This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json) Hash identifier: /NXSWJKQFn/ktx8Zmv4ORsvrn1LDdD98wLHzoze0Guc= Subject key identifier: 61:C4:6A:AC:FD:0A:AF:AC:43:74:6B:B9:59:1F:74:8E:87:D1:36:19 Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Certificate serial: 019B1C18029291238AF831E7DC7535E6F57F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft Manifest number: 0525 Signing time: Sun 14 Dec 2025 09:01:34 +0000 Manifest this update: Sun 14 Dec 2025 09:01:34 +0000 Manifest next update: Mon 15 Dec 2025 09:01:34 +0000 Files and hashes: 1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: udGrlePPflH6xrYbQCBfEOdWTkVbEJG8fzwx1L0/NF0=) 2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:18:02:92:91:23:8a:f8:31:e7:dc:75:35:e6:f5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Validity Not Before: Dec 14 09:01:34 2025 GMT Not After : Dec 15 09:01:34 2025 GMT Subject: CN=61c46aacfd0aafac43746bb9591f748e87d13619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:a6:ba:54:ac:a2:11:9e:f3:9b:d5:19:67: 2a:25:ae:f1:5e:ec:a8:b8:55:55:80:a9:f9:b7:e2: de:f3:23:ac:bd:e8:51:2b:de:1b:46:66:3e:85:89: 79:88:bc:81:96:dc:6b:93:ad:f5:81:08:e7:ed:74: c7:ca:6b:87:b0:d4:e2:25:67:bf:25:dd:c6:d5:c8: d5:6f:0d:78:4e:de:90:d4:45:d2:3b:e1:5c:6a:f5: 63:99:a2:52:a1:c8:77:a5:0a:d4:03:75:e4:ed:f7: 4e:4a:a2:12:56:4e:86:bb:9d:c2:bc:9b:ff:05:45: a9:72:31:85:de:fa:81:1f:95:a7:92:92:5a:55:90: 93:f5:6a:ff:fa:d3:b5:e6:f4:d3:01:5e:f1:49:05: 18:71:19:62:8c:c4:66:88:d3:ab:db:f4:78:28:db: 75:51:59:0b:7c:04:83:00:ce:41:4f:e1:36:7e:2c: 4d:37:7e:a1:df:a5:a1:db:e9:dc:5f:03:de:73:75: 51:a4:e2:fa:f8:2d:6a:26:32:11:ac:51:83:aa:82: aa:00:99:37:e4:ca:27:28:b8:79:a0:33:a8:9f:e7: e8:bc:11:fd:3c:c9:47:d6:fc:fa:b3:e0:a0:08:1d: c1:c4:b9:a4:ed:2c:aa:ec:f5:b6:93:d0:ff:6b:24: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C4:6A:AC:FD:0A:AF:AC:43:74:6B:B9:59:1F:74:8E:87:D1:36:19 X509v3 Authority Key Identifier: keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bc:51:98:18:f1:23:35:22:37:df:e1:e6:99:71:20:20:e9: 78:ea:95:78:bb:a8:eb:d0:e3:54:3d:af:07:76:16:8b:12:b5: 26:16:71:7e:df:dc:75:aa:21:5b:dd:90:25:37:76:97:9b:1b: fc:5f:59:da:61:82:32:e1:11:26:77:12:65:7d:b9:1e:75:4d: ca:b4:f7:10:52:bd:de:50:80:38:94:96:48:d6:f2:09:d0:a1: ff:d5:69:99:ed:f1:40:9d:a5:d8:fe:18:4c:73:b8:6e:1c:b2: ad:a7:bf:08:e4:43:f7:c6:37:49:92:2d:43:30:b2:17:fd:da: 87:10:10:ce:7e:fd:f8:22:5f:b2:14:59:d4:20:25:9b:36:ba: 41:71:31:43:26:43:8d:5e:98:58:cf:0b:c5:a8:58:23:44:58: f0:d0:75:50:cb:7d:17:6f:6a:e7:3d:ed:1d:a9:8e:05:26:0f: 27:e0:7e:13:a9:15:e7:89:80:f4:1b:95:c1:95:23:c9:c1:da: 43:86:7a:6f:ff:44:4a:9a:be:b4:1a:2b:88:59:8a:b2:5c:af: a1:11:dc:04:ad:62:01:0d:7c:36:d8:cd:6e:92:86:e3:52:6e: e3:ad:f2:74:73:0a:98:16:70:d2:7c:07:ff:9a:36:2d:98:e0: a2:7b:00:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscGAKSkSOK+DHn3HU15vV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh OTE3YjMwHhcNMjUxMjE0MDkwMTM0WhcNMjUxMjE1MDkwMTM0WjAzMTEwLwYDVQQD Eyg2MWM0NmFhY2ZkMGFhZmFjNDM3NDZiYjk1OTFmNzQ4ZTg3ZDEzNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRCmulSsohGe85vVGWcqJa7xXuyo uFVVgKn5t+Le8yOsvehRK94bRmY+hYl5iLyBltxrk631gQjn7XTHymuHsNTiJWe/ Jd3G1cjVbw14Tt6Q1EXSO+FcavVjmaJSoch3pQrUA3Xk7fdOSqISVk6Gu53CvJv/ BUWpcjGF3vqBH5WnkpJaVZCT9Wr/+tO15vTTAV7xSQUYcRlijMRmiNOr2/R4KNt1 UVkLfASDAM5BT+E2fixNN36h36Wh2+ncXwPec3VRpOL6+C1qJjIRrFGDqoKqAJk3 5MonKLh5oDOon+fovBH9PMlH1vz6s+CgCB3BxLmk7Syq7PW2k9D/ayTjvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHEaqz9Cq+sQ3RruVkfdI6H0TYZMB8GA1UdIwQY MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt MTdiOTRhYzU4Mzc1LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1 LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7xRmBjx IzUiN9/h5plxICDpeOqVeLuo69DjVD2vB3YWixK1JhZxft/cdaohW92QJTd2l5sb /F9Z2mGCMuERJncSZX25HnVNyrT3EFK93lCAOJSWSNbyCdCh/9Vpme3xQJ2l2P4Y THO4bhyyrae/CORD98Y3SZItQzCyF/3ahxAQzn79+CJfshRZ1CAlmza6QXExQyZD jV6YWM8LxahYI0RY8NB1UMt9F29q5z3tHamOBSYPJ+B+E6kV54mA9BuVwZUjycHa Q4Z6b/9ESpq+tBoriFmKslyvoRHcBK1iAQ18NtjNbpKG41Ju463ydHMKmBZw0nwH /5o2LZjgonsABg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:15:31 2025 by rpki-client