This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json) Hash identifier: ZzMluTwt5tQrtI5pvWJQk4e0Mhz67d2h0m+G/z75FkM= Subject key identifier: FF:2C:E1:81:48:34:86:F4:3E:2D:B6:2A:EA:F6:D0:BD:7A:76:1F:D5 Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Certificate serial: 019B5B65A68B1C9BE3BFDACFF5E55BCD5CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft Manifest number: 020D Signing time: Fri 26 Dec 2025 16:02:26 +0000 Manifest this update: Fri 26 Dec 2025 16:02:26 +0000 Manifest next update: Sat 27 Dec 2025 16:02:26 +0000 Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=) 2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: Pw2MYznsdLB2T/Bo9txeQGf8iceGKcveg5sG2Gz2rlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:a6:8b:1c:9b:e3:bf:da:cf:f5:e5:5b:cd:5c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Validity Not Before: Dec 26 16:02:26 2025 GMT Not After : Dec 27 16:02:26 2025 GMT Subject: CN=ff2ce181483486f43e2db62aeaf6d0bd7a761fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:2d:7d:e0:2d:ea:7c:b7:1a:35:62:ef:77:24: 52:7e:f2:e0:ef:6a:72:f5:25:b5:ab:a0:b7:d7:42: 4b:05:59:b0:0a:e1:1b:f0:5d:54:5a:2b:3a:91:14: 0f:8a:74:f9:22:27:c6:01:9f:be:a2:6e:db:c8:e8: 06:43:01:c8:8b:9d:be:28:3d:2a:73:51:40:db:20: c6:0d:2b:b0:e5:59:24:c1:6b:f1:dd:4e:58:b0:0c: 4a:c0:90:6d:9c:5e:a9:6b:83:75:8e:bc:ee:51:3c: 3a:db:91:a5:7b:58:ae:14:ed:bf:b4:ec:bf:74:a5: 17:0b:bf:22:ed:ea:35:08:c9:1f:4c:0f:2d:aa:7a: c4:07:31:84:2e:46:21:f8:b3:8f:8b:4e:b2:3e:a6: 1f:27:b2:78:89:cf:47:5f:01:f0:54:ab:3b:e4:99: 82:80:cf:e8:cd:15:88:fb:04:ad:29:12:cc:a9:a7: f0:33:20:9f:2e:39:33:11:b6:31:66:9f:88:eb:66: 57:26:ad:0b:8f:c1:46:d6:97:a1:ef:ab:77:26:4b: 47:58:3b:ff:9e:9c:e9:ad:b3:d0:f8:8d:a9:68:eb: c5:18:30:65:f5:db:1f:65:d2:c1:85:13:ad:41:40: 87:3d:a4:12:3e:0c:53:ec:2b:22:ce:fc:e1:9c:0f: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2C:E1:81:48:34:86:F4:3E:2D:B6:2A:EA:F6:D0:BD:7A:76:1F:D5 X509v3 Authority Key Identifier: keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:19:ad:88:68:51:9b:fb:3a:5e:8c:b2:6f:a4:bc:ae:37:08: 70:3f:17:47:50:01:c6:0d:37:61:f4:48:1a:13:e7:a7:b9:c6: 9a:77:dc:8e:a0:6c:7e:61:a9:d4:e4:ac:16:36:6d:47:58:c9: fa:56:28:5e:29:1d:3e:4c:55:60:89:93:22:10:12:8b:70:e6: ac:08:e2:24:97:dc:09:c2:6b:51:ea:38:56:69:7a:21:98:51: 75:8b:a0:bc:fd:1c:8d:a3:31:05:0e:be:02:da:a5:3a:f0:2a: b0:5e:3f:32:ef:70:5a:52:2b:64:de:40:62:87:09:9c:17:7d: 63:0b:18:04:08:a5:2a:a6:d8:29:a6:a4:a7:66:ed:c1:e5:56: 5e:bf:27:c8:73:a4:0e:47:ef:aa:e5:c7:c3:95:31:18:a0:f4: 6d:30:c6:80:5a:2b:be:b9:b4:33:e2:77:39:22:f2:1c:8d:cd: e9:d7:d8:8b:3e:88:e8:20:c2:77:76:70:5c:5f:63:4d:41:ad: f6:27:92:80:72:30:67:5d:ac:76:2a:9c:20:ad:64:1e:e7:12: 60:a1:df:f8:55:2f:5e:ea:a6:cf:76:10:39:15:eb:3e:ed:af: 84:23:2f:98:8e:3e:87:46:8f:4f:bb:c9:43:f9:f2:8d:6d:6e: 95:47:a8:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZaaLHJvjv9rP9eVbzVziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni ZGU0MzgwHhcNMjUxMjI2MTYwMjI2WhcNMjUxMjI3MTYwMjI2WjAzMTEwLwYDVQQD EyhmZjJjZTE4MTQ4MzQ4NmY0M2UyZGI2MmFlYWY2ZDBiZDdhNzYxZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+y194C3qfLcaNWLvdyRSfvLg72py 9SW1q6C310JLBVmwCuEb8F1UWis6kRQPinT5IifGAZ++om7byOgGQwHIi52+KD0q c1FA2yDGDSuw5VkkwWvx3U5YsAxKwJBtnF6pa4N1jrzuUTw625Gle1iuFO2/tOy/ dKUXC78i7eo1CMkfTA8tqnrEBzGELkYh+LOPi06yPqYfJ7J4ic9HXwHwVKs75JmC gM/ozRWI+wStKRLMqafwMyCfLjkzEbYxZp+I62ZXJq0Lj8FG1peh76t3JktHWDv/ npzprbPQ+I2paOvFGDBl9dsfZdLBhROtQUCHPaQSPgxT7CsizvzhnA/UIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8s4YFINIb0Pi22Kur20L16dh/VMB8GA1UdIwQY MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt MTNjMmVhOTJhYTllLzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhmtiGhR m/s6Xoyyb6S8rjcIcD8XR1ABxg03YfRIGhPnp7nGmnfcjqBsfmGp1OSsFjZtR1jJ +lYoXikdPkxVYImTIhASi3DmrAjiJJfcCcJrUeo4Vml6IZhRdYugvP0cjaMxBQ6+ AtqlOvAqsF4/Mu9wWlIrZN5AYocJnBd9YwsYBAilKqbYKaakp2btweVWXr8nyHOk DkfvquXHw5UxGKD0bTDGgForvrm0M+J3OSLyHI3N6dfYiz6I6CDCd3ZwXF9jTUGt 9ieSgHIwZ12sdiqcIK1kHucSYKHf+FUvXuqmz3YQORXrPu2vhCMvmI4+h0aPT7vJ Q/nyjW1ulUeobQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:20:31 2025 by rpki-client