This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json) Hash identifier: mpqAUk8tFzFAGEPQcrjxeLnfNDzjkdaQanfecYB538M= Subject key identifier: 47:80:CD:B6:14:E6:5A:1E:BC:7D:26:2D:EB:31:5C:56:88:AB:0D:33 Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Certificate serial: 019B2D0B1F17AEA200865D99764D96C0D51F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft Manifest number: 04E6 Signing time: Wed 17 Dec 2025 16:01:02 +0000 Manifest this update: Wed 17 Dec 2025 16:01:02 +0000 Manifest next update: Thu 18 Dec 2025 16:01:02 +0000 Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=) 2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: o+fmi3LlQaKHsBcLPnkghVqE0QXu3hDTFuUFk1LqDH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:1f:17:ae:a2:00:86:5d:99:76:4d:96:c0:d5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Validity Not Before: Dec 17 16:01:02 2025 GMT Not After : Dec 18 16:01:02 2025 GMT Subject: CN=4780cdb614e65a1ebc7d262deb315c5688ab0d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:0e:15:0a:e6:4d:64:d3:9a:75:18:c1:07: 74:e1:46:96:95:f0:2b:0f:86:77:41:07:e1:8f:b3: 3d:6f:29:4d:9c:7b:bf:20:bc:d5:4c:a6:b4:33:b5: 1c:d6:56:7c:ec:db:f4:f4:57:d5:6e:4c:36:ce:10: 63:00:82:f4:de:48:68:ce:ef:7c:8d:7c:4d:e4:80: 71:71:a6:b6:a4:a8:3a:65:8e:34:3b:52:d0:57:81: e7:62:c2:e4:6e:79:b4:eb:46:06:a6:57:9c:9d:77: 15:f1:6d:2e:a5:70:65:04:fb:b3:76:b4:ef:13:0c: 2a:a3:e1:52:59:5d:38:38:09:b2:53:0d:58:b6:c8: dc:72:ee:70:73:ca:54:f6:35:72:af:8f:9a:8e:4f: c9:03:70:7a:32:08:94:15:8f:d1:0e:d0:13:2c:69: 3b:aa:8a:15:af:fa:7f:2b:d9:af:43:ba:39:55:9d: 2e:ad:17:b9:c8:61:b7:7d:e0:04:80:43:24:84:21: 25:6e:69:c7:6a:d9:b7:bf:86:45:ed:8b:12:34:ec: c4:46:ef:e2:eb:19:d8:46:44:04:c4:8b:a8:06:d5: 95:7e:60:80:54:bc:69:ec:66:91:f1:49:6a:c2:5f: 5c:09:c2:6a:36:ae:48:f4:c9:d3:53:87:ae:25:4d: 49:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:80:CD:B6:14:E6:5A:1E:BC:7D:26:2D:EB:31:5C:56:88:AB:0D:33 X509v3 Authority Key Identifier: keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:00:4e:5d:54:12:77:65:fa:aa:5e:be:15:b8:cd:53:6e:42: eb:10:26:50:e6:c6:16:44:77:7b:ae:d4:d9:dd:27:1d:10:a2: 09:09:e4:18:d0:e6:bb:69:75:52:62:d8:b7:c2:62:f5:1b:16: 53:fb:e5:f9:f7:40:f0:c5:b9:36:4a:5c:70:13:fb:4c:c0:76: e2:16:68:dc:74:35:ee:85:af:19:f6:99:b0:0f:7e:88:69:82: 18:d1:2c:23:5b:b3:df:5e:18:cb:05:f6:ad:bd:13:c5:16:ee: 09:84:29:18:c1:2e:55:25:e3:da:33:fc:0b:50:6a:b6:cc:08: f0:ec:74:b0:9c:b4:cb:15:92:fa:1e:ca:24:a8:e9:6c:c3:7d: 5f:2f:db:a3:73:8b:d8:b8:1c:1c:16:03:26:fb:da:5b:75:65: d2:3b:60:9b:74:a8:1d:bc:67:f6:f3:21:5f:4e:93:ae:d7:65: 44:dd:a2:c2:20:26:12:17:c6:e2:75:3e:63:8b:6d:65:8e:08: 34:12:38:d2:19:9f:98:ac:bb:b1:96:14:c4:bb:57:67:8d:c4: 64:c5:7f:0a:aa:b1:be:69:13:2b:c0:08:5c:64:fe:2a:4b:50: 9c:af:df:69:88:df:54:f1:75:83:c0:e5:eb:18:73:06:26:42: ca:8c:1e:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCx8XrqIAhl2Zdk2WwNUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3 NThkZTcwHhcNMjUxMjE3MTYwMTAyWhcNMjUxMjE4MTYwMTAyWjAzMTEwLwYDVQQD Eyg0NzgwY2RiNjE0ZTY1YTFlYmM3ZDI2MmRlYjMxNWM1Njg4YWIwZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd8OFQrmTWTTmnUYwQd04UaWlfAr D4Z3QQfhj7M9bylNnHu/ILzVTKa0M7Uc1lZ87Nv09FfVbkw2zhBjAIL03khozu98 jXxN5IBxcaa2pKg6ZY40O1LQV4HnYsLkbnm060YGplecnXcV8W0upXBlBPuzdrTv Ewwqo+FSWV04OAmyUw1Ytsjccu5wc8pU9jVyr4+ajk/JA3B6MgiUFY/RDtATLGk7 qooVr/p/K9mvQ7o5VZ0urRe5yGG3feAEgEMkhCElbmnHatm3v4ZF7YsSNOzERu/i 6xnYRkQExIuoBtWVfmCAVLxp7GaR8Ulqwl9cCcJqNq5I9MnTU4euJU1JIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeAzbYU5loevH0mLesxXFaIqw0zMB8GA1UdIwQY MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwBOXVQS d2X6ql6+FbjNU25C6xAmUObGFkR3e67U2d0nHRCiCQnkGNDmu2l1UmLYt8Ji9RsW U/vl+fdA8MW5NkpccBP7TMB24hZo3HQ17oWvGfaZsA9+iGmCGNEsI1uz314YywX2 rb0TxRbuCYQpGMEuVSXj2jP8C1BqtswI8Ox0sJy0yxWS+h7KJKjpbMN9Xy/bo3OL 2LgcHBYDJvvaW3Vl0jtgm3SoHbxn9vMhX06TrtdlRN2iwiAmEhfG4nU+Y4ttZY4I NBI40hmfmKy7sZYUxLtXZ43EZMV/CqqxvmkTK8AIXGT+KktQnK/faYjfVPF1g8Dl 6xhzBiZCyoweAA== -----END CERTIFICATE-----Generated at Thu Dec 18 02:00:38 2025 by rpki-client