This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json) Hash identifier: rmop8smLB+zmZxptac4Z6V50k+SUMf/TKTBs9fy/zGk= Subject key identifier: 24:2D:0A:BB:6C:6C:71:7D:7C:78:40:51:C5:E5:92:B9:CE:C1:BB:28 Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac Certificate serial: 019B16B9CD6C5B10386CE3573BD263747D76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 08:00:34 +0000 Manifest this update: Sat 13 Dec 2025 08:00:34 +0000 Manifest next update: Sun 14 Dec 2025 08:00:34 +0000 Files and hashes: 1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=) 2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=) 3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: kmhW/GILiWqr5B3gIM8pN742usxUgj8xvBtrreh4tS8=) 4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=) 5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:b9:cd:6c:5b:10:38:6c:e3:57:3b:d2:63:74:7d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac Validity Not Before: Dec 13 08:00:34 2025 GMT Not After : Dec 14 08:00:34 2025 GMT Subject: CN=242d0abb6c6c717d7c784051c5e592b9cec1bb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:b8:5e:20:1f:e5:40:4b:18:fb:eb:f4:16: 58:62:c4:36:b7:fd:cc:e3:79:b8:c9:39:06:a9:2b: b9:76:7b:7a:49:13:b6:0c:3e:fc:ef:03:c0:4e:b7: 98:3b:fe:ef:31:0d:ee:a0:d6:1e:02:c9:1b:41:8c: a4:8a:97:4d:6f:be:a7:32:8a:56:da:dc:54:c6:14: 4b:3b:00:a1:ac:70:c7:cd:41:64:4a:bf:e8:8e:14: 41:7c:86:71:eb:53:05:7b:ec:8e:68:8a:b4:dd:da: b3:76:90:33:f4:fa:5f:f8:93:d6:13:fc:df:46:d0: ad:bd:6b:c2:ea:49:ea:ae:7b:42:26:84:2f:ea:d3: 61:fd:99:3d:78:bc:bb:0f:ab:98:79:d7:0d:61:2a: 06:53:f7:9b:61:42:43:33:01:f5:19:ec:38:4f:43: b3:f5:a3:e2:1a:8f:7c:e2:dc:55:ef:ac:f3:d5:28: c0:7a:34:0e:b4:26:2c:94:4e:aa:54:d7:36:0c:eb: 64:b4:aa:ca:14:0b:1f:fd:29:d9:08:7f:e9:40:a8: fe:42:1f:ea:b1:ad:39:5d:e1:40:d0:11:d7:cd:ec: 4d:95:b3:7a:ef:e8:ab:4d:cf:7e:03:69:c2:80:23: d2:67:69:ce:19:68:fa:c7:0d:cd:63:c3:96:7e:8f: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2D:0A:BB:6C:6C:71:7D:7C:78:40:51:C5:E5:92:B9:CE:C1:BB:28 X509v3 Authority Key Identifier: keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:46:5a:b0:3a:1a:c6:72:b2:3f:4c:17:e5:28:78:34:17:b8: f4:84:04:cd:d9:f4:57:f7:5c:0b:e5:ea:7e:9e:81:5a:2a:7e: 22:0b:59:66:8e:ac:9b:d3:f8:db:fb:f8:19:7f:a9:b3:72:c8: 38:e2:66:65:1a:4e:7a:74:8c:d2:d4:f9:d7:8c:26:c9:f7:d1: 0f:da:7b:c0:41:b9:52:7c:f3:11:07:17:b8:e1:77:f1:64:62: 74:6a:90:9a:cb:bf:de:b3:23:93:0e:66:02:98:db:10:cf:51: 8b:78:64:73:78:1b:d5:ec:96:05:68:35:7b:3a:b8:b6:e6:8c: 3a:d7:d0:ba:a6:b3:c8:0f:5b:1a:49:34:d0:80:8b:50:d1:3b: 8f:b1:12:c8:35:b2:da:9c:9e:df:7d:fc:4f:bd:58:4d:d8:ef: 1e:3e:ab:eb:1c:11:fa:31:da:47:8f:b2:e8:34:29:5d:08:f4: 2f:09:8a:d5:a8:01:1c:50:4a:51:36:69:f9:8a:8a:34:96:2f: 53:b4:8f:12:a0:77:43:98:49:ff:8d:01:ef:85:fe:06:6e:e2: 01:4e:65:cb:0e:7a:44:14:22:79:2b:3c:9d:4a:35:1e:98:5c: e2:af:e5:b7:2b:2e:72:ad:92:dd:6e:41:6b:ec:e6:20:2d:51: c2:b7:39:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWuc1sWxA4bONXO9JjdH12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYmMwMDJhMmIzNTliMWFhODg3OWUxYzRkNzA0NTViMzE5 MmVmYWMwHhcNMjUxMjEzMDgwMDM0WhcNMjUxMjE0MDgwMDM0WjAzMTEwLwYDVQQD EygyNDJkMGFiYjZjNmM3MTdkN2M3ODQwNTFjNWU1OTJiOWNlYzFiYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv+4XiAf5UBLGPvr9BZYYsQ2t/3M 43m4yTkGqSu5dnt6SRO2DD787wPATreYO/7vMQ3uoNYeAskbQYykipdNb76nMopW 2txUxhRLOwChrHDHzUFkSr/ojhRBfIZx61MFe+yOaIq03dqzdpAz9Ppf+JPWE/zf RtCtvWvC6knqrntCJoQv6tNh/Zk9eLy7D6uYedcNYSoGU/ebYUJDMwH1Gew4T0Oz 9aPiGo984txV76zz1SjAejQOtCYslE6qVNc2DOtktKrKFAsf/SnZCH/pQKj+Qh/q sa05XeFA0BHXzexNlbN67+irTc9+A2nCgCPSZ2nOGWj6xw3NY8OWfo9U1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQtCrtsbHF9fHhAUcXlkrnOwbsoMB8GA1UdIwQY MBaAFCu8ACorNZsaqIeeHE1wRVsxku+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YzM3MjYtMmRiZS00MTc0LWIxNjQt YTg5ODg5Y2U1Zjg0LzEvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83YzM3MjYtMmRiZS00MTc0LWIxNjQtYTg5ODg5Y2U1Zjg0 LzEvSzd3QUtpczFteHFvaDU0Y1RYQkZXekdTNzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1EZasDoa xnKyP0wX5Sh4NBe49IQEzdn0V/dcC+Xqfp6BWip+IgtZZo6sm9P42/v4GX+ps3LI OOJmZRpOenSM0tT514wmyffRD9p7wEG5UnzzEQcXuOF38WRidGqQmsu/3rMjkw5m ApjbEM9Ri3hkc3gb1eyWBWg1ezq4tuaMOtfQuqazyA9bGkk00ICLUNE7j7ESyDWy 2pye3338T71YTdjvHj6r6xwR+jHaR4+y6DQpXQj0LwmK1agBHFBKUTZp+YqKNJYv U7SPEqB3Q5hJ/40B74X+Bm7iAU5lyw56RBQieSs8nUo1Hphc4q/ltysucq2S3W5B a+zmIC1Rwrc5Bg== -----END CERTIFICATE-----Generated at Sat Dec 13 15:05:51 2025 by rpki-client