This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json) Hash identifier: gHjA5T1Exz3o+/4W5WXiSmlKjwsge82Q1ednfBWQYPg= Subject key identifier: FB:99:B0:54:87:93:D1:AC:D1:81:02:D7:CA:66:A2:BE:02:20:CA:F9 Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Certificate serial: 019B40C920D0238864B1EB0801E82D064328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft Manifest number: 0538 Signing time: Sun 21 Dec 2025 12:01:21 +0000 Manifest this update: Sun 21 Dec 2025 12:01:21 +0000 Manifest next update: Mon 22 Dec 2025 12:01:21 +0000 Files and hashes: 1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: jUtFPd2PpsR7endN7ZONvtO1EuFiTudLPC+MsOwq2ZI=) 2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:20:d0:23:88:64:b1:eb:08:01:e8:2d:06:43:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Validity Not Before: Dec 21 12:01:21 2025 GMT Not After : Dec 22 12:01:21 2025 GMT Subject: CN=fb99b0548793d1acd18102d7ca66a2be0220caf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:63:b4:7a:89:bc:a5:04:dc:6f:3e:45:95: 46:44:13:3c:51:9e:60:37:3a:e0:91:df:6e:ee:c9: f7:56:2c:13:58:c6:fc:58:6b:0b:0d:85:dc:32:94: f0:3e:5b:71:63:52:84:8a:ff:dc:b3:fc:84:75:55: 38:f0:3d:6d:82:6d:c8:8b:2d:a4:d0:19:f6:ea:72: db:55:8a:f3:dd:a3:fb:e8:3f:cd:d9:0b:ba:7f:77: bc:ce:7e:c0:b2:21:12:14:6f:a4:4b:4a:de:d5:13: 02:5d:43:58:02:d5:1f:35:5f:cb:99:c0:64:14:3f: 76:ab:6a:66:d5:41:1c:a7:f3:81:0b:c6:40:7a:57: fa:ff:c2:9f:4d:00:df:47:ec:d5:ad:4b:84:e6:18: 6f:22:6b:17:e6:6e:c8:23:45:a3:36:5f:6c:e4:f0: 14:7b:5f:ff:d6:23:3f:c7:3d:1c:a0:ca:f6:ba:5d: 7f:c8:84:a6:14:7a:ce:f9:e9:05:d9:f8:b6:58:b8: 7c:8c:62:0e:c4:ab:04:d5:b0:c4:50:ff:83:1f:07: 0c:a0:9c:d7:7e:9e:f7:c5:d3:da:b1:70:ea:69:a5: ca:5d:b5:4b:6b:42:5f:95:a2:e5:0e:cc:93:18:d8: 98:c9:b9:3a:54:c2:3e:fc:30:3d:1b:63:fb:f1:05: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:99:B0:54:87:93:D1:AC:D1:81:02:D7:CA:66:A2:BE:02:20:CA:F9 X509v3 Authority Key Identifier: keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:81:74:d1:6c:a5:0b:1e:93:e6:a1:66:48:f9:1f:80:11:b2: 40:9c:b2:29:30:77:0e:d7:1a:96:04:c8:c4:cf:29:9c:21:95: b1:63:84:3c:a3:a3:64:e4:59:d4:4a:ea:a1:cb:ca:30:b0:a1: 44:58:82:a6:b3:27:d6:29:7f:66:23:ff:b1:66:82:9c:4b:f6: f6:92:6d:1a:40:26:24:97:15:7a:ad:15:da:df:54:d3:89:be: 24:ad:7e:68:3e:aa:fb:8d:b3:aa:53:f2:7c:8c:ed:29:f3:97: a8:d4:a8:38:70:ae:fe:e2:63:1b:28:4a:c9:26:e0:75:54:52: fd:30:ea:15:54:a9:f1:a3:65:d1:42:30:cd:f2:e8:04:53:ae: 18:ab:62:87:7c:3e:fd:e3:4a:f6:a8:bf:1f:dd:d3:03:9b:8b: 25:90:c6:f2:8c:eb:b0:18:57:71:08:62:dc:87:3d:25:7f:35: e6:2a:c6:19:d0:c8:2d:8b:52:34:db:e7:05:e5:57:c6:11:48: f1:dc:ee:64:8a:f0:f4:95:55:f3:57:39:42:55:d0:36:a2:bd: d5:6d:97:dd:29:3b:6f:d6:16:80:17:36:99:ab:c6:f7:dc:11: a0:22:e6:82:f6:a3:22:1c:bb:13:44:ad:3c:24:f3:a7:20:99: 8b:2b:f1:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySDQI4hksesIAegtBkMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh OTE3YjMwHhcNMjUxMjIxMTIwMTIxWhcNMjUxMjIyMTIwMTIxWjAzMTEwLwYDVQQD EyhmYjk5YjA1NDg3OTNkMWFjZDE4MTAyZDdjYTY2YTJiZTAyMjBjYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53NjtHqJvKUE3G8+RZVGRBM8UZ5g Nzrgkd9u7sn3ViwTWMb8WGsLDYXcMpTwPltxY1KEiv/cs/yEdVU48D1tgm3Iiy2k 0Bn26nLbVYrz3aP76D/N2Qu6f3e8zn7AsiESFG+kS0re1RMCXUNYAtUfNV/LmcBk FD92q2pm1UEcp/OBC8ZAelf6/8KfTQDfR+zVrUuE5hhvImsX5m7II0WjNl9s5PAU e1//1iM/xz0coMr2ul1/yISmFHrO+ekF2fi2WLh8jGIOxKsE1bDEUP+DHwcMoJzX fp73xdPasXDqaaXKXbVLa0JflaLlDsyTGNiYybk6VMI+/DA9G2P78QXUPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuZsFSHk9Gs0YEC18pmor4CIMr5MB8GA1UdIwQY MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt MTdiOTRhYzU4Mzc1LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1 LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYF00Wyl Cx6T5qFmSPkfgBGyQJyyKTB3DtcalgTIxM8pnCGVsWOEPKOjZORZ1ErqocvKMLCh RFiCprMn1il/ZiP/sWaCnEv29pJtGkAmJJcVeq0V2t9U04m+JK1+aD6q+42zqlPy fIztKfOXqNSoOHCu/uJjGyhKySbgdVRS/TDqFVSp8aNl0UIwzfLoBFOuGKtih3w+ /eNK9qi/H93TA5uLJZDG8ozrsBhXcQhi3Ic9JX815irGGdDILYtSNNvnBeVXxhFI 8dzuZIrw9JVV81c5QlXQNqK91W2X3Sk7b9YWgBc2mavG99wRoCLmgvajIhy7E0St PCTzpyCZiyvxCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:49 2025 by rpki-client