This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json) Hash identifier: PQLHuuU/ffP3lgGwPfmAa8EAnB9G+nDzscB2bAt9YfQ= Subject key identifier: 20:30:8D:36:3F:80:5B:6D:3C:75:3C:85:EB:63:8E:89:69:CC:8F:3E Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a Certificate serial: 019B35D6D2C5613890DBBAB1D2DA05EBCC5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft Manifest number: 0590 Signing time: Fri 19 Dec 2025 09:00:29 +0000 Manifest this update: Fri 19 Dec 2025 09:00:29 +0000 Manifest next update: Sat 20 Dec 2025 09:00:29 +0000 Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=) 2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: LimlInEtxygX/jUL0R3Npyl5WeRN4Z+fGXNojvpHtRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:d2:c5:61:38:90:db:ba:b1:d2:da:05:eb:cc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a Validity Not Before: Dec 19 09:00:29 2025 GMT Not After : Dec 20 09:00:29 2025 GMT Subject: CN=20308d363f805b6d3c753c85eb638e8969cc8f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cb:91:21:9c:6b:96:d5:70:9e:37:10:cc:de: 4a:96:dd:3a:02:d2:ad:8c:c2:ec:3a:52:4f:76:16: a2:5a:bb:49:15:8e:7a:7b:34:7b:5c:62:6e:f5:da: 2a:80:a9:8b:3a:03:ea:11:3e:f0:f8:10:7f:5b:6a: 97:12:8e:b9:80:44:d9:c5:cf:9a:35:17:f8:d3:bc: 5f:bd:9f:d3:54:13:30:d7:d4:f0:6a:91:e7:a7:86: 42:79:5f:a5:99:6f:10:d0:b8:1c:20:ad:b7:41:d0: 8c:57:2b:e4:b9:9d:59:50:ce:b5:2e:58:5f:89:dc: 68:91:b7:19:04:20:e0:33:c4:dc:ba:f1:67:61:61: 6b:bd:68:70:f3:a9:6b:c9:e4:bb:9b:d0:ff:70:94: 58:3e:45:9d:8c:0f:70:f9:1e:e9:bc:2f:78:c8:5f: 36:70:81:a2:82:b8:35:3b:4b:2e:f5:00:11:d5:20: 67:52:28:f1:60:ec:92:e0:86:bb:42:92:ed:9f:74: 1a:95:c2:b1:55:5e:69:96:a1:04:e8:7c:9e:29:e9: c8:52:1d:7c:77:2b:16:f1:6d:0f:d8:26:54:a0:6d: 97:92:76:a4:d5:27:a3:43:1e:bb:ee:74:a6:46:ec: 53:16:6c:0a:87:77:1e:c3:c8:75:14:5f:db:e4:4b: 87:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:30:8D:36:3F:80:5B:6D:3C:75:3C:85:EB:63:8E:89:69:CC:8F:3E X509v3 Authority Key Identifier: keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:86:ec:3f:1c:c4:fd:96:ca:44:f7:8b:f8:74:14:cc:cf:bd: 0a:a8:ed:26:58:7c:a9:86:16:23:49:3a:74:11:32:3b:b5:6c: ba:9d:d1:ae:35:7d:d8:e8:b3:db:97:7e:14:e3:1b:14:97:3c: 83:90:7d:2e:39:2a:72:2d:12:d3:36:c9:68:ef:fc:5c:59:60: c4:8a:9f:23:dc:f1:d1:9e:6e:61:c8:b8:f8:af:b0:b7:9d:4f: 0a:ce:4b:78:6e:c2:5e:15:4b:c1:a0:7c:3b:19:00:75:0e:f0: d3:87:d9:19:43:fc:4a:f9:43:07:33:05:4e:f8:31:e3:09:01: 08:60:83:05:e3:ad:20:15:34:3a:e2:bd:1d:b6:18:dd:41:2f: 66:0c:4e:1f:5a:bc:29:af:b1:53:1e:78:db:61:a4:01:61:7e: 01:72:c0:f1:3d:6e:99:f4:47:2f:8a:9e:83:c3:63:26:73:8e: 25:74:d0:ef:57:d0:00:7a:99:45:f5:19:84:64:d0:26:43:cd: 6d:57:b0:bf:ef:21:51:f1:90:09:3c:39:15:bd:c4:b1:60:d6: de:4b:c8:18:8d:7c:3d:fc:3b:30:ba:e1:a1:d9:5e:e9:f6:e1: 0f:ed:0b:e5:b7:d9:09:a5:bb:b1:3e:7f:a0:17:e6:bc:92:1b: 52:be:91:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11tLFYTiQ27qx0toF68xaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZTlmNGJkZGY0YjJkZjExMGFjMzA4MzQ2ZjQ2ZDk0NTBm MTNiM2EwHhcNMjUxMjE5MDkwMDI5WhcNMjUxMjIwMDkwMDI5WjAzMTEwLwYDVQQD EygyMDMwOGQzNjNmODA1YjZkM2M3NTNjODVlYjYzOGU4OTY5Y2M4ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcuRIZxrltVwnjcQzN5Klt06AtKt jMLsOlJPdhaiWrtJFY56ezR7XGJu9doqgKmLOgPqET7w+BB/W2qXEo65gETZxc+a NRf407xfvZ/TVBMw19TwapHnp4ZCeV+lmW8Q0LgcIK23QdCMVyvkuZ1ZUM61Llhf idxokbcZBCDgM8TcuvFnYWFrvWhw86lryeS7m9D/cJRYPkWdjA9w+R7pvC94yF82 cIGigrg1O0su9QAR1SBnUijxYOyS4Ia7QpLtn3QalcKxVV5plqEE6HyeKenIUh18 dysW8W0P2CZUoG2Xknak1SejQx677nSmRuxTFmwKh3cew8h1FF/b5EuHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAwjTY/gFttPHU8hetjjolpzI8+MB8GA1UdIwQY MBaAFJPp9L3fSy3xEKwwg0b0bZRQ8Ts6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgt YzJiNjFmODZiMGFhLzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgtYzJiNjFmODZiMGFh LzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdobsPxzE /ZbKRPeL+HQUzM+9CqjtJlh8qYYWI0k6dBEyO7Vsup3RrjV92Oiz25d+FOMbFJc8 g5B9Ljkqci0S0zbJaO/8XFlgxIqfI9zx0Z5uYci4+K+wt51PCs5LeG7CXhVLwaB8 OxkAdQ7w04fZGUP8SvlDBzMFTvgx4wkBCGCDBeOtIBU0OuK9HbYY3UEvZgxOH1q8 Ka+xUx5422GkAWF+AXLA8T1umfRHL4qeg8NjJnOOJXTQ71fQAHqZRfUZhGTQJkPN bVewv+8hUfGQCTw5Fb3EsWDW3kvIGI18Pfw7MLrhodle6fbhD+0L5bfZCaW7sT5/ oBfmvJIbUr6Rjg== -----END CERTIFICATE-----Generated at Fri Dec 19 16:50:24 2025 by rpki-client