This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json) Hash identifier: 21SNY9COi+731U2totR2W1fQdkt+F+GAlUutd+M/2As= Subject key identifier: C6:81:6A:8E:D2:16:BB:69:CE:F6:DE:19:AE:59:B1:2A:3D:9C:FC:4D Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Certificate serial: 019AF2098AE249A7A5D4EBE29435514365B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft Manifest number: 16C6 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 1-6txeQs5g_33zuSjTCgOD4iIjGM.roa (hash: 0QhFC81+fO/ZdvCBfNNwnivS3ThqNHOEWwldyX4zRQQ=) 2: 6vvVzQkEayT-sKwWlVAPXHp5ujQ.roa (hash: hbQHUjPH/g+s8yCzoA2SyiJe+7mC/9L+htWgYPmde/Q=) 3: 7o3vxSrk5UbrcfgRk2TAxg-dtps.roa (hash: dy+fmG0utkAvZ1QPO8d1zh3vc57HqgFc/AN4Uuvr8do=) 4: i9rF_vMQKJ6Idr0l2zV9fG7JsI4.roa (hash: Ym+D0lV82GzeaN5WC17D6hleAFitEdQ3vLzucr/5Qp0=) 5: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: vKEeCYOSd7ZFCHua1ZaHP8tiPMpwo6AfZxTNZOfUw/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8a:e2:49:a7:a5:d4:eb:e2:94:35:51:43:65:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860 Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=c6816a8ed216bb69cef6de19ae59b12a3d9cfc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:cb:6d:7f:7b:b2:04:bf:c1:3e:49:1a:dd: 28:e9:67:dd:f3:df:e7:50:e7:6e:7e:90:f6:63:7d: 56:dd:19:b3:b1:53:5b:ee:f2:b4:5f:03:31:17:73: 31:bb:b2:53:97:37:08:cc:50:74:30:f1:97:22:4d: 0e:5b:e4:36:9b:60:25:74:e4:d3:d4:c6:70:fe:32: 15:61:c1:4d:a4:09:de:86:3a:d1:ba:b9:61:05:7d: 7f:90:94:d9:63:6e:50:2d:0a:3e:d1:97:1b:53:3a: 86:66:85:50:48:a8:7e:4b:5b:21:31:24:23:45:49: b9:25:5e:51:3c:ed:49:e4:f3:44:92:ff:87:be:0e: 00:5f:13:b1:af:c6:be:96:13:97:e7:79:84:13:f0: a2:44:45:0f:e3:00:5b:15:d9:51:0d:76:4d:db:ba: 7e:49:f4:2f:e2:e6:c5:16:07:bc:e1:97:9e:13:ad: f6:32:8c:af:1b:61:fd:90:2e:19:01:ad:3e:e4:5b: f7:b0:3b:27:fa:98:6d:c5:f8:c3:15:69:48:0f:21: a3:2e:9c:ca:de:cd:5e:d8:b5:ef:35:7a:24:eb:dd: 88:d7:c4:a7:46:41:8a:4c:f4:5b:ad:61:35:38:e7: b0:e4:7c:51:1c:ad:0d:22:98:51:06:5c:5a:8c:aa: 23:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:6A:8E:D2:16:BB:69:CE:F6:DE:19:AE:59:B1:2A:3D:9C:FC:4D X509v3 Authority Key Identifier: keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:66:c0:a8:66:5f:6f:ae:bd:81:57:8a:27:93:04:8a:a6:5b: cd:bf:35:a9:d8:77:48:88:d2:9a:76:ab:85:9c:9b:48:b1:37: 7c:95:b9:37:d6:a2:37:3e:a9:9c:7a:26:9c:2b:e4:3c:62:fc: 96:d4:f6:b3:60:fa:7b:96:a6:08:30:06:f8:5b:bd:40:2d:b9: 22:4d:38:1f:c6:d9:0a:25:df:c9:d0:16:3b:5e:04:3a:88:10: 55:8f:73:4a:00:23:22:18:10:bf:61:44:0e:33:9c:e6:da:6d: de:38:28:23:48:7e:2d:39:52:ca:24:e0:4f:7a:dc:84:a3:45: 12:8e:fe:c9:9c:c7:ec:6b:76:5e:eb:fa:40:1f:1a:cf:26:fa: bb:b9:0e:da:f1:ac:ff:ea:3b:cc:45:b1:79:00:ce:66:ac:f1: 8e:8b:70:31:a0:27:32:1e:03:f0:19:18:f6:7d:4c:39:d5:d1: 92:a0:1a:fb:c4:4a:80:8b:81:5d:af:dc:26:70:90:68:88:10: ba:96:78:b2:e6:c6:d4:2f:33:a7:07:19:f3:24:0e:8c:a9:d5: 23:64:c1:05:9a:69:fc:64:79:7f:7a:97:76:f7:08:9a:25:bf: 07:29:f8:e8:a3:53:99:86:c7:16:96:8d:43:8b:aa:e6:79:03: f9:b1:2a:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYriSael1OvilDVRQ2W1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2 OTQ4NjAwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhjNjgxNmE4ZWQyMTZiYjY5Y2VmNmRlMTlhZTU5YjEyYTNkOWNmYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNzLbX97sgS/wT5JGt0o6Wfd89/n UOdufpD2Y31W3RmzsVNb7vK0XwMxF3Mxu7JTlzcIzFB0MPGXIk0OW+Q2m2AldOTT 1MZw/jIVYcFNpAnehjrRurlhBX1/kJTZY25QLQo+0ZcbUzqGZoVQSKh+S1shMSQj RUm5JV5RPO1J5PNEkv+Hvg4AXxOxr8a+lhOX53mEE/CiREUP4wBbFdlRDXZN27p+ SfQv4ubFFge84ZeeE632MoyvG2H9kC4ZAa0+5Fv3sDsn+phtxfjDFWlIDyGjLpzK 3s1e2LXvNXok692I18SnRkGKTPRbrWE1OOew5HxRHK0NIphRBlxajKoj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaBao7SFrtpzvbeGa5ZsSo9nPxNMB8GA1UdIwQY MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct NzhlOTk3ODY5OTUyLzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2bAqGZf b669gVeKJ5MEiqZbzb81qdh3SIjSmnarhZybSLE3fJW5N9aiNz6pnHomnCvkPGL8 ltT2s2D6e5amCDAG+Fu9QC25Ik04H8bZCiXfydAWO14EOogQVY9zSgAjIhgQv2FE DjOc5tpt3jgoI0h+LTlSyiTgT3rchKNFEo7+yZzH7Gt2Xuv6QB8azyb6u7kO2vGs /+o7zEWxeQDOZqzxjotwMaAnMh4D8BkY9n1MOdXRkqAa+8RKgIuBXa/cJnCQaIgQ upZ4subG1C8zpwcZ8yQOjKnVI2TBBZpp/GR5f3qXdvcImiW/Byn46KNTmYbHFpaN Q4uq5nkD+bEqLg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:33 2025 by rpki-client