This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json) Hash identifier: +yP7kRpXWK1acfp/gJ2v2WtuKQQjppXci7jvUHo1Cek= Subject key identifier: 59:A6:DA:AC:FC:54:C0:05:DB:A5:E5:F4:CA:2E:14:76:98:27:31:CD Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Certificate serial: 019B5AF6704912ADD9848BA471B9F3B0097A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft Manifest number: 0720 Signing time: Fri 26 Dec 2025 14:00:58 +0000 Manifest this update: Fri 26 Dec 2025 14:00:58 +0000 Manifest next update: Sat 27 Dec 2025 14:00:58 +0000 Files and hashes: 1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=) 2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: zG74M27zm0TXqrghnXRwO/NWX5iw3ITuuz0TvWMKjZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:70:49:12:ad:d9:84:8b:a4:71:b9:f3:b0:09:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f Validity Not Before: Dec 26 14:00:58 2025 GMT Not After : Dec 27 14:00:58 2025 GMT Subject: CN=59a6daacfc54c005dba5e5f4ca2e1476982731cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:cd:a0:20:74:ef:f2:b9:8a:c6:21:aa:07: 00:d3:89:cd:f1:97:95:9b:6d:d9:c0:da:14:cf:b1: f0:8a:a7:4a:4c:37:70:2f:96:f7:7d:49:39:60:ea: 07:f5:4c:ab:d8:d5:de:3f:a7:93:39:a8:2d:18:23: 41:d4:d3:8d:86:4b:c5:4f:2b:b1:a2:25:52:81:40: eb:4d:ee:be:6c:4a:65:da:e1:2c:d0:8b:21:45:bb: 6e:3f:53:91:aa:1e:a8:e3:15:1b:89:93:8d:a2:85: 5d:1a:7e:2d:76:77:2f:e0:58:b4:bc:4e:d9:05:69: 92:35:11:ce:53:59:b3:dd:05:e9:5b:f6:d8:1f:25: 0e:4f:aa:74:a2:d7:06:7e:4c:61:57:7d:eb:69:55: 72:7f:61:b9:00:d9:e3:2f:b3:8b:9d:9b:02:a8:83: d1:bc:37:32:98:b3:6d:97:bd:74:d0:8e:24:c8:0b: f8:49:69:57:84:22:f9:ed:c6:ed:a4:dd:ee:f1:a3: 11:2a:76:67:20:c6:53:16:05:2f:8d:e4:bd:61:29: 84:57:ab:b3:cf:10:a4:7d:47:56:0a:0c:fa:a2:5c: 94:63:7c:a5:99:a4:43:c7:a0:c1:03:94:a9:a5:95: 9c:02:ce:60:9f:7a:27:5c:a2:b8:55:62:8d:dd:f2: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A6:DA:AC:FC:54:C0:05:DB:A5:E5:F4:CA:2E:14:76:98:27:31:CD X509v3 Authority Key Identifier: keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e8:05:70:7f:b5:4b:95:cd:ba:17:a8:a6:cc:63:33:42:e3: d1:4b:ae:c5:cf:6e:03:84:7b:c5:f9:13:80:d1:7f:46:00:5a: a9:d5:7c:fb:72:a0:df:e2:6b:77:74:61:52:5c:ab:ed:33:48: 42:27:e6:3e:52:a3:2a:2f:a5:9b:fa:23:39:10:ba:7e:1a:70: 15:af:64:d6:26:31:de:f7:b0:e4:f2:0a:46:b9:9e:fd:cf:d7: 33:f1:02:8a:d2:9b:ca:5b:30:2b:73:23:dc:b8:7b:de:de:ab: 27:41:4d:60:8f:c6:b5:f0:23:8e:bb:cd:ec:2f:30:d4:0a:dc: 2f:ad:e9:ed:5d:be:b4:c6:48:62:09:c6:b4:32:82:b4:fa:e3: b9:fb:07:78:c1:b7:b6:c5:33:b3:5a:1b:ef:3d:be:0b:80:39: c0:a0:a7:27:8f:18:c3:63:61:b4:bf:7c:bd:55:9b:e5:29:70: f0:80:08:c7:72:7b:ae:7f:7a:eb:4b:4c:fc:de:12:3f:2d:ba: 8f:ca:79:a0:43:94:dc:99:1f:cd:68:cd:49:ab:28:86:77:fd: b8:1b:a9:2e:4d:7f:19:b1:db:eb:28:4c:94:10:60:34:0e:78: 04:05:e9:cb:0f:4b:95:cc:52:07:34:81:9a:1e:ca:77:91:14: 90:3f:fc:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nBJEq3ZhIukcbnzsAl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjJmYWUzODBjNWQ0YzFlMjgxODEwYTM0ZGI5ODgzYzlk OWZmMmYwHhcNMjUxMjI2MTQwMDU4WhcNMjUxMjI3MTQwMDU4WjAzMTEwLwYDVQQD Eyg1OWE2ZGFhY2ZjNTRjMDA1ZGJhNWU1ZjRjYTJlMTQ3Njk4MjczMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KrNoCB07/K5isYhqgcA04nN8ZeV m23ZwNoUz7HwiqdKTDdwL5b3fUk5YOoH9Uyr2NXeP6eTOagtGCNB1NONhkvFTyux oiVSgUDrTe6+bEpl2uEs0IshRbtuP1ORqh6o4xUbiZONooVdGn4tdncv4Fi0vE7Z BWmSNRHOU1mz3QXpW/bYHyUOT6p0otcGfkxhV33raVVyf2G5ANnjL7OLnZsCqIPR vDcymLNtl7100I4kyAv4SWlXhCL57cbtpN3u8aMRKnZnIMZTFgUvjeS9YSmEV6uz zxCkfUdWCgz6olyUY3ylmaRDx6DBA5SppZWcAs5gn3onXKK4VWKN3fKmBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmm2qz8VMAF26Xl9MouFHaYJzHNMB8GA1UdIwQY MBaAFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUt ZmJmMGVkM2Y5MTU3LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUtZmJmMGVkM2Y5MTU3 LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATugFcH+1 S5XNuheopsxjM0Lj0Uuuxc9uA4R7xfkTgNF/RgBaqdV8+3Kg3+Jrd3RhUlyr7TNI QifmPlKjKi+lm/ojORC6fhpwFa9k1iYx3vew5PIKRrme/c/XM/ECitKbylswK3Mj 3Lh73t6rJ0FNYI/GtfAjjrvN7C8w1ArcL63p7V2+tMZIYgnGtDKCtPrjufsHeMG3 tsUzs1ob7z2+C4A5wKCnJ48Yw2NhtL98vVWb5Slw8IAIx3J7rn9660tM/N4SPy26 j8p5oEOU3JkfzWjNSasohnf9uBupLk1/GbHb6yhMlBBgNA54BAXpyw9LlcxSBzSB mh7Kd5EUkD/8ew== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:56 2025 by rpki-client