This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json) Hash identifier: nUGK4/kcRfAZTUT0lraJwwpFPubuUtUhUC3jDlIrfg4= Subject key identifier: 2E:1C:F9:D1:5D:D6:16:62:8A:7F:03:DE:13:EE:F8:FE:02:93:D2:F2 Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Certificate serial: 019B3E6C97719853639CD206FC3D8D1436DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft Manifest number: 04EF Signing time: Sun 21 Dec 2025 01:01:02 +0000 Manifest this update: Sun 21 Dec 2025 01:01:02 +0000 Manifest next update: Mon 22 Dec 2025 01:01:02 +0000 Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=) 2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: HbMauPfYiv1LUzoSuZiui70q3AUyXXnGM4OU6xD2JUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:97:71:98:53:63:9c:d2:06:fc:3d:8d:14:36:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Validity Not Before: Dec 21 01:01:02 2025 GMT Not After : Dec 22 01:01:02 2025 GMT Subject: CN=2e1cf9d15dd616628a7f03de13eef8fe0293d2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:a9:a1:9f:15:eb:04:60:9b:31:b9:6e:8e: 89:ea:cb:62:cd:76:19:e5:41:a7:97:f6:79:61:a4: 6d:4f:f0:a7:1c:b9:f0:94:03:71:ea:74:91:86:e7: 1f:c1:e5:d9:e4:5b:34:6c:7b:c9:c4:66:2e:fa:33: 43:6c:d5:4c:d1:78:ca:ff:d6:98:c9:03:78:4e:fd: 84:08:6b:42:04:41:21:64:3a:bf:e2:28:bf:15:a4: c9:7f:e5:ba:c2:09:24:75:cd:87:3b:c5:13:42:c6: fe:57:99:8e:9f:ca:c1:35:77:41:15:34:ba:ae:40: 75:dd:4e:30:c9:b4:b3:5c:86:8d:29:09:e1:6d:21: 03:d7:5d:1a:fb:4a:72:bc:c0:6b:d1:4e:63:d5:d0: a4:36:5b:e0:ac:98:87:04:d6:9f:7e:e0:40:d5:2e: 9d:99:b4:9a:dd:95:72:28:9f:12:99:30:c4:28:a0: 7a:4c:a6:88:97:5f:81:31:b5:ec:04:db:34:35:a3: 4d:fe:b7:c0:38:b1:85:de:ec:82:c6:11:af:e7:ea: 0f:b9:d3:cd:7c:26:41:09:5f:04:2d:97:e5:01:37: cd:99:42:02:0d:94:e4:77:a5:b9:89:5e:b6:65:0f: 2c:db:b6:66:5f:8c:c3:43:a9:4b:ba:0b:65:36:50: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:F9:D1:5D:D6:16:62:8A:7F:03:DE:13:EE:F8:FE:02:93:D2:F2 X509v3 Authority Key Identifier: keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:78:ef:93:e5:3b:db:bf:b3:92:19:3a:7f:6c:57:aa:ec:95: 34:c8:2c:01:e1:17:98:6c:aa:b3:fb:c9:a3:2b:39:f6:15:0d: 0a:b1:66:51:fe:d3:f9:19:8d:98:8f:a5:46:ab:63:f9:70:be: 5d:6e:0b:b1:2b:c9:5d:c9:61:45:32:72:e7:d4:1f:ac:a5:b0: de:06:a1:36:f7:89:f7:80:d9:95:ac:48:ce:35:c7:8e:d0:67: 6d:ce:70:60:4d:53:bd:51:a6:7a:39:7a:70:cb:3f:54:a3:30: 8f:84:74:98:b6:b5:76:5d:17:dd:aa:65:48:58:88:c9:c5:dc: c8:f0:f4:ba:e2:1a:bb:d7:a6:48:cc:ca:f9:df:63:68:90:34: a9:67:78:ba:e1:77:d8:15:aa:93:8e:56:38:fc:6f:c7:ba:eb: 28:01:e1:ca:3a:2d:51:63:95:cc:12:45:73:ec:e5:08:e2:15: b2:fb:17:85:af:c0:48:ea:32:d6:07:2a:67:08:cb:20:f0:c0: 2f:8e:79:3f:fd:19:d6:45:10:66:9e:8b:1f:8b:1e:05:33:51: 14:df:f5:11:30:38:34:cf:31:8b:cf:95:63:1e:15:b5:c8:4d: ca:e7:c2:f3:a2:16:e7:41:39:d8:18:76:af:39:40:22:42:e5: 39:74:05:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJdxmFNjnNIG/D2NFDbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3 NThkZTcwHhcNMjUxMjIxMDEwMTAyWhcNMjUxMjIyMDEwMTAyWjAzMTEwLwYDVQQD EygyZTFjZjlkMTVkZDYxNjYyOGE3ZjAzZGUxM2VlZjhmZTAyOTNkMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA412poZ8V6wRgmzG5bo6J6stizXYZ 5UGnl/Z5YaRtT/CnHLnwlANx6nSRhucfweXZ5Fs0bHvJxGYu+jNDbNVM0XjK/9aY yQN4Tv2ECGtCBEEhZDq/4ii/FaTJf+W6wgkkdc2HO8UTQsb+V5mOn8rBNXdBFTS6 rkB13U4wybSzXIaNKQnhbSED110a+0pyvMBr0U5j1dCkNlvgrJiHBNaffuBA1S6d mbSa3ZVyKJ8SmTDEKKB6TKaIl1+BMbXsBNs0NaNN/rfAOLGF3uyCxhGv5+oPudPN fCZBCV8ELZflATfNmUICDZTkd6W5iV62ZQ8s27ZmX4zDQ6lLugtlNlAknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4c+dFd1hZiin8D3hPu+P4Ck9LyMB8GA1UdIwQY MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnjvk+U7 27+zkhk6f2xXquyVNMgsAeEXmGyqs/vJoys59hUNCrFmUf7T+RmNmI+lRqtj+XC+ XW4LsSvJXclhRTJy59QfrKWw3gahNveJ94DZlaxIzjXHjtBnbc5wYE1TvVGmejl6 cMs/VKMwj4R0mLa1dl0X3aplSFiIycXcyPD0uuIau9emSMzK+d9jaJA0qWd4uuF3 2BWqk45WOPxvx7rrKAHhyjotUWOVzBJFc+zlCOIVsvsXha/ASOoy1gcqZwjLIPDA L455P/0Z1kUQZp6LH4seBTNRFN/1ETA4NM8xi8+VYx4VtchNyufC86IW50E52Bh2 rzlAIkLlOXQFTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:16 2025 by rpki-client