This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json) Hash identifier: +RzqCWIWhtMoB6fPJblAjB/jCVSsTNNnmK2d3n2NiEo= Subject key identifier: 00:26:46:AE:C7:EA:9B:2F:DA:89:9D:98:51:F7:CA:31:C1:4C:F5:16 Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Certificate serial: 019B077E06DB3EEB32DBA49C280EAE6CB247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 09:00:58 +0000 Manifest this update: Wed 10 Dec 2025 09:00:58 +0000 Manifest next update: Thu 11 Dec 2025 09:00:58 +0000 Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=) 2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: sVYU7WBl4jAeeEuLbWYsHxOnn0nwz+UaCe0ZLfLOClw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:06:db:3e:eb:32:db:a4:9c:28:0e:ae:6c:b2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b Validity Not Before: Dec 10 09:00:58 2025 GMT Not After : Dec 11 09:00:58 2025 GMT Subject: CN=002646aec7ea9b2fda899d9851f7ca31c14cf516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:7d:8d:fb:88:e1:f6:29:ae:85:23:6c:bd: 6f:75:d9:04:b9:96:ce:c9:e0:58:d3:db:f3:80:c9: 11:6c:ee:74:ec:4b:3c:8d:86:03:79:85:ca:13:eb: 08:eb:3b:ad:c4:99:f8:82:11:37:f9:db:bb:30:05: 9d:87:a9:86:97:a1:d9:b1:29:ab:03:87:e6:4c:57: 4d:73:e8:60:7a:49:e5:00:6b:05:1f:ef:e8:b5:44: b9:15:07:22:68:6b:4d:dc:d5:8d:d1:1c:cf:e3:d4: d0:81:3a:bc:df:89:bc:6d:60:47:39:61:77:36:66: 60:e4:f7:33:20:c2:21:42:51:ba:42:41:d3:6e:b3: 7b:e3:15:de:87:74:17:10:66:08:8a:07:ab:7a:83: a3:10:f4:7c:1a:a4:f5:86:5c:ec:fb:d0:54:03:e1: bc:fe:da:37:c8:b3:0e:0b:7d:8b:11:5b:df:8e:1a: 66:3b:db:35:26:0d:8c:c4:d7:b1:10:43:41:a4:ae: 2f:2e:e6:17:bd:75:57:ad:77:62:dc:f6:89:e3:62: c8:cb:d7:e7:f7:b7:02:fc:e9:72:c6:55:e9:e4:c7: 9a:45:e0:ad:4b:97:77:35:70:76:7b:0e:0f:c0:b5: 8e:da:e4:9a:25:1e:c0:3a:86:e7:70:37:89:f7:ee: a4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:26:46:AE:C7:EA:9B:2F:DA:89:9D:98:51:F7:CA:31:C1:4C:F5:16 X509v3 Authority Key Identifier: keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:af:95:d4:97:29:90:7b:d5:c9:b0:a9:f1:fd:f0:10:c0:6a: d4:60:12:a0:2d:42:0f:21:c0:b8:c7:48:f6:7f:c9:6c:2e:f4: 12:e7:80:88:e9:f1:f3:f8:9b:c9:cd:5b:d5:21:5c:6b:89:df: 4c:6c:d0:7e:46:4f:64:b4:7b:81:10:e6:36:b8:cf:e1:e7:bf: b6:7c:66:25:c2:04:5c:99:20:56:51:4b:7f:7f:02:9c:59:27: d3:59:e7:4c:90:b0:e3:3a:b6:9a:3e:75:75:df:60:c8:b1:d5: 71:07:e7:84:62:54:ac:77:52:19:cb:fc:22:b0:58:39:bf:92: 92:18:d5:01:d2:49:51:13:c5:be:34:f0:14:cf:e0:5f:0b:3c: 28:7b:04:03:4f:62:e9:74:bb:a5:5c:0f:0a:fb:b7:1e:65:44: 10:32:d3:0e:54:04:43:2e:d7:ef:32:22:97:9b:5f:5c:49:8a: cf:12:88:a7:a9:d8:d7:6e:da:1a:8d:49:1f:0a:37:9d:8f:65: 0b:4a:75:7e:ea:21:ee:31:5d:35:69:74:ef:96:eb:8a:b6:8c: 2f:4f:36:fc:6a:c2:0c:cc:8c:54:14:84:d0:c4:c4:1a:20:15: 5b:85:e3:fc:02:16:8f:08:66:ce:5a:0a:79:0a:1a:15:12:4a: 4f:28:5f:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfgbbPusy26ScKA6ubLJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzM4ZDNlMWM0ZTdlNTQzYTM2YzhiNjM1M2ViNjZkYTRk YWI0MGIwHhcNMjUxMjEwMDkwMDU4WhcNMjUxMjExMDkwMDU4WjAzMTEwLwYDVQQD EygwMDI2NDZhZWM3ZWE5YjJmZGE4OTlkOTg1MWY3Y2EzMWMxNGNmNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls59jfuI4fYproUjbL1vddkEuZbO yeBY09vzgMkRbO507Es8jYYDeYXKE+sI6zutxJn4ghE3+du7MAWdh6mGl6HZsSmr A4fmTFdNc+hgeknlAGsFH+/otUS5FQciaGtN3NWN0RzP49TQgTq834m8bWBHOWF3 NmZg5PczIMIhQlG6QkHTbrN74xXeh3QXEGYIigereoOjEPR8GqT1hlzs+9BUA+G8 /to3yLMOC32LEVvfjhpmO9s1Jg2MxNexEENBpK4vLuYXvXVXrXdi3PaJ42LIy9fn 97cC/OlyxlXp5MeaReCtS5d3NXB2ew4PwLWO2uSaJR7AOobncDeJ9+6kKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAmRq7H6psv2omdmFH3yjHBTPUWMB8GA1UdIwQY MBaAFJPDjT4cTn5UOjbItjU+tm2k2rQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYt MzY0ODMxMzlkYzVlLzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jNzFlMzAtYzg2OC00OGZjLTgwZGYtMzY0ODMxMzlkYzVl LzEvazhPTlBoeE9mbFE2TnNpMk5UNjJiYVRhdEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJK+V1Jcp kHvVybCp8f3wEMBq1GASoC1CDyHAuMdI9n/JbC70EueAiOnx8/ibyc1b1SFca4nf TGzQfkZPZLR7gRDmNrjP4ee/tnxmJcIEXJkgVlFLf38CnFkn01nnTJCw4zq2mj51 dd9gyLHVcQfnhGJUrHdSGcv8IrBYOb+SkhjVAdJJURPFvjTwFM/gXws8KHsEA09i 6XS7pVwPCvu3HmVEEDLTDlQEQy7X7zIil5tfXEmKzxKIp6nY127aGo1JHwo3nY9l C0p1fuoh7jFdNWl075briraML082/GrCDMyMVBSE0MTEGiAVW4Xj/AIWjwhmzloK eQoaFRJKTyhfZw== -----END CERTIFICATE-----Generated at Wed Dec 10 17:21:03 2025 by rpki-client