This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json) Hash identifier: KqdlYuLQVV8v0W9O51FmRBqaytNeY1XWgSYzkejW/BI= Subject key identifier: B1:27:B2:F6:2C:8C:F4:92:F2:1E:4E:58:89:85:30:7A:29:EC:3E:43 Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Certificate serial: 019B2A09C7AA5C7073D24C1953F525B99E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft Manifest number: 016E Signing time: Wed 17 Dec 2025 02:00:42 +0000 Manifest this update: Wed 17 Dec 2025 02:00:42 +0000 Manifest next update: Thu 18 Dec 2025 02:00:42 +0000 Files and hashes: 1: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: CZLF3ql5lx2OHHK1X0r46UWbRENBXoDRmiOpQxG8N04=) 2: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=) 3: lVkRZLgugVMJGuDdXaiu9H9U2Qw.roa (hash: cENQFbkj8p8qEi8NksPajunUhEGXlFBx1bfM8cV4t5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:c7:aa:5c:70:73:d2:4c:19:53:f5:25:b9:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Validity Not Before: Dec 17 02:00:42 2025 GMT Not After : Dec 18 02:00:42 2025 GMT Subject: CN=b127b2f62c8cf492f21e4e588985307a29ec3e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:ef:46:2a:c2:10:9f:1d:f1:04:94:6e:c9: 4e:b9:e2:ca:e9:ee:db:51:82:6c:98:2b:9d:1b:a2: c7:f4:f1:83:38:d0:82:10:b2:e6:cd:f9:f1:01:60: 7b:5d:2b:cd:da:dd:50:33:e4:a8:1a:90:7e:0c:94: 66:80:37:f8:da:b5:ef:b8:19:85:cc:ab:6d:83:fb: e4:fe:a2:e1:77:25:da:e9:a8:d5:33:13:46:7a:a9: a5:89:24:75:8a:aa:64:83:f4:d5:80:7c:ba:2c:34: 32:71:99:a9:31:f5:dc:f6:1b:f8:55:c1:6c:53:cf: b5:30:90:8b:36:85:a7:9c:cb:be:6f:58:51:05:39: 12:c5:89:a0:3c:6d:ea:eb:d8:a2:11:94:96:e7:34: 18:1c:ce:23:96:56:e8:31:c6:5c:91:1d:6c:d7:64: 74:13:63:36:0d:f2:7d:e9:ed:69:a6:79:93:a6:33: 13:e3:a3:cc:80:de:22:76:26:bb:c4:62:dd:07:aa: 3a:94:ea:7b:ea:a6:9e:90:29:f7:d8:9a:a2:4c:82: ee:6a:e1:02:ad:4d:85:56:bc:51:f8:04:95:75:0e: 3f:ec:3a:84:55:93:18:84:35:b2:22:70:2b:60:61: e0:45:ce:6a:88:91:95:e7:f2:46:ef:a2:ee:1f:e0: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:B2:F6:2C:8C:F4:92:F2:1E:4E:58:89:85:30:7A:29:EC:3E:43 X509v3 Authority Key Identifier: keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3f:f0:cd:13:d1:bc:b3:62:02:bf:a2:db:a8:d0:21:c9:69: 5e:eb:c4:fc:2e:4c:6f:d9:5e:25:df:51:be:96:6e:eb:ee:9c: ab:8e:cb:fd:4e:d0:bb:8d:0f:b8:e5:18:5b:83:18:47:c0:33: e5:ab:57:ed:fe:c2:8d:b5:81:a0:8d:b6:5a:7c:60:e9:f6:bf: 00:f0:41:73:9b:29:7e:ad:b2:49:ed:e8:25:dd:3b:1c:95:01: 41:a9:a2:49:d2:d7:8f:c9:34:fe:82:0f:06:4d:aa:7d:31:95: 74:4d:4c:d1:68:31:e1:cc:9c:0a:ba:6d:af:4f:60:9b:82:d3: 6c:37:ad:5b:2b:dc:47:2f:c0:b9:76:21:d3:e5:a7:d7:33:4a: e1:0e:83:69:e2:c8:fe:3c:da:c6:21:65:5f:f3:66:46:e5:cd: 7b:2d:4f:77:7f:ef:42:d7:e6:0e:7e:b4:a5:17:c9:eb:c4:5e: 81:13:d9:a6:64:ea:d1:c4:5a:22:8c:d9:f0:03:d1:12:33:7c: c2:f7:7e:0d:84:a3:3e:cf:07:14:e8:f4:af:f9:31:72:50:21: 5e:51:50:47:87:fe:15:16:27:d0:d2:24:db:e8:a2:93:81:33: ff:34:63:6f:a9:94:4f:09:3b:6c:78:46:c5:c9:a4:98:9c:82: 30:5c:5a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCceqXHBz0kwZU/UluZ4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm NjQyZTMwHhcNMjUxMjE3MDIwMDQyWhcNMjUxMjE4MDIwMDQyWjAzMTEwLwYDVQQD EyhiMTI3YjJmNjJjOGNmNDkyZjIxZTRlNTg4OTg1MzA3YTI5ZWMzZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7nvRirCEJ8d8QSUbslOueLK6e7b UYJsmCudG6LH9PGDONCCELLmzfnxAWB7XSvN2t1QM+SoGpB+DJRmgDf42rXvuBmF zKttg/vk/qLhdyXa6ajVMxNGeqmliSR1iqpkg/TVgHy6LDQycZmpMfXc9hv4VcFs U8+1MJCLNoWnnMu+b1hRBTkSxYmgPG3q69iiEZSW5zQYHM4jllboMcZckR1s12R0 E2M2DfJ96e1ppnmTpjMT46PMgN4idia7xGLdB6o6lOp76qaekCn32JqiTILuauEC rU2FVrxR+ASVdQ4/7DqEVZMYhDWyInArYGHgRc5qiJGV5/JG76LuH+BFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEnsvYsjPSS8h5OWImFMHop7D5DMB8GA1UdIwQY MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt N2Y2ZWU3YTc2NTY1LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1 LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD/wzRPR vLNiAr+i26jQIclpXuvE/C5Mb9leJd9RvpZu6+6cq47L/U7Qu40PuOUYW4MYR8Az 5atX7f7CjbWBoI22Wnxg6fa/APBBc5spfq2ySe3oJd07HJUBQamiSdLXj8k0/oIP Bk2qfTGVdE1M0Wgx4cycCrptr09gm4LTbDetWyvcRy/AuXYh0+Wn1zNK4Q6DaeLI /jzaxiFlX/NmRuXNey1Pd3/vQtfmDn60pRfJ68RegRPZpmTq0cRaIozZ8APREjN8 wvd+DYSjPs8HFOj0r/kxclAhXlFQR4f+FRYn0NIk2+iik4Ez/zRjb6mUTwk7bHhG xcmkmJyCMFxajQ== -----END CERTIFICATE-----Generated at Wed Dec 17 08:27:19 2025 by rpki-client