This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft File: K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json) Hash identifier: JW7bkOdHqlEVw73epsNvDUZrZuDu/tmfR4vD3YvmFlI= Subject key identifier: FF:24:9D:27:E8:A9:85:4D:A4:72:09:8E:14:E1:8D:A5:37:30:50:AD Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e Certificate serial: 019B40FF7617FBE1907B1B1BB742AEABE0F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft Manifest number: 1198 Signing time: Sun 21 Dec 2025 13:00:42 +0000 Manifest this update: Sun 21 Dec 2025 13:00:42 +0000 Manifest next update: Mon 22 Dec 2025 13:00:42 +0000 Files and hashes: 1: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: XP53cEh7BHAzIsukKwNEIJSKbpJJaw3lQTZlmccRwSw=) 2: aK_WMtrzKAXs0LTqbVOCa8ChzP8.roa (hash: f1Um7efAs/j5iF2wB08cWIqaipZskvxt+HmOXtWDHMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:76:17:fb:e1:90:7b:1b:1b:b7:42:ae:ab:e0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e Validity Not Before: Dec 21 13:00:42 2025 GMT Not After : Dec 22 13:00:42 2025 GMT Subject: CN=ff249d27e8a9854da472098e14e18da5373050ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:88:b9:0c:02:93:10:79:1f:d2:14:37:bf:43: b8:ae:07:69:0a:61:de:3d:4e:d7:2b:b5:a8:73:71: 01:28:86:ca:1d:2d:09:cf:b9:a2:de:5d:5f:37:8d: f5:9a:46:cb:64:ff:1b:38:40:94:3f:ec:f8:56:a2: 1e:02:33:fa:c3:1e:f3:3a:92:85:6e:4a:94:42:06: 14:bf:c8:fa:22:0c:7d:89:62:ef:94:b4:02:54:bb: a9:44:4c:2c:53:6d:80:00:a2:fd:ab:a3:6c:24:e8: 82:2a:f4:ac:fe:f6:f8:ca:d1:95:8b:5b:fd:a8:b8: 57:3b:3a:0a:2e:7e:38:2d:1b:46:cb:90:fa:f2:a1: bf:3b:a0:07:6a:86:ce:a3:60:cf:48:90:19:92:a6: 26:1e:03:3e:17:6b:0f:04:4a:4f:e3:8c:b7:04:0b: f4:b0:4e:4a:9a:4a:95:07:e7:4b:b9:10:a4:83:b7: da:91:0f:6b:88:68:0c:89:fb:97:01:7b:6d:33:0f: 59:5b:17:9f:2f:67:a2:b5:39:73:9a:62:6c:f2:42: 5e:d4:8d:ff:16:bc:b6:40:b0:4c:96:f2:a7:45:e3: 66:dc:6f:1e:e6:5d:4e:ce:97:d0:50:08:f1:ef:6c: 44:8a:69:21:f1:09:20:64:2a:b0:37:d0:40:c0:94: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:9D:27:E8:A9:85:4D:A4:72:09:8E:14:E1:8D:A5:37:30:50:AD X509v3 Authority Key Identifier: keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0a:f3:07:ec:a1:c9:ca:86:2e:71:22:e8:4e:49:fc:2b:04: 75:d1:32:86:c5:23:35:77:dd:7f:45:01:9a:5a:30:24:51:16: a8:dc:a0:13:c1:a1:a1:f1:f4:46:48:17:04:5f:0e:35:25:88: a6:1e:cb:af:04:10:b1:be:1c:78:56:94:e6:7e:03:cf:7f:0c: 3f:d4:08:fa:ec:04:b8:1b:e5:27:d7:7e:93:eb:34:ec:39:42: c3:dc:e6:02:ff:3c:5d:9e:8e:be:0e:3d:b0:64:ab:75:ea:c1: de:10:be:c9:86:00:86:d6:2e:14:ae:11:00:78:98:1a:7b:23: 15:da:7b:d3:15:aa:4f:52:02:c2:97:f0:36:de:d1:4a:25:c7: 9b:ba:d5:ce:eb:1d:67:e2:8b:df:10:fe:34:60:df:fb:12:74: 6a:20:c0:de:cc:46:39:31:48:7b:ab:13:63:e5:83:46:01:0d: 2e:03:a7:a8:93:a7:3f:75:79:f9:3c:be:33:d5:ac:c3:82:eb: fa:63:c8:9f:ce:f7:cf:45:25:08:f3:96:3a:64:28:b4:6a:35: ff:ae:49:60:06:8f:f9:e2:10:f8:dd:c9:5e:42:a8:19:ad:77: 58:ff:c8:b6:f1:2f:59:20:69:2e:ea:84:71:53:c4:b9:b4:52: e5:08:4c:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/3YX++GQexsbt0Kuq+DxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODFjNzUzYjc3NjY1ZTdhNTlmOGU1MDgzMTRmMTU5MzU2 YzIyOGUwHhcNMjUxMjIxMTMwMDQyWhcNMjUxMjIyMTMwMDQyWjAzMTEwLwYDVQQD EyhmZjI0OWQyN2U4YTk4NTRkYTQ3MjA5OGUxNGUxOGRhNTM3MzA1MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Yi5DAKTEHkf0hQ3v0O4rgdpCmHe PU7XK7Woc3EBKIbKHS0Jz7mi3l1fN431mkbLZP8bOECUP+z4VqIeAjP6wx7zOpKF bkqUQgYUv8j6Igx9iWLvlLQCVLupREwsU22AAKL9q6NsJOiCKvSs/vb4ytGVi1v9 qLhXOzoKLn44LRtGy5D68qG/O6AHaobOo2DPSJAZkqYmHgM+F2sPBEpP44y3BAv0 sE5KmkqVB+dLuRCkg7fakQ9riGgMifuXAXttMw9ZWxefL2eitTlzmmJs8kJe1I3/ Fry2QLBMlvKnReNm3G8e5l1OzpfQUAjx72xEimkh8QkgZCqwN9BAwJTlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8knSfoqYVNpHIJjhThjaU3MFCtMB8GA1UdIwQY MBaAFCuBx1O3dmXnpZ+OUIMU8Vk1bCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmIt NTg3YWVmNmRjMjg1LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmItNTg3YWVmNmRjMjg1 LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgrzB+yh ycqGLnEi6E5J/CsEddEyhsUjNXfdf0UBmlowJFEWqNygE8GhofH0RkgXBF8ONSWI ph7LrwQQsb4ceFaU5n4Dz38MP9QI+uwEuBvlJ9d+k+s07DlCw9zmAv88XZ6Ovg49 sGSrderB3hC+yYYAhtYuFK4RAHiYGnsjFdp70xWqT1ICwpfwNt7RSiXHm7rVzusd Z+KL3xD+NGDf+xJ0aiDA3sxGOTFIe6sTY+WDRgENLgOnqJOnP3V5+Ty+M9Wsw4Lr +mPIn873z0UlCPOWOmQotGo1/65JYAaP+eIQ+N3JXkKoGa13WP/ItvEvWSBpLuqE cVPEubRS5QhMDA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:30 2025 by rpki-client