This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json) Hash identifier: JoqAK62S5iyK+3z6ms7W2apPtjMOvS52jMP2GBKYBhY= Subject key identifier: 72:81:95:A2:F6:26:87:03:4A:FC:54:BB:56:F7:8B:30:C6:D9:D8:69 Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee Certificate serial: 019B345668A176CA19759F30AFE283360DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft Manifest number: 1423 Signing time: Fri 19 Dec 2025 02:00:36 +0000 Manifest this update: Fri 19 Dec 2025 02:00:36 +0000 Manifest next update: Sat 20 Dec 2025 02:00:36 +0000 Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: d8Z8iXTpSSYW8E72vbm3/xoclJQfXp9SBlcrV8O9+YE=) 2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:68:a1:76:ca:19:75:9f:30:af:e2:83:36:0d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee Validity Not Before: Dec 19 02:00:36 2025 GMT Not After : Dec 20 02:00:36 2025 GMT Subject: CN=728195a2f62687034afc54bb56f78b30c6d9d869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:9f:19:33:00:58:5f:d4:6f:dd:af:d5:56: 8d:47:9d:1e:c7:ce:d1:ed:fe:ec:31:c8:34:5e:ce: 71:08:4b:e4:fa:c5:8e:d4:c0:23:93:28:4f:eb:e8: 2a:2d:c8:30:07:14:1d:11:81:77:f5:07:9c:80:35: 86:46:d8:f0:82:fc:d9:d5:96:aa:03:95:fe:f9:11: ba:dd:40:fb:2b:ac:37:11:37:e2:8d:23:3b:ca:58: 49:9b:ae:3c:c7:1b:ce:14:cf:01:da:92:f7:73:ce: 16:80:e6:68:5a:1a:a2:7b:50:5b:e8:c5:24:2b:96: 1f:a1:bd:6e:cc:11:52:8e:13:2f:35:06:8a:f0:f2: 09:b6:65:32:a2:3f:ec:bd:26:71:5a:fe:51:0b:5b: 77:bb:0f:5d:09:e4:af:aa:ac:44:30:94:5d:89:49: bb:ae:36:cf:e5:54:97:04:2c:79:24:f3:b5:81:f2: cf:62:96:85:e3:43:04:7f:24:38:f5:17:f6:71:6a: fb:1e:e2:14:70:67:7a:7f:7a:33:6d:b2:b4:dd:00: 5d:02:90:26:26:6a:96:7d:3b:1a:56:b3:76:8a:15: 8f:11:68:0f:f3:68:29:a1:3c:4c:31:6d:4a:3e:2c: b3:f4:24:00:07:12:e9:66:00:b3:76:4d:02:d3:48: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:95:A2:F6:26:87:03:4A:FC:54:BB:56:F7:8B:30:C6:D9:D8:69 X509v3 Authority Key Identifier: keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:42:c2:48:73:00:be:5e:fa:dc:da:0a:4c:40:a5:66:74:4a: 6e:c5:e9:96:14:46:5b:29:30:ea:48:61:c1:f3:59:37:98:56: 87:7b:2c:d5:5f:1a:2c:53:ef:bd:2b:86:fb:35:96:3b:13:2a: 76:9a:1d:15:ac:f3:43:7a:b7:7e:bf:bb:30:5b:dd:54:6e:8b: b7:1e:40:8a:34:d3:fc:f9:42:f8:ec:35:cd:61:55:d2:2a:4c: 74:35:fe:d2:9e:2a:2d:f7:8f:71:23:69:b6:83:88:93:91:ed: ef:54:10:73:56:5b:41:b5:26:c2:97:17:60:52:42:ae:64:12: d6:9d:82:aa:80:02:a8:60:dd:a1:19:8a:a9:3a:57:13:38:4b: a9:a2:18:bf:b3:0b:9e:e1:d3:d2:6a:ca:c4:08:bc:ba:a5:e4: e3:04:04:bb:b2:86:56:1f:b9:e4:bd:ec:8e:ca:c3:d3:7a:f5: 42:ce:a3:de:10:8e:34:dc:76:58:e7:11:17:d2:03:bb:6e:26: bb:88:de:17:d3:35:4e:62:87:2a:f6:ad:a0:08:02:df:d0:43: 35:0f:b7:3f:7b:85:92:78:d3:ab:2d:2c:6a:24:eb:5b:f1:c8: be:98:b9:e8:79:73:fc:22:0f:ed:6a:b0:9f:31:51:b7:5b:b0: f5:20:25:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VmihdsoZdZ8wr+KDNg30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1 MDhmZWUwHhcNMjUxMjE5MDIwMDM2WhcNMjUxMjIwMDIwMDM2WjAzMTEwLwYDVQQD Eyg3MjgxOTVhMmY2MjY4NzAzNGFmYzU0YmI1NmY3OGIzMGM2ZDlkODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTefGTMAWF/Ub92v1VaNR50ex87R 7f7sMcg0Xs5xCEvk+sWO1MAjkyhP6+gqLcgwBxQdEYF39QecgDWGRtjwgvzZ1Zaq A5X++RG63UD7K6w3ETfijSM7ylhJm648xxvOFM8B2pL3c84WgOZoWhqie1Bb6MUk K5Yfob1uzBFSjhMvNQaK8PIJtmUyoj/svSZxWv5RC1t3uw9dCeSvqqxEMJRdiUm7 rjbP5VSXBCx5JPO1gfLPYpaF40MEfyQ49Rf2cWr7HuIUcGd6f3ozbbK03QBdApAm JmqWfTsaVrN2ihWPEWgP82gpoTxMMW1KPiyz9CQABxLpZgCzdk0C00h+nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKBlaL2JocDSvxUu1b3izDG2dhpMB8GA1UdIwQY MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2 LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEELCSHMA vl763NoKTEClZnRKbsXplhRGWykw6khhwfNZN5hWh3ss1V8aLFPvvSuG+zWWOxMq dpodFazzQ3q3fr+7MFvdVG6Ltx5AijTT/PlC+Ow1zWFV0ipMdDX+0p4qLfePcSNp toOIk5Ht71QQc1ZbQbUmwpcXYFJCrmQS1p2CqoACqGDdoRmKqTpXEzhLqaIYv7ML nuHT0mrKxAi8uqXk4wQEu7KGVh+55L3sjsrD03r1Qs6j3hCONNx2WOcRF9IDu24m u4jeF9M1TmKHKvatoAgC39BDNQ+3P3uFknjTqy0saiTrW/HIvpi56Hlz/CIP7Wqw nzFRt1uw9SAlEw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:59:47 2025 by rpki-client