This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft File: K6HP11f1Hy_rdFCenDm-RoBr5kI.mft (raw, json) Hash identifier: Dnml7ize/2vD406v7wFEQNfh715c547kDZbwJN+ce8M= Subject key identifier: A5:92:41:DE:45:E7:55:8D:F4:85:97:9E:A6:5B:4E:39:B8:83:9F:9F Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Certificate serial: 019B37FD1CEDCBC1868CABF3760429FEDEBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft Manifest number: 1612 Signing time: Fri 19 Dec 2025 19:01:33 +0000 Manifest this update: Fri 19 Dec 2025 19:01:33 +0000 Manifest next update: Sat 20 Dec 2025 19:01:33 +0000 Files and hashes: 1: G8x1vVBRYsXmZPS43ryzlAToalk.roa (hash: zv3fUNIgcV4McKQ1WqNZ3h6XRcK9qRBMGJRh2r54rtQ=) 2: K6HP11f1Hy_rdFCenDm-RoBr5kI.crl (hash: E2w7KcUJLW+/wKxpUfmXidGCAW/H4ScOGjD+fFlU5rI=) 3: SG-oYWBeZ8PdnxfhbLJBRMxInjk.roa (hash: IQmUUHJFzP7J5Wi5OG22cXQ7JSU97X0TL3RWD8DykE4=) 4: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (hash: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=) 5: ahgAUM5M5NZzfBW0iQqq_x4yTBk.roa (hash: tYZ97cgI+SOXirQ9qolsOlp5bgffydesZkrQgwP6yTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fd:1c:ed:cb:c1:86:8c:ab:f3:76:04:29:fe:de:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Validity Not Before: Dec 19 19:01:33 2025 GMT Not After : Dec 20 19:01:33 2025 GMT Subject: CN=a59241de45e7558df485979ea65b4e39b8839f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:68:79:c7:0e:05:34:d9:01:14:0d:1b:6b: 12:95:e3:ad:94:fe:bb:b6:48:9f:6a:23:d9:0d:7f: e5:fb:b3:04:f1:7e:1c:f6:5d:93:cb:8f:65:89:44: df:a6:95:42:02:27:85:b3:4e:22:41:00:8e:c1:e2: 33:17:d5:d5:73:53:39:e2:3c:4e:be:7c:c6:f6:c3: c5:1b:85:e6:37:61:77:8f:fc:f2:37:42:b0:9e:cc: a9:59:fa:ab:3e:4e:d5:f0:9d:b9:45:0d:84:54:0e: 8e:83:24:80:c8:55:33:fc:89:39:ee:2e:7a:ae:c3: 6a:6b:e2:e0:76:3a:1f:b5:c2:c7:87:8b:40:19:74: 62:3d:e4:26:98:32:fd:21:3e:79:b8:22:82:bc:65: 47:1c:3c:3d:37:01:8d:39:1a:15:89:6a:15:08:ba: ba:be:77:4d:18:6a:29:da:61:24:3f:2a:41:ae:86: 8d:26:8e:5c:90:bc:09:bc:86:f9:11:05:4e:a0:40: f1:ff:43:e1:d9:03:d1:89:3f:b6:a1:ff:08:40:32: c1:45:a6:c1:dc:ab:8d:18:f0:2e:cb:30:0b:ef:bd: c4:96:4d:fc:51:6f:9f:fc:4b:23:64:f2:30:0a:2b: 60:db:a5:9e:26:54:07:5a:be:46:2e:f8:75:d7:94: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:92:41:DE:45:E7:55:8D:F4:85:97:9E:A6:5B:4E:39:B8:83:9F:9F X509v3 Authority Key Identifier: keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:35:06:cb:fe:c1:18:0e:1e:96:1c:89:51:92:0d:6a:3a:05: 23:50:6a:3f:33:34:c6:be:38:7f:3d:27:1c:6b:31:8b:ec:c7: e2:c4:97:76:15:e9:84:ce:6c:52:cf:5a:38:f0:13:91:47:b8: de:2f:20:31:48:4b:e2:32:c3:ae:0c:84:f1:c6:fa:cf:0f:35: af:3e:79:90:fa:6d:34:68:fc:71:48:ea:6d:cf:97:9d:e0:d3: 1e:d4:94:f5:54:eb:7a:aa:78:39:17:95:23:24:f2:8c:16:f3: 04:18:47:92:11:e6:84:c8:de:3a:ab:44:0b:26:bd:24:df:d7: c0:4c:ca:b5:f3:7e:2f:c1:e1:2b:0e:b7:93:fc:ba:65:b2:aa: ad:fd:04:4c:de:7c:a3:22:9b:f1:7a:f9:14:c4:c0:7c:ab:5c: b1:92:bc:d1:78:5b:83:71:88:3d:20:0b:a3:d6:58:7e:2c:3c: e1:c0:45:8c:b3:b7:ac:24:6b:40:da:53:9c:ce:b7:9b:27:c5: 0c:01:d6:82:aa:76:a2:b5:ad:c8:fd:74:5a:69:b2:a0:18:f2: 03:e8:d1:2c:fd:80:08:4f:97:b9:3b:31:aa:1a:28:69:9f:8e: 0f:ad:24:86:ec:d8:a2:05:bd:af:86:25:8d:93:3c:57:51:97: f9:c2:32:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Rzty8GGjKvzdgQp/t66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2 YmU2NDIwHhcNMjUxMjE5MTkwMTMzWhcNMjUxMjIwMTkwMTMzWjAzMTEwLwYDVQQD EyhhNTkyNDFkZTQ1ZTc1NThkZjQ4NTk3OWVhNjViNGUzOWI4ODM5ZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpdoeccOBTTZARQNG2sSleOtlP67 tkifaiPZDX/l+7ME8X4c9l2Ty49liUTfppVCAieFs04iQQCOweIzF9XVc1M54jxO vnzG9sPFG4XmN2F3j/zyN0KwnsypWfqrPk7V8J25RQ2EVA6OgySAyFUz/Ik57i56 rsNqa+LgdjoftcLHh4tAGXRiPeQmmDL9IT55uCKCvGVHHDw9NwGNORoViWoVCLq6 vndNGGop2mEkPypBroaNJo5ckLwJvIb5EQVOoEDx/0Ph2QPRiT+2of8IQDLBRabB 3KuNGPAuyzAL773Elk38UW+f/EsjZPIwCitg26WeJlQHWr5GLvh115TLSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWSQd5F51WN9IWXnqZbTjm4g5+fMB8GA1UdIwQY MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt NTc4OWRlNDI0YTQyLzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjUGy/7B GA4elhyJUZINajoFI1BqPzM0xr44fz0nHGsxi+zH4sSXdhXphM5sUs9aOPATkUe4 3i8gMUhL4jLDrgyE8cb6zw81rz55kPptNGj8cUjqbc+XneDTHtSU9VTreqp4OReV IyTyjBbzBBhHkhHmhMjeOqtECya9JN/XwEzKtfN+L8HhKw63k/y6ZbKqrf0ETN58 oyKb8Xr5FMTAfKtcsZK80Xhbg3GIPSALo9ZYfiw84cBFjLO3rCRrQNpTnM63myfF DAHWgqp2orWtyP10WmmyoBjyA+jRLP2ACE+XuTsxqhooaZ+OD60khuzYogW9r4Yl jZM8V1GX+cIyeg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:13:10 2025 by rpki-client