This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json) Hash identifier: fYZ4rek2fRAbxJLgeD1yW/ZLVDXKB7GBOqBnuy/ENoQ= Subject key identifier: D4:79:FB:79:56:77:CE:0D:68:1E:A2:48:AD:29:F8:D2:EC:45:06:FB Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b Certificate serial: 019AF2092679C0F75A16C03579114585D0A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: /MOWLz78nwuTHKUxxe2m5vcAoYcyaBKjyHSF3m3lquU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:26:79:c0:f7:5a:16:c0:35:79:11:45:85:d0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=d479fb795677ce0d681ea248ad29f8d2ec4506fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:33:e9:ee:59:fe:85:4c:28:73:57:d7:74: fb:53:f4:de:72:d0:91:45:82:f0:fb:8a:65:33:e3: 55:7b:75:e3:62:e9:b8:c7:59:97:cc:f3:13:fc:a5: e2:fe:7c:e3:64:d6:50:e1:dd:ec:54:f8:36:c3:cc: 71:54:07:e6:02:1e:cc:53:d8:db:26:b6:4f:7c:ac: c8:28:7d:3a:4c:06:35:bc:31:7f:12:43:f4:8c:19: 44:97:de:72:03:ec:e3:ff:6d:6b:33:49:3b:7a:2b: 67:9d:91:23:2e:2f:08:ec:44:25:7e:a0:b2:aa:72: 81:05:db:ff:c0:d6:9b:fc:43:b5:36:42:12:be:27: 12:b9:76:4c:2b:a7:76:b6:1f:91:ba:57:14:d3:61: f6:6f:1e:d9:f6:7a:f1:40:43:30:92:6d:37:8f:43: ee:6f:c9:20:15:7b:12:15:c3:12:ec:c2:bd:2a:24: 07:cf:6a:cf:fb:47:ee:6d:de:a2:0c:4b:61:ce:7f: 84:82:81:e1:9c:94:c5:ca:30:c5:56:fb:a8:83:8e: ee:4a:a3:4d:1d:eb:f6:ca:e2:0b:92:fe:16:d1:5a: f4:e3:4d:9d:69:49:3e:9b:30:9f:fe:50:ee:f3:99: 35:b6:cf:cd:9f:55:b6:ad:42:a8:21:06:b9:7e:de: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:FB:79:56:77:CE:0D:68:1E:A2:48:AD:29:F8:D2:EC:45:06:FB X509v3 Authority Key Identifier: keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5d:72:c0:8f:e4:f3:f7:b6:15:f5:d1:10:96:a7:47:79:f7: 78:94:23:2a:83:40:1d:ff:66:bd:15:9c:27:bb:1b:2a:38:d6: f3:d9:7f:ca:7f:a3:8c:88:3b:94:81:cb:a2:1b:97:f0:c1:d0: 35:18:f9:31:77:76:ef:df:df:80:fb:3b:00:7c:ed:9a:b2:91: 33:58:7f:93:50:5c:b3:d6:be:47:48:74:13:f2:82:72:82:6e: 9f:2a:fe:e2:53:15:13:61:6f:52:92:2b:ab:8b:b8:f4:f9:a4: e3:04:8c:49:13:81:ca:80:fe:b9:1a:05:ad:08:3c:1a:ec:3c: ef:ce:14:65:02:b5:9c:c4:8f:71:92:b4:d8:04:97:ba:e5:5b: 7d:89:de:ac:12:d8:af:05:ac:4e:2f:9c:27:89:76:82:3a:18: 98:95:4f:0e:56:08:94:42:bb:74:4f:f3:1d:e8:aa:e5:4b:d9: 5d:76:6a:4a:c4:64:ee:59:64:59:e5:f1:69:4e:c5:32:00:55: 96:6d:0d:7c:1b:6c:da:9f:06:24:cb:64:d6:6b:c9:83:06:39: 5d:f8:cb:ed:6c:2c:64:23:37:18:35:c1:be:71:f6:39:96:a4: 7b:e1:0f:3f:de:ad:1a:58:5a:95:64:53:3e:98:a6:07:9c:eb: df:b1:b2:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSZ5wPdaFsA1eRFFhdChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTIyOWUyNjZiMjU1ODg5OWYzNTQ3ZWU2M2Q4NGVkNjU5 NDc2OGIwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhkNDc5ZmI3OTU2NzdjZTBkNjgxZWEyNDhhZDI5ZjhkMmVjNDUwNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnwz6e5Z/oVMKHNX13T7U/TectCR RYLw+4plM+NVe3XjYum4x1mXzPMT/KXi/nzjZNZQ4d3sVPg2w8xxVAfmAh7MU9jb JrZPfKzIKH06TAY1vDF/EkP0jBlEl95yA+zj/21rM0k7eitnnZEjLi8I7EQlfqCy qnKBBdv/wNab/EO1NkISvicSuXZMK6d2th+RulcU02H2bx7Z9nrxQEMwkm03j0Pu b8kgFXsSFcMS7MK9KiQHz2rP+0fubd6iDEthzn+EgoHhnJTFyjDFVvuog47uSqNN Hev2yuILkv4W0Vr0402daUk+mzCf/lDu85k1ts/Nn1W2rUKoIQa5ft6FywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR5+3lWd84NaB6iSK0p+NLsRQb7MB8GA1UdIwQY MBaAFJOiKeJmslWImfNUfuY9hO1llHaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYt NGQ3NzdjYWNkOWE0LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYtNGQ3NzdjYWNkOWE0 LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARV1ywI/k 8/e2FfXREJanR3n3eJQjKoNAHf9mvRWcJ7sbKjjW89l/yn+jjIg7lIHLohuX8MHQ NRj5MXd279/fgPs7AHztmrKRM1h/k1Bcs9a+R0h0E/KCcoJunyr+4lMVE2FvUpIr q4u49Pmk4wSMSROByoD+uRoFrQg8Guw8784UZQK1nMSPcZK02ASXuuVbfYnerBLY rwWsTi+cJ4l2gjoYmJVPDlYIlEK7dE/zHeiq5UvZXXZqSsRk7llkWeXxaU7FMgBV lm0NfBts2p8GJMtk1mvJgwY5XfjL7WwsZCM3GDXBvnH2OZake+EPP96tGlhalWRT PpimB5zr37Gypg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:39 2025 by rpki-client