This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json) Hash identifier: 4I9vnn5soTZ3h9skBnsQmw7shhGMJ8KtwjTyujW7b2k= Subject key identifier: 99:1A:2A:15:D5:1A:45:1C:D8:48:53:AB:FB:7F:C3:2D:95:1A:1C:18 Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Certificate serial: 019B38A16BDDF2549DF035F80D7571577875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft Manifest number: 04EC Signing time: Fri 19 Dec 2025 22:01:01 +0000 Manifest this update: Fri 19 Dec 2025 22:01:01 +0000 Manifest next update: Sat 20 Dec 2025 22:01:01 +0000 Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=) 2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: Xc5gmV5jhSW8Brq94i01zOEMrmiYPpzM3rekoGWruxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:6b:dd:f2:54:9d:f0:35:f8:0d:75:71:57:78:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Validity Not Before: Dec 19 22:01:01 2025 GMT Not After : Dec 20 22:01:01 2025 GMT Subject: CN=991a2a15d51a451cd84853abfb7fc32d951a1c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:87:7a:55:a7:e5:52:a1:48:f1:55:1e:53: c5:90:e1:1e:c7:b1:f7:46:d4:af:67:8e:4a:30:0a: 4e:d2:05:6e:21:f9:39:c5:2a:79:3e:d3:e9:d7:1e: 9c:46:97:b5:3d:89:42:9e:b4:08:a6:42:b2:12:4f: 11:17:95:71:d2:d6:6f:eb:d1:b1:aa:11:6d:51:6a: 4a:ee:8d:f0:b0:d3:69:9e:14:62:67:e3:a5:61:47: 23:a3:c2:65:55:5c:3f:dc:ef:8f:55:51:01:fe:80: 6a:b5:6d:4d:6d:35:27:0b:f6:64:a6:80:5e:06:1d: 65:68:65:78:13:1a:74:5b:ed:b9:f7:35:99:7d:ce: 37:a1:48:02:46:d8:bd:6c:e5:0b:17:29:3b:51:af: ad:34:75:ad:d9:37:44:84:5b:ee:59:0f:a0:56:b0: c3:0d:a5:d2:88:26:c1:d4:13:7e:17:9e:85:e4:25: 76:6b:fa:3c:65:1d:30:b0:76:34:6a:e9:30:45:f4: 38:51:91:c2:81:84:99:f7:41:03:28:7e:56:c9:95: 46:36:a9:77:04:bd:87:82:2c:4a:d6:5b:2f:7c:97: 61:2b:43:a1:bd:cb:f6:58:2d:d0:86:58:95:4b:af: 71:a7:bf:c3:ad:f0:68:f6:b0:6b:02:9f:d4:5e:f9: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1A:2A:15:D5:1A:45:1C:D8:48:53:AB:FB:7F:C3:2D:95:1A:1C:18 X509v3 Authority Key Identifier: keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:eb:ad:c8:db:2d:cf:65:5f:f6:3a:8f:89:11:b3:58:01:33: 20:57:ad:3f:41:37:ce:1b:e3:22:96:35:cf:72:f1:69:35:8d: 00:1f:b9:97:bb:71:65:10:2d:79:d7:f9:87:65:d0:e3:1d:6c: 4b:c4:6a:d3:b1:22:89:b3:6e:4b:35:4a:d8:8f:37:b6:72:0b: 4a:4b:b8:1c:9f:bb:b5:6b:3f:3a:f0:22:6c:12:94:cc:4c:fe: ff:b5:e5:31:5d:62:c9:e4:63:b6:f6:3c:3f:af:55:bb:73:de: 58:c7:7a:cd:90:b8:c5:76:a7:8e:e5:3c:63:1b:28:c3:cb:23: 97:78:4d:e6:e5:90:bf:a3:75:bd:11:39:88:e6:e3:fd:9f:7f: e7:4e:c1:82:38:13:69:2c:31:b6:46:d2:ec:bf:5e:a4:05:59: 34:8a:92:6a:ed:08:2a:d9:35:c1:b7:ec:ce:37:f7:45:a2:b1: 1d:cb:53:85:8d:4e:8f:cc:12:0a:9f:5b:0d:b8:7a:ef:00:ad: 12:ac:ca:dd:2b:77:43:80:a3:62:6a:f2:3f:33:23:8f:76:2c: a6:cc:78:6d:0b:60:4e:07:cb:72:62:88:00:f4:cf:fc:ea:64: f3:06:cf:b1:6c:25:45:89:00:41:5f:97:00:b5:84:2a:d6:f1: 8b:1e:51:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oWvd8lSd8DX4DXVxV3h1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3 NThkZTcwHhcNMjUxMjE5MjIwMTAxWhcNMjUxMjIwMjIwMTAxWjAzMTEwLwYDVQQD Eyg5OTFhMmExNWQ1MWE0NTFjZDg0ODUzYWJmYjdmYzMyZDk1MWExYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd2HelWn5VKhSPFVHlPFkOEex7H3 RtSvZ45KMApO0gVuIfk5xSp5PtPp1x6cRpe1PYlCnrQIpkKyEk8RF5Vx0tZv69Gx qhFtUWpK7o3wsNNpnhRiZ+OlYUcjo8JlVVw/3O+PVVEB/oBqtW1NbTUnC/ZkpoBe Bh1laGV4Exp0W+259zWZfc43oUgCRti9bOULFyk7Ua+tNHWt2TdEhFvuWQ+gVrDD DaXSiCbB1BN+F56F5CV2a/o8ZR0wsHY0aukwRfQ4UZHCgYSZ90EDKH5WyZVGNql3 BL2HgixK1lsvfJdhK0Ohvcv2WC3QhliVS69xp7/DrfBo9rBrAp/UXvnoswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkaKhXVGkUc2EhTq/t/wy2VGhwYMB8GA1UdIwQY MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleutyNst z2Vf9jqPiRGzWAEzIFetP0E3zhvjIpY1z3LxaTWNAB+5l7txZRAtedf5h2XQ4x1s S8Rq07EiibNuSzVK2I83tnILSku4HJ+7tWs/OvAibBKUzEz+/7XlMV1iyeRjtvY8 P69Vu3PeWMd6zZC4xXanjuU8Yxsow8sjl3hN5uWQv6N1vRE5iObj/Z9/507BgjgT aSwxtkbS7L9epAVZNIqSau0IKtk1wbfszjf3RaKxHctThY1Oj8wSCp9bDbh67wCt EqzK3St3Q4CjYmryPzMjj3Yspsx4bQtgTgfLcmKIAPTP/Opk8wbPsWwlRYkAQV+X ALWEKtbxix5RYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 02:02:25 2025 by rpki-client