This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json) Hash identifier: K0SV229EG6Wq6WSRBLoAxoYmKLknSVw7cdwzO2FeTXw= Subject key identifier: 2C:E3:83:3E:2A:97:38:ED:C0:DE:9D:A8:DA:A8:CB:57:60:16:48:FC Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Certificate serial: 019B05221CF21074CE5C1C633421D403E768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft Manifest number: 141C Signing time: Tue 09 Dec 2025 22:01:20 +0000 Manifest this update: Tue 09 Dec 2025 22:01:20 +0000 Manifest next update: Wed 10 Dec 2025 22:01:20 +0000 Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: +M3KiNua9I9oaqS9Dmwvvh5zUBJMcJIWq24/FAHvhw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:22:1c:f2:10:74:ce:5c:1c:63:34:21:d4:03:e7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Validity Not Before: Dec 9 22:01:20 2025 GMT Not After : Dec 10 22:01:20 2025 GMT Subject: CN=2ce3833e2a9738edc0de9da8daa8cb57601648fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:17:5e:af:db:76:14:24:78:6d:7b:25:67: f8:b8:1e:5b:2f:19:4a:c1:8a:08:cd:5f:37:8b:b8: 74:1c:ad:c9:c5:07:64:fc:54:31:76:dc:64:58:6f: bf:0b:a8:22:7c:29:56:0c:a7:b2:ef:d5:cd:30:fe: 42:00:2f:3d:fd:48:ad:49:95:2c:26:90:5d:c1:0c: b3:be:51:c1:48:7d:c5:2c:6e:7b:da:4b:78:09:32: 2e:e0:c7:71:c9:c0:9f:2c:ab:68:ed:a7:d5:89:8f: b8:0b:b0:f9:b1:7f:20:c5:2f:a4:5c:d0:58:63:70: e6:13:b8:7a:21:bf:2f:71:98:58:bb:04:3c:d0:9f: ca:c7:d5:1e:9c:b7:10:a8:f1:e0:11:5b:9b:55:cd: 5f:2a:65:0f:19:52:f9:97:e6:04:3c:ec:21:8f:f8: 56:5a:2f:11:b7:19:4f:62:20:08:e5:1e:7c:08:98: 78:18:5f:52:c6:de:9d:b7:db:f2:ce:ff:7e:8d:bd: 31:f3:3e:ec:10:e9:29:04:cb:ed:d4:60:29:13:c5: e7:74:7d:5c:78:af:5a:34:27:37:95:7d:17:1f:95: ff:c0:98:1f:39:49:b7:41:79:f8:3e:7f:30:36:dd: 0d:17:0b:47:99:8c:7a:30:de:98:78:ce:db:c1:00: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E3:83:3E:2A:97:38:ED:C0:DE:9D:A8:DA:A8:CB:57:60:16:48:FC X509v3 Authority Key Identifier: keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:2a:30:68:db:3c:8c:f0:fb:de:26:37:eb:a2:18:e0:43:21: fe:2c:ba:e4:32:31:56:16:a2:ae:22:1c:08:90:ac:91:45:ca: 6b:a2:b3:f6:b0:52:cb:50:2d:3b:56:6c:11:8f:19:63:27:3c: 73:a1:ad:3e:1b:63:cb:33:09:f1:4c:73:07:de:0b:3c:2f:27: 34:bd:ee:9d:72:24:5c:ae:96:68:7a:ba:04:e6:dc:1b:68:52: d3:be:08:22:3c:0d:97:b9:b5:ff:64:45:f3:50:50:6e:72:3f: fd:e4:f3:2e:f8:f0:d2:9f:34:92:b8:48:53:39:a0:8e:b3:18: 65:a5:3a:10:94:8a:15:82:bc:73:65:79:74:59:53:43:02:39: ed:35:40:a5:d4:f7:e7:2e:b8:d0:18:99:f4:f3:56:0c:3c:c8: 10:f2:e5:03:45:e9:56:e2:65:6a:82:62:dd:5e:c3:37:b5:7c: 0c:78:20:2f:ad:b7:03:51:16:73:93:f4:d1:81:98:7d:aa:af: 27:e9:27:71:68:5f:44:8f:35:48:c0:61:0d:98:d1:47:98:37: 82:96:71:dd:c7:2c:f6:ed:8e:ad:1b:9a:f4:28:7a:81:02:f2: ab:a8:8e:f7:c5:3f:94:f9:11:2e:4f:90:3c:5e:5b:b4:2a:86: 62:b0:75:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFIhzyEHTOXBxjNCHUA+doMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODU3ZDlmNjAxM2IwYWJmMGI3NWRlZjNlZTFjODE5YjZj MjU4NGIwHhcNMjUxMjA5MjIwMTIwWhcNMjUxMjEwMjIwMTIwWjAzMTEwLwYDVQQD EygyY2UzODMzZTJhOTczOGVkYzBkZTlkYThkYWE4Y2I1NzYwMTY0OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVIXXq/bdhQkeG17JWf4uB5bLxlK wYoIzV83i7h0HK3JxQdk/FQxdtxkWG+/C6gifClWDKey79XNMP5CAC89/UitSZUs JpBdwQyzvlHBSH3FLG572kt4CTIu4MdxycCfLKto7afViY+4C7D5sX8gxS+kXNBY Y3DmE7h6Ib8vcZhYuwQ80J/Kx9UenLcQqPHgEVubVc1fKmUPGVL5l+YEPOwhj/hW Wi8RtxlPYiAI5R58CJh4GF9Sxt6dt9vyzv9+jb0x8z7sEOkpBMvt1GApE8XndH1c eK9aNCc3lX0XH5X/wJgfOUm3QXn4Pn8wNt0NFwtHmYx6MN6YeM7bwQCTLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzjgz4qlzjtwN6dqNqoy1dgFkj8MB8GA1UdIwQY MBaAFCuFfZ9gE7Cr8Ldd7z7hyBm2wlhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgt ZWFhOWQ2MTIzZjU3LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgtZWFhOWQ2MTIzZjU3 LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCowaNs8 jPD73iY366IY4EMh/iy65DIxVhairiIcCJCskUXKa6Kz9rBSy1AtO1ZsEY8ZYyc8 c6GtPhtjyzMJ8UxzB94LPC8nNL3unXIkXK6WaHq6BObcG2hS074IIjwNl7m1/2RF 81BQbnI//eTzLvjw0p80krhIUzmgjrMYZaU6EJSKFYK8c2V5dFlTQwI57TVApdT3 5y640BiZ9PNWDDzIEPLlA0XpVuJlaoJi3V7DN7V8DHggL623A1EWc5P00YGYfaqv J+kncWhfRI81SMBhDZjRR5g3gpZx3ccs9u2OrRua9Ch6gQLyq6iO98U/lPkRLk+Q PF5btCqGYrB1XA== -----END CERTIFICATE-----Generated at Wed Dec 10 06:12:19 2025 by rpki-client