This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft File: k-DpokYd9Py54i53cLJhOgckE4g.mft (raw, json) Hash identifier: JvByUkiUGF5UbZohMAOwsPPfjetEvQmht635ok8X1GQ= Subject key identifier: 0B:4F:59:B0:A9:B5:9A:EA:C2:89:59:04:46:9A:22:87:08:9F:6D:16 Authority key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88 Certificate issuer: /CN=93e0e9a2461df4fcb9e22e7770b2613a07241388 Certificate serial: 019AF3C0BCAE51E744C9B5F3E8FC23A2A0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 13:01:25 +0000 Manifest this update: Sat 06 Dec 2025 13:01:25 +0000 Manifest next update: Sun 07 Dec 2025 13:01:25 +0000 Files and hashes: 1: k-DpokYd9Py54i53cLJhOgckE4g.crl (hash: hmv3mnRnLcDaLR9gobIxrDTu2b7wSvyoDfcO8X5BD/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:bc:ae:51:e7:44:c9:b5:f3:e8:fc:23:a2:a0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388 Validity Not Before: Dec 6 13:01:25 2025 GMT Not After : Dec 7 13:01:25 2025 GMT Subject: CN=0b4f59b0a9b59aeac2895904469a2287089f6d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:1b:a0:f3:b4:2b:41:09:c6:f2:33:3e:8c: 0d:b1:86:c0:d0:0d:ed:51:41:2e:ff:cc:56:56:c9: 0b:1d:cb:f2:dc:51:96:2a:ea:b4:af:e2:e5:08:7c: 0e:60:8b:97:78:1f:8a:94:81:3d:2b:88:0b:64:7d: 31:af:1f:da:d7:72:e3:ae:c2:8a:c5:4a:1e:7c:63: 28:31:01:66:f6:68:3b:5e:ef:d7:ff:37:33:c9:14: 72:b9:64:1d:8b:51:23:da:d9:e3:6d:72:ba:1a:02: c6:5b:fe:f8:7b:95:9e:17:8c:c1:33:f5:a2:c5:b2: a8:a0:4a:08:ba:81:b8:36:91:e7:60:71:c5:27:a5: d5:5f:4f:fa:76:60:7c:d6:ff:d9:d9:12:fc:a2:d2: 43:1a:f9:12:2d:ac:6d:29:5c:33:7b:66:45:0d:ad: b2:2e:ec:c9:9f:3f:e1:b5:83:33:48:0c:f2:53:ab: 84:45:bc:7e:bd:7f:74:cf:43:72:5d:db:d8:37:0f: 90:5f:96:ff:3d:86:96:a2:a1:d8:c2:7b:ca:48:49: 4b:3f:f5:2b:a7:3f:fc:4c:2e:04:de:57:c5:99:3d: 84:14:a5:55:3d:18:8a:e7:56:61:e2:25:cf:7e:ce: 3f:ce:99:51:42:d7:02:8e:97:8d:99:8c:af:5d:e9: 90:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:59:B0:A9:B5:9A:EA:C2:89:59:04:46:9A:22:87:08:9F:6D:16 X509v3 Authority Key Identifier: keyid:93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9e:6e:36:79:58:5a:54:45:50:ea:db:40:ec:bc:10:c3:d6: 27:87:9c:e9:32:54:bd:ba:c3:a9:90:66:e3:fb:91:07:d1:ce: bb:8d:c8:64:0e:23:86:e1:26:db:f7:2b:e7:fa:ae:27:b9:68: 58:4b:65:f7:24:35:c7:bb:4a:86:98:0f:42:71:91:f4:13:a9: 37:8a:5b:0e:6b:e6:1c:33:79:35:5b:74:64:51:f2:91:70:e8: be:a3:74:71:e8:9c:fd:c2:7d:97:9f:4c:2a:4c:21:90:5a:d1: 0e:94:85:f2:7c:cc:fe:2f:e0:83:22:36:4d:4f:a4:5b:8d:6f: 45:2b:29:03:13:44:42:5f:f2:75:6a:2f:d9:66:19:5e:36:80: bf:ed:78:70:89:c9:fa:1a:0e:d4:39:b0:79:5f:9f:ab:54:46: 28:b6:55:dc:d5:a1:c7:59:24:20:f3:0a:f7:1a:25:b5:31:bc: c3:ab:9e:3b:96:9a:c8:12:55:5b:9c:13:16:bf:67:fb:cf:4a: ba:0b:73:ee:1d:20:eb:42:0f:d9:a9:e9:46:39:87:b3:a4:b0: bf:29:56:7b:c3:02:d4:74:71:28:70:7d:f6:e4:fa:5c:f5:d7: 98:6a:d5:3e:3f:a0:23:8e:cc:88:d8:14:e6:d2:cc:60:6f:90: 0c:65:ee:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLyuUedEybXz6PwjoqDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZTBlOWEyNDYxZGY0ZmNiOWUyMmU3NzcwYjI2MTNhMDcy NDEzODgwHhcNMjUxMjA2MTMwMTI1WhcNMjUxMjA3MTMwMTI1WjAzMTEwLwYDVQQD EygwYjRmNTliMGE5YjU5YWVhYzI4OTU5MDQ0NjlhMjI4NzA4OWY2ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY4boPO0K0EJxvIzPowNsYbA0A3t UUEu/8xWVskLHcvy3FGWKuq0r+LlCHwOYIuXeB+KlIE9K4gLZH0xrx/a13LjrsKK xUoefGMoMQFm9mg7Xu/X/zczyRRyuWQdi1Ej2tnjbXK6GgLGW/74e5WeF4zBM/Wi xbKooEoIuoG4NpHnYHHFJ6XVX0/6dmB81v/Z2RL8otJDGvkSLaxtKVwze2ZFDa2y LuzJnz/htYMzSAzyU6uERbx+vX90z0NyXdvYNw+QX5b/PYaWoqHYwnvKSElLP/Ur pz/8TC4E3lfFmT2EFKVVPRiK51Zh4iXPfs4/zplRQtcCjpeNmYyvXemQRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtPWbCptZrqwolZBEaaIocIn20WMB8GA1UdIwQY MBaAFJPg6aJGHfT8ueIud3CyYToHJBOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEt MGUyZTM2MDE5ODQ5LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80MWU1ODQtOWNmNy00YzYyLTlmNjEtMGUyZTM2MDE5ODQ5 LzEvay1EcG9rWWQ5UHk1NGk1M2NMSmhPZ2NrRTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATp5uNnlY WlRFUOrbQOy8EMPWJ4ec6TJUvbrDqZBm4/uRB9HOu43IZA4jhuEm2/cr5/quJ7lo WEtl9yQ1x7tKhpgPQnGR9BOpN4pbDmvmHDN5NVt0ZFHykXDovqN0ceic/cJ9l59M KkwhkFrRDpSF8nzM/i/ggyI2TU+kW41vRSspAxNEQl/ydWov2WYZXjaAv+14cInJ +hoO1DmweV+fq1RGKLZV3NWhx1kkIPMK9xoltTG8w6ueO5aayBJVW5wTFr9n+89K ugtz7h0g60IP2anpRjmHs6SwvylWe8MC1HRxKHB99uT6XPXXmGrVPj+gI47MiNgU 5tLMYG+QDGXu1w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:51 2025 by rpki-client