This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json) Hash identifier: UzaUgjlVCnv54x/MYjPQjVjhBtt+3w5b/lIB+Mc8Lg0= Subject key identifier: A0:E8:72:DD:FC:12:9D:43:43:B6:6C:60:89:30:12:FA:D3:1C:16:12 Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Certificate serial: 019B2F9E42BFC7A3100BB9261B1D4A317F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft Manifest number: 1432 Signing time: Thu 18 Dec 2025 04:00:59 +0000 Manifest this update: Thu 18 Dec 2025 04:00:59 +0000 Manifest next update: Fri 19 Dec 2025 04:00:59 +0000 Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: uvOpmbSWgo0Ey0uC35vFTW7qz5c1BQuxgmF6Ll19t6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:42:bf:c7:a3:10:0b:b9:26:1b:1d:4a:31:7f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Validity Not Before: Dec 18 04:00:59 2025 GMT Not After : Dec 19 04:00:59 2025 GMT Subject: CN=a0e872ddfc129d4343b66c60893012fad31c1612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:3d:90:e5:b7:cc:64:e5:4c:17:41:fd:09: d3:60:f9:66:56:98:e7:23:c4:20:00:f5:a0:6e:b7: d0:7c:ed:45:79:88:19:d1:ff:c9:6c:9b:4e:e8:83: 02:0a:e6:ce:06:0e:6b:ac:58:31:65:44:38:77:a0: 2d:13:2e:16:c9:e0:51:f0:6b:07:e6:47:05:fd:15: 7d:f7:f4:12:49:63:88:b7:e8:0b:55:a7:2c:55:e4: 99:a8:98:c8:50:65:8e:24:13:b9:49:fb:2e:66:43: f6:79:65:fb:83:44:2b:f8:2b:d9:51:a2:ee:9b:f5: b8:fb:9e:e8:10:4a:01:0f:64:bf:61:13:84:cd:e1: f6:26:0b:46:3d:a2:20:d8:03:e4:2e:c1:20:60:67: 4a:f0:f1:ee:33:22:9a:63:ea:87:bf:81:f1:92:b6: cf:e5:4f:ff:e7:80:cc:0e:41:6a:05:9e:84:6f:a3: 90:23:a2:1e:35:9d:a4:13:e2:a9:32:4c:5f:af:47: 48:11:46:66:5e:62:fc:0f:a6:b5:b6:cc:1b:16:ad: 33:ff:dc:b8:2d:6b:b7:c6:d7:73:30:4a:73:a0:7a: 90:63:7f:ef:49:f1:0b:8b:ed:51:4a:95:12:9e:c8: bb:3a:b4:3b:65:be:67:92:0d:ed:bb:75:84:d8:e7: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E8:72:DD:FC:12:9D:43:43:B6:6C:60:89:30:12:FA:D3:1C:16:12 X509v3 Authority Key Identifier: keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8c:7c:19:24:77:c7:64:e3:88:7f:4a:f2:14:b7:f1:5d:23: 5a:5c:31:8d:36:82:dd:55:52:0b:00:2c:ae:5a:8b:23:ea:dd: e3:1e:ff:08:a7:cd:b2:2a:ea:1d:b8:50:c7:94:6f:84:50:60: d4:cb:7b:22:86:2e:15:79:d8:6c:b0:e6:e2:fc:58:b5:bc:7a: c2:ed:ea:14:75:11:89:d3:45:3c:8d:fe:82:42:ac:6a:56:57: 79:fb:68:6f:ce:cb:e2:df:75:02:63:e2:71:c2:05:53:38:66: 93:64:e6:0a:17:e7:d5:5e:b3:db:42:bb:86:c5:bd:49:56:a1: 02:ad:b6:6c:ba:e7:1c:34:82:6b:bf:2c:44:91:db:82:f6:31: 1a:cd:8b:a5:7e:1b:77:9f:dc:1b:e7:5f:65:a0:95:1d:79:20: 06:34:c8:bf:70:d1:a7:22:bc:f5:b6:59:94:39:b3:e1:15:6c: 0e:30:52:97:5d:96:22:17:6d:fb:ae:5e:85:32:70:b6:48:81: 59:43:88:ee:18:fa:26:15:65:c1:71:5d:50:49:98:b3:08:3b: 27:0b:a1:8e:2a:f6:94:4e:4a:7a:ac:af:54:f0:79:15:9b:3b: cc:0c:d8:a9:36:68:7d:8f:fe:53:64:f3:3b:4c:c7:87:c6:0b: 1f:7d:20:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnkK/x6MQC7kmGx1KMX+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODU3ZDlmNjAxM2IwYWJmMGI3NWRlZjNlZTFjODE5YjZj MjU4NGIwHhcNMjUxMjE4MDQwMDU5WhcNMjUxMjE5MDQwMDU5WjAzMTEwLwYDVQQD EyhhMGU4NzJkZGZjMTI5ZDQzNDNiNjZjNjA4OTMwMTJmYWQzMWMxNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPY9kOW3zGTlTBdB/QnTYPlmVpjn I8QgAPWgbrfQfO1FeYgZ0f/JbJtO6IMCCubOBg5rrFgxZUQ4d6AtEy4WyeBR8GsH 5kcF/RV99/QSSWOIt+gLVacsVeSZqJjIUGWOJBO5SfsuZkP2eWX7g0Qr+CvZUaLu m/W4+57oEEoBD2S/YROEzeH2JgtGPaIg2APkLsEgYGdK8PHuMyKaY+qHv4HxkrbP 5U//54DMDkFqBZ6Eb6OQI6IeNZ2kE+KpMkxfr0dIEUZmXmL8D6a1tswbFq0z/9y4 LWu3xtdzMEpzoHqQY3/vSfELi+1RSpUSnsi7OrQ7Zb5nkg3tu3WE2OeA9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDoct38Ep1DQ7ZsYIkwEvrTHBYSMB8GA1UdIwQY MBaAFCuFfZ9gE7Cr8Ldd7z7hyBm2wlhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgt ZWFhOWQ2MTIzZjU3LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgtZWFhOWQ2MTIzZjU3 LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYx8GSR3 x2TjiH9K8hS38V0jWlwxjTaC3VVSCwAsrlqLI+rd4x7/CKfNsirqHbhQx5RvhFBg 1Mt7IoYuFXnYbLDm4vxYtbx6wu3qFHURidNFPI3+gkKsalZXeftob87L4t91AmPi ccIFUzhmk2TmChfn1V6z20K7hsW9SVahAq22bLrnHDSCa78sRJHbgvYxGs2LpX4b d5/cG+dfZaCVHXkgBjTIv3DRpyK89bZZlDmz4RVsDjBSl12WIhdt+65ehTJwtkiB WUOI7hj6JhVlwXFdUEmYswg7Jwuhjir2lE5KeqyvVPB5FZs7zAzYqTZofY/+U2Tz O0zHh8YLH30g9g== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:08 2025 by rpki-client