This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json) Hash identifier: IpOHz9OqCMUm4RnHgwZRYqDPR5LH9TS9s/JL7Ybud9E= Subject key identifier: 91:DB:ED:7F:E5:19:2A:18:F7:34:56:07:ED:21:EE:6C:9F:36:27:5E Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21 Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421 Certificate serial: 019AFC1EBA4338B78EAA78A5512052AC97C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft Manifest number: 08DC Signing time: Mon 08 Dec 2025 04:01:03 +0000 Manifest this update: Mon 08 Dec 2025 04:01:03 +0000 Manifest next update: Tue 09 Dec 2025 04:01:03 +0000 Files and hashes: 1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: 95Gcm+109Ed421zJC8U3FPm/N2bhMnF7XXB7j3b4o24=) 2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:1e:ba:43:38:b7:8e:aa:78:a5:51:20:52:ac:97:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421 Validity Not Before: Dec 8 04:01:03 2025 GMT Not After : Dec 9 04:01:03 2025 GMT Subject: CN=91dbed7fe5192a18f7345607ed21ee6c9f36275e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:0f:cb:b6:79:3f:db:f6:84:3d:01:90:c9: 61:58:11:19:bb:20:85:c4:5f:59:68:cc:cd:5d:64: 19:07:05:1a:0a:5a:46:fd:b1:a1:b5:71:df:77:bf: d9:0d:42:e7:32:dc:89:e6:64:01:90:2c:37:e5:56: 93:b9:32:7b:df:3e:79:84:db:71:08:21:25:7c:79: 29:2a:9f:c1:06:6a:09:34:08:d1:d1:46:c6:02:9b: 12:30:da:3e:d0:a6:2d:bd:b1:59:d0:2e:58:cb:17: 03:3c:6c:39:d3:ed:e8:59:59:25:67:09:59:c6:12: fd:32:c7:77:87:a2:e3:4f:c2:6d:c4:5b:92:fe:7d: 3e:df:74:59:ae:e4:e1:ed:fd:70:d2:62:a9:63:ea: ee:52:23:ee:c6:10:4c:42:df:bd:29:f1:9f:a1:7c: 34:1e:64:00:d6:ea:08:69:68:21:b0:8d:71:e5:48: 39:5d:72:5c:1f:37:bb:1c:14:37:c8:23:34:7e:c8: 05:96:78:89:d9:5f:fe:d7:a4:be:a7:fd:67:2c:1a: 1f:61:8e:50:1d:26:a6:39:04:cb:36:20:11:05:3c: 47:8f:7f:68:5f:1b:5c:83:b5:58:66:3b:ae:e1:eb: f9:86:03:04:86:f0:0e:5e:47:84:d3:c4:a2:98:e1: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DB:ED:7F:E5:19:2A:18:F7:34:56:07:ED:21:EE:6C:9F:36:27:5E X509v3 Authority Key Identifier: keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e2:e3:3e:76:af:e0:de:df:da:cd:88:6b:f2:ff:b3:70:ac: 74:3d:bc:17:ed:1c:0c:aa:5c:c9:77:87:13:92:65:d0:f1:4f: 89:14:17:d1:34:c8:72:7a:cf:d1:c8:74:dc:75:0c:33:08:0a: b5:4d:18:a0:fd:a7:44:4e:74:cd:53:53:c6:02:ab:30:64:9a: b7:96:b6:18:9e:dd:1e:d4:27:8b:28:e4:f2:73:44:82:59:18: 91:0d:0c:50:c5:cb:cd:df:06:15:64:66:7a:27:ef:a3:76:c4: 43:21:ce:bf:a1:50:af:32:51:50:d9:66:c2:40:89:ca:05:3f: 90:85:fc:97:f1:96:d0:6e:2d:df:03:ba:5a:b7:4c:95:ee:15: b4:45:06:16:b1:86:6b:31:84:9f:f4:42:ab:fd:74:f6:53:6e: 54:5e:5c:a8:8d:9e:31:67:59:17:5c:ae:a0:f8:8e:a3:d2:1f: 7a:34:07:02:b3:ff:b2:b6:15:d3:3f:75:6e:6c:a6:7b:32:6b: 74:c0:27:91:f1:2e:0e:ba:fd:13:b8:fb:88:c3:01:74:f3:a8: 29:76:eb:ce:56:90:7c:a3:40:ce:ef:0a:07:83:ec:38:5c:5f: f7:53:dd:31:f2:38:e2:0c:d0:53:dc:42:8f:0c:94:06:98:5e: e2:e9:fd:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8HrpDOLeOqnilUSBSrJfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTM4OTMzMzU4Y2Y2NmNmZjNiNmNlM2Y3YmMyNTE3ZmRk NDc0MjEwHhcNMjUxMjA4MDQwMTAzWhcNMjUxMjA5MDQwMTAzWjAzMTEwLwYDVQQD Eyg5MWRiZWQ3ZmU1MTkyYTE4ZjczNDU2MDdlZDIxZWU2YzlmMzYyNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMIPy7Z5P9v2hD0BkMlhWBEZuyCF xF9ZaMzNXWQZBwUaClpG/bGhtXHfd7/ZDULnMtyJ5mQBkCw35VaTuTJ73z55hNtx CCElfHkpKp/BBmoJNAjR0UbGApsSMNo+0KYtvbFZ0C5YyxcDPGw50+3oWVklZwlZ xhL9Msd3h6LjT8JtxFuS/n0+33RZruTh7f1w0mKpY+ruUiPuxhBMQt+9KfGfoXw0 HmQA1uoIaWghsI1x5Ug5XXJcHze7HBQ3yCM0fsgFlniJ2V/+16S+p/1nLBofYY5Q HSamOQTLNiARBTxHj39oXxtcg7VYZjuu4ev5hgMEhvAOXkeE08SimOEzNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHb7X/lGSoY9zRWB+0h7myfNideMB8GA1UdIwQY MBaAFCujiTM1jPZs/zts4/e8JRf91HQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgt ZTA2ZmQwY2QzYjc3LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgtZTA2ZmQwY2QzYjc3 LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOLjPnav 4N7f2s2Ia/L/s3CsdD28F+0cDKpcyXeHE5Jl0PFPiRQX0TTIcnrP0ch03HUMMwgK tU0YoP2nRE50zVNTxgKrMGSat5a2GJ7dHtQniyjk8nNEglkYkQ0MUMXLzd8GFWRm eifvo3bEQyHOv6FQrzJRUNlmwkCJygU/kIX8l/GW0G4t3wO6WrdMle4VtEUGFrGG azGEn/RCq/109lNuVF5cqI2eMWdZF1yuoPiOo9IfejQHArP/srYV0z91bmymezJr dMAnkfEuDrr9E7j7iMMBdPOoKXbrzlaQfKNAzu8KB4PsOFxf91PdMfI44gzQU9xC jwyUBphe4un9gw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:20 2025 by rpki-client