This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json) Hash identifier: PsfaNPmZgVQII4fRnZKhpQDaUGqtfnUy4NhHXhNZIHw= Subject key identifier: 32:91:52:39:29:2B:ED:0C:E6:7B:9B:BE:8B:1D:4D:24:1B:7C:AB:6E Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Certificate serial: 019B19F1BF05F88C9CC153B1A82F31F97144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft Manifest number: 0BCC Signing time: Sat 13 Dec 2025 23:00:31 +0000 Manifest this update: Sat 13 Dec 2025 23:00:31 +0000 Manifest next update: Sun 14 Dec 2025 23:00:31 +0000 Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: RjctKUYdtHJDGn0OVn+hXztn+1kqoHbKuYHems1mPso=) 2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=) 3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=) 4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:bf:05:f8:8c:9c:c1:53:b1:a8:2f:31:f9:71:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Validity Not Before: Dec 13 23:00:31 2025 GMT Not After : Dec 14 23:00:31 2025 GMT Subject: CN=32915239292bed0ce67b9bbe8b1d4d241b7cab6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:49:d1:13:99:eb:05:c6:dd:70:ce:86:02: aa:6e:bc:c1:f6:5f:97:5a:85:20:42:98:4b:ac:15: 99:67:33:e9:e1:24:b1:d5:11:88:24:4f:87:f0:ad: 3e:9a:02:3d:a4:eb:e4:59:f8:08:64:80:fc:e1:ab: 56:04:86:5f:ea:15:77:d5:af:1e:fd:21:3c:8c:76: d1:57:a7:fb:6a:a1:ed:25:e1:a4:d1:79:08:53:dc: 91:b3:37:ff:b7:3b:8a:d5:38:05:cc:a5:4e:85:03: 87:64:b0:0c:19:04:2e:0a:3e:7d:09:9a:47:b7:5d: 6c:76:fc:98:7f:25:b4:20:98:21:5e:2b:62:43:b0: 7f:f9:76:83:10:45:04:b9:9c:94:67:af:72:fb:5e: 40:83:86:08:b1:83:2a:c6:bf:fb:ac:8f:05:7e:a8: 4f:5b:94:65:3d:bb:59:3c:b2:b4:bb:40:e2:c6:ea: 3f:09:bd:24:83:4f:a2:67:31:3c:a4:be:d6:fe:60: da:7b:8d:11:96:63:8f:16:5b:01:3f:62:95:31:e2: 4f:52:de:34:f3:a6:af:6d:49:b6:50:d8:c7:fd:8f: b2:7d:d8:1e:f9:9e:69:6a:24:8f:35:2c:ce:e6:01: e6:f0:cc:5f:f6:82:d0:6e:e5:35:91:f4:b6:fa:98: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:91:52:39:29:2B:ED:0C:E6:7B:9B:BE:8B:1D:4D:24:1B:7C:AB:6E X509v3 Authority Key Identifier: keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:92:6a:82:e5:c3:39:4e:05:6d:8a:d5:e3:bd:53:7d:25:14: 17:61:f8:dd:a4:31:50:ce:fd:44:26:89:cc:0f:8d:61:ef:0e: 63:58:3c:54:e3:94:36:37:59:be:1c:7f:17:55:99:b3:35:1b: cb:58:9f:4e:77:ef:f2:7a:d3:ec:af:74:e5:24:7d:05:1e:f2: d7:99:da:a4:d8:88:e0:54:90:69:52:a0:85:e4:43:70:57:ee: 69:85:86:b3:81:38:02:36:ed:5a:82:be:5a:e4:1e:f3:7d:02: af:19:a0:08:af:08:6e:7f:f0:5b:ae:e0:c9:29:2f:7f:15:6e: c2:e8:6d:c8:63:00:57:dd:6f:36:10:32:98:24:fa:0f:bf:35: 60:a5:9c:d8:88:9a:da:f2:6f:70:42:20:e5:f7:62:6d:7d:7a: d5:a2:bf:b6:7b:f0:6c:0b:50:59:91:50:43:48:7b:b0:81:98: 04:d3:94:df:b4:bd:75:53:b3:16:c3:3c:56:19:48:55:3e:70: f7:33:7e:70:6b:76:f2:02:48:27:dd:e1:2c:07:3b:03:63:5e: 8d:05:f0:24:47:9d:da:79:f9:5f:a8:72:da:b2:8b:39:21:44: 64:b4:7d:99:75:89:85:00:02:75:36:1e:f2:53:25:ca:5f:8a: 2b:12:79:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8b8F+IycwVOxqC8x+XFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4 MWFkMTkwHhcNMjUxMjEzMjMwMDMxWhcNMjUxMjE0MjMwMDMxWjAzMTEwLwYDVQQD EygzMjkxNTIzOTI5MmJlZDBjZTY3YjliYmU4YjFkNGQyNDFiN2NhYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsFJ0ROZ6wXG3XDOhgKqbrzB9l+X WoUgQphLrBWZZzPp4SSx1RGIJE+H8K0+mgI9pOvkWfgIZID84atWBIZf6hV31a8e /SE8jHbRV6f7aqHtJeGk0XkIU9yRszf/tzuK1TgFzKVOhQOHZLAMGQQuCj59CZpH t11sdvyYfyW0IJghXitiQ7B/+XaDEEUEuZyUZ69y+15Ag4YIsYMqxr/7rI8FfqhP W5RlPbtZPLK0u0Dixuo/Cb0kg0+iZzE8pL7W/mDae40RlmOPFlsBP2KVMeJPUt40 86avbUm2UNjH/Y+yfdge+Z5paiSPNSzO5gHm8Mxf9oLQbuU1kfS2+pgNcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKRUjkpK+0M5nubvosdTSQbfKtuMB8GA1UdIwQY MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJJqguXD OU4FbYrV471TfSUUF2H43aQxUM79RCaJzA+NYe8OY1g8VOOUNjdZvhx/F1WZszUb y1ifTnfv8nrT7K905SR9BR7y15napNiI4FSQaVKgheRDcFfuaYWGs4E4AjbtWoK+ WuQe830CrxmgCK8Ibn/wW67gySkvfxVuwuhtyGMAV91vNhAymCT6D781YKWc2Iia 2vJvcEIg5fdibX161aK/tnvwbAtQWZFQQ0h7sIGYBNOU37S9dVOzFsM8VhlIVT5w 9zN+cGt28gJIJ93hLAc7A2NejQXwJEed2nn5X6hy2rKLOSFEZLR9mXWJhQACdTYe 8lMlyl+KKxJ5Gw== -----END CERTIFICATE-----Generated at Sun Dec 14 08:43:41 2025 by rpki-client