This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json) Hash identifier: bO6OxUJdidme6wZ14L8ABRsmai+stJZz6cex+AtvrwA= Subject key identifier: 7A:51:A1:34:3E:B1:32:5A:7F:09:B7:08:D6:B8:2A:DC:16:E5:00:AF Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d Certificate serial: 019B35D78FAF8EF82761C95ED7F5A337C58D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 09:01:17 +0000 Manifest this update: Fri 19 Dec 2025 09:01:17 +0000 Manifest next update: Sat 20 Dec 2025 09:01:17 +0000 Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=) 2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=) 3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: bK6QYTy70LH8FMwoJDsCvZY0Akuu0xxK1ujX9oD365M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:8f:af:8e:f8:27:61:c9:5e:d7:f5:a3:37:c5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d Validity Not Before: Dec 19 09:01:17 2025 GMT Not After : Dec 20 09:01:17 2025 GMT Subject: CN=7a51a1343eb1325a7f09b708d6b82adc16e500af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:1b:cf:4d:c0:b9:1d:6f:6f:d6:4e:c3:0a: 1e:07:ed:65:59:65:16:a1:1f:ce:58:20:46:f1:d4: 1b:18:3e:51:c2:83:81:47:0c:1f:5c:82:b7:57:bd: 0d:bf:98:dc:e0:a8:e2:45:2b:38:15:9d:3a:5a:a2: d0:3d:e1:68:a5:17:f0:8c:e4:b1:12:35:71:8c:ce: 56:0a:c9:2d:25:03:f2:4a:a5:70:3f:67:59:f8:4f: 24:b4:74:8c:55:72:ba:d9:ba:b5:5a:d4:28:0d:2f: 73:99:a7:b7:a1:c2:86:9f:64:aa:75:00:ca:83:74: 8f:69:4a:30:c8:27:2a:33:5f:7e:4f:78:e4:1e:ca: 5b:33:96:ec:2c:a8:0d:ec:8c:49:24:3b:42:36:01: 4c:c8:77:7d:9b:35:5a:70:c8:85:98:30:df:f9:de: 18:14:18:dd:3c:0a:c1:6f:5e:cf:11:13:89:a6:1b: dc:10:e9:cd:f3:d1:99:03:59:85:d8:27:cd:b1:24: b1:d5:3c:ab:23:01:48:90:8c:f0:1e:ac:d7:12:e3: 0d:79:22:0f:b3:d7:36:e7:2a:1d:82:21:f6:e0:fd: a5:e5:30:d8:c4:2a:48:fa:f5:0b:ae:06:84:36:c1: 9a:04:d7:c3:6b:a2:c8:ae:c1:68:5a:fc:85:88:a8: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:51:A1:34:3E:B1:32:5A:7F:09:B7:08:D6:B8:2A:DC:16:E5:00:AF X509v3 Authority Key Identifier: keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:33:44:cd:72:ad:9d:cb:aa:16:6c:c7:69:14:e1:3e:06:00: bb:8b:81:5a:78:96:35:1d:26:50:9c:f5:2e:1a:60:84:9e:06: e0:31:8c:28:30:b5:47:c1:9d:4d:0e:81:bb:ec:b6:55:bd:95: b0:59:44:91:fa:a0:ff:64:db:44:40:e7:96:cb:3f:72:3b:4d: 8c:81:e0:dc:59:c2:35:d8:8b:3c:4c:b2:a3:30:da:a2:c5:de: 06:01:79:c3:11:c7:85:06:e8:e5:0a:19:46:07:93:31:d1:c6: 2c:42:95:20:a7:8b:41:e5:8a:40:35:a0:74:45:75:e0:e5:25: 66:a8:52:f2:a2:03:a3:4f:9d:b3:38:44:18:77:4c:15:18:51: a9:53:aa:9c:c8:03:38:0e:48:50:4f:a0:8b:ef:95:d1:0e:9d: 14:ef:03:8a:23:65:a1:a4:46:9a:41:6d:00:5f:71:be:74:06: c6:52:cc:e0:be:eb:fd:c1:30:95:c0:75:c2:85:46:95:18:06: bd:12:fc:cc:b0:d7:a3:7a:1b:56:f4:e8:f7:31:0c:c9:72:f8: f1:1c:8d:04:39:b5:d7:00:6b:dd:bb:59:03:f3:aa:c2:eb:37: f3:3b:ef:3a:c8:18:b0:90:fa:11:7a:dc:4d:f6:7c:2b:da:aa: bb:db:1d:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114+vjvgnYcle1/WjN8WNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjkxZWVmYTZkODA0NmQ5MThlMzY0MDQ1NjA0OTUyNjQw YmMxNWQwHhcNMjUxMjE5MDkwMTE3WhcNMjUxMjIwMDkwMTE3WjAzMTEwLwYDVQQD Eyg3YTUxYTEzNDNlYjEzMjVhN2YwOWI3MDhkNmI4MmFkYzE2ZTUwMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Ebz03AuR1vb9ZOwwoeB+1lWWUW oR/OWCBG8dQbGD5RwoOBRwwfXIK3V70Nv5jc4KjiRSs4FZ06WqLQPeFopRfwjOSx EjVxjM5WCsktJQPySqVwP2dZ+E8ktHSMVXK62bq1WtQoDS9zmae3ocKGn2SqdQDK g3SPaUowyCcqM19+T3jkHspbM5bsLKgN7IxJJDtCNgFMyHd9mzVacMiFmDDf+d4Y FBjdPArBb17PEROJphvcEOnN89GZA1mF2CfNsSSx1TyrIwFIkIzwHqzXEuMNeSIP s9c25yodgiH24P2l5TDYxCpI+vULrgaENsGaBNfDa6LIrsFoWvyFiKiLoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpRoTQ+sTJafwm3CNa4KtwW5QCvMB8GA1UdIwQY MBaAFJO5Hu+m2ARtkY42QEVgSVJkC8FdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEt MzU4NmFhZTEzZGE3LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEtMzU4NmFhZTEzZGE3 LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzNEzXKt ncuqFmzHaRThPgYAu4uBWniWNR0mUJz1LhpghJ4G4DGMKDC1R8GdTQ6Bu+y2Vb2V sFlEkfqg/2TbREDnlss/cjtNjIHg3FnCNdiLPEyyozDaosXeBgF5wxHHhQbo5QoZ RgeTMdHGLEKVIKeLQeWKQDWgdEV14OUlZqhS8qIDo0+dszhEGHdMFRhRqVOqnMgD OA5IUE+gi++V0Q6dFO8DiiNloaRGmkFtAF9xvnQGxlLM4L7r/cEwlcB1woVGlRgG vRL8zLDXo3obVvTo9zEMyXL48RyNBDm11wBr3btZA/Oqwus38zvvOsgYsJD6EXrc TfZ8K9qqu9sdIA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:46 2025 by rpki-client