This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json) Hash identifier: zsM+lG6m0xLeOwDJaKollLd8HgNSEx65ssu4klrU4H8= Subject key identifier: 21:69:B3:52:FC:43:FC:48:CD:8F:10:37:02:DC:0D:4B:8E:15:0C:51 Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Certificate serial: 019AF31CD27FAAD39DAD86C692743120FF30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft Manifest number: 01D7 Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=) 2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: 0Ki3fxqgNr3oh8FCrQr5tzrYRUhQ8yDNpuD05EW9AHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d2:7f:aa:d3:9d:ad:86:c6:92:74:31:20:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=2169b352fc43fc48cd8f103702dc0d4b8e150c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:cd:05:15:4b:22:bf:76:0e:e7:9d:d7:9b: e9:de:23:53:9e:4f:db:3e:26:fb:2d:a0:1b:49:f7: db:83:ea:b4:60:35:b8:ad:c5:e4:17:7f:31:a3:8e: 05:4c:37:f0:b6:28:5e:24:99:d4:29:fb:f3:73:4b: 54:bb:10:d6:9e:1c:ed:85:3c:b4:62:2a:f1:b0:c8: 62:27:3d:55:b3:9e:6d:25:b5:83:f2:3e:43:ab:d4: 64:fa:00:8b:fd:e5:1d:9c:cf:8d:96:18:1c:90:ad: b0:47:71:41:de:d3:a3:36:04:ce:aa:e5:a4:e8:da: b6:04:60:0d:47:69:9c:64:34:11:44:c4:02:2c:8f: 19:fc:cc:ee:28:a8:63:bc:80:07:2d:d7:d8:29:c0: d1:0a:27:70:e8:4e:71:08:c5:4e:58:ae:a8:ed:f4: a5:7a:08:ed:22:dc:8c:4f:8f:d7:cc:f6:3f:3f:a0: b5:bb:41:ef:57:92:c3:b9:9f:38:ce:3f:0e:18:3e: 0c:ef:dc:07:06:a3:d1:40:36:71:c1:47:b5:21:88: f4:fc:c3:22:4f:e1:84:28:2a:e5:ae:4e:cf:49:4d: 50:59:e7:54:b3:d7:b1:12:f0:2d:84:0c:9c:50:36: 66:94:8c:a8:57:e9:57:03:d8:df:5c:3e:15:e0:cd: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:B3:52:FC:43:FC:48:CD:8F:10:37:02:DC:0D:4B:8E:15:0C:51 X509v3 Authority Key Identifier: keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:59:61:51:ed:fd:1d:3f:cf:43:0e:58:e5:d5:4a:e4:c2:05: 78:34:ad:e0:b0:9c:c4:28:16:6b:bb:3c:63:7c:96:74:4f:48: 8b:db:1d:e6:df:be:05:9e:2b:14:4f:10:28:1b:d6:a4:ff:2f: 20:41:79:dd:a5:04:87:2b:2a:c9:7f:15:67:11:2f:76:44:47: 42:76:43:7f:cb:43:22:0e:31:32:a5:42:f9:e8:a7:bb:24:fe: 0b:63:6c:e9:a2:8a:96:00:69:b9:a8:84:d3:4f:96:90:86:27: bd:be:4a:a5:0d:e6:55:74:a4:10:6b:b0:72:d4:e0:f0:2f:68: 30:45:d8:01:ab:5e:70:48:0e:f7:6e:59:a6:20:c9:0c:a2:f3: cf:e7:43:5d:cc:17:44:98:a6:c8:ba:2a:a5:16:46:3e:a9:89: 2c:43:2d:d8:aa:a5:28:5a:0c:12:21:74:c0:fd:79:94:bb:e7: 9b:ba:76:54:11:4f:b9:2d:71:c2:0d:3f:8f:8f:23:e8:48:cd: c3:f2:58:48:9d:12:7f:01:f7:1c:86:82:71:5e:8b:c3:69:34: 61:40:41:36:e9:78:92:09:1b:4c:a8:95:8e:af:b8:1e:06:3a: 34:00:4b:21:08:29:a7:e3:10:65:8c:25:3c:eb:b0:33:f3:7e: 79:70:47:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNJ/qtOdrYbGknQxIP8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni ZGU0MzgwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD EygyMTY5YjM1MmZjNDNmYzQ4Y2Q4ZjEwMzcwMmRjMGQ0YjhlMTUwYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc7NBRVLIr92Dued15vp3iNTnk/b Pib7LaAbSffbg+q0YDW4rcXkF38xo44FTDfwtiheJJnUKfvzc0tUuxDWnhzthTy0 YirxsMhiJz1Vs55tJbWD8j5Dq9Rk+gCL/eUdnM+NlhgckK2wR3FB3tOjNgTOquWk 6Nq2BGANR2mcZDQRRMQCLI8Z/MzuKKhjvIAHLdfYKcDRCidw6E5xCMVOWK6o7fSl egjtItyMT4/XzPY/P6C1u0HvV5LDuZ84zj8OGD4M79wHBqPRQDZxwUe1IYj0/MMi T+GEKCrlrk7PSU1QWedUs9exEvAthAycUDZmlIyoV+lXA9jfXD4V4M0fWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFps1L8Q/xIzY8QNwLcDUuOFQxRMB8GA1UdIwQY MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt MTNjMmVhOTJhYTllLzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAellhUe39 HT/PQw5Y5dVK5MIFeDSt4LCcxCgWa7s8Y3yWdE9Ii9sd5t++BZ4rFE8QKBvWpP8v IEF53aUEhysqyX8VZxEvdkRHQnZDf8tDIg4xMqVC+einuyT+C2Ns6aKKlgBpuaiE 00+WkIYnvb5KpQ3mVXSkEGuwctTg8C9oMEXYAatecEgO925ZpiDJDKLzz+dDXcwX RJimyLoqpRZGPqmJLEMt2KqlKFoMEiF0wP15lLvnm7p2VBFPuS1xwg0/j48j6EjN w/JYSJ0SfwH3HIaCcV6Lw2k0YUBBNul4kgkbTKiVjq+4HgY6NABLIQgpp+MQZYwl POuwM/N+eXBHDg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:53 2025 by rpki-client