This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json) Hash identifier: D+CUyGfdg8xDM3CrqIMeL0+gpWyo/FsPzQ3JrJmzCho= Subject key identifier: 1F:B6:0F:55:89:73:33:9D:63:B0:45:C0:D5:E4:74:51:2A:97:89:31 Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0 Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0 Certificate serial: 019B2E54BB1B590244B0D7CDE130AA215303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft Manifest number: 0BBE Signing time: Wed 17 Dec 2025 22:01:03 +0000 Manifest this update: Wed 17 Dec 2025 22:01:03 +0000 Manifest next update: Thu 18 Dec 2025 22:01:03 +0000 Files and hashes: 1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=) 2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: ekH/loVI1QP69SVk9nP+djC50VgF5x8nnjtE29VndSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:bb:1b:59:02:44:b0:d7:cd:e1:30:aa:21:53:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0 Validity Not Before: Dec 17 22:01:03 2025 GMT Not After : Dec 18 22:01:03 2025 GMT Subject: CN=1fb60f558973339d63b045c0d5e474512a978931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:28:70:70:9a:20:42:35:72:7e:20:ef:ef: 60:c3:05:45:d9:07:c4:7b:30:7c:39:86:81:98:f2: 89:ae:63:ae:53:4f:b1:82:84:2d:eb:ad:c5:69:0b: 08:47:c2:82:1f:ea:1a:9f:30:c9:f6:e1:ab:d6:48: 81:3a:61:fe:a5:3d:da:67:70:e2:17:dc:08:fc:35: e2:a2:b3:cc:e1:f2:73:f5:d1:3f:91:36:9f:42:1e: 1a:d5:60:38:78:1f:d8:60:6d:7f:62:6e:0a:24:fa: 4b:88:57:13:de:7d:07:a3:df:aa:99:14:20:2a:e2: 5c:31:82:b4:b9:d6:c4:e9:6a:ab:58:c4:a2:24:58: 7b:3f:30:ea:e9:f6:d5:19:21:6d:09:67:73:cb:a2: 43:73:89:86:d0:e2:29:35:ef:97:cb:18:c1:ac:2a: 08:4a:e1:80:4f:e5:b7:52:36:2a:86:3c:ac:4b:c8: ac:a2:35:85:9a:49:91:de:2c:08:66:38:24:44:8a: 93:bd:fe:a4:b5:58:7c:dc:0f:eb:91:5a:62:18:8a: d8:c1:4e:19:96:12:1e:07:38:ad:73:31:d7:3e:5c: bf:75:1c:9e:06:b8:d5:f9:4d:d0:10:b8:c5:a0:79: b8:69:fb:c0:93:a2:1a:e0:f3:62:1e:b6:56:8c:e0: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:0F:55:89:73:33:9D:63:B0:45:C0:D5:E4:74:51:2A:97:89:31 X509v3 Authority Key Identifier: keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:99:1d:e2:83:a3:1d:52:68:83:4f:68:8e:9f:24:1c:f9:b5: 32:70:7e:40:1c:49:1e:79:ec:48:c8:e1:1a:8b:3d:b2:1e:e9: 42:b2:17:bf:26:99:d4:fa:bc:69:86:cc:a7:c9:79:b8:fe:9d: 4d:68:80:d4:aa:a0:58:1a:f1:d3:a8:3c:39:b6:c7:56:64:50: 33:16:ac:e4:89:9f:4c:ee:ad:09:94:32:57:f1:f3:30:b1:b0: 40:a1:0b:a9:68:80:71:42:34:3c:ea:c4:c5:ed:36:82:93:86: 65:1f:c0:55:01:b2:0f:d4:aa:17:36:ab:b1:ea:47:b6:69:e3: 17:fd:dd:7e:82:f4:a1:b0:41:8c:bf:f9:bd:35:90:83:f2:9e: 13:9d:df:89:36:8a:87:87:04:ef:3b:64:d5:f9:13:9b:0e:90: a0:42:21:b6:63:5b:36:4e:0b:a2:f2:7e:b1:e0:8d:9d:1f:a1: 19:62:31:43:df:bc:db:57:b5:2c:89:d4:7a:e4:60:b5:12:39: 5a:f9:03:51:9c:2d:e6:1a:c8:ea:a1:3d:8b:80:5f:16:f5:64: 25:36:82:b6:c4:63:71:34:b0:3a:1d:5c:5e:cb:42:fd:ff:01: 8a:ce:09:16:3d:82:de:af:88:07:0c:be:03:49:fa:b8:92:36: ba:a8:57:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVLsbWQJEsNfN4TCqIVMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZWYyZTQzM2QwMGEyNTNjOTlhNDUwNDg1MDc5NDQzODU0 NTdjZjAwHhcNMjUxMjE3MjIwMTAzWhcNMjUxMjE4MjIwMTAzWjAzMTEwLwYDVQQD EygxZmI2MGY1NTg5NzMzMzlkNjNiMDQ1YzBkNWU0NzQ1MTJhOTc4OTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnMocHCaIEI1cn4g7+9gwwVF2QfE ezB8OYaBmPKJrmOuU0+xgoQt663FaQsIR8KCH+oanzDJ9uGr1kiBOmH+pT3aZ3Di F9wI/DXiorPM4fJz9dE/kTafQh4a1WA4eB/YYG1/Ym4KJPpLiFcT3n0Ho9+qmRQg KuJcMYK0udbE6WqrWMSiJFh7PzDq6fbVGSFtCWdzy6JDc4mG0OIpNe+XyxjBrCoI SuGAT+W3UjYqhjysS8isojWFmkmR3iwIZjgkRIqTvf6ktVh83A/rkVpiGIrYwU4Z lhIeBzitczHXPly/dRyeBrjV+U3QELjFoHm4afvAk6Ia4PNiHrZWjOB5eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+2D1WJczOdY7BFwNXkdFEql4kxMB8GA1UdIwQY MBaAFJPvLkM9AKJTyZpFBIUHlEOFRXzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay04dVF6MEFvbFBKbWtVRWhRZVVRNFZGZlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wY2IwNmItMTUxOC00ZGUwLWE2OTkt ZmZiZDRjNmMxMTEyLzEvay04dVF6MEFvbFBKbWtVRWhRZVVRNFZGZlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wY2IwNmItMTUxOC00ZGUwLWE2OTktZmZiZDRjNmMxMTEy LzEvay04dVF6MEFvbFBKbWtVRWhRZVVRNFZGZlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJkd4oOj HVJog09ojp8kHPm1MnB+QBxJHnnsSMjhGos9sh7pQrIXvyaZ1Pq8aYbMp8l5uP6d TWiA1KqgWBrx06g8ObbHVmRQMxas5ImfTO6tCZQyV/HzMLGwQKELqWiAcUI0POrE xe02gpOGZR/AVQGyD9SqFzarsepHtmnjF/3dfoL0obBBjL/5vTWQg/KeE53fiTaK h4cE7ztk1fkTmw6QoEIhtmNbNk4LovJ+seCNnR+hGWIxQ9+821e1LInUeuRgtRI5 WvkDUZwt5hrI6qE9i4BfFvVkJTaCtsRjcTSwOh1cXstC/f8Bis4JFj2C3q+IBwy+ A0n6uJI2uqhXZQ== -----END CERTIFICATE-----Generated at Thu Dec 18 04:20:08 2025 by rpki-client