This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json) Hash identifier: t/NpAA2xXd8hzuPVRscZz6QUKZlXIBlzvQwqqDQMf8s= Subject key identifier: BF:FE:24:90:98:58:5A:B5:F3:AB:F4:78:1B:41:FC:AF:DE:EC:76:55 Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Certificate serial: 019B115D04280CDEDEDF4EAB506B266BB218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 07:01:07 +0000 Manifest this update: Fri 12 Dec 2025 07:01:07 +0000 Manifest next update: Sat 13 Dec 2025 07:01:07 +0000 Files and hashes: 1: DKeRVwoenDXIzrWNyLGIpQggDrs.roa (hash: 5p/rY96e/v7nlh4ZVNWfswSCV1H2nosoTkJoyOAXVkI=) 2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 2xlYbZR1JMCbQ5Op9kjK3ABOyKwCVpN/XdUsdNN69VQ=) 3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:04:28:0c:de:de:df:4e:ab:50:6b:26:6b:b2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Validity Not Before: Dec 12 07:01:07 2025 GMT Not After : Dec 13 07:01:07 2025 GMT Subject: CN=bffe249098585ab5f3abf4781b41fcafdeec7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:08:d3:c8:17:d5:fc:b9:63:19:a1:ab:b8:ca: 39:b1:06:fd:89:c1:6c:45:7c:5c:b2:7a:2d:4e:93: 45:8a:fe:e4:d7:3c:cc:a3:3f:c1:9d:79:15:d6:64: b3:7d:ea:d6:9a:d7:af:be:0c:5a:33:5d:ac:29:98: a1:74:1b:26:3d:8c:1c:b2:b3:de:20:0d:cd:d2:bc: af:e2:49:d4:ce:b7:11:76:c4:fe:b6:1c:70:ff:28: c0:6f:55:b2:da:4b:de:43:8d:02:29:6f:d1:cf:fa: 6d:08:93:b7:eb:6c:2d:52:84:fd:c1:11:d2:19:1b: 22:68:1e:59:ee:aa:ea:e6:28:17:bd:60:56:78:69: a4:1a:42:54:9d:d8:74:29:9c:2c:85:d3:60:37:0e: 2d:68:20:67:54:aa:c9:4e:66:57:6b:23:39:4f:e8: 5e:e5:44:ce:80:09:6f:f2:5f:e0:80:95:3c:7c:10: 63:b7:7a:cd:56:7b:0d:71:89:74:25:95:54:24:fc: 31:1d:24:94:49:aa:89:53:41:b3:2d:fe:7f:73:21: d3:5e:e8:ee:ca:b9:03:0a:ad:28:0c:81:c9:45:66: c7:0e:78:49:f0:c6:88:16:db:4c:23:d5:29:40:d7: 0d:c7:84:d4:77:e8:06:77:e8:75:6f:3e:8e:8f:2a: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FE:24:90:98:58:5A:B5:F3:AB:F4:78:1B:41:FC:AF:DE:EC:76:55 X509v3 Authority Key Identifier: keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7d:08:b6:a8:30:49:13:28:c0:95:68:6a:71:6d:f8:c4:fa: 17:24:e0:bb:bc:d4:22:e8:0d:47:2f:fb:46:9e:fd:7c:13:17: 06:f8:8d:32:c5:5b:43:f8:5c:67:dd:15:6a:72:15:34:35:1e: 01:0c:b9:53:02:23:8c:91:06:fb:7d:e7:f2:97:57:79:52:34: 76:e5:d2:ab:c4:0c:40:7d:f7:06:a9:33:a1:81:a9:68:0d:59: 28:85:d6:40:55:0c:3a:53:22:91:2e:a8:1d:33:2c:bf:87:fc: 38:8e:ea:6a:4b:76:f0:83:9c:8a:03:b9:51:a6:fc:29:a8:2b: a3:2e:35:12:5f:9f:53:80:b1:f9:09:78:53:4f:41:b1:e6:dd: 82:f5:91:65:ac:fa:24:bf:d6:7f:e6:3d:82:73:36:7e:5c:c5: 02:a0:c5:4e:87:42:45:40:af:c8:4b:ba:31:cb:37:98:93:d8: a1:13:4a:d0:3d:7b:b5:52:8b:f1:e5:e7:ce:49:60:e1:9f:3e: 3c:e2:b8:0c:2c:9e:ba:11:c0:85:2d:a8:c1:76:61:fd:89:5e: d9:79:de:2c:f4:f0:97:31:53:50:8b:41:c7:05:f1:19:b2:0d: dd:4f:b9:be:44:18:e1:80:98:38:da:58:27:43:1a:8b:f8:af: b7:c5:80:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXQQoDN7e306rUGsma7IYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk MWM4NzkwHhcNMjUxMjEyMDcwMTA3WhcNMjUxMjEzMDcwMTA3WjAzMTEwLwYDVQQD EyhiZmZlMjQ5MDk4NTg1YWI1ZjNhYmY0NzgxYjQxZmNhZmRlZWM3NjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AjTyBfV/LljGaGruMo5sQb9icFs RXxcsnotTpNFiv7k1zzMoz/BnXkV1mSzferWmtevvgxaM12sKZihdBsmPYwcsrPe IA3N0ryv4knUzrcRdsT+thxw/yjAb1Wy2kveQ40CKW/Rz/ptCJO362wtUoT9wRHS GRsiaB5Z7qrq5igXvWBWeGmkGkJUndh0KZwshdNgNw4taCBnVKrJTmZXayM5T+he 5UTOgAlv8l/ggJU8fBBjt3rNVnsNcYl0JZVUJPwxHSSUSaqJU0GzLf5/cyHTXuju yrkDCq0oDIHJRWbHDnhJ8MaIFttMI9UpQNcNx4TUd+gGd+h1bz6Ojyq8GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/+JJCYWFq186v0eBtB/K/e7HZVMB8GA1UdIwQY MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX0Itqgw SRMowJVoanFt+MT6FyTgu7zUIugNRy/7Rp79fBMXBviNMsVbQ/hcZ90VanIVNDUe AQy5UwIjjJEG+33n8pdXeVI0duXSq8QMQH33BqkzoYGpaA1ZKIXWQFUMOlMikS6o HTMsv4f8OI7qakt28IOcigO5Uab8Kagroy41El+fU4Cx+Ql4U09BsebdgvWRZaz6 JL/Wf+Y9gnM2flzFAqDFTodCRUCvyEu6Mcs3mJPYoRNK0D17tVKL8eXnzklg4Z8+ POK4DCyeuhHAhS2owXZh/Yle2XneLPTwlzFTUItBxwXxGbIN3U+5vkQY4YCYONpY J0Mai/ivt8WAtg== -----END CERTIFICATE-----Generated at Fri Dec 12 10:28:02 2025 by rpki-client