This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json) Hash identifier: ohEW9mvWpotOva0VxYVYZ5mGTYhwlADq6ciPQfdk5Os= Subject key identifier: 73:33:B7:C9:D9:A5:B3:37:94:01:A1:62:70:8A:D5:91:16:AC:EB:FC Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d Certificate serial: 019B5ABF518EC0F3A600177D2B70B0FCEC1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft Manifest number: 010F Signing time: Fri 26 Dec 2025 13:00:46 +0000 Manifest this update: Fri 26 Dec 2025 13:00:46 +0000 Manifest next update: Sat 27 Dec 2025 13:00:46 +0000 Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: Jeob7S2eoPgHY5kBrptki0uxrZqAnaNSQE4byIVtTEk=) 2: r23feT6NV4gkY4zPASAiQfbYf2Y.roa (hash: ReD3jPU9ih7dYlCC9A/HHv2ji9KRX8p8gAkXwzlwEc0=) 3: xq2CqKVO94nQysFtjzk6_6Xp9pQ.roa (hash: axb4sNwPK5zNXW5qco2WUzPUyUSSN70JjeefczEtdRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:51:8e:c0:f3:a6:00:17:7d:2b:70:b0:fc:ec:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d Validity Not Before: Dec 26 13:00:46 2025 GMT Not After : Dec 27 13:00:46 2025 GMT Subject: CN=7333b7c9d9a5b3379401a162708ad59116acebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:42:51:e5:84:59:b1:8d:2f:ee:9d:5b:d0: a1:63:d0:d4:df:23:eb:39:dd:41:39:9c:0e:b4:7f: 30:b7:d5:1e:10:ee:5d:01:b4:2b:c2:31:c7:01:ae: 97:04:ae:ee:76:30:55:23:44:70:f6:0c:d3:84:8c: 08:bb:ac:73:68:6c:76:6e:eb:f2:70:cd:1f:2f:81: b2:05:5f:e9:aa:cb:7f:34:45:99:3f:a2:cf:b3:eb: 17:10:ac:9f:17:7e:5f:b5:e0:de:7e:89:ea:70:55: e3:b2:2e:f7:82:c3:ad:bc:d2:55:7b:12:06:a2:d9: 71:9b:65:7f:16:9a:ea:9d:86:fb:1c:17:73:90:d3: 7f:25:ea:cd:c8:44:e7:b6:40:6f:8b:80:67:e0:fc: 40:93:ea:45:ce:6f:37:79:6c:22:5e:f9:2d:79:33: 5e:67:ec:74:ac:00:e8:08:22:06:47:da:1a:8e:71: 00:e6:af:dc:ec:e7:b9:c8:50:01:3f:50:8e:9d:c6: 19:4d:dd:3c:db:f5:54:7c:80:ed:9e:2b:de:7e:34: 19:19:2c:b7:d9:f0:19:ec:10:09:13:98:8e:89:7f: 87:22:14:68:dc:53:77:91:86:17:9f:c0:6b:82:a6: 44:9f:f8:df:34:da:13:ad:e9:58:7b:58:f6:20:7c: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:33:B7:C9:D9:A5:B3:37:94:01:A1:62:70:8A:D5:91:16:AC:EB:FC X509v3 Authority Key Identifier: keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c4:fa:81:47:d4:6a:c6:5e:68:db:18:c1:33:87:91:83:5c: 8a:4e:f7:10:94:07:7e:bf:32:22:5b:2c:8c:b0:aa:2f:30:2d: 49:b0:eb:d5:3a:9e:5e:e9:41:3d:fa:7d:9b:47:ea:31:8f:38: a2:3a:e0:7a:d6:fa:f2:a8:4f:b3:87:de:8b:b7:c6:aa:c8:c7: cc:98:f3:d8:95:cf:ca:4e:22:c6:a2:09:cb:08:26:06:7e:48: 9e:39:4c:c4:92:67:ca:e3:3f:86:0c:9b:46:75:85:f6:d3:b7: 10:c6:4a:95:e3:57:94:43:ff:79:3b:7a:91:86:d7:30:27:0c: 53:3a:14:23:86:09:21:2a:83:3c:86:5f:e9:7e:c0:b7:d2:30: 3a:c8:35:39:5a:7e:08:a6:7b:2d:9a:79:3b:67:59:a2:6b:ad: 61:a7:62:f6:f0:97:41:b0:eb:11:d5:0a:6e:b6:4a:24:d5:22: 7e:bb:4b:a7:4f:38:cc:79:dd:49:3b:5a:0b:33:71:04:d0:61: e4:31:12:61:77:2b:2c:9e:6b:eb:96:62:b5:0f:7e:b8:27:0f: 3a:da:f8:d7:3f:ee:ee:18:d7:31:17:8b:cf:0c:71:83:01:c1: 6a:9e:0b:dc:d9:fe:b8:00:78:8d:cc:d0:8e:81:a6:bc:82:9a: 26:1d:ff:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav1GOwPOmABd9K3Cw/OwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTM2MTQ5NjU3YTYyYmUzMmUwZTE1NzE4MjdjMmIyZjM1 YTBkM2QwHhcNMjUxMjI2MTMwMDQ2WhcNMjUxMjI3MTMwMDQ2WjAzMTEwLwYDVQQD Eyg3MzMzYjdjOWQ5YTViMzM3OTQwMWExNjI3MDhhZDU5MTE2YWNlYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ9CUeWEWbGNL+6dW9ChY9DU3yPr Od1BOZwOtH8wt9UeEO5dAbQrwjHHAa6XBK7udjBVI0Rw9gzThIwIu6xzaGx2buvy cM0fL4GyBV/pqst/NEWZP6LPs+sXEKyfF35fteDefonqcFXjsi73gsOtvNJVexIG otlxm2V/FprqnYb7HBdzkNN/JerNyETntkBvi4Bn4PxAk+pFzm83eWwiXvkteTNe Z+x0rADoCCIGR9oajnEA5q/c7Oe5yFABP1COncYZTd082/VUfIDtnivefjQZGSy3 2fAZ7BAJE5iOiX+HIhRo3FN3kYYXn8BrgqZEn/jfNNoTrelYe1j2IHx0HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMzt8nZpbM3lAGhYnCK1ZEWrOv8MB8GA1UdIwQY MBaAFCuTYUllemK+MuDhVxgnwrLzWg09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGIt NzgyMGE1MWVkODM0LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGItNzgyMGE1MWVkODM0 LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcT6gUfU asZeaNsYwTOHkYNcik73EJQHfr8yIlssjLCqLzAtSbDr1TqeXulBPfp9m0fqMY84 ojrgetb68qhPs4fei7fGqsjHzJjz2JXPyk4ixqIJywgmBn5InjlMxJJnyuM/hgyb RnWF9tO3EMZKleNXlEP/eTt6kYbXMCcMUzoUI4YJISqDPIZf6X7At9IwOsg1OVp+ CKZ7LZp5O2dZomutYadi9vCXQbDrEdUKbrZKJNUifrtLp084zHndSTtaCzNxBNBh 5DESYXcrLJ5r65ZitQ9+uCcPOtr41z/u7hjXMReLzwxxgwHBap4L3Nn+uAB4jczQ joGmvIKaJh3/5A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:30 2025 by rpki-client