This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json) Hash identifier: uKyaLqkCg65ebgxWjDMLmd/QglktokJrKBMXznpY570= Subject key identifier: B4:72:9E:A4:33:21:1E:B3:33:19:14:E0:C7:F1:59:CA:FD:1C:25:A9 Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Certificate serial: 019AEA4FFE9588B4D26CA991FEC40B8ACF3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft Manifest number: 175E Signing time: Thu 04 Dec 2025 17:01:42 +0000 Manifest this update: Thu 04 Dec 2025 17:01:42 +0000 Manifest next update: Fri 05 Dec 2025 17:01:42 +0000 Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: jSq1hBUWIOjXm0VUtZm8CovWMDqNVZQubbmA+TXgBT0=) 2: bUHKbn34m9YZfg0LWUckx1_q0Mc.roa (hash: Bh0vmrRSsDhj05TsHSvScRpLwoC6mmV/tmtMQaNdewI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:4f:fe:95:88:b4:d2:6c:a9:91:fe:c4:0b:8a:cf:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Validity Not Before: Dec 4 17:01:42 2025 GMT Not After : Dec 5 17:01:42 2025 GMT Subject: CN=b4729ea433211eb3331914e0c7f159cafd1c25a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a6:29:8d:91:5c:8e:04:ae:4a:03:80:c1:94: b4:e9:de:01:5d:93:e8:59:1c:f4:1b:2d:2b:d3:92: 13:8b:a2:00:16:3d:c6:8b:81:e9:30:82:bb:58:b5: 1a:5c:73:fa:f0:87:ce:cf:a1:88:32:33:78:0a:44: ab:85:6f:19:e2:6e:0b:c7:34:e1:45:31:60:90:91: 38:0d:c7:a6:97:2d:a2:84:28:67:50:96:a9:63:48: 91:34:93:55:d3:7f:32:41:39:24:6a:a9:cb:d4:3f: 77:59:8f:5b:57:26:ac:db:2d:07:66:4a:38:ea:d3: 33:e1:48:b7:12:52:d6:ac:f0:4c:d2:0b:4b:52:51: ee:f5:70:56:54:40:68:b8:51:2b:6e:b9:3e:b3:71: 4b:6a:a3:69:ba:78:f2:36:0f:53:14:41:3a:e2:94: 48:2d:15:8e:94:44:b9:1a:73:f1:bd:3c:64:5a:a5: 42:71:8a:65:1f:64:a5:89:1a:7a:34:ea:63:6a:fc: 4c:22:9f:de:87:10:08:8a:9e:d1:85:09:dd:6d:64: b6:9b:bd:0c:8f:5d:83:9d:24:17:ad:ed:c2:fb:a9: e7:5f:36:9c:73:7c:3d:c5:06:3f:d8:4a:f1:d5:f1: 10:c6:43:b2:1d:29:28:61:ef:cf:f0:d9:62:86:fa: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:72:9E:A4:33:21:1E:B3:33:19:14:E0:C7:F1:59:CA:FD:1C:25:A9 X509v3 Authority Key Identifier: keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a4:1f:97:b8:20:eb:f7:7a:1c:ee:63:af:f9:2d:f0:cc:9c: 8b:88:03:46:80:86:e4:05:aa:af:ca:68:f6:72:96:16:d9:e3: fe:7d:77:6a:fb:2f:49:3f:14:92:e9:48:1e:8e:4f:5b:6f:0d: a4:8e:5c:da:14:0b:cc:db:4e:d2:d7:b3:de:66:14:81:1a:0b: fa:81:c2:37:29:ac:14:00:46:33:fe:9d:60:9b:11:64:fa:4c: 01:33:1e:2d:f6:35:d8:f2:08:c6:4f:62:0b:4f:b0:8e:91:07: 2c:fd:23:6d:63:fd:48:da:d5:f2:06:88:04:6f:9a:7b:1a:d6: 51:c8:7b:1c:21:8c:6d:9a:1b:29:48:b6:17:c5:74:fd:8f:ce: 9a:33:68:39:3d:23:e5:ef:b4:d8:0b:d4:14:91:df:d8:16:b5: 06:81:02:8f:f1:14:35:04:67:a9:0d:b1:8c:83:96:d0:82:f2: 9d:38:c3:b1:f1:9f:af:3c:a8:50:f9:b7:3f:11:9a:6b:d0:09: b9:f6:24:28:20:52:1f:0e:f4:f6:7b:60:50:fa:9c:c9:af:36: f0:d0:c2:3b:4c:bb:6f:1d:42:a5:32:7a:bd:e2:32:7d:85:77: 57:18:1d:f4:e3:27:66:f8:8d:fb:68:fe:28:a9:1a:a7:d8:68: bd:06:d3:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrqT/6ViLTSbKmR/sQLis86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz ZmU0ZjIwHhcNMjUxMjA0MTcwMTQyWhcNMjUxMjA1MTcwMTQyWjAzMTEwLwYDVQQD EyhiNDcyOWVhNDMzMjExZWIzMzMxOTE0ZTBjN2YxNTljYWZkMWMyNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qYpjZFcjgSuSgOAwZS06d4BXZPo WRz0Gy0r05ITi6IAFj3Gi4HpMIK7WLUaXHP68IfOz6GIMjN4CkSrhW8Z4m4LxzTh RTFgkJE4Dcemly2ihChnUJapY0iRNJNV038yQTkkaqnL1D93WY9bVyas2y0HZko4 6tMz4Ui3ElLWrPBM0gtLUlHu9XBWVEBouFErbrk+s3FLaqNpunjyNg9TFEE64pRI LRWOlES5GnPxvTxkWqVCcYplH2SliRp6NOpjavxMIp/ehxAIip7RhQndbWS2m70M j12DnSQXre3C+6nnXzacc3w9xQY/2Erx1fEQxkOyHSkoYe/P8NlihvqVhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRynqQzIR6zMxkU4MfxWcr9HCWpMB8GA1UdIwQY MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6Qfl7gg 6/d6HO5jr/kt8Myci4gDRoCG5AWqr8po9nKWFtnj/n13avsvST8UkulIHo5PW28N pI5c2hQLzNtO0tez3mYUgRoL+oHCNymsFABGM/6dYJsRZPpMATMeLfY12PIIxk9i C0+wjpEHLP0jbWP9SNrV8gaIBG+aexrWUch7HCGMbZobKUi2F8V0/Y/OmjNoOT0j 5e+02AvUFJHf2Ba1BoECj/EUNQRnqQ2xjIOW0ILynTjDsfGfrzyoUPm3PxGaa9AJ ufYkKCBSHw709ntgUPqcya828NDCO0y7bx1CpTJ6veIyfYV3Vxgd9OMnZviN+2j+ KKkap9hovQbTQQ== -----END CERTIFICATE-----Generated at Fri Dec 5 02:26:01 2025 by rpki-client