This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft File: k61uOZkaLowJwa3lO-WV-LipQl4.mft (raw, json) Hash identifier: vJKHJO7ClNstcj+eO3bwSifuRCkqr+JbEmBE0PgG29w= Subject key identifier: 2D:77:75:85:DD:E2:1F:2B:C9:E1:13:D6:78:D4:02:BD:DA:CB:92:89 Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E Certificate issuer: /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e Certificate serial: 019AF23FB4534F10A18635F068D92058B213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft Manifest number: 0563 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: 6ignIb5OCDRZa9htQBKWaTGmU9o.roa (hash: zSgV1vtphKXfQn8b1eScbKSqpXfajJgXTewaQSsjXpw=) 2: k61uOZkaLowJwa3lO-WV-LipQl4.crl (hash: IQcjVZM5a0v6tb/AOIF3UeG/B0p9WUXLl+uWQ4pq8qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b4:53:4f:10:a1:86:35:f0:68:d9:20:58:b2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=2d777585dde21f2bc9e113d678d402bddacb9289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:16:9c:09:77:6a:58:d3:c9:c5:5f:fa:f9: 8f:5f:78:35:47:d1:be:36:a3:43:89:df:d4:ad:f9: a4:22:ae:9b:0b:e9:f8:b3:f6:b5:af:f5:73:0c:66: ba:11:00:b3:fc:b5:45:13:e8:22:87:66:0b:ea:00: 11:3b:c3:53:3a:2b:66:c6:14:1f:68:34:f5:37:d9: 4f:8c:3d:d3:8f:65:fe:03:d9:88:51:79:21:02:14: 29:e3:2f:ad:90:1e:dc:0d:0d:dc:b5:a0:ef:58:a4: e7:ae:85:62:36:2c:b5:af:8a:f8:20:d3:96:bf:eb: 22:df:49:76:65:52:9a:27:0c:3a:ea:29:32:0a:7b: 22:95:8a:e2:67:4d:52:fa:0c:a3:df:2d:9b:52:c0: 42:96:c5:ff:e9:e2:95:27:76:33:93:c3:42:05:2d: 72:b7:a3:1e:e2:5c:8e:64:c5:6e:ae:41:fd:6a:c3: 57:33:dd:54:3c:2d:da:19:77:57:92:d2:94:0a:d0: 78:98:49:24:10:81:b4:1d:59:6c:be:d2:b5:d1:27: 12:16:9f:ae:0f:70:b2:e8:a8:d8:82:03:06:8a:40: a7:a8:8b:46:0b:01:b5:7a:ec:42:3b:ec:4b:d9:79: 97:a9:68:b0:9e:8e:17:b1:27:1b:e7:21:e7:f3:e1: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:75:85:DD:E2:1F:2B:C9:E1:13:D6:78:D4:02:BD:DA:CB:92:89 X509v3 Authority Key Identifier: keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:df:2b:ed:62:28:f6:c5:79:93:8b:05:f2:1a:34:b3:53:68: c9:53:e3:88:aa:b5:5a:36:10:6c:4c:ed:51:4c:43:db:74:43: 49:78:03:51:93:dd:73:a4:3f:29:6f:48:bc:02:b2:d9:c5:83: ce:93:51:fb:76:b7:5b:52:a4:d7:e4:6c:fb:90:15:eb:3d:bc: 0d:9a:13:ab:07:0e:8f:f0:6a:43:21:cf:6e:b6:9e:4b:bb:08: e5:d0:d3:0c:82:e9:4e:da:4e:23:8b:5d:3e:ca:31:0b:8f:fa: 49:13:44:c0:f2:96:84:b7:89:d1:62:de:a9:a4:d5:ec:53:09: e0:b1:a4:e8:fe:9a:7c:b0:86:cd:e4:a3:54:d0:46:bd:1b:c0: b2:92:02:23:67:8b:aa:e6:a6:87:cb:4b:92:36:69:d7:9f:f5: cf:6e:69:e4:cb:c3:f9:f3:0a:89:29:cd:7b:97:87:73:f8:1a: 7f:67:8a:e1:ca:5d:bf:cb:b4:be:dc:95:06:96:1e:cb:37:dd: 40:f7:0b:50:b4:a9:52:4e:82:3d:ba:c1:14:ed:ca:9f:20:eb: 5b:3c:9d:51:e0:c0:00:86:32:f9:35:c9:c4:a5:96:04:7e:6f: 3a:7c:ca:e9:0a:62:38:11:e0:cd:a0:d6:7c:ca:77:67:e1:dd: 27:aa:4c:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7RTTxChhjXwaNkgWLITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYWQ2ZTM5OTkxYTJlOGMwOWMxYWRlNTNiZTU5NWY4Yjhh OTQyNWUwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EygyZDc3NzU4NWRkZTIxZjJiYzllMTEzZDY3OGQ0MDJiZGRhY2I5Mjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OcWnAl3aljTycVf+vmPX3g1R9G+ NqNDid/UrfmkIq6bC+n4s/a1r/VzDGa6EQCz/LVFE+gih2YL6gARO8NTOitmxhQf aDT1N9lPjD3Tj2X+A9mIUXkhAhQp4y+tkB7cDQ3ctaDvWKTnroViNiy1r4r4INOW v+si30l2ZVKaJww66ikyCnsilYriZ01S+gyj3y2bUsBClsX/6eKVJ3Yzk8NCBS1y t6Me4lyOZMVurkH9asNXM91UPC3aGXdXktKUCtB4mEkkEIG0HVlsvtK10ScSFp+u D3Cy6KjYggMGikCnqItGCwG1euxCO+xL2XmXqWiwno4XsScb5yHn8+HIKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC13dYXd4h8ryeET1njUAr3ay5KJMB8GA1UdIwQY MBaAFJOtbjmZGi6MCcGt5Tvllfi4qUJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQt Zjc3NmM5MjIwN2I3LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQtZjc3NmM5MjIwN2I3 LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWt8r7WIo 9sV5k4sF8ho0s1NoyVPjiKq1WjYQbEztUUxD23RDSXgDUZPdc6Q/KW9IvAKy2cWD zpNR+3a3W1Kk1+Rs+5AV6z28DZoTqwcOj/BqQyHPbraeS7sI5dDTDILpTtpOI4td PsoxC4/6SRNEwPKWhLeJ0WLeqaTV7FMJ4LGk6P6afLCGzeSjVNBGvRvAspICI2eL quamh8tLkjZp15/1z25p5MvD+fMKiSnNe5eHc/gaf2eK4cpdv8u0vtyVBpYeyzfd QPcLULSpUk6CPbrBFO3KnyDrWzydUeDAAIYy+TXJxKWWBH5vOnzK6QpiOBHgzaDW fMp3Z+HdJ6pMuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:06 2025 by rpki-client