This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json) Hash identifier: S9VI07g9f8hehdBtEdCAiT8f8acfaxYMZ7J8UO4ETS8= Subject key identifier: 4D:51:62:6B:13:61:F3:EA:17:F4:B3:0A:C7:C8:0A:2E:C4:B8:DE:0E Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 Certificate issuer: /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Certificate serial: 019AF2AD5D7E5904CCBC17CF4E64B1BEE693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 08:00:39 +0000 Manifest this update: Sat 06 Dec 2025 08:00:39 +0000 Manifest next update: Sun 07 Dec 2025 08:00:39 +0000 Files and hashes: 1: ilnYefv9qH3PNjv85ldcxCld-ls.roa (hash: SaAltYqG0WS/0wCUjq7LbhKFvPJZWUqyuxA3IK3kA+I=) 2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: uX3GVSPX/tCs2H4NXsxiKQd7f4h0QFVr529fFt8avPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5d:7e:59:04:cc:bc:17:cf:4e:64:b1:be:e6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9 Validity Not Before: Dec 6 08:00:39 2025 GMT Not After : Dec 7 08:00:39 2025 GMT Subject: CN=4d51626b1361f3ea17f4b30ac7c80a2ec4b8de0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:87:e1:c6:ce:37:99:f3:d0:3e:3c:86:87: 14:03:eb:f4:ef:9c:97:d5:a5:99:60:ff:0a:a6:09: f2:27:b0:3b:1c:80:8f:9a:06:e3:d5:49:cb:c8:2f: 0d:9e:46:be:b9:0d:0e:2d:48:6d:b5:2a:f5:5e:bc: f5:d3:29:27:83:27:bf:a5:9e:f2:e5:cd:8f:a4:2f: 52:b4:6b:6b:40:72:ed:ba:52:2b:89:94:d9:29:3b: 43:4f:01:6c:88:9e:e2:1b:af:51:29:35:5c:bb:d0: 1f:f4:0f:7f:2e:40:9c:22:d1:51:fa:e9:ce:83:f0: d4:3b:0a:88:43:d8:12:6e:f8:c3:60:cc:e3:35:c2: fe:2a:08:38:4a:65:77:76:81:c9:e9:c6:40:6f:f9: 29:ea:a3:7f:b9:2a:83:df:bc:de:15:ae:35:f9:6c: 00:7d:ce:c9:e5:8d:f8:5b:58:4f:87:d4:de:71:e2: 38:6f:a5:52:9d:75:c0:bf:e7:3b:e6:1e:9e:d6:c9: 24:ff:b8:aa:13:de:aa:43:01:97:b8:69:0f:c8:4a: a5:6e:28:66:12:48:4a:06:4c:f9:f4:77:1e:dd:7d: fd:54:ee:39:0c:42:cb:5e:c1:52:33:99:2d:b5:5c: 28:ac:55:f9:8d:93:8b:cb:6a:c4:46:2e:49:53:4f: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:51:62:6B:13:61:F3:EA:17:F4:B3:0A:C7:C8:0A:2E:C4:B8:DE:0E X509v3 Authority Key Identifier: keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0f:cb:d3:2e:b6:6e:82:ca:7c:e7:52:bf:3f:e6:ee:47:b0: 86:d0:05:c1:f6:cf:6b:9a:be:20:2b:ca:a6:78:8d:53:c6:22: 93:91:05:6a:8f:8a:de:bb:4b:cc:e8:c0:e4:75:d8:f3:ba:81: 0c:31:46:b0:cd:de:1f:4f:42:98:95:7b:2d:e9:93:b0:27:a9: 14:cc:c0:14:cf:90:00:64:4e:5b:45:2d:77:b1:56:09:8a:02: 6d:3b:14:cb:bb:16:df:59:f1:02:af:94:6c:49:c2:8f:cd:69: 55:ce:ff:2a:62:f3:4f:b1:21:27:21:dc:a6:43:9d:72:c0:6a: 07:03:8c:c3:cc:6d:e4:f6:d5:db:93:bb:d8:33:ee:c6:27:1a: 60:d6:6c:43:4a:91:0c:f7:5b:7c:0c:9d:33:cd:b9:15:dc:19: 0a:42:71:a6:60:bd:a6:b4:16:c4:86:b9:e0:07:04:83:6a:c4: c3:9d:2d:d0:2e:79:ee:74:43:58:0e:44:3e:da:a6:82:87:c7: 0c:d0:f1:38:ef:56:e2:93:76:2f:d8:05:62:40:1f:1b:38:f9: 55:1f:00:f7:4e:8c:0e:2b:bf:54:cc:7c:e0:53:3a:f6:2f:ea: 1f:9c:32:32:9d:e0:b3:ae:0d:4a:4d:e2:2d:20:8e:67:35:ab: 12:3d:33:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrV1+WQTMvBfPTmSxvuaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjNmYzk2NzhjZTViMDI3MzUzOGM3OGIwYjk2YTEzZWIw ODYyZDkwHhcNMjUxMjA2MDgwMDM5WhcNMjUxMjA3MDgwMDM5WjAzMTEwLwYDVQQD Eyg0ZDUxNjI2YjEzNjFmM2VhMTdmNGIzMGFjN2M4MGEyZWM0YjhkZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOqH4cbON5nz0D48hocUA+v075yX 1aWZYP8KpgnyJ7A7HICPmgbj1UnLyC8Nnka+uQ0OLUhttSr1Xrz10ykngye/pZ7y 5c2PpC9StGtrQHLtulIriZTZKTtDTwFsiJ7iG69RKTVcu9Af9A9/LkCcItFR+unO g/DUOwqIQ9gSbvjDYMzjNcL+Kgg4SmV3doHJ6cZAb/kp6qN/uSqD37zeFa41+WwA fc7J5Y34W1hPh9TeceI4b6VSnXXAv+c75h6e1skk/7iqE96qQwGXuGkPyEqlbihm EkhKBkz59Hce3X39VO45DELLXsFSM5kttVworFX5jZOLy2rERi5JU08XBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1RYmsTYfPqF/SzCsfICi7EuN4OMB8GA1UdIwQY MBaAFJPz/JZ4zlsCc1OMeLC5ahPrCGLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYt YmEwZDNiMmQzNmUwLzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jY2NhYzctNDY2MC00ZTUyLTk1MWYtYmEwZDNiMmQzNmUw LzEva19QOGxuak9Xd0p6VTR4NHNMbHFFLXNJWXRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQ/L0y62 boLKfOdSvz/m7kewhtAFwfbPa5q+ICvKpniNU8Yik5EFao+K3rtLzOjA5HXY87qB DDFGsM3eH09CmJV7LemTsCepFMzAFM+QAGROW0Utd7FWCYoCbTsUy7sW31nxAq+U bEnCj81pVc7/KmLzT7EhJyHcpkOdcsBqBwOMw8xt5PbV25O72DPuxicaYNZsQ0qR DPdbfAydM825FdwZCkJxpmC9prQWxIa54AcEg2rEw50t0C557nRDWA5EPtqmgofH DNDxOO9W4pN2L9gFYkAfGzj5VR8A906MDiu/VMx84FM69i/qH5wyMp3gs64NSk3i LSCOZzWrEj0zXg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:04 2025 by rpki-client