This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json) Hash identifier: dp/RuhtjnZXovgzbbbjtu5gFTL7zmeGdx6igyPp3UVk= Subject key identifier: EF:96:E9:A4:D1:0F:F9:A3:41:E7:F2:D4:8D:45:A3:7D:1B:CA:3C:A2 Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54 Certificate serial: 019B3C46D962F3F5FDB8D9CDB3D715BED678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft Manifest number: 0BA0 Signing time: Sat 20 Dec 2025 15:00:34 +0000 Manifest this update: Sat 20 Dec 2025 15:00:34 +0000 Manifest next update: Sun 21 Dec 2025 15:00:34 +0000 Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=) 2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 3le7Wq/1Mv/84VJX8cYRi+eXI82wHm9vJ19wnFRjTpI=) 3: TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa (hash: yX71+JwnuGNFxVBhBEfM6BQUby7eWkoWKbcUG9ykDEE=) 4: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=) 5: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d9:62:f3:f5:fd:b8:d9:cd:b3:d7:15:be:d6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54 Validity Not Before: Dec 20 15:00:34 2025 GMT Not After : Dec 21 15:00:34 2025 GMT Subject: CN=ef96e9a4d10ff9a341e7f2d48d45a37d1bca3ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9f:17:64:39:64:f7:4a:c5:53:95:67:04:4e: 80:95:e7:56:1d:57:dc:bc:cb:00:94:0f:bc:98:e4: d5:86:92:39:27:e6:2a:2f:9c:0b:f2:cb:54:24:5d: cb:d8:61:e9:fe:a9:a5:92:17:8c:d7:de:c1:2b:55: b7:79:ee:a9:4b:7b:cd:60:ba:35:17:42:c3:78:82: 3e:65:fc:73:52:8c:ce:e6:fe:4c:99:e8:98:95:37: 27:d5:57:7a:c0:ce:01:8b:c5:b4:95:15:fa:fb:0f: 7e:3b:3d:8f:02:0c:87:ef:ff:7c:f5:84:92:0b:bf: dc:4a:8a:22:af:a0:93:d9:a5:97:20:d6:6c:2b:e3: 1b:20:85:13:f5:12:d6:34:86:b0:af:64:4f:0b:be: 20:13:24:30:4b:bf:2b:c9:89:e9:12:ec:60:07:ca: a5:38:2f:24:f4:ac:77:33:37:49:44:5b:ce:73:64: bc:11:0f:b0:17:92:a0:bf:9a:0b:1d:a9:3d:e5:d7: 60:ff:63:4f:82:d8:c7:5a:fe:d0:d2:7e:2d:73:85: db:85:de:eb:05:b1:45:d8:b6:ff:b0:a4:3c:2a:60: d2:ac:f3:43:9b:6b:c9:ff:d3:d3:c0:40:15:0e:5a: c4:24:16:93:b5:09:cb:e4:85:68:e2:a8:d7:a7:9e: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:96:E9:A4:D1:0F:F9:A3:41:E7:F2:D4:8D:45:A3:7D:1B:CA:3C:A2 X509v3 Authority Key Identifier: keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b6:03:72:0f:ff:42:3d:0d:4b:db:9c:33:4f:4d:21:f2:44: 4f:2f:14:06:c8:a2:6c:67:71:88:78:6a:ea:fc:54:f1:f3:69: fb:fa:55:4d:27:09:36:5a:e9:76:b9:f8:3d:ef:bf:40:ff:12: a8:20:ab:f4:88:37:0e:98:e5:37:c4:f2:2b:c3:16:97:5b:84: e7:78:e7:bf:c8:77:67:02:a0:23:93:14:29:32:65:39:b4:e3: 6d:38:d9:80:aa:e7:04:dc:bc:4d:20:d3:0b:54:1e:b9:92:43: 70:5b:12:56:80:59:77:ec:88:22:52:e0:13:b3:d4:55:6d:5f: c4:13:fb:d5:bd:de:b0:b6:b6:76:9f:87:d9:05:8c:54:5e:14: e3:6d:31:6f:23:ee:64:f1:64:b8:20:89:80:98:5d:b8:0b:f1: 47:3c:f3:35:47:f0:bf:16:d2:3f:30:24:83:90:81:61:9f:43: 08:9f:22:79:61:54:51:85:a4:bd:98:8d:72:49:83:65:ea:90: 9b:1b:2c:bf:c7:35:b8:f5:c2:8d:3d:b6:de:9c:10:8d:7a:4a: 88:d9:33:19:e3:aa:f2:1f:0b:8c:7a:c5:22:66:38:45:30:35: 7a:3f:dc:3a:71:a4:96:60:f2:9b:ee:e0:54:8c:87:76:31:00: c6:6e:9a:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rtli8/X9uNnNs9cVvtZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQxNDJiNWI2YTUyOThkNmI4ZmE1ODQ1ZjI5ODc4Y2Zl YmJjNTQwHhcNMjUxMjIwMTUwMDM0WhcNMjUxMjIxMTUwMDM0WjAzMTEwLwYDVQQD EyhlZjk2ZTlhNGQxMGZmOWEzNDFlN2YyZDQ4ZDQ1YTM3ZDFiY2EzY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z8XZDlk90rFU5VnBE6AledWHVfc vMsAlA+8mOTVhpI5J+YqL5wL8stUJF3L2GHp/qmlkheM197BK1W3ee6pS3vNYLo1 F0LDeII+ZfxzUozO5v5MmeiYlTcn1Vd6wM4Bi8W0lRX6+w9+Oz2PAgyH7/989YSS C7/cSooir6CT2aWXINZsK+MbIIUT9RLWNIawr2RPC74gEyQwS78ryYnpEuxgB8ql OC8k9Kx3MzdJRFvOc2S8EQ+wF5Kgv5oLHak95ddg/2NPgtjHWv7Q0n4tc4Xbhd7r BbFF2Lb/sKQ8KmDSrPNDm2vJ/9PTwEAVDlrEJBaTtQnL5IVo4qjXp546bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+W6aTRD/mjQefy1I1Fo30byjyiMB8GA1UdIwQY MBaAFCttFCtbalKY1rj6WEXymHjP67xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUt OGJlZmVlNDllZDRkLzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUtOGJlZmVlNDllZDRk LzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7YDcg// Qj0NS9ucM09NIfJETy8UBsiibGdxiHhq6vxU8fNp+/pVTScJNlrpdrn4Pe+/QP8S qCCr9Ig3DpjlN8TyK8MWl1uE53jnv8h3ZwKgI5MUKTJlObTjbTjZgKrnBNy8TSDT C1QeuZJDcFsSVoBZd+yIIlLgE7PUVW1fxBP71b3esLa2dp+H2QWMVF4U420xbyPu ZPFkuCCJgJhduAvxRzzzNUfwvxbSPzAkg5CBYZ9DCJ8ieWFUUYWkvZiNckmDZeqQ mxssv8c1uPXCjT223pwQjXpKiNkzGeOq8h8LjHrFImY4RTA1ej/cOnGklmDym+7g VIyHdjEAxm6aUQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:11 2025 by rpki-client