This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft File: K94VUTok977ZjoTw4zigbGcObzY.mft (raw, json) Hash identifier: grL1U/rgxfZ8qIN5iUZOnVYjVfQD8fFMSXFMYQ/JqoU= Subject key identifier: DE:20:48:6C:43:CD:9C:90:45:16:6E:C6:69:A8:19:D5:2B:72:8D:B3 Authority key identifier: 2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36 Certificate issuer: /CN=2bde15513a24f7bed98e84f0e338a06c670e6f36 Certificate serial: 019B59E376150D866634A8ED2E8FEA7B0A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft Manifest number: 59 Signing time: Fri 26 Dec 2025 09:00:37 +0000 Manifest this update: Fri 26 Dec 2025 09:00:37 +0000 Manifest next update: Sat 27 Dec 2025 09:00:37 +0000 Files and hashes: 1: K94VUTok977ZjoTw4zigbGcObzY.crl (hash: KYieP4klRFNY5jc3tgX2tLf0lkWpAB66cANmkjH0Aow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:76:15:0d:86:66:34:a8:ed:2e:8f:ea:7b:0a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bde15513a24f7bed98e84f0e338a06c670e6f36 Validity Not Before: Dec 26 09:00:37 2025 GMT Not After : Dec 27 09:00:37 2025 GMT Subject: CN=de20486c43cd9c9045166ec669a819d52b728db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:41:61:d5:6f:38:2d:75:d3:e8:6b:18:ea: 9e:11:e9:b2:be:c2:06:09:33:09:e3:eb:30:48:71: 09:85:9a:8b:bd:17:f9:dc:0c:88:b2:ad:13:a1:46: 02:09:a0:26:2e:aa:3d:70:1a:f8:c4:85:2c:ca:09: d7:76:97:c6:9e:bb:8b:38:a8:fa:b5:21:c7:26:fc: 2c:8a:03:03:34:5c:9f:72:1a:27:80:cb:e1:61:90: 6a:ea:ce:8c:c2:f4:20:9c:6f:0c:98:c4:df:22:25: 5a:76:1d:d8:27:50:95:83:34:c7:16:40:7a:51:07: f0:4a:82:23:03:6b:21:ad:33:a0:b1:bc:8c:e3:05: 3b:0f:74:12:67:03:07:fc:83:21:57:00:3b:77:d8: b3:88:93:4a:30:68:43:29:1d:de:41:38:15:53:cf: 9b:c1:9b:0a:1c:17:0a:f5:af:0b:37:69:1d:7b:db: 14:66:d2:98:52:57:0f:5b:e2:cc:43:83:05:37:6a: 4a:ef:0b:fe:fe:be:bc:6a:10:8b:31:09:cb:42:df: 68:e5:19:8b:5a:38:7b:ed:c9:c9:9e:c2:7c:1c:19: 75:d4:0f:67:90:21:dd:b7:cd:a9:cd:60:4e:78:61: 64:29:58:b9:64:d4:bd:45:c0:a4:92:f2:8d:45:34: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:20:48:6C:43:CD:9C:90:45:16:6E:C6:69:A8:19:D5:2B:72:8D:B3 X509v3 Authority Key Identifier: keyid:2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ad:1b:ab:de:c3:5f:e3:be:ea:85:3e:44:24:c9:b7:5e:29: f0:6c:21:da:1d:6d:51:b2:bc:5e:27:c3:73:e3:8a:cf:4a:f4: 2d:75:a5:c0:a5:c4:f7:a7:a6:8d:fa:b5:d4:c3:d3:39:01:1e: 83:72:8c:63:af:33:8c:07:d2:05:cc:bb:42:ae:f5:a8:f4:9c: a4:05:02:e6:fc:c9:70:ca:ba:15:88:1f:70:28:d5:ab:96:ba: d4:81:5f:27:21:cc:9e:d0:95:47:32:55:46:15:d1:15:99:f7: 1f:fb:cb:fb:35:e3:c9:57:01:0f:95:7d:55:b4:07:a2:95:f8: 04:fe:fb:fe:16:0a:68:c4:66:a8:60:5f:48:c2:3e:ac:aa:a2: 94:ab:c2:32:b9:57:01:09:12:bc:1d:f1:87:c7:45:e9:02:80: a8:a1:91:4e:98:c4:bc:ca:52:96:d9:f5:7e:f8:ec:4b:ab:e2: 62:6a:f4:7d:79:2a:09:e7:1a:c1:2b:d4:13:5d:39:7a:cb:55: 34:c4:39:b6:5e:70:4f:a1:29:cf:59:e8:cb:78:10:7b:21:f3: 6a:3b:d9:9f:be:9b:a0:43:7f:88:9f:ae:9c:b9:1c:3e:6d:c6: 85:28:75:25:42:d8:cf:c3:4c:f4:a2:9e:17:72:af:06:4c:d0: df:2e:89:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ43YVDYZmNKjtLo/qewp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZGUxNTUxM2EyNGY3YmVkOThlODRmMGUzMzhhMDZjNjcw ZTZmMzYwHhcNMjUxMjI2MDkwMDM3WhcNMjUxMjI3MDkwMDM3WjAzMTEwLwYDVQQD EyhkZTIwNDg2YzQzY2Q5YzkwNDUxNjZlYzY2OWE4MTlkNTJiNzI4ZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BxBYdVvOC110+hrGOqeEemyvsIG CTMJ4+swSHEJhZqLvRf53AyIsq0ToUYCCaAmLqo9cBr4xIUsygnXdpfGnruLOKj6 tSHHJvwsigMDNFyfchongMvhYZBq6s6MwvQgnG8MmMTfIiVadh3YJ1CVgzTHFkB6 UQfwSoIjA2shrTOgsbyM4wU7D3QSZwMH/IMhVwA7d9iziJNKMGhDKR3eQTgVU8+b wZsKHBcK9a8LN2kde9sUZtKYUlcPW+LMQ4MFN2pK7wv+/r68ahCLMQnLQt9o5RmL Wjh77cnJnsJ8HBl11A9nkCHdt82pzWBOeGFkKVi5ZNS9RcCkkvKNRTQ5VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4gSGxDzZyQRRZuxmmoGdUrco2zMB8GA1UdIwQY MBaAFCveFVE6JPe+2Y6E8OM4oGxnDm82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi80MGI2NjAtMmQ5Zi00NTU1LThkMDQt NGQ3ZGY0MGMwZjVjLzEvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi80MGI2NjAtMmQ5Zi00NTU1LThkMDQtNGQ3ZGY0MGMwZjVj LzEvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlq0bq97D X+O+6oU+RCTJt14p8Gwh2h1tUbK8XifDc+OKz0r0LXWlwKXE96emjfq11MPTOQEe g3KMY68zjAfSBcy7Qq71qPScpAUC5vzJcMq6FYgfcCjVq5a61IFfJyHMntCVRzJV RhXRFZn3H/vL+zXjyVcBD5V9VbQHopX4BP77/hYKaMRmqGBfSMI+rKqilKvCMrlX AQkSvB3xh8dF6QKAqKGRTpjEvMpSltn1fvjsS6viYmr0fXkqCecawSvUE105estV NMQ5tl5wT6Epz1noy3gQeyHzajvZn76boEN/iJ+unLkcPm3GhSh1JULYz8NM9KKe F3KvBkzQ3y6JQQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:51 2025 by rpki-client