This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json) Hash identifier: PS7ovy66T0voCJJgXQIexr+5N0SrWAkVUBeomfa5sYs= Subject key identifier: 40:C6:AA:98:10:32:BF:A0:9A:F4:2A:F6:1D:5E:58:E8:1B:3D:D6:8C Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Certificate serial: 019B341FC1466B616F0832C096DF0CD350B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 01:00:54 +0000 Manifest this update: Fri 19 Dec 2025 01:00:54 +0000 Manifest next update: Sat 20 Dec 2025 01:00:54 +0000 Files and hashes: 1: DKeRVwoenDXIzrWNyLGIpQggDrs.roa (hash: 5p/rY96e/v7nlh4ZVNWfswSCV1H2nosoTkJoyOAXVkI=) 2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: pZnTUvaa72mwBMITERDQXIOE0v2wa6F06fLKv8Hc/Xo=) 3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:c1:46:6b:61:6f:08:32:c0:96:df:0c:d3:50:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Validity Not Before: Dec 19 01:00:54 2025 GMT Not After : Dec 20 01:00:54 2025 GMT Subject: CN=40c6aa981032bfa09af42af61d5e58e81b3dd68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:ff:fc:87:62:0e:3d:3e:41:d7:54:60:28: cf:3e:54:13:36:2e:39:a8:40:0f:05:d1:c3:54:99: db:f6:f0:e3:0f:6f:ea:29:59:74:d0:11:6d:d5:c4: da:d6:09:4e:82:3d:71:7e:33:35:4b:cf:30:3c:8f: 65:bb:63:e4:f7:f0:0e:83:b1:80:3b:fb:6c:90:ae: 42:77:13:d7:9f:50:f3:d0:01:4e:0e:ed:43:8f:ff: 6d:00:53:25:80:5b:3f:be:c8:ad:72:6c:6a:99:4b: 87:fa:55:9d:82:74:08:6d:ba:6f:28:c9:f1:10:98: 4c:5c:86:a5:cb:0e:4d:25:ef:25:6a:31:29:23:69: 35:fb:06:a4:00:f7:1e:c7:39:4e:73:96:07:fc:13: 0e:65:48:19:27:10:f7:5a:0d:24:0f:d7:b5:44:fc: 17:49:a8:fa:f3:2a:2f:f3:f0:cb:8a:76:42:6e:35: 51:b5:41:c4:79:cd:0e:c4:fe:04:e4:1f:02:9c:33: cd:e2:0f:9b:fe:6f:af:60:1c:c4:47:b0:b0:09:0d: 6a:bd:67:6a:68:c6:b0:84:11:d2:0b:43:8a:1f:2d: 6a:da:14:c5:e4:65:bb:34:93:33:3c:74:32:d5:b3: 07:99:9f:97:7f:24:0f:39:f8:91:cd:2a:0f:57:df: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C6:AA:98:10:32:BF:A0:9A:F4:2A:F6:1D:5E:58:E8:1B:3D:D6:8C X509v3 Authority Key Identifier: keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6f:90:49:60:6c:96:84:d3:c5:b3:8f:c2:46:46:7f:c3:03: da:65:12:a7:29:48:db:92:c3:91:ad:8b:0c:9d:5e:da:ae:63: 0e:aa:24:ee:68:b4:c0:31:46:b0:1a:0c:24:11:e9:5f:88:80: 43:77:cd:f6:b9:a6:b7:14:f4:20:76:90:ae:a8:c9:7b:1d:7e: b8:ef:5a:1f:40:eb:db:4d:ad:ec:74:e2:1b:84:82:73:b3:9e: 9c:51:2a:d5:8b:2b:19:93:44:be:13:7d:f9:94:8a:b9:b2:97: 55:95:31:cb:45:32:ff:34:77:48:9a:1e:c1:9e:78:bf:94:05: 74:c0:48:0e:22:7f:f5:6f:e9:fb:d3:13:86:f7:c6:1a:20:85: 93:42:6d:01:9e:42:f0:43:76:7f:fe:bd:44:a8:b8:8a:fc:2d: 05:5c:a3:c0:86:ce:0e:3b:b7:cb:67:03:e2:70:e3:da:b7:5e: 8c:25:a8:53:b4:24:a0:55:89:4e:d0:36:cf:64:ec:94:9c:4b: bd:6b:60:db:92:79:71:de:7f:53:f3:5e:b4:85:9d:75:65:71: 53:bc:a0:35:45:ae:de:06:e3:f8:93:a0:70:5b:89:42:60:bf: 3e:2d:58:fb:bb:9d:0c:3b:8b:bc:32:a5:5c:2f:fb:55:2e:7c: fa:f0:d1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H8FGa2FvCDLAlt8M01CyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk MWM4NzkwHhcNMjUxMjE5MDEwMDU0WhcNMjUxMjIwMDEwMDU0WjAzMTEwLwYDVQQD Eyg0MGM2YWE5ODEwMzJiZmEwOWFmNDJhZjYxZDVlNThlODFiM2RkNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgH//IdiDj0+QddUYCjPPlQTNi45 qEAPBdHDVJnb9vDjD2/qKVl00BFt1cTa1glOgj1xfjM1S88wPI9lu2Pk9/AOg7GA O/tskK5CdxPXn1Dz0AFODu1Dj/9tAFMlgFs/vsitcmxqmUuH+lWdgnQIbbpvKMnx EJhMXIalyw5NJe8lajEpI2k1+wakAPcexzlOc5YH/BMOZUgZJxD3Wg0kD9e1RPwX Saj68yov8/DLinZCbjVRtUHEec0OxP4E5B8CnDPN4g+b/m+vYBzER7CwCQ1qvWdq aMawhBHSC0OKHy1q2hTF5GW7NJMzPHQy1bMHmZ+XfyQPOfiRzSoPV9+8AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDGqpgQMr+gmvQq9h1eWOgbPdaMMB8GA1UdIwQY MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsW+QSWBs loTTxbOPwkZGf8MD2mUSpylI25LDka2LDJ1e2q5jDqok7mi0wDFGsBoMJBHpX4iA Q3fN9rmmtxT0IHaQrqjJex1+uO9aH0Dr202t7HTiG4SCc7OenFEq1YsrGZNEvhN9 +ZSKubKXVZUxy0Uy/zR3SJoewZ54v5QFdMBIDiJ/9W/p+9MThvfGGiCFk0JtAZ5C 8EN2f/69RKi4ivwtBVyjwIbODju3y2cD4nDj2rdejCWoU7QkoFWJTtA2z2TslJxL vWtg25J5cd5/U/NetIWddWVxU7ygNUWu3gbj+JOgcFuJQmC/Pi1Y+7udDDuLvDKl XC/7VS58+vDRHw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:42:46 2025 by rpki-client