This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json) Hash identifier: 7ibwtbUO32uuDR81rLsEdwO60ZgNcVJCQh7l+NqwVoo= Subject key identifier: 43:A5:17:A8:5E:5D:3C:5E:1E:50:9A:D5:1A:52:2C:0F:0D:39:38:70 Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed Certificate serial: 019AF2099B39A876B721E24F611769B99416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft Manifest number: 063F Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=) 2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: t7ZRPYL2SX56TsoToY2xTteP2L7KRVKMzQ14xKPk848=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9b:39:a8:76:b7:21:e2:4f:61:17:69:b9:94:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=43a517a85e5d3c5e1e509ad51a522c0f0d393870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:fe:66:2b:75:cd:3f:2b:84:c4:fe:64:df: a0:ce:46:82:c5:c3:6c:50:ea:61:8f:53:b2:73:3c: 50:b7:94:e5:9f:a6:76:ef:ac:e5:43:9c:1a:8f:54: db:a1:e5:b7:3e:3b:0b:52:f6:d2:1a:99:ea:87:1e: 02:0d:f2:82:50:c9:e1:91:31:ba:3b:08:97:e7:50: c7:d6:2a:4b:48:2d:15:80:03:15:49:5f:b0:c2:9b: 3f:a8:fd:1e:7c:7d:ff:87:81:5e:e8:94:e6:f6:22: a2:b7:1f:98:6e:3f:b4:be:c8:73:f4:9a:2d:b4:ed: 9c:c7:00:eb:54:3a:06:ed:1a:bb:e6:34:71:f9:6f: 8d:61:ba:18:ea:e9:7e:5f:5c:40:bb:82:1b:7b:e0: 15:6f:65:51:7c:aa:a7:14:6d:db:77:d9:4c:01:53: e4:bd:b3:5a:8b:29:ec:43:bb:d6:06:01:e2:4e:ac: 5e:6a:30:41:a1:07:0d:72:3f:c8:2e:6e:9d:de:84: 8f:dc:4b:63:2b:6f:14:09:b2:f4:6f:6a:e5:da:90: c1:35:61:05:ed:1f:30:6e:e0:c1:42:8a:47:7f:54: a8:9b:01:59:cb:90:b3:8f:0c:44:05:4a:84:a0:80: c4:48:e1:c0:76:94:08:1e:2e:a5:ce:c6:a6:ba:5d: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A5:17:A8:5E:5D:3C:5E:1E:50:9A:D5:1A:52:2C:0F:0D:39:38:70 X509v3 Authority Key Identifier: keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cd:bd:7e:02:75:c3:cd:5c:9c:63:72:96:aa:cd:ad:24:b1: 42:0b:f6:5a:52:41:db:17:94:0a:b5:60:6d:18:c5:3c:5f:19: e2:80:09:7f:50:bb:ef:88:6d:f2:cd:c5:92:80:cf:88:1e:0f: bd:dc:bd:88:0e:91:8a:8c:4e:bb:8c:1c:af:a1:a5:a4:75:31: f7:08:97:0d:30:11:23:91:0c:14:22:ad:8d:9a:22:07:e8:63: 67:a5:d4:12:7b:21:94:65:ec:d8:59:ce:5f:c6:38:f1:85:2e: 33:f0:a9:9c:5b:35:1c:d0:16:24:11:fb:f9:0d:ee:8c:c6:a9: 35:80:bf:97:10:8c:0b:f4:a1:c6:69:ed:5d:3d:db:89:87:f6: 07:10:7a:5d:e4:cf:c3:0d:99:8b:22:10:ed:09:16:01:35:41: 6a:85:d6:de:9f:35:a6:2d:1b:d7:55:23:e6:b5:8a:8e:d5:13: 0f:c0:57:48:fb:1a:93:e3:fa:ec:d3:7b:d6:16:4a:39:83:3e: b4:8d:19:ee:b9:4f:55:63:96:44:50:97:44:ed:64:be:53:c4: 40:c3:96:8a:b2:ab:92:c5:73:f0:fc:1a:25:0e:1a:2c:69:62: 2b:8d:44:6a:b8:e6:39:c7:75:a3:56:82:64:f9:1e:0a:de:cb: 39:6e:45:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZs5qHa3IeJPYRdpuZQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZGM3NWU2MWU0ODNmMGQ0NzkyMjFmM2NhNzVmYzcyMjA5 NmE3ZWQwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD Eyg0M2E1MTdhODVlNWQzYzVlMWU1MDlhZDUxYTUyMmMwZjBkMzkzODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvf+Zit1zT8rhMT+ZN+gzkaCxcNs UOphj1OyczxQt5Tln6Z276zlQ5waj1TboeW3PjsLUvbSGpnqhx4CDfKCUMnhkTG6 OwiX51DH1ipLSC0VgAMVSV+wwps/qP0efH3/h4Fe6JTm9iKitx+Ybj+0vshz9Jot tO2cxwDrVDoG7Rq75jRx+W+NYboY6ul+X1xAu4Ibe+AVb2VRfKqnFG3bd9lMAVPk vbNaiynsQ7vWBgHiTqxeajBBoQcNcj/ILm6d3oSP3EtjK28UCbL0b2rl2pDBNWEF 7R8wbuDBQopHf1SomwFZy5CzjwxEBUqEoIDESOHAdpQIHi6lzsamul2/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOlF6heXTxeHlCa1RpSLA8NOThwMB8GA1UdIwQY MBaAFJPcdeYeSD8NR5Ih88p1/HIglqftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2Ut MzM4OTc1ODI5ZThiLzEvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2UtMzM4OTc1ODI5ZThi LzEvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP829fgJ1 w81cnGNylqrNrSSxQgv2WlJB2xeUCrVgbRjFPF8Z4oAJf1C774ht8s3FkoDPiB4P vdy9iA6RioxOu4wcr6GlpHUx9wiXDTARI5EMFCKtjZoiB+hjZ6XUEnshlGXs2FnO X8Y48YUuM/CpnFs1HNAWJBH7+Q3ujMapNYC/lxCMC/ShxmntXT3biYf2BxB6XeTP ww2ZiyIQ7QkWATVBaoXW3p81pi0b11Uj5rWKjtUTD8BXSPsak+P67NN71hZKOYM+ tI0Z7rlPVWOWRFCXRO1kvlPEQMOWirKrksVz8PwaJQ4aLGliK41EarjmOcd1o1aC ZPkeCt7LOW5F6A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:19:47 2025 by rpki-client