This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json) Hash identifier: 5VjcRjhGcfm68gegxK8dZEkcSNSM4ekyiEZWfipARyc= Subject key identifier: 99:24:EE:41:A5:97:1D:C4:F1:5B:25:1C:B6:98:AA:19:C1:85:E0:94 Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Certificate serial: 019B3F47F67040799800907B10E7726DB94F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft Manifest number: 0BAC Signing time: Sun 21 Dec 2025 05:00:39 +0000 Manifest this update: Sun 21 Dec 2025 05:00:39 +0000 Manifest next update: Mon 22 Dec 2025 05:00:39 +0000 Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: 78ng+7WUt+M2foIodoB3P/npykQPsHIuhISD/2ZA1N0=) 2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:f6:70:40:79:98:00:90:7b:10:e7:72:6d:b9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902 Validity Not Before: Dec 21 05:00:39 2025 GMT Not After : Dec 22 05:00:39 2025 GMT Subject: CN=9924ee41a5971dc4f15b251cb698aa19c185e094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:3d:f6:d2:09:7a:3f:0d:0e:bc:81:11:e3: cc:1b:f5:e6:c3:5c:68:9a:5d:7e:ef:e6:df:0e:86: 59:99:21:b8:d8:e8:03:5d:e9:2e:6f:be:4c:37:7a: 92:fd:93:2a:62:20:13:a6:10:40:d0:f7:1e:93:35: dc:63:18:cf:0d:30:6c:88:0e:fe:b8:21:98:96:9d: eb:e4:db:fd:5c:41:29:72:ae:e0:99:5a:eb:38:81: 11:ec:6b:f3:b9:66:6c:8d:24:d6:28:71:17:b8:09: 6f:ff:f3:17:25:85:79:ca:d2:e8:34:10:f2:8a:99: f1:ef:a1:7d:82:87:52:64:79:41:b5:62:3f:d7:9c: 84:5e:88:25:c4:8b:9c:ce:7e:09:18:d8:d4:b1:57: 87:17:6c:79:c4:a9:14:c2:d2:31:5c:1d:ef:0d:04: ab:72:23:f1:44:05:d4:85:a9:47:46:6a:24:f7:19: 96:c7:02:e1:3b:ab:1e:67:93:50:b2:e8:3d:b0:8c: eb:52:fe:5b:99:7d:dc:e5:70:5f:54:bf:2a:4f:6b: 5d:28:da:9d:22:a7:2c:f8:9b:d4:07:33:77:24:42: 2d:bc:43:fa:a2:7f:d7:dd:8d:56:43:82:6a:fe:53: 36:63:97:8e:79:06:20:5b:10:cd:bc:5b:24:33:67: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:EE:41:A5:97:1D:C4:F1:5B:25:1C:B6:98:AA:19:C1:85:E0:94 X509v3 Authority Key Identifier: keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:23:aa:79:3b:6a:27:bc:01:01:44:c2:89:c3:ce:ce:98:49: 28:ee:37:fb:fe:06:60:1f:e4:63:97:99:3d:6f:b1:f2:68:06: d8:3c:d0:82:6a:63:b2:23:41:af:cb:a5:cd:bb:24:70:4e:d1: 7b:51:50:ac:4a:f8:3e:b5:a4:ca:45:25:f9:67:24:61:46:05: a0:a7:03:7d:fc:c2:f3:c7:26:05:36:4d:01:3c:80:51:bf:14: 1a:76:ed:72:33:e1:02:21:ec:39:5d:cc:31:3f:e0:18:50:06: 45:ec:4a:a2:91:f8:f2:47:6c:28:c6:cc:62:5b:b5:5b:ac:dd: 05:8e:7b:aa:1f:5e:5a:1a:ad:94:b1:80:68:4e:0b:17:7a:a3: 08:c9:92:9a:94:e5:05:f7:41:f1:db:65:a0:02:1c:bc:56:e5: f6:22:31:9c:86:0d:72:96:d8:48:b4:bb:96:af:6e:6e:01:d8: ef:5d:e7:88:79:24:18:a4:46:f9:c3:39:2d:6f:10:3b:7d:68: 0c:04:f4:bd:d1:00:2a:fe:08:bc:50:f9:bb:ff:9e:f9:e7:34: c2:30:03:59:29:72:e2:38:c6:90:19:15:37:05:32:33:c8:3f: c8:9a:15:02:11:1c:c1:60:a2:5d:41:3e:5a:21:83:4c:4b:80: c8:a8:60:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R/ZwQHmYAJB7EOdybblPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzVmMTBhZjhiY2I1ZmM2ZTM0YTQ3M2I0YTZjYWU3YWQw MmQ5MDIwHhcNMjUxMjIxMDUwMDM5WhcNMjUxMjIyMDUwMDM5WjAzMTEwLwYDVQQD Eyg5OTI0ZWU0MWE1OTcxZGM0ZjE1YjI1MWNiNjk4YWExOWMxODVlMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpg99tIJej8NDryBEePMG/Xmw1xo ml1+7+bfDoZZmSG42OgDXekub75MN3qS/ZMqYiATphBA0PcekzXcYxjPDTBsiA7+ uCGYlp3r5Nv9XEEpcq7gmVrrOIER7GvzuWZsjSTWKHEXuAlv//MXJYV5ytLoNBDy ipnx76F9godSZHlBtWI/15yEXoglxIuczn4JGNjUsVeHF2x5xKkUwtIxXB3vDQSr ciPxRAXUhalHRmok9xmWxwLhO6seZ5NQsug9sIzrUv5bmX3c5XBfVL8qT2tdKNqd Iqcs+JvUBzN3JEItvEP6on/X3Y1WQ4Jq/lM2Y5eOeQYgWxDNvFskM2e2RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkk7kGllx3E8VslHLaYqhnBheCUMB8GA1UdIwQY MBaAFJPF8Qr4vLX8bjSkc7SmyuetAtkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMt OGVhYWQwYjA0OWE3LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYTAyY2ItYjM3OC00ZmE3LTg4MDMtOGVhYWQwYjA0OWE3 LzEvazhYeEN2aTh0Znh1TktSenRLYks1NjBDMlFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSOqeTtq J7wBAUTCicPOzphJKO43+/4GYB/kY5eZPW+x8mgG2DzQgmpjsiNBr8ulzbskcE7R e1FQrEr4PrWkykUl+WckYUYFoKcDffzC88cmBTZNATyAUb8UGnbtcjPhAiHsOV3M MT/gGFAGRexKopH48kdsKMbMYlu1W6zdBY57qh9eWhqtlLGAaE4LF3qjCMmSmpTl BfdB8dtloAIcvFbl9iIxnIYNcpbYSLS7lq9ubgHY713niHkkGKRG+cM5LW8QO31o DAT0vdEAKv4IvFD5u/+e+ec0wjADWSly4jjGkBkVNwUyM8g/yJoVAhEcwWCiXUE+ WiGDTEuAyKhgww== -----END CERTIFICATE-----Generated at Sun Dec 21 06:55:50 2025 by rpki-client