This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json) Hash identifier: 84fN1XOvdd9CBJp1yZ3TYjuTQlbPy6NGQ7zLNSapOa4= Subject key identifier: A9:0A:52:C4:F7:13:F9:D2:CC:70:AB:00:C0:87:39:88:E8:8D:48:3A Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Certificate serial: 019B262D3D713DFEB3737C643458EE04981B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft Manifest number: 016C Signing time: Tue 16 Dec 2025 08:00:57 +0000 Manifest this update: Tue 16 Dec 2025 08:00:57 +0000 Manifest next update: Wed 17 Dec 2025 08:00:57 +0000 Files and hashes: 1: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: sBSIno90F5J+M8sCZZLd8xMHTqw9dTGNkmoNDK2X79c=) 2: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=) 3: lVkRZLgugVMJGuDdXaiu9H9U2Qw.roa (hash: cENQFbkj8p8qEi8NksPajunUhEGXlFBx1bfM8cV4t5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:3d:71:3d:fe:b3:73:7c:64:34:58:ee:04:98:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Validity Not Before: Dec 16 08:00:57 2025 GMT Not After : Dec 17 08:00:57 2025 GMT Subject: CN=a90a52c4f713f9d2cc70ab00c0873988e88d483a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:a5:f6:7b:e4:7f:45:ca:00:0f:30:ad:76: 44:5e:6b:f6:c3:94:d2:ec:49:06:34:f0:ea:8c:6e: 9b:9a:ad:95:4c:ab:2b:e1:81:45:46:62:4f:bd:83: 9f:ed:28:13:9d:68:ec:3e:39:e4:7a:bb:12:53:82: 3b:f2:c6:9c:53:9e:91:3d:dc:86:a9:56:11:3c:63: 95:5a:db:1c:73:86:d4:39:47:fd:1d:2d:0f:6a:8e: d3:96:cc:f0:f2:9b:55:18:17:82:82:95:12:dd:69: 4b:49:29:00:e6:17:e4:cc:b4:09:37:b6:e6:b1:f4: c1:dd:b2:dd:9c:7c:2c:6b:41:b9:a8:a4:b3:8c:61: c1:8a:ef:73:ae:5d:ad:72:53:a3:36:d4:f9:8f:05: 14:f0:1e:06:f5:83:ae:7f:1a:0e:bb:9a:c7:0f:00: f8:5e:0e:34:e0:bf:5d:c3:6a:51:bc:54:c8:90:43: a0:c8:fc:2b:ff:52:2c:64:e3:97:f0:91:aa:3c:75: 08:81:b0:56:fe:80:39:1d:b8:94:8c:86:7c:75:8f: c8:39:e8:ab:7a:76:60:9e:26:5b:99:cb:56:3a:99: a0:b1:57:43:c1:08:13:26:5d:48:06:8e:ab:28:75: 01:dc:e7:cf:fe:ff:6a:e1:cc:60:91:99:1c:52:19: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0A:52:C4:F7:13:F9:D2:CC:70:AB:00:C0:87:39:88:E8:8D:48:3A X509v3 Authority Key Identifier: keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:15:81:2c:a2:60:74:2c:df:f5:e7:af:ec:09:0e:6b:1a:e5: 87:f4:21:a6:94:d2:26:33:24:ba:9a:e6:fa:78:86:1a:7e:49: 3d:16:3f:4c:f8:7a:ce:6e:c0:c4:e9:97:44:d8:e8:46:7d:c4: 62:fb:bd:08:08:25:d1:a1:1f:f5:b8:a1:a2:0b:9d:3c:4b:55: a2:dc:f8:77:53:dd:f5:f7:bd:66:b0:8f:21:92:5b:d8:b9:29: 05:dd:f6:09:3a:1d:e4:78:e1:d6:18:d5:f3:32:cf:bd:6f:9b: c4:45:29:c1:f3:31:70:81:66:ff:95:a1:0b:8c:dc:29:69:23: 5d:7d:b1:08:6b:9c:bc:cb:db:5e:cf:0b:59:8c:90:47:f1:a7: 63:73:98:cc:63:62:1c:a3:17:d0:03:62:b1:a4:59:2c:4c:a7: 81:6c:e7:7e:ef:af:4b:b8:34:ca:9c:03:36:e2:0d:4e:a9:e7: 2e:49:61:15:5d:8b:5b:a7:22:c7:3c:d8:22:2c:e0:e6:a2:b8: c4:bb:3a:3e:96:4d:87:d6:f3:bb:f1:ba:30:70:22:a7:b5:cb: 5f:56:be:f6:8b:dc:c4:23:49:cf:5a:71:f9:32:27:98:b9:ff: 8f:17:bb:3a:31:18:fc:c2:2c:50:7f:44:eb:fc:9a:63:5a:ca: cb:c6:e6:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLT1xPf6zc3xkNFjuBJgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm NjQyZTMwHhcNMjUxMjE2MDgwMDU3WhcNMjUxMjE3MDgwMDU3WjAzMTEwLwYDVQQD EyhhOTBhNTJjNGY3MTNmOWQyY2M3MGFiMDBjMDg3Mzk4OGU4OGQ0ODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ6l9nvkf0XKAA8wrXZEXmv2w5TS 7EkGNPDqjG6bmq2VTKsr4YFFRmJPvYOf7SgTnWjsPjnkersSU4I78sacU56RPdyG qVYRPGOVWtscc4bUOUf9HS0Pao7Tlszw8ptVGBeCgpUS3WlLSSkA5hfkzLQJN7bm sfTB3bLdnHwsa0G5qKSzjGHBiu9zrl2tclOjNtT5jwUU8B4G9YOufxoOu5rHDwD4 Xg404L9dw2pRvFTIkEOgyPwr/1IsZOOX8JGqPHUIgbBW/oA5HbiUjIZ8dY/IOeir enZgniZbmctWOpmgsVdDwQgTJl1IBo6rKHUB3OfP/v9q4cxgkZkcUhkJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkKUsT3E/nSzHCrAMCHOYjojUg6MB8GA1UdIwQY MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt N2Y2ZWU3YTc2NTY1LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1 LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBWBLKJg dCzf9eev7AkOaxrlh/QhppTSJjMkuprm+niGGn5JPRY/TPh6zm7AxOmXRNjoRn3E Yvu9CAgl0aEf9bihogudPEtVotz4d1Pd9fe9ZrCPIZJb2LkpBd32CTod5Hjh1hjV 8zLPvW+bxEUpwfMxcIFm/5WhC4zcKWkjXX2xCGucvMvbXs8LWYyQR/GnY3OYzGNi HKMX0ANisaRZLEyngWznfu+vS7g0ypwDNuINTqnnLklhFV2LW6cixzzYIizg5qK4 xLs6PpZNh9bzu/G6MHAip7XLX1a+9ovcxCNJz1px+TInmLn/jxe7OjEY/MIsUH9E 6/yaY1rKy8bmdQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:28 2025 by rpki-client