This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json) Hash identifier: m7RpQhf9Wo7ERZfczITN22CG3qzxaQpmb7sJgxSsx0I= Subject key identifier: 2C:E5:4F:FE:E5:70:50:7C:84:28:93:EC:34:B4:3E:F1:FF:47:DF:35 Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54 Certificate serial: 019B0FDC080D9AE33B2EC4761531C71CBE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft Manifest number: 0B89 Signing time: Fri 12 Dec 2025 00:00:36 +0000 Manifest this update: Fri 12 Dec 2025 00:00:36 +0000 Manifest next update: Sat 13 Dec 2025 00:00:36 +0000 Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=) 2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 3rpzpDcKVCAyMt+ah9k3HlDx7T2mGLJX3Li4Zj/qeh0=) 3: TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa (hash: yX71+JwnuGNFxVBhBEfM6BQUby7eWkoWKbcUG9ykDEE=) 4: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=) 5: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:dc:08:0d:9a:e3:3b:2e:c4:76:15:31:c7:1c:be:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54 Validity Not Before: Dec 12 00:00:36 2025 GMT Not After : Dec 13 00:00:36 2025 GMT Subject: CN=2ce54ffee570507c842893ec34b43ef1ff47df35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:5f:53:45:cb:d5:f4:95:3c:53:ab:6a:9b: cc:50:45:5c:70:82:4f:ee:9a:04:b2:fa:39:04:6b: 68:ce:ba:f5:f7:91:34:7e:a5:51:ed:d8:30:0d:3c: b3:c8:27:11:e8:7a:81:31:45:05:2c:ea:d4:d9:1d: 2b:bd:e4:7e:2b:b8:0a:4b:bd:64:ab:3b:d9:4b:e5: 56:37:56:db:bf:a4:71:3a:15:54:b3:64:ed:7d:11: 21:d5:3b:b7:fd:26:b9:58:71:06:c7:a3:09:32:68: 79:03:5f:11:ef:fd:e3:a0:ae:de:2a:63:bf:f5:9e: df:a1:5d:57:cc:b6:5f:8a:8b:7f:78:a7:36:f7:3a: bd:a3:fe:d9:9a:7d:4b:42:03:77:c3:c4:68:b4:97: 03:99:41:00:1d:93:bd:fb:5d:5c:fc:0e:46:29:9b: ae:14:85:dd:13:7d:e6:bd:e6:de:f3:48:90:44:9e: 61:ea:3c:0d:ed:4b:19:31:fa:ad:ec:b3:94:1c:ca: 69:20:8c:5e:29:14:5a:a7:6c:1a:71:9f:99:b2:92: eb:e8:76:38:19:33:83:c3:6e:1b:5a:4c:c1:20:a4: ba:55:e7:d7:4a:bb:79:d2:b6:1d:d1:68:ee:f4:e3: 9b:47:65:2e:76:96:e4:5e:c5:81:85:a4:31:c2:16: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E5:4F:FE:E5:70:50:7C:84:28:93:EC:34:B4:3E:F1:FF:47:DF:35 X509v3 Authority Key Identifier: keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dc:72:ec:f4:21:5b:30:c5:1c:f9:a4:ce:e2:a6:7b:a1:24: 82:51:9f:45:7e:9e:da:01:aa:01:93:ce:66:90:d1:62:30:cd: fe:47:91:07:b2:e2:be:a8:1e:bd:4f:ad:cc:e6:02:fa:d4:c4: 06:a1:61:18:61:8e:c6:38:12:57:f1:8d:24:1e:20:fd:e7:76: de:13:5e:5b:53:46:10:e5:4c:b1:24:e3:5c:63:80:04:5a:7a: 90:76:cf:10:31:ec:2a:d5:7f:26:02:12:76:c1:98:69:98:f4: 15:d3:5b:8b:c1:76:c5:70:04:cb:1f:2e:c5:fe:cd:f1:88:82: 59:77:cd:d5:47:26:b1:be:5c:40:88:ec:4a:92:12:3d:d6:87: b4:89:b7:cd:2f:ce:0e:42:d7:ee:34:26:5f:80:ff:f7:c6:49: 08:83:32:38:5e:ff:27:d2:e0:0f:a5:e2:c3:36:d6:6c:24:5a: c9:fc:66:18:96:ba:04:86:c4:83:0d:64:a2:78:90:14:10:28: 95:ad:8f:ef:b2:7b:4d:9e:8a:cf:44:de:07:e8:fd:a7:42:10: 3c:cb:c1:d5:cb:ae:a7:3e:df:cb:20:77:0d:e7:45:eb:80:16: 4c:b1:5c:31:2f:12:dd:72:46:4b:14:3c:03:df:12:96:cd:bf: e8:e9:cd:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP3AgNmuM7LsR2FTHHHL59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQxNDJiNWI2YTUyOThkNmI4ZmE1ODQ1ZjI5ODc4Y2Zl YmJjNTQwHhcNMjUxMjEyMDAwMDM2WhcNMjUxMjEzMDAwMDM2WjAzMTEwLwYDVQQD EygyY2U1NGZmZWU1NzA1MDdjODQyODkzZWMzNGI0M2VmMWZmNDdkZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZfU0XL1fSVPFOrapvMUEVccIJP 7poEsvo5BGtozrr195E0fqVR7dgwDTyzyCcR6HqBMUUFLOrU2R0rveR+K7gKS71k qzvZS+VWN1bbv6RxOhVUs2TtfREh1Tu3/Sa5WHEGx6MJMmh5A18R7/3joK7eKmO/ 9Z7foV1XzLZfiot/eKc29zq9o/7Zmn1LQgN3w8RotJcDmUEAHZO9+11c/A5GKZuu FIXdE33mvebe80iQRJ5h6jwN7UsZMfqt7LOUHMppIIxeKRRap2wacZ+ZspLr6HY4 GTODw24bWkzBIKS6VefXSrt50rYd0Wju9OObR2UudpbkXsWBhaQxwhZb2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzlT/7lcFB8hCiT7DS0PvH/R981MB8GA1UdIwQY MBaAFCttFCtbalKY1rj6WEXymHjP67xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUt OGJlZmVlNDllZDRkLzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUtOGJlZmVlNDllZDRk LzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtxy7PQh WzDFHPmkzuKme6EkglGfRX6e2gGqAZPOZpDRYjDN/keRB7LivqgevU+tzOYC+tTE BqFhGGGOxjgSV/GNJB4g/ed23hNeW1NGEOVMsSTjXGOABFp6kHbPEDHsKtV/JgIS dsGYaZj0FdNbi8F2xXAEyx8uxf7N8YiCWXfN1Ucmsb5cQIjsSpISPdaHtIm3zS/O DkLX7jQmX4D/98ZJCIMyOF7/J9LgD6XiwzbWbCRayfxmGJa6BIbEgw1koniQFBAo la2P77J7TZ6Kz0TeB+j9p0IQPMvB1cuupz7fyyB3DedF64AWTLFcMS8S3XJGSxQ8 A98Sls2/6OnNig== -----END CERTIFICATE-----Generated at Fri Dec 12 09:26:20 2025 by rpki-client