This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json) Hash identifier: J2BSNL4obUQLMTOTZ0qQ9qBQTsmFjuwCBoWvLe0u+2w= Subject key identifier: 9D:CD:EF:D4:B7:72:C8:25:54:0C:1C:CD:4D:18:B1:9D:81:69:44:BC Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69 Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069 Certificate serial: 019B19F1E77519186BF8FE63E2C4B1149F10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft Manifest number: 03E7 Signing time: Sat 13 Dec 2025 23:00:42 +0000 Manifest this update: Sat 13 Dec 2025 23:00:42 +0000 Manifest next update: Sun 14 Dec 2025 23:00:42 +0000 Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: cNJoyS24zkdL7UvIMQ62i1kHkC30ifR3yMHsOqQwEK4=) 2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:e7:75:19:18:6b:f8:fe:63:e2:c4:b1:14:9f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069 Validity Not Before: Dec 13 23:00:42 2025 GMT Not After : Dec 14 23:00:42 2025 GMT Subject: CN=9dcdefd4b772c825540c1ccd4d18b19d816944bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:fb:89:0f:7a:ad:ab:fa:fe:4e:30:75:fd: 3a:58:87:75:64:f0:30:95:cd:4c:8d:07:6e:fa:17: 5d:58:8a:f8:3c:fc:10:e5:e2:cd:ee:00:b8:8a:54: 73:3f:98:a4:f5:32:3d:e8:cb:9c:2d:e2:a3:1c:50: 28:0b:f8:c1:e5:e8:8f:e8:4a:07:ed:de:7c:38:79: 55:85:99:80:01:cb:1d:42:ef:e4:c5:2b:ef:81:d9: eb:bc:3d:c8:6b:2e:61:d4:24:4a:a2:ef:82:4e:a4: d9:b7:73:e6:5f:2d:de:f7:95:03:c0:af:cb:50:be: 27:17:95:ec:9b:99:94:1d:8d:1a:4e:51:2c:64:00: 89:ee:43:39:01:10:70:bc:10:17:4e:e2:ae:e7:d1: ce:59:72:c6:b5:f7:ec:54:da:ff:1d:aa:4c:2e:7d: 1f:83:96:0b:c9:3c:08:b4:7e:8d:33:76:fc:ee:99: c4:82:74:85:88:93:45:80:ba:de:60:15:9c:72:27: 6e:b0:b2:79:4b:2d:94:b6:d2:22:1d:ba:b4:66:b6: 19:06:01:2f:7a:d5:96:45:44:8c:bd:78:7b:64:5a: 7d:2b:53:cc:ef:90:10:7d:38:9e:2f:10:4b:98:02: f6:0d:83:08:1b:cc:be:f1:aa:20:d3:4d:c4:a4:6a: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CD:EF:D4:B7:72:C8:25:54:0C:1C:CD:4D:18:B1:9D:81:69:44:BC X509v3 Authority Key Identifier: keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d7:39:7f:f6:2e:71:74:bd:5d:12:f4:df:21:3a:22:02:eb: 83:38:3d:23:ef:dd:cc:eb:da:1a:64:51:a8:b6:a1:e1:06:0f: 31:2b:79:93:4f:7e:81:6f:46:79:c5:db:0d:27:02:bd:33:fc: 4b:75:c7:ec:ad:0a:c3:e4:7d:75:b2:17:81:c8:d4:7f:b3:93: fe:eb:05:7b:8e:e1:fe:7f:e6:d4:c4:9f:d0:ab:80:5f:a1:65: f4:7e:f7:9b:68:dc:df:ac:41:9b:22:9d:34:ce:e5:bb:14:46: 8b:93:2e:5f:13:bb:69:5b:73:ff:21:c1:dd:9b:48:b7:79:51: b5:66:4b:87:9d:5a:ba:bd:a0:db:02:f0:73:2e:2a:45:61:1c: c1:f5:0f:80:5f:cc:da:08:e3:93:19:e8:b8:0b:9e:ee:f4:d1: c9:31:4d:72:19:56:7c:11:55:fa:cf:92:9f:bd:2b:e9:19:4f: 51:b6:8e:39:4f:d1:0c:f5:65:46:f8:d3:0a:8a:51:3e:8b:74: 82:73:c3:9e:3e:2d:9c:7c:4c:be:ef:eb:da:9e:6c:70:21:47: 0a:99:cf:69:bf:00:d6:f4:27:6d:ec:cc:f9:76:d1:8d:97:c4: 29:0e:ba:d7:05:11:d9:46:c4:2d:77:92:82:34:6c:80:20:b2: 0d:06:00:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8ed1GRhr+P5j4sSxFJ8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzhjZGNhMTYxNmMzYzZiNWYxOTFmYzMzYTkzNDc4OWIx MmMwNjkwHhcNMjUxMjEzMjMwMDQyWhcNMjUxMjE0MjMwMDQyWjAzMTEwLwYDVQQD Eyg5ZGNkZWZkNGI3NzJjODI1NTQwYzFjY2Q0ZDE4YjE5ZDgxNjk0NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUv7iQ96rav6/k4wdf06WId1ZPAw lc1MjQdu+hddWIr4PPwQ5eLN7gC4ilRzP5ik9TI96MucLeKjHFAoC/jB5eiP6EoH 7d58OHlVhZmAAcsdQu/kxSvvgdnrvD3Iay5h1CRKou+CTqTZt3PmXy3e95UDwK/L UL4nF5Xsm5mUHY0aTlEsZACJ7kM5ARBwvBAXTuKu59HOWXLGtffsVNr/HapMLn0f g5YLyTwItH6NM3b87pnEgnSFiJNFgLreYBWccidusLJ5Sy2UttIiHbq0ZrYZBgEv etWWRUSMvXh7ZFp9K1PM75AQfTieLxBLmAL2DYMIG8y+8aog003EpGoerwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3N79S3csglVAwczU0YsZ2BaUS8MB8GA1UdIwQY MBaAFCt4zcoWFsPGtfGR/DOpNHibEsBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEt M2VhYTAzNGE4OTc4LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2M0OWMtYjZkMC00NWRlLWJmYmEtM2VhYTAzNGE4OTc4 LzEvSzNqTnloWVd3OGExOFpIOE02azBlSnNTd0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9c5f/Yu cXS9XRL03yE6IgLrgzg9I+/dzOvaGmRRqLah4QYPMSt5k09+gW9GecXbDScCvTP8 S3XH7K0Kw+R9dbIXgcjUf7OT/usFe47h/n/m1MSf0KuAX6Fl9H73m2jc36xBmyKd NM7luxRGi5MuXxO7aVtz/yHB3ZtIt3lRtWZLh51aur2g2wLwcy4qRWEcwfUPgF/M 2gjjkxnouAue7vTRyTFNchlWfBFV+s+Sn70r6RlPUbaOOU/RDPVlRvjTCopRPot0 gnPDnj4tnHxMvu/r2p5scCFHCpnPab8A1vQnbezM+XbRjZfEKQ661wUR2UbELXeS gjRsgCCyDQYAGg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:29:59 2025 by rpki-client