This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json) Hash identifier: zG1L5RTiBd3oWhmPDwYi+iaEMpEM19vX4fl7CDg5bX0= Subject key identifier: 45:6A:37:B4:E4:6C:17:78:7E:45:93:F1:82:19:BD:D6:9B:49:25:C9 Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Certificate serial: 019B2FD58BD14D03645A06E1CD369446E9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 05:01:22 +0000 Manifest this update: Thu 18 Dec 2025 05:01:22 +0000 Manifest next update: Fri 19 Dec 2025 05:01:22 +0000 Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: 5KmiUvQp/yz9i0cIbobiC5qH9E2I90Lj8p3n+1odKmk=) 2: bUHKbn34m9YZfg0LWUckx1_q0Mc.roa (hash: Bh0vmrRSsDhj05TsHSvScRpLwoC6mmV/tmtMQaNdewI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:8b:d1:4d:03:64:5a:06:e1:cd:36:94:46:e9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Validity Not Before: Dec 18 05:01:22 2025 GMT Not After : Dec 19 05:01:22 2025 GMT Subject: CN=456a37b4e46c17787e4593f18219bdd69b4925c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:2d:ac:59:26:43:b3:ac:13:50:e0:8c:a4: 4e:25:5e:81:b4:2c:11:36:3d:23:85:69:4d:eb:68: c7:3b:ab:f1:16:07:0f:2d:bc:3e:62:cf:af:7a:27: 52:da:0b:dc:f7:fa:0d:70:cf:8c:97:eb:ce:bd:2f: 57:8e:7c:f1:de:42:49:43:3e:8e:86:c0:98:21:0c: 12:9c:83:c5:70:61:cc:0f:41:d0:a1:82:8c:cc:1d: 49:b5:e1:0b:d2:bb:70:b2:27:a8:d1:44:b5:e1:ab: 73:7a:09:df:d8:ed:f2:92:de:e3:2d:c2:91:85:67: b0:f5:7a:1a:76:ff:1a:a9:89:a3:fa:50:eb:c3:b8: ec:80:90:c3:7a:a9:26:fb:35:4e:8f:b1:0f:cd:23: 08:9e:96:5c:ac:6c:ef:29:87:61:3f:64:f6:e1:e5: 66:79:0a:a7:7b:26:f7:db:df:f0:b1:46:70:bb:ed: 32:fa:16:92:32:da:f8:65:a2:b5:f2:fd:57:3b:dc: e6:9c:75:34:85:cc:fd:83:b1:05:bf:4b:21:19:00: 12:c1:10:ec:7f:2f:dd:f3:76:6d:24:87:0e:48:8c: 0e:d1:fc:82:5c:6c:c9:80:07:6c:2a:94:38:9b:08: 25:af:3a:f6:db:29:80:7f:08:99:52:73:b0:09:a0: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6A:37:B4:E4:6C:17:78:7E:45:93:F1:82:19:BD:D6:9B:49:25:C9 X509v3 Authority Key Identifier: keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cf:6e:e1:eb:cd:a1:f4:81:8a:57:75:51:52:d7:0f:8c:41: 2f:a9:12:93:cd:ca:f9:f5:f4:55:bc:7d:a0:9d:f7:61:bd:b6: 28:8e:45:fa:19:45:86:06:9e:02:7b:51:c6:a9:00:a9:6e:28: ac:2c:ad:87:82:40:90:b7:7e:1a:16:0c:e1:c5:f6:99:d9:72: 72:b6:59:38:51:25:31:03:c8:d9:7e:1c:96:56:68:b6:03:fe: 3a:48:71:80:a5:3e:26:8a:a8:ec:33:f5:8e:73:7a:08:02:90: 63:66:04:76:fb:9d:f8:e7:32:a3:c6:5a:36:d2:21:8c:00:22: 9e:ef:39:15:c3:cc:e3:2e:6d:ee:92:4f:2b:b4:b2:ad:0c:86: 83:dc:53:02:f5:40:7b:59:63:79:bc:e8:e6:11:a2:40:f7:09: 90:eb:a6:47:ca:81:84:f3:65:e7:d1:56:23:17:d9:ec:c9:25: 2c:90:53:06:81:dc:01:3e:84:cf:20:a5:5c:27:1d:f2:a6:6c: 2d:f9:97:fe:72:48:24:ea:06:93:d8:52:bc:13:21:72:0e:d9: 27:47:8b:05:d8:e4:ac:03:2b:f2:f8:95:33:c4:10:58:cb:f2: 3b:0a:54:2b:7f:50:36:f7:b6:a9:37:c6:30:7c:f3:bb:5d:e7: 52:c1:9f:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1YvRTQNkWgbhzTaURunLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz ZmU0ZjIwHhcNMjUxMjE4MDUwMTIyWhcNMjUxMjE5MDUwMTIyWjAzMTEwLwYDVQQD Eyg0NTZhMzdiNGU0NmMxNzc4N2U0NTkzZjE4MjE5YmRkNjliNDkyNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/4trFkmQ7OsE1DgjKROJV6BtCwR Nj0jhWlN62jHO6vxFgcPLbw+Ys+veidS2gvc9/oNcM+Ml+vOvS9Xjnzx3kJJQz6O hsCYIQwSnIPFcGHMD0HQoYKMzB1JteEL0rtwsieo0US14atzegnf2O3ykt7jLcKR hWew9Xoadv8aqYmj+lDrw7jsgJDDeqkm+zVOj7EPzSMInpZcrGzvKYdhP2T24eVm eQqneyb329/wsUZwu+0y+haSMtr4ZaK18v1XO9zmnHU0hcz9g7EFv0shGQASwRDs fy/d83ZtJIcOSIwO0fyCXGzJgAdsKpQ4mwglrzr22ymAfwiZUnOwCaCvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVqN7TkbBd4fkWT8YIZvdabSSXJMB8GA1UdIwQY MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf89u4evN ofSBild1UVLXD4xBL6kSk83K+fX0Vbx9oJ33Yb22KI5F+hlFhgaeAntRxqkAqW4o rCyth4JAkLd+GhYM4cX2mdlycrZZOFElMQPI2X4cllZotgP+OkhxgKU+Joqo7DP1 jnN6CAKQY2YEdvud+Ocyo8ZaNtIhjAAinu85FcPM4y5t7pJPK7SyrQyGg9xTAvVA e1ljebzo5hGiQPcJkOumR8qBhPNl59FWIxfZ7MklLJBTBoHcAT6EzyClXCcd8qZs LfmX/nJIJOoGk9hSvBMhcg7ZJ0eLBdjkrAMr8viVM8QQWMvyOwpUK39QNve2qTfG MHzzu13nUsGfIw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:53:46 2025 by rpki-client