This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json) Hash identifier: 5eLw52sjaVqdapTpnO6+UTl+IpnrjcKrUhncs6CHlhc= Subject key identifier: D4:68:4B:88:AB:43:55:D7:C7:AF:09:B1:62:9B:DB:CA:E3:99:D2:DB Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa Certificate serial: 019B19BB6A36D38B8E2283A4AFB79028F6C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft Manifest number: 0DB5 Signing time: Sat 13 Dec 2025 22:01:11 +0000 Manifest this update: Sat 13 Dec 2025 22:01:11 +0000 Manifest next update: Sun 14 Dec 2025 22:01:11 +0000 Files and hashes: 1: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: dZHHM5WGR7f9A2hFD8j1M7Mmw/zjXPoNa4IONt7usWE=) 2: xdJCZN2-B2T_CDkACtSXidGS3do.roa (hash: s0jqLGTlnozuwukxMNuj9trb2i8A2O+cFtDeELQzX9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:6a:36:d3:8b:8e:22:83:a4:af:b7:90:28:f6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa Validity Not Before: Dec 13 22:01:11 2025 GMT Not After : Dec 14 22:01:11 2025 GMT Subject: CN=d4684b88ab4355d7c7af09b1629bdbcae399d2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:16:35:e2:f7:1f:f2:fd:86:45:4f:05:31: 0a:94:db:89:1a:9d:0f:20:5c:41:8f:b1:40:d6:a8: b7:02:42:25:f0:e8:6b:1c:89:14:a8:05:97:a5:ee: d5:ca:65:cd:2b:2c:ff:ee:ce:d8:c8:16:2a:74:e7: 3f:e3:27:4e:a7:c4:86:b4:a4:bf:fb:7f:04:d1:27: 3d:09:fd:99:57:50:c8:93:d4:3c:a2:32:49:32:8c: d8:c3:75:2b:9c:5a:b1:b5:8e:ff:89:4c:62:94:a2: 47:88:21:5b:86:53:3e:6e:cd:52:19:54:55:46:56: 2c:65:76:0f:4d:6e:a3:a4:da:1c:78:d5:97:5e:63: 43:c9:a1:ab:2b:9d:18:3f:1a:35:db:65:fb:cb:6c: e3:1c:99:c2:a4:d4:1e:14:87:8c:2e:13:e8:07:8d: 73:29:3e:8c:07:2d:ca:29:39:16:39:67:67:15:07: 97:df:65:92:17:5e:c9:79:56:94:44:92:cb:20:31: c9:6e:82:9a:00:df:f6:99:15:74:0a:c2:bb:a3:14: 97:c9:87:58:c6:85:ef:81:1b:fb:a7:e0:73:91:b8: 99:25:7d:6b:0d:00:18:7c:77:66:12:f3:9f:e7:43: fa:b8:40:1f:9c:72:46:46:52:c9:42:72:7e:a8:e9: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:68:4B:88:AB:43:55:D7:C7:AF:09:B1:62:9B:DB:CA:E3:99:D2:DB X509v3 Authority Key Identifier: keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f7:5c:00:7a:56:28:18:dc:0e:48:8d:11:2e:d5:2c:f8:7e: 1d:27:33:97:75:d8:62:62:6c:97:cc:53:64:ab:4d:43:c3:7a: 0a:ba:3f:96:3e:de:c3:17:46:2b:95:39:db:b5:83:e5:5f:c4: 54:19:a2:93:79:75:b2:b7:1b:ad:57:48:02:cb:ff:f1:61:57: 0e:89:34:45:15:a2:38:b7:46:66:9e:65:0c:30:49:4c:d3:f2: cf:cb:d1:da:f5:c8:b4:33:ef:47:19:0e:9a:ac:2e:ec:42:55: ae:55:2d:c4:c6:73:cb:1d:1d:a7:ba:a8:6e:e4:dd:18:14:db: 5e:1e:1f:35:d9:85:89:2b:91:b4:d7:82:5d:ac:35:87:63:78: 4c:af:7c:a3:20:89:88:a5:d7:ca:00:a3:81:ec:2b:a5:32:78: 2c:b9:29:25:8d:2f:93:2f:e8:de:9a:a4:c9:b2:20:83:e5:91: 7a:05:3b:a7:e4:b3:63:63:dc:78:85:f2:92:2c:8f:6d:2c:d7: 34:26:d6:d2:96:fe:ee:ff:61:b5:0a:94:98:26:37:65:8f:ce: ad:96:0c:5b:92:f9:c2:11:21:ff:95:14:24:c1:4e:1d:43:fd: 32:b4:69:d9:a2:b2:e2:c0:a5:d1:ee:75:77:93:bd:d4:2c:10: 00:3a:f6:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu2o204uOIoOkr7eQKPbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWJiYTBiMDA1MmFlN2JkMzQ5MjM1NjQ3YTJlZDczMTUw NmNjYWEwHhcNMjUxMjEzMjIwMTExWhcNMjUxMjE0MjIwMTExWjAzMTEwLwYDVQQD EyhkNDY4NGI4OGFiNDM1NWQ3YzdhZjA5YjE2MjliZGJjYWUzOTlkMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJwWNeL3H/L9hkVPBTEKlNuJGp0P IFxBj7FA1qi3AkIl8OhrHIkUqAWXpe7VymXNKyz/7s7YyBYqdOc/4ydOp8SGtKS/ +38E0Sc9Cf2ZV1DIk9Q8ojJJMozYw3UrnFqxtY7/iUxilKJHiCFbhlM+bs1SGVRV RlYsZXYPTW6jpNoceNWXXmNDyaGrK50YPxo122X7y2zjHJnCpNQeFIeMLhPoB41z KT6MBy3KKTkWOWdnFQeX32WSF17JeVaURJLLIDHJboKaAN/2mRV0CsK7oxSXyYdY xoXvgRv7p+BzkbiZJX1rDQAYfHdmEvOf50P6uEAfnHJGRlLJQnJ+qOm/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRoS4irQ1XXx68JsWKb28rjmdLbMB8GA1UdIwQY MBaAFKyrugsAUq5700kjVkei7XMVBsyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85M2RiZTctZGIyZi00YzM1LWIwYTct ZTViNDk5NDdlZDA3LzEvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85M2RiZTctZGIyZi00YzM1LWIwYTctZTViNDk5NDdlZDA3 LzEvckt1NkN3QlNybnZUU1NOV1I2THRjeFVHektvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvdcAHpW KBjcDkiNES7VLPh+HSczl3XYYmJsl8xTZKtNQ8N6Cro/lj7ewxdGK5U527WD5V/E VBmik3l1srcbrVdIAsv/8WFXDok0RRWiOLdGZp5lDDBJTNPyz8vR2vXItDPvRxkO mqwu7EJVrlUtxMZzyx0dp7qobuTdGBTbXh4fNdmFiSuRtNeCXaw1h2N4TK98oyCJ iKXXygCjgewrpTJ4LLkpJY0vky/o3pqkybIgg+WRegU7p+SzY2PceIXykiyPbSzX NCbW0pb+7v9htQqUmCY3ZY/OrZYMW5L5whEh/5UUJMFOHUP9MrRp2aKy4sCl0e51 d5O91CwQADr2Yw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:35 2025 by rpki-client