This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json) Hash identifier: U9HqJTui0/DfVBSIR/I6GquvULblbVG2w65jryQu3RA= Subject key identifier: 5D:B8:83:29:43:8D:AE:79:66:1E:39:31:FB:79:95:DE:13:4B:7B:31 Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59 Certificate serial: 019AF2AD938898EF84AC54A0A49E6FC099BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft Manifest number: 0673 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=) 2: cBmPaf2oGu0_AMcsbNoq5Hph_V4.roa (hash: 9oqeFK2Tn1tYym9cWphxU57OSdAjV+OS6dUAD4eSIdI=) 3: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: FYONd8MVGt16noj9PNEjZBf2/oETHZVyAJRLaUujZ/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:93:88:98:ef:84:ac:54:a0:a4:9e:6f:c0:99:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=5db88329438dae79661e3931fb7995de134b7b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:94:f9:87:65:48:51:1a:38:ff:36:09:95: fd:fb:42:0b:9b:db:27:0b:6b:e0:1b:7a:ea:c5:22: 6a:d2:5d:36:62:ac:e8:4c:e8:c2:13:e8:31:1a:a9: b3:e3:4b:e4:30:cd:a1:4f:28:d8:4c:21:58:d4:ea: a9:de:27:72:db:bf:ec:d2:97:0e:ad:4b:fe:20:7f: 2a:3b:00:c2:15:0a:88:14:cb:e0:55:6d:e3:17:57: e1:23:17:63:be:9d:aa:a0:9a:3d:5f:8a:86:56:78: fd:9d:1c:f4:78:07:6f:f9:24:55:9f:a0:b0:4d:f6: 00:2a:66:f0:60:f0:af:1f:78:ec:b2:9f:46:66:9c: 9d:09:c1:91:b9:18:a5:59:fd:13:27:c0:49:3a:1c: 67:2d:33:05:4f:42:58:ff:d1:1f:fb:34:da:12:84: ef:37:6b:37:97:1d:b4:a3:1b:72:d9:7f:bb:a6:c5: 2f:e7:5b:29:cb:47:0b:e5:c2:a3:8c:8e:01:32:e1: 47:4b:4e:2c:18:44:6e:90:cf:1b:59:c8:b0:49:0f: 84:90:84:5b:97:a5:32:fb:03:ef:54:af:45:bd:59: 49:06:c0:ff:81:7d:2f:49:1f:c0:d5:c9:88:2f:86: cd:c7:47:ee:19:b0:0c:93:4c:81:f1:56:b1:6d:56: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B8:83:29:43:8D:AE:79:66:1E:39:31:FB:79:95:DE:13:4B:7B:31 X509v3 Authority Key Identifier: keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1d:1d:f4:d3:83:d1:fd:de:98:04:75:88:7f:55:5f:2e:6f: 58:c3:2e:57:03:dc:d0:8f:42:a1:e4:45:b3:79:b8:a2:22:c2: 10:53:b5:a4:b1:0a:3f:0e:f7:1c:a0:8c:1a:9d:4e:6d:26:44: a6:0c:d7:c3:7d:eb:d3:f7:43:cc:cf:f8:40:ac:39:43:da:42: 0e:0b:16:92:73:df:19:27:a4:da:ac:0c:96:78:4a:f8:29:f4: e6:a9:84:10:9a:3c:4d:af:b1:46:54:0a:5b:a2:c8:bb:4b:09: 0c:52:de:f7:37:1d:a3:44:b6:37:40:01:05:3e:48:ae:5d:45: 96:09:23:8f:68:5a:d2:ea:f6:78:0c:e3:40:4a:af:41:3d:c9: f9:1d:2c:c8:ed:2b:74:71:e6:9a:00:73:2f:e5:92:5b:83:77: f7:08:9b:bc:70:20:ac:2d:ba:7a:6b:6d:2a:06:63:b2:87:1b: 1a:18:c4:de:30:08:e3:f7:f0:05:83:e8:0e:73:9e:0e:be:07: af:9e:f6:b5:9f:68:97:36:c9:66:66:72:48:26:7a:d5:79:9b: 96:f0:39:d4:7d:28:35:9b:cc:39:82:8a:95:fb:e4:19:1c:68: c3:79:06:5e:f7:52:2a:9f:f9:79:d4:35:fe:16:33:88:ca:d6: a3:e1:0c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZOImO+ErFSgpJ5vwJm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNTAxMDc3ZGI4MGQ1MmIxNmQ0OWY4NjNhNjFlYTQxYTEy NGJjNTkwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD Eyg1ZGI4ODMyOTQzOGRhZTc5NjYxZTM5MzFmYjc5OTVkZTEzNGI3YjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDWU+YdlSFEaOP82CZX9+0ILm9sn C2vgG3rqxSJq0l02YqzoTOjCE+gxGqmz40vkMM2hTyjYTCFY1Oqp3idy27/s0pcO rUv+IH8qOwDCFQqIFMvgVW3jF1fhIxdjvp2qoJo9X4qGVnj9nRz0eAdv+SRVn6Cw TfYAKmbwYPCvH3jssp9GZpydCcGRuRilWf0TJ8BJOhxnLTMFT0JY/9Ef+zTaEoTv N2s3lx20oxty2X+7psUv51spy0cL5cKjjI4BMuFHS04sGERukM8bWciwSQ+EkIRb l6Uy+wPvVK9FvVlJBsD/gX0vSR/A1cmIL4bNx0fuGbAMk0yB8VaxbVap1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF24gylDja55Zh45Mft5ld4TS3sxMB8GA1UdIwQY MBaAFJNQEHfbgNUrFtSfhjph6kGhJLxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUt NzlkMWEyN2NkOTkzLzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUtNzlkMWEyN2NkOTkz LzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWx0d9NOD 0f3emAR1iH9VXy5vWMMuVwPc0I9CoeRFs3m4oiLCEFO1pLEKPw73HKCMGp1ObSZE pgzXw33r0/dDzM/4QKw5Q9pCDgsWknPfGSek2qwMlnhK+Cn05qmEEJo8Ta+xRlQK W6LIu0sJDFLe9zcdo0S2N0ABBT5Irl1Flgkjj2ha0ur2eAzjQEqvQT3J+R0syO0r dHHmmgBzL+WSW4N39wibvHAgrC26emttKgZjsocbGhjE3jAI4/fwBYPoDnOeDr4H r572tZ9olzbJZmZySCZ61XmblvA51H0oNZvMOYKKlfvkGRxow3kGXvdSKp/5edQ1 /hYziMrWo+EMwg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:30 2025 by rpki-client