This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft File: k6lZwl27w2fKqJgl6L_1tLTxHJs.mft (raw, json) Hash identifier: zkFHz8cs9tnkHeAVTled7MKxHOFPXf4TC3FM/GPPK4Y= Subject key identifier: EC:B6:8D:FE:1E:DD:01:E7:EA:20:EF:28:63:0C:DE:06:EC:02:B8:02 Authority key identifier: 93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B Certificate issuer: /CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b Certificate serial: 019AF2766D99A7378AB4D7E4D7A2484E3755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft Manifest number: 09C7 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: eUO5ySVwcP9_G0v6iAlEgACbaIE.roa (hash: iPv7iNvhmBCQA31XIl1TxzIvDTe0R7e3zG8RhS2DPPs=) 2: k6lZwl27w2fKqJgl6L_1tLTxHJs.crl (hash: juzqHw7YsbKQzclFP8KwHAXtYUEo3Kp9jb0bbv9qQo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6d:99:a7:37:8a:b4:d7:e4:d7:a2:48:4e:37:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a959c25dbbc367caa89825e8bff5b4b4f11c9b Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=ecb68dfe1edd01e7ea20ef28630cde06ec02b802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:a3:03:5b:91:a9:86:2a:4c:82:7b:4d:26: ea:71:2c:72:ab:e1:b2:75:fd:92:ea:15:29:03:82: 46:d4:40:43:8d:cd:12:25:d5:ab:e4:54:23:b5:12: 86:84:4a:da:71:55:c2:62:67:b3:6c:41:9e:6c:6d: c4:88:e5:23:f2:32:4e:cc:31:06:bf:6c:49:2e:41: e4:72:59:9b:3e:dc:b6:61:0f:3c:39:bf:27:28:de: 1f:56:5f:ab:d4:46:ad:ea:99:b0:13:92:66:6e:74: 7b:b7:f3:45:0e:5a:04:dd:c0:a0:13:80:d1:84:3c: 7b:c1:7b:6e:11:a5:48:1b:7d:7e:a2:4b:78:36:6e: 4a:32:27:ea:56:48:74:5f:a3:5f:b9:d0:a9:54:4a: 33:e4:35:23:5e:a8:48:d8:f1:f8:da:6b:9c:ad:d6: 80:39:c5:e8:16:f8:22:6e:f2:1c:ae:91:91:07:df: f5:9b:2d:5e:01:fc:37:08:3b:b1:72:96:d0:6a:b9: 2f:45:5e:18:29:e0:29:6b:78:89:2a:6a:e9:09:de: a0:2d:6a:04:a1:d0:c8:bc:fe:0e:15:55:ef:a0:92: 68:0b:b1:24:3f:ce:cd:b1:17:78:a1:8d:59:f6:fe: 16:58:26:5e:fb:3e:97:8c:56:19:85:82:b6:34:78: 21:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B6:8D:FE:1E:DD:01:E7:EA:20:EF:28:63:0C:DE:06:EC:02:B8:02 X509v3 Authority Key Identifier: keyid:93:A9:59:C2:5D:BB:C3:67:CA:A8:98:25:E8:BF:F5:B4:B4:F1:1C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6lZwl27w2fKqJgl6L_1tLTxHJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/da46ee-f8d9-44da-9982-03f5eb148688/1/k6lZwl27w2fKqJgl6L_1tLTxHJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:43:da:13:e7:88:c8:6e:e7:f8:56:ae:cc:c3:52:a6:0b:52: ba:8b:6e:9d:10:77:de:30:b2:08:ff:a3:97:4f:37:c6:38:6f: 75:87:cb:4e:ce:f3:21:70:b5:d6:0a:ab:f0:b4:b1:b3:58:87: a8:b8:3f:e4:e3:97:4e:89:07:ed:3e:11:e9:e2:16:df:69:aa: bd:0a:4a:57:fb:7b:2c:93:35:09:4a:84:60:6b:0a:62:8f:f1: c8:6c:42:27:2b:30:b1:54:e0:a0:2c:44:a2:1a:04:60:95:d0: f7:fe:31:06:80:a4:7a:73:5d:94:2a:58:c8:d5:60:3b:fc:6f: f3:54:bb:8f:58:24:ca:08:9e:b0:ec:bb:c3:e7:46:55:8a:d5: 51:86:b4:d2:50:45:18:b5:bb:b4:ad:c8:ad:32:46:27:e8:1f: 0b:01:c3:da:1c:ee:8b:11:78:7a:76:be:8a:fd:19:e1:d7:c3: 10:bc:c5:bc:6e:8c:07:fc:a4:b9:af:cc:11:e0:35:5e:b0:39: d6:04:c1:5f:ae:6d:f8:55:a9:4c:4e:2c:d5:bc:1e:99:99:15: 09:f8:98:47:00:88:62:7b:6d:ff:b5:44:dc:be:43:c2:ec:2e: f9:14:a3:fd:e2:51:3d:d7:83:46:e0:50:6c:4f:37:ca:24:ff: 7a:2c:38:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm2ZpzeKtNfk16JITjdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTk1OWMyNWRiYmMzNjdjYWE4OTgyNWU4YmZmNWI0YjRm MTFjOWIwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhlY2I2OGRmZTFlZGQwMWU3ZWEyMGVmMjg2MzBjZGUwNmVjMDJiODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWOjA1uRqYYqTIJ7TSbqcSxyq+Gy df2S6hUpA4JG1EBDjc0SJdWr5FQjtRKGhEracVXCYmezbEGebG3EiOUj8jJOzDEG v2xJLkHkclmbPty2YQ88Ob8nKN4fVl+r1Eat6pmwE5JmbnR7t/NFDloE3cCgE4DR hDx7wXtuEaVIG31+okt4Nm5KMifqVkh0X6NfudCpVEoz5DUjXqhI2PH42mucrdaA OcXoFvgibvIcrpGRB9/1my1eAfw3CDuxcpbQarkvRV4YKeApa3iJKmrpCd6gLWoE odDIvP4OFVXvoJJoC7EkP87NsRd4oY1Z9v4WWCZe+z6XjFYZhYK2NHghHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy2jf4e3QHn6iDvKGMM3gbsArgCMB8GA1UdIwQY MBaAFJOpWcJdu8NnyqiYJei/9bS08RybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZsWndsMjd3MmZLcUpnbDZMXzF0TFR4SEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYTQ2ZWUtZjhkOS00NGRhLTk5ODIt MDNmNWViMTQ4Njg4LzEvazZsWndsMjd3MmZLcUpnbDZMXzF0TFR4SEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kYTQ2ZWUtZjhkOS00NGRhLTk5ODItMDNmNWViMTQ4Njg4 LzEvazZsWndsMjd3MmZLcUpnbDZMXzF0TFR4SEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakPaE+eI yG7n+FauzMNSpgtSuotunRB33jCyCP+jl083xjhvdYfLTs7zIXC11gqr8LSxs1iH qLg/5OOXTokH7T4R6eIW32mqvQpKV/t7LJM1CUqEYGsKYo/xyGxCJyswsVTgoCxE ohoEYJXQ9/4xBoCkenNdlCpYyNVgO/xv81S7j1gkygiesOy7w+dGVYrVUYa00lBF GLW7tK3IrTJGJ+gfCwHD2hzuixF4ena+iv0Z4dfDELzFvG6MB/ykua/MEeA1XrA5 1gTBX65t+FWpTE4s1bwemZkVCfiYRwCIYntt/7VE3L5Dwuwu+RSj/eJRPdeDRuBQ bE83yiT/eiw4sA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:16 2025 by rpki-client