This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json) Hash identifier: B8vpGcNLyvGnhtRt11cYEBjze37gJrozOFAGBFMgyFU= Subject key identifier: E3:03:39:D5:F8:A6:EF:41:6F:36:C1:5C:F9:90:84:61:EA:4D:7C:F7 Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Certificate serial: 019B2DB0A1DFEC734AFD01E46730B348C869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft Manifest number: 1786 Signing time: Wed 17 Dec 2025 19:01:49 +0000 Manifest this update: Wed 17 Dec 2025 19:01:49 +0000 Manifest next update: Thu 18 Dec 2025 19:01:49 +0000 Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: EMgVc1jh/iJwM9bhuNcJ8b0gELwm7YiBYnRHuXMc45k=) 2: Xz5fRm1rvrLEvX3nzQNpvfuqwdQ.roa (hash: 3vZNMQRQpFvLq3O7/5316ZbW91wqqPn0EJ7/sIa76eA=) 3: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=) 4: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=) 5: yoc8JMk-9f_YUHXEL_9_ZmX1Dg4.roa (hash: vHYZAYQIcTZ88hbC8SwB+Nm3QsYJxFwlJCLWjy+CEWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:a1:df:ec:73:4a:fd:01:e4:67:30:b3:48:c8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Validity Not Before: Dec 17 19:01:49 2025 GMT Not After : Dec 18 19:01:49 2025 GMT Subject: CN=e30339d5f8a6ef416f36c15cf9908461ea4d7cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:30:1d:9a:bb:1c:15:60:b5:2a:de:38:0a: 36:7a:ce:98:97:be:9c:ba:6d:d1:84:96:73:55:48: 06:20:c6:1e:14:0d:a6:43:96:06:15:0d:43:6b:47: b9:11:ae:a1:5e:d3:92:de:85:13:0c:71:5f:65:da: 86:cc:31:da:01:fb:71:f7:42:83:88:62:d0:86:7f: f4:14:0a:08:cf:4c:4a:d5:d3:c9:a4:02:89:4c:4f: f8:3f:b3:9b:8d:40:4c:61:e3:a0:5d:18:f8:97:b3: 1c:4b:54:17:3c:9b:f3:a3:fb:c3:a5:4f:55:70:13: 69:e4:26:12:ca:e5:d6:d0:f6:8b:03:35:16:bf:c8: 2c:b6:9e:68:20:13:d9:aa:05:fe:aa:25:ab:9b:c6: 00:9d:25:c3:9a:d3:50:a9:93:43:3d:98:39:e9:51: 02:1b:b9:d3:1a:3f:11:bf:ca:87:a8:3c:35:73:d5: 66:60:c5:74:20:73:f7:ed:3b:64:78:1b:e5:29:86: 8d:c5:cb:84:31:cc:b5:bf:6a:ab:84:a9:7c:65:d4: de:1f:1b:d1:24:a1:3c:72:40:13:dc:11:4b:1c:51: 07:57:b5:6a:a4:ff:42:e9:2c:b1:cb:d4:22:ed:4b: dd:1d:e6:a2:79:ed:9c:0a:44:e5:53:57:56:47:8f: 12:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:03:39:D5:F8:A6:EF:41:6F:36:C1:5C:F9:90:84:61:EA:4D:7C:F7 X509v3 Authority Key Identifier: keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:83:f7:c4:8b:67:d8:e9:1b:92:58:8d:a9:01:e2:c9:7e:bc: 77:cd:38:b4:e4:a3:d9:03:c1:fc:31:4d:37:6a:be:0e:33:5d: 70:72:1e:9e:a2:2d:68:ff:b1:b2:5a:f1:5f:47:25:4a:99:b6: 8f:37:6d:73:e8:8f:09:88:2b:20:35:29:4d:6e:1b:81:6c:49: c4:fb:a6:61:18:d8:18:79:b1:0c:a0:28:90:7f:c5:2f:89:f6: 8a:12:b3:f3:52:18:1e:2f:89:dd:22:88:70:15:99:0e:35:ce: 22:0b:5e:c2:68:e6:78:9a:af:ab:96:94:ac:88:87:d6:60:a9: cd:1d:2a:ec:3b:31:dc:3c:85:9f:92:19:ad:b7:ea:7a:bf:eb: 57:c8:9c:a9:1d:ca:56:e5:4d:d2:ef:28:6f:ba:d4:46:02:71: 31:65:45:9c:90:60:e1:c2:9a:c6:0c:4d:27:ae:fa:39:c4:f0: 4d:69:53:9e:99:92:3c:ec:d1:fe:6d:57:ba:c5:51:da:44:f1: d8:03:bc:64:a9:ce:8d:74:4b:e0:2a:c1:04:f5:4e:0f:5a:f5: d4:a8:75:ad:2a:85:21:a1:3d:b8:cd:c8:3c:8b:6e:88:80:81: 96:12:10:f7:42:f9:62:95:d4:d2:cf:79:e5:36:0e:d5:58:10: 75:39:93:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsKHf7HNK/QHkZzCzSMhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmVkZjIzMjY0YjQzODIxZGFlOTdkMTBiZDM2NGNiNmJi N2YyMzQwHhcNMjUxMjE3MTkwMTQ5WhcNMjUxMjE4MTkwMTQ5WjAzMTEwLwYDVQQD EyhlMzAzMzlkNWY4YTZlZjQxNmYzNmMxNWNmOTkwODQ2MWVhNGQ3Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGMwHZq7HBVgtSreOAo2es6Yl76c um3RhJZzVUgGIMYeFA2mQ5YGFQ1Da0e5Ea6hXtOS3oUTDHFfZdqGzDHaAftx90KD iGLQhn/0FAoIz0xK1dPJpAKJTE/4P7ObjUBMYeOgXRj4l7McS1QXPJvzo/vDpU9V cBNp5CYSyuXW0PaLAzUWv8gstp5oIBPZqgX+qiWrm8YAnSXDmtNQqZNDPZg56VEC G7nTGj8Rv8qHqDw1c9VmYMV0IHP37TtkeBvlKYaNxcuEMcy1v2qrhKl8ZdTeHxvR JKE8ckAT3BFLHFEHV7VqpP9C6Syxy9Qi7UvdHeaiee2cCkTlU1dWR48S1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMDOdX4pu9BbzbBXPmQhGHqTXz3MB8GA1UdIwQY MBaAFCpu3yMmS0OCHa6X0QvTZMtrt/I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUt ZDQyOGYyMzQ5NjYwLzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUtZDQyOGYyMzQ5NjYw LzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYP3xItn 2OkbkliNqQHiyX68d804tOSj2QPB/DFNN2q+DjNdcHIenqItaP+xslrxX0clSpm2 jzdtc+iPCYgrIDUpTW4bgWxJxPumYRjYGHmxDKAokH/FL4n2ihKz81IYHi+J3SKI cBWZDjXOIgtewmjmeJqvq5aUrIiH1mCpzR0q7Dsx3DyFn5IZrbfqer/rV8icqR3K VuVN0u8ob7rURgJxMWVFnJBg4cKaxgxNJ676OcTwTWlTnpmSPOzR/m1XusVR2kTx 2AO8ZKnOjXRL4CrBBPVOD1r11Kh1rSqFIaE9uM3IPItuiICBlhIQ90L5YpXU0s95 5TYO1VgQdTmTpQ== -----END CERTIFICATE-----Generated at Thu Dec 18 04:41:38 2025 by rpki-client