This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json) Hash identifier: E9o8sN4WaOT9/B2PeBe+1bU+NW7BSXqTvg+iejUJ4Gs= Subject key identifier: E1:FA:A5:04:0A:A2:39:C4:77:A9:EE:6F:D5:0A:15:5B:7D:C5:BD:FF Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a Certificate serial: 019B5A88843759D493378654AF63B93BE981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft Manifest number: 05A3 Signing time: Fri 26 Dec 2025 12:00:54 +0000 Manifest this update: Fri 26 Dec 2025 12:00:54 +0000 Manifest next update: Sat 27 Dec 2025 12:00:54 +0000 Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=) 2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: Utwu7HctJ75IytWBnXxQ3Bupxb6uW5BzUveAoSMzhLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:84:37:59:d4:93:37:86:54:af:63:b9:3b:e9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a Validity Not Before: Dec 26 12:00:54 2025 GMT Not After : Dec 27 12:00:54 2025 GMT Subject: CN=e1faa5040aa239c477a9ee6fd50a155b7dc5bdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:23:ef:ea:7a:06:fd:41:76:99:ae:db:00:11: 73:ca:c6:ba:fe:e1:da:54:74:72:06:0c:76:4c:53: b0:02:90:cd:a2:3c:6f:27:d2:74:52:af:04:8a:67: 7a:ea:27:92:dc:f0:91:4a:ac:3b:fe:f0:7e:a8:96: 39:89:31:53:7a:e9:ed:c6:20:97:fa:12:df:65:72: 47:c5:95:ff:76:0b:90:6e:7b:f1:ba:c1:ba:34:16: 93:b8:1c:66:8b:b3:e8:a2:0e:d4:e2:3a:ae:f0:dd: 4b:29:b4:49:7e:3b:fb:a5:77:20:b0:7f:e2:1c:cb: 9b:3b:75:89:48:29:dd:6e:43:6e:48:40:53:34:bf: df:4a:90:15:af:11:79:89:f4:9d:5b:6e:5e:41:52: 56:05:ab:52:4a:24:43:e9:5d:53:0c:20:d2:56:27: e3:14:29:9a:bc:6d:95:9a:6c:e2:77:5e:3f:30:74: a7:5d:22:d2:ce:fe:fc:79:d1:59:a4:d7:5c:57:07: e3:f7:71:a9:d5:66:9a:76:5e:90:ee:ae:92:93:42: 68:5d:65:6f:af:66:3f:ec:eb:e3:0d:84:85:54:76: 3c:89:31:e0:90:41:fc:cf:c6:c5:8a:b3:4b:ff:db: d9:b9:62:9d:35:eb:58:e5:e7:67:f1:61:89:95:12: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FA:A5:04:0A:A2:39:C4:77:A9:EE:6F:D5:0A:15:5B:7D:C5:BD:FF X509v3 Authority Key Identifier: keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:06:85:72:62:12:96:de:7d:ec:f3:dd:2e:32:82:f2:d3:6d: 76:13:a2:43:2b:d1:64:21:2f:52:d0:fc:9b:a3:4d:76:12:82: eb:c6:e3:ea:92:65:67:d0:a5:87:61:a8:e3:38:2b:3e:d3:c6: 35:e6:2b:96:70:3e:fa:fb:20:44:ce:76:51:4c:67:65:84:71: 2b:2c:9c:93:cd:18:31:a1:d4:00:ca:ac:ed:74:70:4f:75:0e: 09:ab:26:a2:da:fc:5f:76:d3:83:5b:6e:81:82:12:b4:4b:96: 00:0e:98:58:78:04:d3:fa:3e:9e:c8:72:65:ff:cf:74:ec:02: cc:fc:3d:e8:0c:6f:37:20:ab:6a:eb:15:6c:92:f1:20:dc:0e: 38:71:0b:ff:18:f0:62:21:4d:9e:37:3c:96:22:b4:1d:8c:56: b7:c0:cc:71:51:d3:a9:b5:fe:b4:19:0e:95:69:f1:67:2c:f1: fc:4f:c2:67:ef:50:a5:4a:b0:9b:6c:5f:75:07:f8:70:86:0e: 8f:38:b3:dc:de:a8:0f:95:80:93:ba:9a:61:7a:5b:43:af:76: f8:96:5f:2d:2f:ed:5e:b4:13:01:81:45:62:cf:a4:56:a3:ca: 89:4c:95:e4:4b:18:58:f4:f5:ca:19:c2:36:46:a2:05:a7:80: 65:68:eb:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIQ3WdSTN4ZUr2O5O+mBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZTlmNGJkZGY0YjJkZjExMGFjMzA4MzQ2ZjQ2ZDk0NTBm MTNiM2EwHhcNMjUxMjI2MTIwMDU0WhcNMjUxMjI3MTIwMDU0WjAzMTEwLwYDVQQD EyhlMWZhYTUwNDBhYTIzOWM0NzdhOWVlNmZkNTBhMTU1YjdkYzViZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SPv6noG/UF2ma7bABFzysa6/uHa VHRyBgx2TFOwApDNojxvJ9J0Uq8Eimd66ieS3PCRSqw7/vB+qJY5iTFTeuntxiCX +hLfZXJHxZX/dguQbnvxusG6NBaTuBxmi7Poog7U4jqu8N1LKbRJfjv7pXcgsH/i HMubO3WJSCndbkNuSEBTNL/fSpAVrxF5ifSdW25eQVJWBatSSiRD6V1TDCDSVifj FCmavG2Vmmzid14/MHSnXSLSzv78edFZpNdcVwfj93Gp1Waadl6Q7q6Sk0JoXWVv r2Y/7OvjDYSFVHY8iTHgkEH8z8bFirNL/9vZuWKdNetY5edn8WGJlRL2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOH6pQQKojnEd6nub9UKFVt9xb3/MB8GA1UdIwQY MBaAFJPp9L3fSy3xEKwwg0b0bZRQ8Ts6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgt YzJiNjFmODZiMGFhLzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgtYzJiNjFmODZiMGFh LzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAaFcmIS lt597PPdLjKC8tNtdhOiQyvRZCEvUtD8m6NNdhKC68bj6pJlZ9Clh2Go4zgrPtPG NeYrlnA++vsgRM52UUxnZYRxKyyck80YMaHUAMqs7XRwT3UOCasmotr8X3bTg1tu gYIStEuWAA6YWHgE0/o+nshyZf/PdOwCzPw96AxvNyCrausVbJLxINwOOHEL/xjw YiFNnjc8liK0HYxWt8DMcVHTqbX+tBkOlWnxZyzx/E/CZ+9QpUqwm2xfdQf4cIYO jziz3N6oD5WAk7qaYXpbQ692+JZfLS/tXrQTAYFFYs+kVqPKiUyV5EsYWPT1yhnC NkaiBaeAZWjrbA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:23 2025 by rpki-client