This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json) Hash identifier: d5yPX6wEpbYEQXelaFh1JvW4lRRYVLHJJhfZpbTkB9E= Subject key identifier: B2:2D:7F:FF:36:D1:0D:28:C4:9B:14:F8:B9:F2:59:B7:D8:18:7C:56 Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed Certificate serial: 019B3DFEA58968AA27B406D81D7B838A501B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft Manifest number: 037C Signing time: Sat 20 Dec 2025 23:00:57 +0000 Manifest this update: Sat 20 Dec 2025 23:00:57 +0000 Manifest next update: Sun 21 Dec 2025 23:00:57 +0000 Files and hashes: 1: 7RtSvYvJ-s26z4jJmihBpc9PPTg.roa (hash: +WPL+eLMOyDQbtRDqabesCoaqYzO2nUYgvkky6oLihM=) 2: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: +yyyHTrk8Ur06/Jf+l25xpv10q6yCv1Sj7AZ/4vEE1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a5:89:68:aa:27:b4:06:d8:1d:7b:83:8a:50:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed Validity Not Before: Dec 20 23:00:57 2025 GMT Not After : Dec 21 23:00:57 2025 GMT Subject: CN=b22d7fff36d10d28c49b14f8b9f259b7d8187c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a7:78:50:62:bf:a2:cd:bb:46:5f:71:0c:33: de:8b:c7:54:20:6f:74:95:8a:3c:c5:9c:21:e8:82: b4:b6:bf:b0:51:e7:b7:22:f1:10:e3:09:75:d8:e6: bb:a2:30:0c:a8:ea:12:53:25:ec:78:ce:b7:30:30: 63:90:a1:4f:54:6d:37:f4:4a:af:7c:f4:15:cb:cb: b2:41:80:08:c5:ef:95:b6:9c:29:69:e6:b1:86:7c: dd:2d:f0:a4:a9:30:74:ff:13:98:e8:d8:73:d8:21: 32:f5:2c:dd:ba:ab:9c:95:cf:80:09:92:94:85:93: 45:74:36:f7:c8:ec:e8:cd:ea:72:47:6a:51:64:6e: ef:aa:8b:4e:83:ae:ce:c1:6e:94:96:48:25:2c:e5: c9:ef:3f:fc:70:bb:44:35:49:33:82:5e:98:b8:a4: d1:5f:e0:2e:f2:e1:db:b1:d4:9d:d2:7f:46:f1:b9: 77:d9:4e:9b:f2:85:22:be:3b:03:61:90:bd:2e:1c: 1a:bc:d0:c7:43:2d:d6:29:9d:af:69:cd:ee:a1:96: 55:88:7f:76:a9:9a:08:08:88:27:80:c3:bd:31:c8: 90:cf:c5:84:d2:19:7c:ee:fb:48:8b:eb:46:05:c0: 3e:af:a1:30:b8:da:87:90:cb:64:2c:37:8a:7f:9e: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:7F:FF:36:D1:0D:28:C4:9B:14:F8:B9:F2:59:B7:D8:18:7C:56 X509v3 Authority Key Identifier: keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:32:64:e3:ff:f0:cd:e8:98:ee:de:16:9e:de:48:6e:45:b4: 10:8c:5f:0b:09:e2:9a:7f:6b:ab:3e:4f:d9:70:d5:07:f5:6e: 9c:ea:bd:1d:44:df:00:91:41:ae:20:f3:ba:7e:05:6f:d6:17: cd:c2:e0:15:02:f7:38:c9:d1:e7:5f:21:cc:c4:fd:07:52:92: 02:87:6d:80:0d:1d:68:83:96:ac:9c:7d:e3:c2:ac:7e:90:1a: b5:9c:0e:7e:4a:c0:3f:8f:65:b3:08:24:c8:f8:6c:12:28:51: 7d:40:1a:53:e7:d6:e6:7f:32:3e:8c:c7:b9:77:cc:02:d0:6b: 2d:ed:11:87:1a:d0:39:2e:88:ab:6d:be:a3:b0:ec:96:ec:0c: 94:6b:44:3d:aa:39:b1:9b:77:8f:0a:9e:d4:fc:0a:78:de:b4: 4a:25:25:9e:2f:5e:3d:57:4f:42:21:4f:95:a8:ee:f3:7f:7a: 6a:34:0c:e0:cc:d4:f4:08:b6:3f:6b:74:c5:45:d3:78:d0:e5: 10:f8:4e:e7:1c:17:c0:40:3d:26:bc:f5:53:18:23:71:fa:eb: 61:34:a8:6d:ef:a0:41:36:73:b1:9b:cf:96:1d:d4:7d:30:39: ec:34:34:d0:c3:bd:d2:ff:69:91:5d:9f:90:01:14:d3:d7:6b: c0:24:b0:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qWJaKontAbYHXuDilAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiM2Y2ZmE5ZjAzNzc2NWU3NGJkZjJhYzgyY2NiYWJjN2U0 ZmM4ZWQwHhcNMjUxMjIwMjMwMDU3WhcNMjUxMjIxMjMwMDU3WjAzMTEwLwYDVQQD EyhiMjJkN2ZmZjM2ZDEwZDI4YzQ5YjE0ZjhiOWYyNTliN2Q4MTg3YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66d4UGK/os27Rl9xDDPei8dUIG90 lYo8xZwh6IK0tr+wUee3IvEQ4wl12Oa7ojAMqOoSUyXseM63MDBjkKFPVG039Eqv fPQVy8uyQYAIxe+VtpwpaeaxhnzdLfCkqTB0/xOY6Nhz2CEy9Szduquclc+ACZKU hZNFdDb3yOzozepyR2pRZG7vqotOg67OwW6UlkglLOXJ7z/8cLtENUkzgl6YuKTR X+Au8uHbsdSd0n9G8bl32U6b8oUivjsDYZC9LhwavNDHQy3WKZ2vac3uoZZViH92 qZoICIgngMO9MciQz8WE0hl87vtIi+tGBcA+r6EwuNqHkMtkLDeKf57i1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLItf/820Q0oxJsU+LnyWbfYGHxWMB8GA1UdIwQY MBaAFCs/b6nwN3ZedL3yrILMurx+T8jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAt NWMwMGZjZDczNjE5LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAtNWMwMGZjZDczNjE5 LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDJk4//w zeiY7t4Wnt5IbkW0EIxfCwnimn9rqz5P2XDVB/VunOq9HUTfAJFBriDzun4Fb9YX zcLgFQL3OMnR518hzMT9B1KSAodtgA0daIOWrJx948KsfpAatZwOfkrAP49lswgk yPhsEihRfUAaU+fW5n8yPozHuXfMAtBrLe0RhxrQOS6Iq22+o7DsluwMlGtEPao5 sZt3jwqe1PwKeN60SiUlni9ePVdPQiFPlaju8396ajQM4MzU9Ai2P2t0xUXTeNDl EPhO5xwXwEA9Jrz1UxgjcfrrYTSobe+gQTZzsZvPlh3UfTA57DQ00MO90v9pkV2f kAEU09drwCSwVw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:52 2025 by rpki-client