This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json) Hash identifier: a6rwsvtU5fu3xGgSUwTeDBPJnes9Cz0a6TeExJAVj9w= Subject key identifier: 6E:34:C5:D1:47:32:F3:BC:B1:86:C6:D1:2E:79:8C:92:D3:7D:63:77 Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f Certificate serial: 019AF208ACB6C16D71D8A069E28DA535AC78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft Manifest number: 168F Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=) 2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=) 3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: 5R7sVqMWXBpz2Fcj4+YHrv8i5pG1KcreqHbbX4+EABc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ac:b6:c1:6d:71:d8:a0:69:e2:8d:a5:35:ac:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=6e34c5d14732f3bcb186c6d12e798c92d37d6377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:67:ba:3a:2c:d9:29:03:17:0c:c7:cc:fb: bc:83:0d:a3:4e:b5:4b:a8:fe:a6:c8:e9:b7:19:d8: 32:38:15:fa:0b:41:32:d4:ae:53:81:69:bb:eb:b2: 9d:bb:3f:f6:03:23:ae:30:b1:fa:82:f0:10:5b:2b: 17:bd:de:13:1c:a6:39:f1:4a:a6:b1:87:37:74:6f: 06:b1:57:e0:f3:3a:00:23:f5:c8:0e:1e:8e:e0:2f: 84:8d:f0:72:46:a8:d7:94:67:6c:9c:ae:36:61:aa: fb:48:89:8f:1c:5b:9d:ac:bf:c8:c2:02:6f:90:4e: 4b:84:57:dd:25:0b:8e:44:ce:25:d8:dd:4c:08:2f: 21:27:ca:44:ce:ae:60:e3:8c:f6:3a:30:1d:0b:aa: b1:62:a0:2f:a8:62:90:bf:b5:b2:b8:30:a6:52:9b: 5d:54:c6:24:25:a9:55:b4:71:4d:e3:ab:a4:07:0b: 61:1c:91:a1:12:a6:34:88:94:eb:f3:ed:41:39:58: e5:67:d3:ca:15:88:9f:00:70:47:fa:24:f0:ec:16: 63:fc:54:ff:3b:10:83:d7:72:4a:c6:32:28:53:69: 99:ea:a8:38:ad:81:e1:52:6e:14:23:a9:48:01:11: 99:e5:8e:f3:ae:fb:d6:38:4c:bc:00:7d:8c:34:6c: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:34:C5:D1:47:32:F3:BC:B1:86:C6:D1:2E:79:8C:92:D3:7D:63:77 X509v3 Authority Key Identifier: keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3a:51:16:6a:90:20:6c:42:2e:e6:f5:3c:4f:53:68:af:31: 9d:f6:bc:86:16:43:0e:0f:93:52:85:cb:78:d9:a8:2f:a3:19: 06:41:70:6f:d9:c5:0a:df:8d:09:7c:bd:a1:88:7b:00:c4:08: 9e:e1:8f:29:60:9d:e9:bb:7c:34:48:9f:4f:97:4b:29:22:ca: 5f:f3:a2:cf:63:d9:fa:38:98:13:2a:f8:ac:46:05:fc:76:69: bf:03:e1:b7:3a:9c:c6:0b:9b:b4:81:19:55:0d:ba:dd:1b:8e: 72:19:52:7e:bc:4a:0e:c7:03:14:10:56:d4:21:94:84:d3:28: 5f:be:cc:98:a5:cc:e9:fb:4a:83:33:cc:f8:46:95:1b:84:03: 53:3b:9c:d1:a2:65:63:0c:aa:46:2b:5b:2d:16:b7:93:15:5f: e2:17:49:e2:78:62:59:1f:f3:4f:1d:14:90:15:03:be:3b:fd: 52:48:3f:7f:bc:fa:91:41:71:ae:96:15:ed:a8:e5:52:fb:89: c0:bb:02:cc:45:99:62:5c:ca:b9:02:2a:e6:82:1f:6a:7f:0a: bb:86:85:aa:83:06:29:ac:09:13:76:55:bd:04:8a:01:0e:3d: 77:71:ba:83:03:22:4b:9b:70:1d:c8:2a:49:38:06:98:9e:63: 46:4e:f5:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKy2wW1x2KBp4o2lNax4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDAxYzQ3ZjAwZTY0ZjM1Y2M3NTJkMDNiMzRhNzFiNzE0 MDZiM2YwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD Eyg2ZTM0YzVkMTQ3MzJmM2JjYjE4NmM2ZDEyZTc5OGM5MmQzN2Q2Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XBnujos2SkDFwzHzPu8gw2jTrVL qP6myOm3GdgyOBX6C0Ey1K5TgWm767Kduz/2AyOuMLH6gvAQWysXvd4THKY58Uqm sYc3dG8GsVfg8zoAI/XIDh6O4C+EjfByRqjXlGdsnK42Yar7SImPHFudrL/IwgJv kE5LhFfdJQuORM4l2N1MCC8hJ8pEzq5g44z2OjAdC6qxYqAvqGKQv7WyuDCmUptd VMYkJalVtHFN46ukBwthHJGhEqY0iJTr8+1BOVjlZ9PKFYifAHBH+iTw7BZj/FT/ OxCD13JKxjIoU2mZ6qg4rYHhUm4UI6lIARGZ5Y7zrvvWOEy8AH2MNGyMlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG40xdFHMvO8sYbG0S55jJLTfWN3MB8GA1UdIwQY MBaAFJHQHEfwDmTzXMdS0Ds0pxtxQGs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWIt NTZiMDA2ZWYwZDNiLzEva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iMGZjMGMtYzUzNy00MGI0LTliNWItNTZiMDA2ZWYwZDNi LzEva2RBY1JfQU9aUE5jeDFMUU96U25HM0ZBYXo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzpRFmqQ IGxCLub1PE9TaK8xnfa8hhZDDg+TUoXLeNmoL6MZBkFwb9nFCt+NCXy9oYh7AMQI nuGPKWCd6bt8NEifT5dLKSLKX/Oiz2PZ+jiYEyr4rEYF/HZpvwPhtzqcxgubtIEZ VQ263RuOchlSfrxKDscDFBBW1CGUhNMoX77MmKXM6ftKgzPM+EaVG4QDUzuc0aJl YwyqRitbLRa3kxVf4hdJ4nhiWR/zTx0UkBUDvjv9Ukg/f7z6kUFxrpYV7ajlUvuJ wLsCzEWZYlzKuQIq5oIfan8Ku4aFqoMGKawJE3ZVvQSKAQ49d3G6gwMiS5twHcgq STgGmJ5jRk71cA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:28 2025 by rpki-client