This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json) Hash identifier: U5uF/d4LtFRrOs9aBbrMrVnKZK/rhQXvKMDGf9y1cBY= Subject key identifier: B5:6E:2E:BD:43:A1:8A:0A:40:85:D3:31:98:FF:E0:50:96:5E:74:95 Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21 Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421 Certificate serial: 019B5ABFB795A57A993B2EFDBD731D0BFB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft Manifest number: 090D Signing time: Fri 26 Dec 2025 13:01:12 +0000 Manifest this update: Fri 26 Dec 2025 13:01:12 +0000 Manifest next update: Sat 27 Dec 2025 13:01:12 +0000 Files and hashes: 1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: cf6KHsV8VqZoLMPtXTSl9iY3NygUuNpN+rPLWd9B5xQ=) 2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:b7:95:a5:7a:99:3b:2e:fd:bd:73:1d:0b:fb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421 Validity Not Before: Dec 26 13:01:12 2025 GMT Not After : Dec 27 13:01:12 2025 GMT Subject: CN=b56e2ebd43a18a0a4085d33198ffe050965e7495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:1e:f3:2d:f3:38:76:5c:f5:99:42:93:aa: 8c:cb:63:06:92:8e:13:68:1d:cd:c1:83:d9:ee:37: fb:21:b7:c8:ce:86:9e:b1:bd:8e:fa:6e:07:b5:1d: 81:87:53:ff:43:d9:1c:55:35:4b:24:fd:c7:6f:94: 8d:76:f7:a1:15:e2:f5:1e:2d:19:cc:43:d1:78:96: 24:24:ad:12:3f:0d:67:61:97:69:84:36:db:3c:0e: c9:49:b6:9a:b8:58:83:3d:bf:84:51:e4:53:5e:6d: 73:5c:2a:32:d0:1f:69:38:0b:a8:bb:79:45:68:94: 65:b6:49:eb:ed:0a:bc:9d:43:ba:ed:78:72:02:0f: 86:01:26:be:c9:ec:92:61:c6:fb:48:68:ff:68:e3: f0:b8:67:78:26:7d:f2:84:17:eb:97:c9:f8:35:ab: ff:6a:0d:53:29:50:38:12:47:e0:f7:ad:bc:22:fd: 22:75:93:ac:59:ba:66:b7:34:be:fc:2c:45:ef:b0: ab:39:5f:62:fc:c1:87:56:ef:6c:e6:cb:fa:ea:b5: 91:4b:11:66:e1:5c:e6:19:f9:7c:d9:b0:e0:bf:ee: 9e:ba:ca:6e:75:8b:88:8e:7f:95:94:40:18:14:05: 48:9e:20:aa:0b:90:ff:1d:a1:cc:11:dd:78:f7:d3: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6E:2E:BD:43:A1:8A:0A:40:85:D3:31:98:FF:E0:50:96:5E:74:95 X509v3 Authority Key Identifier: keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:44:75:fa:a9:34:73:d6:c7:58:b1:d0:f2:3d:2b:92:16:7a: 92:1b:44:dd:78:c8:26:71:3f:5d:be:f5:8a:ce:a4:65:23:68: 1e:31:4d:54:46:e2:7f:79:72:b4:90:29:ae:75:84:5d:c5:7f: e0:1a:2b:f9:d1:d9:44:f7:04:1b:f5:78:12:4c:ff:98:36:c6: 73:df:77:38:4b:e7:71:d6:d7:e8:ed:07:4e:fa:3b:db:6e:fd: 3a:9b:2b:dc:f4:c0:09:df:ab:79:da:e7:f1:28:22:e9:17:bb: a1:96:c4:98:8e:47:ab:e1:9e:4b:e6:ba:bf:48:80:68:9f:c2: 7f:04:21:6b:2d:92:c8:b2:29:b7:43:22:e5:1f:2f:43:f6:01: fa:6f:f9:97:82:4f:6b:9f:9b:3c:c1:2b:bb:36:61:dc:a3:4c: d9:18:cb:6c:c6:73:24:1d:10:ef:8d:35:35:e2:e0:73:d1:3a: e4:de:f2:da:bc:20:70:8a:04:6d:7e:15:24:8d:96:aa:d6:31: 72:14:16:bf:79:20:0f:d8:37:59:16:a5:b9:5a:4c:03:b2:bf: b4:8e:be:94:a6:6a:9b:d4:c0:f5:f2:f8:9a:59:15:d2:16:56: ec:ab:18:89:cf:02:0d:8e:3b:91:51:16:91:02:d8:0b:47:56: 83:09:e3:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav7eVpXqZOy79vXMdC/t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTM4OTMzMzU4Y2Y2NmNmZjNiNmNlM2Y3YmMyNTE3ZmRk NDc0MjEwHhcNMjUxMjI2MTMwMTEyWhcNMjUxMjI3MTMwMTEyWjAzMTEwLwYDVQQD EyhiNTZlMmViZDQzYTE4YTBhNDA4NWQzMzE5OGZmZTA1MDk2NWU3NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswoe8y3zOHZc9ZlCk6qMy2MGko4T aB3NwYPZ7jf7IbfIzoaesb2O+m4HtR2Bh1P/Q9kcVTVLJP3Hb5SNdvehFeL1Hi0Z zEPReJYkJK0SPw1nYZdphDbbPA7JSbaauFiDPb+EUeRTXm1zXCoy0B9pOAuou3lF aJRltknr7Qq8nUO67XhyAg+GASa+yeySYcb7SGj/aOPwuGd4Jn3yhBfrl8n4Nav/ ag1TKVA4Ekfg9628Iv0idZOsWbpmtzS+/CxF77CrOV9i/MGHVu9s5sv66rWRSxFm 4VzmGfl82bDgv+6euspudYuIjn+VlEAYFAVIniCqC5D/HaHMEd1499NIwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVuLr1DoYoKQIXTMZj/4FCWXnSVMB8GA1UdIwQY MBaAFCujiTM1jPZs/zts4/e8JRf91HQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgt ZTA2ZmQwY2QzYjc3LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC85ODU2ZWUtNjk5Zi00ZmVkLWJiOTgtZTA2ZmQwY2QzYjc3 LzEvSzZPSk16V005bXpfTzJ6ajk3d2xGXzNVZENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0R1+qk0 c9bHWLHQ8j0rkhZ6khtE3XjIJnE/Xb71is6kZSNoHjFNVEbif3lytJAprnWEXcV/ 4Bor+dHZRPcEG/V4Ekz/mDbGc993OEvncdbX6O0HTvo72279Opsr3PTACd+redrn 8Sgi6Re7oZbEmI5Hq+GeS+a6v0iAaJ/CfwQhay2SyLIpt0Mi5R8vQ/YB+m/5l4JP a5+bPMEruzZh3KNM2RjLbMZzJB0Q7401NeLgc9E65N7y2rwgcIoEbX4VJI2WqtYx chQWv3kgD9g3WRaluVpMA7K/tI6+lKZqm9TA9fL4mlkV0hZW7KsYic8CDY47kVEW kQLYC0dWgwnjng== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:40 2025 by rpki-client