This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json) Hash identifier: tWHYGKXxkqh6Lz9vqCf/v9MwwUI7FS9X7zBAQzS1zK8= Subject key identifier: B9:44:BA:C9:18:4D:58:2D:82:1B:82:59:A7:D7:5F:B6:21:4B:59:3A Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Certificate serial: 019B36E9965EED7F92FA17221DBE41A647E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft Manifest number: 0BDB Signing time: Fri 19 Dec 2025 14:00:36 +0000 Manifest this update: Fri 19 Dec 2025 14:00:36 +0000 Manifest next update: Sat 20 Dec 2025 14:00:36 +0000 Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: i9pCTbO0/HGhKwlrKr7bhvNX0YEjXvK0WuK+YBF7aKE=) 2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=) 3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=) 4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:96:5e:ed:7f:92:fa:17:22:1d:be:41:a6:47:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Validity Not Before: Dec 19 14:00:36 2025 GMT Not After : Dec 20 14:00:36 2025 GMT Subject: CN=b944bac9184d582d821b8259a7d75fb6214b593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:fd:f6:56:33:70:b5:73:b1:5f:c8:4c:a5: 32:e5:69:86:3f:d2:a9:b2:3d:3d:6b:27:73:4f:e9: 0f:00:fb:f1:7d:f7:f4:e5:6e:a2:d7:b3:c0:f7:2b: 22:01:f3:1e:76:e3:bc:84:fb:c5:4c:b9:e3:14:7f: 02:ed:51:48:09:1e:09:b2:71:8b:19:2b:19:3b:47: 90:2a:ab:67:1a:13:25:66:8e:3c:cc:3a:7b:00:5c: ed:69:dc:f0:45:86:ec:65:44:68:db:c1:49:ff:03: c1:ab:e3:8a:fd:e4:68:61:fb:d8:a0:ba:a0:44:82: 37:f9:9c:32:85:08:2c:1f:f0:92:43:da:da:67:5b: f0:0f:dd:71:b1:f5:69:84:32:31:b2:c7:25:1f:f8: 9a:f9:a9:42:4c:46:7e:4e:47:9d:e4:96:01:41:3e: c7:68:f2:e8:ec:f3:71:f5:1a:a1:c7:42:2f:12:89: b6:39:90:b3:8b:1e:16:21:ff:67:50:b7:af:b5:5a: fe:30:24:b0:ec:be:86:37:76:6c:64:b7:97:05:1e: 85:a6:cd:f2:82:9a:3e:96:f0:6e:33:20:b3:da:a1: bc:7f:02:98:de:1a:30:cc:60:9e:35:64:ac:2e:dc: 89:50:4e:65:db:c3:e9:b9:67:9f:c7:ad:bb:36:01: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:44:BA:C9:18:4D:58:2D:82:1B:82:59:A7:D7:5F:B6:21:4B:59:3A X509v3 Authority Key Identifier: keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:fb:d2:27:e4:f2:ad:4b:ff:c7:e0:08:b8:fd:05:35:f6:9f: 0c:1d:2a:f0:cc:60:14:53:c2:2f:3b:bc:13:f7:a7:22:ca:1b: 47:20:55:36:c3:f1:5e:9a:ba:b5:19:44:0e:22:43:3b:a5:0c: 35:bc:f1:ab:e1:6d:be:d0:ea:13:e2:18:f6:3b:f2:ac:61:ce: 56:c2:28:72:78:09:57:7e:45:66:48:9c:68:a3:9c:28:3f:33: 04:34:b6:7c:24:9a:bd:27:d6:1f:fe:ca:e7:79:b6:19:27:25: b1:7e:01:04:b3:98:3a:4e:67:75:be:5b:14:1b:e7:6f:1c:0b: 3d:45:f8:97:5f:8b:85:a0:ed:d1:a1:e8:7e:55:db:23:cd:48: d8:06:4f:4d:ff:34:41:b9:56:43:d7:be:66:67:25:8d:8b:f6: a4:9b:72:0e:c9:39:83:da:5f:4f:5c:03:43:50:a0:1a:b1:51: ca:cf:21:13:6f:c7:c1:bd:24:cd:fb:ee:bd:53:06:02:45:cc: 11:c0:df:fa:7b:37:89:4a:ef:aa:52:ab:b3:13:b5:f1:22:aa: e1:55:62:02:b9:34:85:d2:d8:66:86:b7:a4:ed:a3:4f:4b:3d: 34:b6:3b:75:0b:a1:09:7a:c8:c6:53:9f:9c:4d:d4:4e:1f:78: e9:ee:a0:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26ZZe7X+S+hciHb5BpkfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4 MWFkMTkwHhcNMjUxMjE5MTQwMDM2WhcNMjUxMjIwMTQwMDM2WjAzMTEwLwYDVQQD EyhiOTQ0YmFjOTE4NGQ1ODJkODIxYjgyNTlhN2Q3NWZiNjIxNGI1OTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L799lYzcLVzsV/ITKUy5WmGP9Kp sj09aydzT+kPAPvxfff05W6i17PA9ysiAfMeduO8hPvFTLnjFH8C7VFICR4JsnGL GSsZO0eQKqtnGhMlZo48zDp7AFztadzwRYbsZURo28FJ/wPBq+OK/eRoYfvYoLqg RII3+ZwyhQgsH/CSQ9raZ1vwD91xsfVphDIxssclH/ia+alCTEZ+Tked5JYBQT7H aPLo7PNx9Rqhx0IvEom2OZCzix4WIf9nULevtVr+MCSw7L6GN3ZsZLeXBR6Fps3y gpo+lvBuMyCz2qG8fwKY3howzGCeNWSsLtyJUE5l28PpuWefx627NgEePwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlEuskYTVgtghuCWafXX7YhS1k6MB8GA1UdIwQY MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfvSJ+Ty rUv/x+AIuP0FNfafDB0q8MxgFFPCLzu8E/enIsobRyBVNsPxXpq6tRlEDiJDO6UM Nbzxq+FtvtDqE+IY9jvyrGHOVsIocngJV35FZkicaKOcKD8zBDS2fCSavSfWH/7K 53m2GSclsX4BBLOYOk5ndb5bFBvnbxwLPUX4l1+LhaDt0aHoflXbI81I2AZPTf80 QblWQ9e+ZmcljYv2pJtyDsk5g9pfT1wDQ1CgGrFRys8hE2/Hwb0kzfvuvVMGAkXM EcDf+ns3iUrvqlKrsxO18SKq4VViArk0hdLYZoa3pO2jT0s9NLY7dQuhCXrIxlOf nE3UTh946e6gjw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:28:18 2025 by rpki-client