This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json) Hash identifier: jTMZ2Q5NGwTj7/gSGIqDV8agMhlBmg6Yr6n7WQRZjQ4= Subject key identifier: 75:5B:88:9B:BF:DC:5F:14:03:4E:0C:4E:63:BD:7F:1E:0D:92:F7:39 Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Certificate serial: 019B2287D814D4337E4592AA24218C32A6BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft Manifest number: 0D1C Signing time: Mon 15 Dec 2025 15:01:26 +0000 Manifest this update: Mon 15 Dec 2025 15:01:26 +0000 Manifest next update: Tue 16 Dec 2025 15:01:26 +0000 Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=) 2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: QhVsOajaTyET4zhEKW5LndVZ4WwK+GZB6SIqkIAjvQA=) 3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:d8:14:d4:33:7e:45:92:aa:24:21:8c:32:a6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Validity Not Before: Dec 15 15:01:26 2025 GMT Not After : Dec 16 15:01:26 2025 GMT Subject: CN=755b889bbfdc5f14034e0c4e63bd7f1e0d92f739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:ef:a0:98:1f:f9:dc:46:18:ab:1b:b7:56: 3b:65:89:da:a1:5e:d9:6b:0f:34:f5:be:e8:55:5e: b2:02:60:a9:70:99:3c:22:72:c4:e9:e5:5e:4b:29: b4:d0:20:cc:db:9e:82:46:2d:b1:96:13:0b:16:3b: 2e:02:d6:c2:7c:57:7a:a5:66:12:e2:7c:f1:97:62: 38:5e:af:f4:87:77:7b:75:4b:53:65:86:4b:86:69: bf:d8:84:4b:db:65:fe:30:89:14:55:29:d4:d1:ec: f1:e8:9f:65:b4:9f:e2:77:a0:95:b8:58:60:f0:b8: 11:c6:65:09:cb:28:2a:54:60:d6:11:bd:86:35:08: a1:44:16:77:79:61:56:07:a4:90:5e:c0:f9:ee:e5: b6:1a:ab:03:0a:f3:90:d3:75:63:3c:df:52:49:10: 2c:e2:ea:e2:fd:f7:bd:8a:3a:87:c8:f8:58:e5:de: 1a:f6:34:3e:8e:a3:60:21:5b:ba:e0:68:73:31:4a: 1d:d5:77:df:b0:e8:32:9e:bf:b6:6d:d5:a3:1e:50: 79:65:9e:ad:7a:59:cb:05:14:a5:bf:f4:8d:09:9b: 08:27:0d:6a:eb:98:31:77:7e:d8:9d:11:c8:99:ff: 7d:a3:12:36:05:90:7b:a3:c9:94:1b:f5:b6:5c:f1: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5B:88:9B:BF:DC:5F:14:03:4E:0C:4E:63:BD:7F:1E:0D:92:F7:39 X509v3 Authority Key Identifier: keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:08:6f:46:f7:bd:05:a9:69:89:f0:d4:e8:5d:63:76:0f:67: ad:b8:4e:8b:e4:9e:71:fa:c1:72:75:dc:9e:9c:d6:b6:b2:be: 2c:d5:f3:54:cb:97:63:39:bf:85:ad:1a:12:dc:91:8b:27:81: 45:e3:d3:ad:59:a3:93:5b:d4:9d:1e:03:a7:f2:bb:a8:9d:78: c0:01:7a:46:18:2a:a9:90:b2:de:07:ef:a9:be:0e:67:20:54: 5d:e4:9b:ff:db:d6:b7:bd:dd:5f:e8:c4:db:55:d8:c4:9f:2b: 0f:52:d8:fd:7f:20:73:5f:96:3d:ff:0c:3b:c5:f8:5e:06:45: 80:1f:e4:4e:51:3f:1a:be:c9:54:73:63:44:7e:e6:08:d2:00: 32:7b:d2:73:0a:69:2a:f8:ea:2d:f0:66:e4:ab:99:00:f7:9a: 6e:f9:a7:db:67:b9:43:9b:35:ef:f0:e9:d4:e4:93:1a:1b:e6: 5b:bc:dd:7f:60:04:c2:4d:79:85:2a:1b:ba:48:50:5b:cb:87: 43:db:22:ff:c5:2e:6f:71:83:a6:72:9b:ab:24:4a:6d:d7:51: 8b:9b:5b:85:12:94:02:32:dc:49:a9:32:65:ac:59:da:69:da: f6:a9:03:99:cb:8a:7d:db:6d:4b:8d:a9:dd:8d:c6:63:f3:8c: aa:55:ed:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih9gU1DN+RZKqJCGMMqa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0 NGJmNDYwHhcNMjUxMjE1MTUwMTI2WhcNMjUxMjE2MTUwMTI2WjAzMTEwLwYDVQQD Eyg3NTViODg5YmJmZGM1ZjE0MDM0ZTBjNGU2M2JkN2YxZTBkOTJmNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziPvoJgf+dxGGKsbt1Y7ZYnaoV7Z aw809b7oVV6yAmCpcJk8InLE6eVeSym00CDM256CRi2xlhMLFjsuAtbCfFd6pWYS 4nzxl2I4Xq/0h3d7dUtTZYZLhmm/2IRL22X+MIkUVSnU0ezx6J9ltJ/id6CVuFhg 8LgRxmUJyygqVGDWEb2GNQihRBZ3eWFWB6SQXsD57uW2GqsDCvOQ03VjPN9SSRAs 4uri/fe9ijqHyPhY5d4a9jQ+jqNgIVu64GhzMUod1XffsOgynr+2bdWjHlB5ZZ6t elnLBRSlv/SNCZsIJw1q65gxd37YnRHImf99oxI2BZB7o8mUG/W2XPH9oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVbiJu/3F8UA04MTmO9fx4Nkvc5MB8GA1UdIwQY MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt MTM3MTA5MzY5NjIxLzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQhvRve9 BalpifDU6F1jdg9nrbhOi+SecfrBcnXcnpzWtrK+LNXzVMuXYzm/ha0aEtyRiyeB RePTrVmjk1vUnR4Dp/K7qJ14wAF6RhgqqZCy3gfvqb4OZyBUXeSb/9vWt73dX+jE 21XYxJ8rD1LY/X8gc1+WPf8MO8X4XgZFgB/kTlE/Gr7JVHNjRH7mCNIAMnvScwpp KvjqLfBm5KuZAPeabvmn22e5Q5s17/Dp1OSTGhvmW7zdf2AEwk15hSobukhQW8uH Q9si/8Uub3GDpnKbqyRKbddRi5tbhRKUAjLcSakyZaxZ2mna9qkDmcuKfdttS42p 3Y3GY/OMqlXtqA== -----END CERTIFICATE-----Generated at Tue Dec 16 01:10:19 2025 by rpki-client