This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft File: k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft (raw, json) Hash identifier: tMd+I/CvKFr/7PHjBaAvi9+S6IGGHaLjcyPD/musdoY= Subject key identifier: 11:14:64:24:77:97:5C:8C:8E:2B:02:EE:60:62:1F:45:F6:34:DF:AC Authority key identifier: 93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4 Certificate issuer: /CN=93dc45ffe13f841f188af743bd7dc34ed54805d4 Certificate serial: 019B35D6E183C0FA60E4D3D78BABDB3DE252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 09:00:33 +0000 Manifest this update: Fri 19 Dec 2025 09:00:33 +0000 Manifest next update: Sat 20 Dec 2025 09:00:33 +0000 Files and hashes: 1: I9i3fnf4Nk0WsFMmWEWJhe5vh40.roa (hash: llYywC4U70yW6sSChiJ+ZHwIZzZjQAej/EchqIalMeA=) 2: IGJfVzvhS1XNfQJqw7b44W8rh5Q.roa (hash: ps4BuWOubuNVlVOQpqaTImNMOhN/B2m1xTG8lC4cqCo=) 3: k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl (hash: iFyovuKjpxDB/fmCtPPSpD0vMjtoaEP4UpN7H9+OwuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:e1:83:c0:fa:60:e4:d3:d7:8b:ab:db:3d:e2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93dc45ffe13f841f188af743bd7dc34ed54805d4 Validity Not Before: Dec 19 09:00:33 2025 GMT Not After : Dec 20 09:00:33 2025 GMT Subject: CN=1114642477975c8c8e2b02ee60621f45f634dfac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:4c:6e:9e:ef:98:75:0c:03:2d:94:74:8d: e9:c9:3b:6d:51:3f:35:e4:e8:06:11:a6:a0:28:ca: c7:dc:e6:78:fc:2a:32:4b:59:8c:fc:22:a9:6d:63: 1d:5f:43:5e:be:d5:3b:50:41:3e:17:96:7c:e3:e4: 64:5c:e0:15:a3:6b:c6:6c:ec:e4:0b:8a:a1:77:74: 86:a4:42:27:9e:15:9d:89:01:bd:b5:86:45:97:b4: 90:87:3e:42:4c:79:60:f9:65:5f:da:71:2f:34:ec: 0e:df:55:c4:e9:f4:a5:bc:17:ed:2e:e3:40:4e:fa: d7:a8:a5:1a:ec:93:a3:80:06:45:5d:82:6f:6d:b7: ae:04:1f:4d:51:40:89:8b:7d:ff:39:51:f2:da:44: eb:13:21:79:75:99:0f:36:67:c7:98:dd:a8:7b:7b: 3e:cf:73:e1:7a:68:68:12:2c:cc:0d:71:0b:28:96: ad:44:c8:4d:a4:7e:9f:11:61:7b:7f:ed:58:fc:31: 10:59:15:3c:45:f9:7f:1b:47:f0:55:39:90:4c:38: 36:59:9e:00:b0:07:8d:2d:af:3c:89:ba:75:db:a9: 2d:e9:38:16:72:9d:4b:e4:fd:b0:65:6e:73:c2:aa: e1:58:6f:51:39:bc:9c:6a:a2:12:55:14:6c:e9:7b: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:14:64:24:77:97:5C:8C:8E:2B:02:EE:60:62:1F:45:F6:34:DF:AC X509v3 Authority Key Identifier: