This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json) Hash identifier: kLHQ3MrwRw6juRDJMI5uIJuvVDlelkKEQb1d73zfsxo= Subject key identifier: 57:28:20:77:30:80:31:38:10:4D:FE:89:06:65:18:DC:CC:AC:96:E7 Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Certificate serial: 019AE785E9BCD29A8D6AF54E902DE9FA7FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft Manifest number: 0E6E Signing time: Thu 04 Dec 2025 04:01:44 +0000 Manifest this update: Thu 04 Dec 2025 04:01:44 +0000 Manifest next update: Fri 05 Dec 2025 04:01:44 +0000 Files and hashes: 1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=) 2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: o9Y6SgfdUDTN5n5kqKcpDqQreFhh6e6+ChIFsFVnkus=) 3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 04:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:85:e9:bc:d2:9a:8d:6a:f5:4e:90:2d:e9:fa:7f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2 Validity Not Before: Dec 4 04:01:44 2025 GMT Not After : Dec 5 04:01:44 2025 GMT Subject: CN=5728207730803138104dfe89066518dcccac96e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:c3:d5:82:dd:0f:e9:fb:cc:e3:b5:06:19: c6:f4:6a:71:02:57:08:75:34:58:bc:2d:ee:2e:8e: c6:1e:95:b3:23:e9:4c:f6:84:84:9e:a8:62:b6:e9: f7:d9:d4:e2:5e:c0:9e:74:23:f1:65:c0:48:b7:66: ad:8d:70:c7:d0:7b:47:0d:35:16:9d:5e:14:f8:a0: 17:4b:4a:ee:d1:d5:88:cf:24:b8:17:8c:99:c1:5a: 6b:fc:16:fe:08:12:1b:f7:c3:f6:49:65:45:22:bb: f1:d0:9e:b2:b5:5b:33:1e:24:f5:02:40:f7:66:29: b1:d9:a0:3f:90:9a:72:b7:68:81:2a:91:0f:9e:9d: 31:aa:59:1f:58:aa:76:69:6e:5b:94:1e:cc:b0:50: 9e:17:2e:39:1f:cb:f9:7c:48:44:41:54:b3:09:38: d0:fc:58:78:b9:c7:08:ce:9e:d2:82:f6:88:ef:06: 5c:ce:5d:8d:a3:9f:ff:43:ae:c6:78:6f:ad:75:5d: 56:fe:e8:17:03:7f:8a:dc:96:e6:c4:61:64:f6:c9: ca:90:de:b9:cc:8a:0e:45:e5:0f:8a:52:77:1b:6f: 78:68:3b:87:56:b0:a3:29:2e:c9:26:85:c9:8f:d5: a7:3d:e9:71:56:1e:51:b1:0c:5e:b8:b5:c8:e3:55: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:20:77:30:80:31:38:10:4D:FE:89:06:65:18:DC:CC:AC:96:E7 X509v3 Authority Key Identifier: keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c4:2f:bb:a9:ff:a4:50:8d:e2:8e:63:1f:10:11:33:3d:a0: be:8d:5d:56:1f:4e:51:8a:55:6a:ec:9b:dc:62:25:87:6a:f7: f6:be:fc:b4:d0:5c:da:f6:32:d6:84:be:62:ce:2a:9f:df:05: 2a:9e:12:da:de:7d:31:3b:91:ed:81:da:cd:3e:c5:c8:f9:2f: 88:25:4d:a2:62:37:e8:ed:e9:30:e0:1b:63:ab:d0:0c:bc:9a: 10:2c:9a:0b:58:8b:10:6e:55:6d:ed:55:9f:1b:7a:40:30:af: 17:ed:73:06:df:4a:7c:e7:74:8e:6e:ee:0a:1f:60:0e:66:03: 89:9c:84:67:a6:18:ff:c0:65:f9:53:e9:b0:2f:a3:07:29:03: b3:f9:8f:6c:b1:c9:0e:c9:ee:9e:4f:c9:31:d4:90:e3:0f:f7: 37:7e:3d:b6:6c:a1:c8:5c:05:9e:5d:8e:af:2f:08:66:91:75: 20:80:d8:f6:91:c0:91:ca:d4:3f:63:b5:ff:23:6a:c6:05:96: 38:dd:22:73:39:f2:f3:31:e2:3e:25:ca:74:3c:56:bc:05:ad: ac:0c:a1:a7:04:72:36:bb:22:40:d1:3d:df:a9:0d:ba:c4:11: c2:58:24:53:f9:29:f1:00:ca:6e:de:5e:b3:eb:32:0a:10:b6: 74:35:a2:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnhem80pqNavVOkC3p+n/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYzI0NGJlNmIzYWZmYjZkNGU1NDdmMmUxZTNjNWVhYzFi MjZhYjIwHhcNMjUxMjA0MDQwMTQ0WhcNMjUxMjA1MDQwMTQ0WjAzMTEwLwYDVQQD Eyg1NzI4MjA3NzMwODAzMTM4MTA0ZGZlODkwNjY1MThkY2NjYWM5NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjfD1YLdD+n7zOO1BhnG9GpxAlcI dTRYvC3uLo7GHpWzI+lM9oSEnqhitun32dTiXsCedCPxZcBIt2atjXDH0HtHDTUW nV4U+KAXS0ru0dWIzyS4F4yZwVpr/Bb+CBIb98P2SWVFIrvx0J6ytVszHiT1AkD3 Zimx2aA/kJpyt2iBKpEPnp0xqlkfWKp2aW5blB7MsFCeFy45H8v5fEhEQVSzCTjQ /Fh4uccIzp7SgvaI7wZczl2No5//Q67GeG+tdV1W/ugXA3+K3JbmxGFk9snKkN65 zIoOReUPilJ3G294aDuHVrCjKS7JJoXJj9WnPelxVh5RsQxeuLXI41XVbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcoIHcwgDE4EE3+iQZlGNzMrJbnMB8GA1UdIwQY MBaAFJPCRL5rOv+21OVH8uHjxerBsmqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMt NjZkNzRlNzNmMjU0LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMtNjZkNzRlNzNmMjU0 LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8Qvu6n/ pFCN4o5jHxARMz2gvo1dVh9OUYpVauyb3GIlh2r39r78tNBc2vYy1oS+Ys4qn98F Kp4S2t59MTuR7YHazT7FyPkviCVNomI36O3pMOAbY6vQDLyaECyaC1iLEG5Vbe1V nxt6QDCvF+1zBt9KfOd0jm7uCh9gDmYDiZyEZ6YY/8Bl+VPpsC+jBykDs/mPbLHJ Dsnunk/JMdSQ4w/3N349tmyhyFwFnl2Ory8IZpF1IIDY9pHAkcrUP2O1/yNqxgWW ON0iczny8zHiPiXKdDxWvAWtrAyhpwRyNrsiQNE936kNusQRwlgkU/kp8QDKbt5e s+syChC2dDWi7Q== -----END CERTIFICATE-----Generated at Thu Dec 4 11:23:25 2025 by rpki-client