This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json) Hash identifier: ZNEErchl74TLAMHIrPAZ4voXKxWPz8JSXd3wH/Lh/nU= Subject key identifier: B3:C3:F1:69:AB:12:B0:78:8A:21:FE:23:53:49:E8:E8:EC:E2:BE:D0 Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee Certificate serial: 019B3FECB69D29B8998B4B1773FFDDDFEEE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft Manifest number: 1429 Signing time: Sun 21 Dec 2025 08:00:36 +0000 Manifest this update: Sun 21 Dec 2025 08:00:36 +0000 Manifest next update: Mon 22 Dec 2025 08:00:36 +0000 Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: gwucu9XsP90pXnyQZBBXvFwYLq9iKq3jxSqhzqiKhDo=) 2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:b6:9d:29:b8:99:8b:4b:17:73:ff:dd:df:ee:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee Validity Not Before: Dec 21 08:00:36 2025 GMT Not After : Dec 22 08:00:36 2025 GMT Subject: CN=b3c3f169ab12b0788a21fe235349e8e8ece2bed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:58:1e:29:eb:ce:8d:33:8c:56:ae:dd:49: bd:c0:05:a9:e7:89:ca:6b:e4:3b:3b:bb:0b:9b:dd: d2:12:d7:c3:86:7c:3f:4b:80:e0:e6:66:bb:48:36: 99:45:4d:83:19:7d:32:5f:63:97:30:31:93:85:2b: a6:94:b9:a9:b6:49:b1:ce:33:58:97:60:4d:d5:1f: 39:8b:c0:44:02:dd:91:ad:e6:69:33:06:ae:99:e2: dc:c2:3d:15:a3:88:17:fb:06:48:d6:d9:d5:30:66: 26:65:9e:b9:c6:7d:b2:7f:af:df:f4:3e:78:0a:b7: e2:3f:d4:0f:9f:c0:3f:05:00:dc:d5:b5:32:e3:d0: 4b:2e:b0:a5:42:ee:3c:c6:55:de:50:da:e4:ac:14: 82:1e:4c:9a:12:9e:6c:94:a5:99:1d:93:28:62:f2: 0b:46:a3:10:b5:10:cd:0e:95:6e:b0:4a:4b:3b:bb: 51:5e:8c:45:39:bb:e2:f9:82:f8:c3:29:e5:56:bf: 37:c4:e7:79:53:af:c4:bf:6e:34:55:04:89:f6:72: 0f:f2:98:7f:45:90:89:86:a2:d9:f9:dd:88:b0:6b: 6b:97:9a:cd:d7:ca:f6:ab:2f:2a:ed:42:9f:f9:86: 86:79:e1:ca:eb:ef:27:7d:4f:69:26:b8:ba:8e:3b: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C3:F1:69:AB:12:B0:78:8A:21:FE:23:53:49:E8:E8:EC:E2:BE:D0 X509v3 Authority Key Identifier: keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:69:90:c6:2f:7c:b5:72:57:3c:10:65:5f:8d:2b:48:db:8b: 75:aa:14:c6:3b:5c:6b:86:31:2f:8f:b2:df:61:9b:f8:87:08: 61:6e:4b:52:0e:65:f4:54:5a:d4:a8:1f:02:04:33:96:4f:67: ad:b1:3f:db:fd:23:1d:5b:ff:12:04:c9:d4:cf:1f:7a:cb:16: 31:f1:14:25:25:96:19:d1:b1:35:d6:a4:8b:2a:11:c9:33:b9: a7:37:42:fc:ce:d6:f4:06:90:4d:16:c7:8d:86:7b:72:65:83: d3:f1:be:75:16:1a:03:c3:56:f7:11:28:11:85:aa:e9:04:3d: 7e:2a:1c:bf:0b:2a:1d:4b:89:2f:9b:a6:e1:b7:86:b1:23:9f: bf:b8:7d:1c:73:14:2b:14:cf:86:b0:8d:74:66:46:ee:0c:a7: 7f:8e:05:c9:07:ae:35:07:9d:2c:dd:6d:fa:45:d0:10:e6:a4: 7e:67:6c:0a:b3:dc:fe:b7:3b:2b:54:67:4d:e9:e6:76:0b:a1: 48:13:47:e3:d0:b3:15:ec:af:0b:f1:c6:5c:2e:c1:d9:ca:a3: d3:48:de:9c:1a:c2:94:b5:41:14:ec:e5:66:ba:e8:6e:6a:a6: 75:cf:38:7b:ab:2c:8c:db:a5:e5:18:ef:76:68:c3:26:ce:ac: 2a:9d:69:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7LadKbiZi0sXc//d3+7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1 MDhmZWUwHhcNMjUxMjIxMDgwMDM2WhcNMjUxMjIyMDgwMDM2WjAzMTEwLwYDVQQD EyhiM2MzZjE2OWFiMTJiMDc4OGEyMWZlMjM1MzQ5ZThlOGVjZTJiZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSZYHinrzo0zjFau3Um9wAWp54nK a+Q7O7sLm93SEtfDhnw/S4Dg5ma7SDaZRU2DGX0yX2OXMDGThSumlLmptkmxzjNY l2BN1R85i8BEAt2RreZpMwaumeLcwj0Vo4gX+wZI1tnVMGYmZZ65xn2yf6/f9D54 CrfiP9QPn8A/BQDc1bUy49BLLrClQu48xlXeUNrkrBSCHkyaEp5slKWZHZMoYvIL RqMQtRDNDpVusEpLO7tRXoxFObvi+YL4wynlVr83xOd5U6/Ev240VQSJ9nIP8ph/ RZCJhqLZ+d2IsGtrl5rN18r2qy8q7UKf+YaGeeHK6+8nfU9pJri6jjvdBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPD8WmrErB4iiH+I1NJ6Ojs4r7QMB8GA1UdIwQY MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2 LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmmQxi98 tXJXPBBlX40rSNuLdaoUxjtca4YxL4+y32Gb+IcIYW5LUg5l9FRa1KgfAgQzlk9n rbE/2/0jHVv/EgTJ1M8fessWMfEUJSWWGdGxNdakiyoRyTO5pzdC/M7W9AaQTRbH jYZ7cmWD0/G+dRYaA8NW9xEoEYWq6QQ9fiocvwsqHUuJL5um4beGsSOfv7h9HHMU KxTPhrCNdGZG7gynf44FyQeuNQedLN1t+kXQEOakfmdsCrPc/rc7K1RnTenmdguh SBNH49CzFeyvC/HGXC7B2cqj00jenBrClLVBFOzlZrrobmqmdc84e6ssjNul5Rjv dmjDJs6sKp1pUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:05:16 2025 by rpki-client