keyid:93:DC:45:FF:E1:3F:84:1F:18:8A:F7:43:BD:7D:C3:4E:D5:48:05:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xF_-E_hB8YivdDvX3DTtVIBdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d0b19-0aff-412f-a2fd-21895728ba4e/1/k9xF_-E_hB8YivdDvX3DTtVIBdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ad:0e:f2:6b:b8:0c:92:55:58:74:cd:fc:6d:82:fd:db:2d: 16:b3:c3:3a:4a:f2:90:90:7d:d8:a7:f1:b6:84:83:1b:3f:a6: 2b:7d:8e:cb:be:00:9c:4d:d0:62:3a:e5:87:59:41:8f:3d:95: b6:79:cb:66:2e:15:f2:a2:47:ec:f0:7b:52:59:06:f2:58:9a: 8f:18:34:e2:95:89:4c:42:f2:06:9c:91:7f:51:bb:11:cf:23: c1:ad:ef:6c:78:dc:6b:ce:d6:53:4d:3f:96:88:f0:a0:de:9c: 07:41:c9:a4:0d:c2:97:07:a2:a4:10:ca:65:04:0e:37:31:0f: 12:70:ab:6b:66:d7:6b:9a:7f:6d:01:44:68:91:7f:1c:07:80: e7:fa:a4:f4:2b:ed:c7:ab:d1:29:93:58:af:0e:85:1a:f2:54: f2:d4:38:e2:36:d9:ef:73:43:ad:c2:ca:94:ba:67:e3:9b:36: bf:18:d8:cc:60:db:8c:58:86:f6:12:d2:27:3e:94:a4:5a:d1: ea:2a:6e:e9:67:8f:3e:d3:20:6d:8c:ad:19:1e:ed:7b:cc:24: e8:89:04:60:13:fd:ec:92:da:65:90:36:ad:d3:10:e4:15:83: 66:c7:f0:42:8d:22:3b:d4:a9:f6:5c:ac:d0:7e:6e:86:00:03: 8b:10:b8:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11uGDwPpg5NPXi6vbPeJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZGM0NWZmZTEzZjg0MWYxODhhZjc0M2JkN2RjMzRlZDU0 ODA1ZDQwHhcNMjUxMjE5MDkwMDMzWhcNMjUxMjIwMDkwMDMzWjAzMTEwLwYDVQQD EygxMTE0NjQyNDc3OTc1YzhjOGUyYjAyZWU2MDYyMWY0NWY2MzRkZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU1Mbp7vmHUMAy2UdI3pyTttUT81 5OgGEaagKMrH3OZ4/CoyS1mM/CKpbWMdX0NevtU7UEE+F5Z84+RkXOAVo2vGbOzk C4qhd3SGpEInnhWdiQG9tYZFl7SQhz5CTHlg+WVf2nEvNOwO31XE6fSlvBftLuNA TvrXqKUa7JOjgAZFXYJvbbeuBB9NUUCJi33/OVHy2kTrEyF5dZkPNmfHmN2oe3s+ z3PhemhoEizMDXELKJatRMhNpH6fEWF7f+1Y/DEQWRU8Rfl/G0fwVTmQTDg2WZ4A sAeNLa88ibp126kt6TgWcp1L5P2wZW5zwqrhWG9RObycaqISVRRs6XuoTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEUZCR3l1yMjisC7mBiH0X2NN+sMB8GA1UdIwQY MBaAFJPcRf/hP4QfGIr3Q719w07VSAXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQt MjE4OTU3MjhiYTRlLzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yZDBiMTktMGFmZi00MTJmLWEyZmQtMjE4OTU3MjhiYTRl LzEvazl4Rl8tRV9oQjhZaXZkRHZYM0RUdFZJQmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp60O8mu4 DJJVWHTN/G2C/dstFrPDOkrykJB92KfxtoSDGz+mK32Oy74AnE3QYjrlh1lBjz2V tnnLZi4V8qJH7PB7UlkG8liajxg04pWJTELyBpyRf1G7Ec8jwa3vbHjca87WU00/ lojwoN6cB0HJpA3ClweipBDKZQQONzEPEnCra2bXa5p/bQFEaJF/HAeA5/qk9Cvt x6vRKZNYrw6FGvJU8tQ44jbZ73NDrcLKlLpn45s2vxjYzGDbjFiG9hLSJz6UpFrR 6ipu6WePPtMgbYytGR7te8wk6IkEYBP97JLaZZA2rdMQ5BWDZsfwQo0iO9Sp9lys 0H5uhgADixC47g== -----END CERTIFICATE-----Generated at Fri Dec 19 14:50:57 2025 by rpki-client