This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json) Hash identifier: nA1xg149rqUn/LntcG7bZdI7jLs9UGHQEZsqyeNYYxM= Subject key identifier: 91:D0:71:87:35:2D:A9:FB:67:1A:4F:E1:CC:08:E6:E3:6E:98:E6:8A Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7 Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7 Certificate serial: 019AF38940226890DD9745418C5CC9E8C936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft Manifest number: 1199 Signing time: Sat 06 Dec 2025 12:00:49 +0000 Manifest this update: Sat 06 Dec 2025 12:00:49 +0000 Manifest next update: Sun 07 Dec 2025 12:00:49 +0000 Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: 6XU51Fop4oEnQAm+pjZ+1N7uVv0HPe2sMvAJAsiCn5Y=) 2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:40:22:68:90:dd:97:45:41:8c:5c:c9:e8:c9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7 Validity Not Before: Dec 6 12:00:49 2025 GMT Not After : Dec 7 12:00:49 2025 GMT Subject: CN=91d07187352da9fb671a4fe1cc08e6e36e98e68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:91:7e:20:43:5c:a6:38:8e:78:c4:46:29:c8: 97:ed:ad:b4:8c:58:fe:3f:1c:63:d2:f1:b0:c1:ac: cb:a2:4d:5a:80:61:b0:1e:14:9c:ff:87:c4:53:09: 8e:a2:b1:ad:a2:c6:66:00:d8:78:0b:2d:33:d6:e7: 4b:8c:95:eb:6b:a2:b9:9e:53:6f:c6:19:21:58:1d: 2b:70:5d:65:87:87:42:75:1c:50:eb:29:3e:49:22: 33:18:19:30:7a:ea:9f:cb:a3:27:f7:f4:b5:07:1d: f9:df:8d:24:22:c1:4a:70:97:d9:37:63:13:ce:f0: f3:1d:43:67:e4:42:79:04:6d:d9:1e:58:f7:d7:98: cd:42:68:a3:08:86:91:20:f2:99:a2:ef:c0:b9:89: 42:7a:30:d4:53:e8:f4:5f:d8:67:28:8c:96:52:3e: dc:41:09:c4:98:a3:bb:5f:88:48:51:a6:48:37:51: 06:65:3a:92:a9:2d:03:a1:f0:e5:a5:42:46:46:7c: 78:e2:1b:74:e9:0c:85:7d:0c:54:16:c6:1f:fa:b6: 4b:c9:c1:18:ec:d7:6c:bc:34:af:06:bc:cb:d9:d8: dc:f5:ab:39:ac:65:11:fe:41:0b:41:32:25:35:a6: 96:1e:76:6f:90:15:2c:d2:ab:cb:49:84:f6:f8:84: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D0:71:87:35:2D:A9:FB:67:1A:4F:E1:CC:08:E6:E3:6E:98:E6:8A X509v3 Authority Key Identifier: keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d3:9b:97:27:3a:a8:69:38:c4:31:d9:f0:6b:4c:b3:99:c9: 5d:42:af:95:47:8a:59:d4:0d:ee:d5:c0:ea:2e:26:89:1b:58: 10:5b:fc:b4:ac:75:8c:78:fc:36:3a:11:eb:0f:db:68:9d:40: 0e:bf:31:08:57:46:45:75:a9:ae:27:ed:ea:c0:4b:3f:40:88: d3:30:ac:ba:82:54:a4:8c:a4:87:5d:15:9d:de:27:a4:ef:89: 35:3f:3c:2a:e6:ed:36:e2:e8:70:e7:32:fa:f2:be:76:2f:6b: 59:77:90:1c:da:6a:6b:cb:e6:4a:2e:d5:54:fd:89:bb:41:1f: dd:ad:4e:7a:37:e2:6a:c5:88:62:66:b1:69:ab:2c:ac:32:00: e4:e3:51:79:23:1e:81:4a:ec:8b:28:d2:06:4f:4f:a9:e9:cc: 77:ed:92:25:a0:11:85:c8:55:c5:02:3c:a5:ae:74:c8:3b:ee: a6:0a:b5:a2:67:98:c8:f6:26:de:93:2c:73:ce:b0:1a:78:b5: 13:cb:4c:41:df:77:8c:b7:14:ce:09:63:08:6b:8e:26:23:ae: 11:bc:a0:be:62:21:bc:b0:bb:02:f8:6d:4f:8c:e1:51:cd:8c: 3e:a6:8c:6f:85:58:17:66:ce:a0:d7:dd:a4:d4:28:55:21:62: e4:4b:7a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUAiaJDdl0VBjFzJ6Mk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGU4YzYzOWFlYWYxMzJhMmZjMzNmY2U2ZTgxNDM0ZGZj YTY0YjcwHhcNMjUxMjA2MTIwMDQ5WhcNMjUxMjA3MTIwMDQ5WjAzMTEwLwYDVQQD Eyg5MWQwNzE4NzM1MmRhOWZiNjcxYTRmZTFjYzA4ZTZlMzZlOThlNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JF+IENcpjiOeMRGKciX7a20jFj+ Pxxj0vGwwazLok1agGGwHhSc/4fEUwmOorGtosZmANh4Cy0z1udLjJXra6K5nlNv xhkhWB0rcF1lh4dCdRxQ6yk+SSIzGBkweuqfy6Mn9/S1Bx35340kIsFKcJfZN2MT zvDzHUNn5EJ5BG3ZHlj315jNQmijCIaRIPKZou/AuYlCejDUU+j0X9hnKIyWUj7c QQnEmKO7X4hIUaZIN1EGZTqSqS0DofDlpUJGRnx44ht06QyFfQxUFsYf+rZLycEY 7NdsvDSvBrzL2djc9as5rGUR/kELQTIlNaaWHnZvkBUs0qvLSYT2+IT/WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHQcYc1Lan7ZxpP4cwI5uNumOaKMB8GA1UdIwQY MBaAFK5OjGOa6vEyovwz/OboFDTfymS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MWQ0ZTgtZmE2ZS00NTA1LWI1N2Yt YzdjZTJlNDQ1MGE3LzEvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85MWQ0ZTgtZmE2ZS00NTA1LWI1N2YtYzdjZTJlNDQ1MGE3 LzEvcms2TVk1cnE4VEtpX0RQODV1Z1VOTl9LWkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9Oblyc6 qGk4xDHZ8GtMs5nJXUKvlUeKWdQN7tXA6i4miRtYEFv8tKx1jHj8NjoR6w/baJ1A Dr8xCFdGRXWprift6sBLP0CI0zCsuoJUpIykh10Vnd4npO+JNT88KubtNuLocOcy +vK+di9rWXeQHNpqa8vmSi7VVP2Ju0Ef3a1OejfiasWIYmaxaassrDIA5ONReSMe gUrsiyjSBk9PqenMd+2SJaARhchVxQI8pa50yDvupgq1omeYyPYm3pMsc86wGni1 E8tMQd93jLcUzgljCGuOJiOuEbygvmIhvLC7AvhtT4zhUc2MPqaMb4VYF2bOoNfd pNQoVSFi5Et6gw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:01 2025 by rpki-client