e6:7f:6f:6f:43:ea:23:e6:50:2c:28:bb:a9:b1:86: a5:88:55:8c:13:9f:3a:83:26:b9:89:8c:aa:df:b5: ad:b2:1d:37:5c:69:2c:ea:0e:04:c7:ab:0e:de:61: cf:09:be:6a:71:cd:02:90:b1:70:b9:59:e9:19:29: ac:83:9f:15:29:99:09:c8:36:8d:cd:f1:0d:43:28: 30:e5:fe:7c:38:c9:08:d9:67:4a:a9:e9:91:17:b8: fb:ca:26:6f:a2:45:4b:6e:62:e4:6f:8b:0c:97:e1: de:5c:6c:44:55:1c:05:43:ad:1d:95:3f:bf:a8:32: c0:45:e9:58:39:6a:96:82:7b:9e:44:93:05:b9:f9: 51:e3:99:09:f9:fe:03:95:41:6f:f3:be:8d:ac:69: 5c:73:c5:5c:66:03:af:64:c5:a2:ef:25:44:15:fd: f9:65:97:0e:92:9f:45:33:db:44:ec:a4:26:6f:98: 7b:cf:93:ac:7d:6c:33:78:30:2b:30:b6:4c:0c:ec: 41:af:14:ac:62:62:d4:c4:36:e3:2b:91:05:41:a9: ff:46:b0:1b:10:fd:6a:c7:77:98:eb:92:b4:5d:ef: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:75:28:C6:7C:2E:A6:18:60:6E:3C:7B:B5:77:47:56:84:40:81:4B X509v3 Authority Key Identifier: keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d8:94:5a:33:12:fe:a6:b8:b5:01:2e:19:60:6d:53:b6:ba: 54:fc:46:d3:1b:ff:66:9c:fa:58:f6:ab:cc:0b:59:d6:bb:1b: df:c6:24:ed:ce:54:56:d3:1b:16:1d:f8:0d:26:ea:29:d7:a2: e3:dc:a9:38:58:b4:65:ed:23:c6:29:1e:ef:3d:b1:ad:a1:e4: 82:14:31:79:16:5e:96:e2:a7:0f:07:99:22:bd:3a:74:1c:1f: 98:84:f7:31:33:63:70:b1:3e:1f:76:9f:87:eb:ba:90:8d:88: 7a:0b:0c:22:68:20:5d:ed:eb:69:c7:86:18:7f:b0:d3:30:8b: 94:08:91:3f:4d:d7:59:e0:c9:94:00:ae:1a:5e:89:b8:a4:9e: 62:41:59:76:50:93:e9:66:7d:e1:c2:bb:8a:e7:eb:72:ca:f0: f9:24:54:2c:5e:9b:87:4e:53:95:5a:70:94:f3:35:f1:a8:5c: 97:c9:51:58:d9:37:72:08:2d:cf:20:41:91:d7:90:a2:4a:cd: f6:91:2a:4e:aa:91:de:29:da:d9:30:9d:73:1e:fe:55:0e:cd: 41:0e:fb:e2:f1:40:4d:b1:70:ad:3d:cf:69:9a:e2:1a:e8:d8: fb:7b:ac:28:87:e3:65:5f:e7:89:0f:c3:d2:7d:e1:7b:56:f4: d9:f0:f5:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrixSCt7/WYpvFyGkoGBhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGU4YzYzOWFlYWYxMzJhMmZjMzNmY2U2ZTgxNDM0ZGZj YTY0YjcwHhcNMjUxMjE3MDkwMTMzWhcNMjUxMjE4MDkwMTMzWjAzMTEwLwYDVQQD EygzZTc1MjhjNjdjMmVhNjE4NjA2ZTNjN2JiNTc3NDc1Njg0NDA4MTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZoE0r+lxpyOapteSHvYAABvyPBh zOzy6q0+aXXmf29vQ+oj5lAsKLupsYaliFWME586gya5iYyq37Wtsh03XGks6g4E x6sO3mHPCb5qcc0CkLFwuVnpGSmsg58VKZkJyDaNzfENQygw5f58OMkI2WdKqemR F7j7yiZvokVLbmLkb4sMl+HeXGxEVRwFQ60dlT+/qDLARelYOWqWgnueRJMFuflR 45kJ+f4DlUFv876NrGlcc8VcZgOvZMWi7yVEFf35ZZcOkp9FM9tE7KQmb5h7z5Os fWwzeDArMLZMDOxBrxSsYmLUxDbjK5EFQan/RrAbEP1qx3eY65K0Xe/T0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD51KMZ8LqYYYG48e7V3R1aEQIFLMB8GA1UdIwQY MBaAFK5OjGOa6vEyovwz/OboFDTfymS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MWQ0ZTgtZmE2ZS00NTA1LWI1N2Yt YzdjZTJlNDQ1MGE3LzEvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85MWQ0ZTgtZmE2ZS00NTA1LWI1N2YtYzdjZTJlNDQ1MGE3 LzEvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdiUWjMS /qa4tQEuGWBtU7a6VPxG0xv/Zpz6WParzAtZ1rsb38Yk7c5UVtMbFh34DSbqKdei 49ypOFi0Ze0jxike7z2xraHkghQxeRZeluKnDweZIr06dBwfmIT3MTNjcLE+H3af h+u6kI2IegsMImggXe3raceGGH+w0zCLlAiRP03XWeDJlACuGl6JuKSeYkFZdlCT 6WZ94cK7iufrcsrw+SRULF6bh05TlVpwlPM18ahcl8lRWNk3cggtzyBBkdeQokrN 9pEqTqqR3ina2TCdcx7+VQ7NQQ774vFATbFwrT3PaZriGujY+3usKIfjZV/niQ/D 0n3he1b02fD1DQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:30:29 2025 by rpki-client