This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json) Hash identifier: HD5zK02OmAPZinm+r/MEFBO7D6o6IHMCLRf3Em/Sza4= Subject key identifier: 39:BB:76:94:B1:42:F6:E0:27:17:69:5C:9A:00:1A:FE:3B:93:96:BC Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Certificate serial: 019B3CB4AA788EA704A962BCA0EF676012B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft Manifest number: 0BDE Signing time: Sat 20 Dec 2025 17:00:31 +0000 Manifest this update: Sat 20 Dec 2025 17:00:31 +0000 Manifest next update: Sun 21 Dec 2025 17:00:31 +0000 Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: nYZmaFo820Gg0k3H7xKeMNOUxZoAou2rvyVjCiprsV0=) 2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=) 3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=) 4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:aa:78:8e:a7:04:a9:62:bc:a0:ef:67:60:12:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Validity Not Before: Dec 20 17:00:31 2025 GMT Not After : Dec 21 17:00:31 2025 GMT Subject: CN=39bb7694b142f6e02717695c9a001afe3b9396bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:42:1b:57:86:9a:74:28:b4:14:2c:2d:de: 3c:cc:f2:35:18:72:87:b7:be:9b:45:f2:a9:9a:58: 08:3f:78:22:cf:f7:c3:9f:88:ef:ca:d5:d5:15:95: 8f:15:d8:83:62:66:cf:c5:5d:be:d8:95:dd:1e:dc: 34:45:9d:50:51:22:86:d9:a0:c3:fb:ff:f9:f7:e4: 21:1e:93:1b:54:da:e8:b7:97:42:a6:60:e8:92:3c: 2c:4c:4b:0e:bd:1a:49:cf:a7:e1:ea:3d:0b:9c:12: b9:64:0d:16:c3:46:35:7e:6e:53:5f:d3:a1:45:39: f7:2b:d0:de:8c:20:af:55:f2:33:1e:97:19:55:2d: a3:d9:62:1d:dd:ac:c4:2a:9a:93:cc:d9:93:15:1f: 11:e3:12:64:24:13:e4:63:d8:bc:01:04:08:81:f3: 25:23:2b:2a:58:e7:22:04:dd:0a:e1:53:7d:c0:62: 1e:d7:80:bb:21:92:23:4a:95:61:59:d1:47:13:54: 01:19:47:44:b0:73:b8:4d:60:e0:42:c8:bf:2d:08: 6e:68:d2:1d:2e:f3:2d:e8:2b:29:50:b5:4b:1b:b2: 50:39:94:f2:d5:63:c8:e3:bb:bf:0e:65:eb:42:9b: 3b:bc:55:6f:2a:6c:1c:ce:4a:f0:60:45:c0:1f:a1: 15:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BB:76:94:B1:42:F6:E0:27:17:69:5C:9A:00:1A:FE:3B:93:96:BC X509v3 Authority Key Identifier: keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:48:da:e8:79:58:00:5e:ca:32:59:b5:71:fc:2c:e3:75:24: bd:ea:fb:5f:1d:3a:08:c1:97:72:bd:e2:6f:c6:5e:6d:9e:65: 46:34:9f:10:8e:a1:08:f9:e0:e5:dd:1e:c2:99:ef:79:a0:a0: a6:48:7b:67:b6:3c:bb:be:6e:96:b8:d6:0d:2d:f1:ac:72:f0: da:80:6e:9f:b8:1f:01:29:39:cb:b1:47:8e:18:59:a3:24:57: a1:48:13:22:57:a9:6b:9f:bc:cb:4b:49:97:08:0e:05:be:82: 1b:e8:b6:ee:49:b8:c8:e9:24:31:f9:76:6c:42:01:17:f2:86: 67:aa:ba:50:fe:a8:f6:ec:52:cc:a1:53:6f:80:78:f2:eb:52: c6:33:18:75:e8:6f:7e:81:ef:34:fc:7d:56:0f:c4:ef:f0:8c: a1:f2:34:82:5d:ab:be:15:9e:32:b0:f3:e5:01:2d:4c:53:4c: da:97:ce:d5:33:90:9c:9d:63:21:bc:6f:ff:5c:06:f4:40:68: 13:98:67:dd:bd:85:0e:ac:87:0d:96:82:02:bd:a1:63:7e:63: c7:b8:2e:dc:05:e8:b2:ba:78:65:d9:9c:b4:e6:3a:86:f1:d7: 79:ee:d7:e1:50:37:d0:c3:a7:14:e5:73:b3:52:16:c3:5e:2c: ba:f3:9a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKp4jqcEqWK8oO9nYBKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4 MWFkMTkwHhcNMjUxMjIwMTcwMDMxWhcNMjUxMjIxMTcwMDMxWjAzMTEwLwYDVQQD EygzOWJiNzY5NGIxNDJmNmUwMjcxNzY5NWM5YTAwMWFmZTNiOTM5NmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xCG1eGmnQotBQsLd48zPI1GHKH t76bRfKpmlgIP3giz/fDn4jvytXVFZWPFdiDYmbPxV2+2JXdHtw0RZ1QUSKG2aDD +//59+QhHpMbVNrot5dCpmDokjwsTEsOvRpJz6fh6j0LnBK5ZA0Ww0Y1fm5TX9Oh RTn3K9DejCCvVfIzHpcZVS2j2WId3azEKpqTzNmTFR8R4xJkJBPkY9i8AQQIgfMl IysqWOciBN0K4VN9wGIe14C7IZIjSpVhWdFHE1QBGUdEsHO4TWDgQsi/LQhuaNId LvMt6CspULVLG7JQOZTy1WPI47u/DmXrQps7vFVvKmwczkrwYEXAH6EVhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDm7dpSxQvbgJxdpXJoAGv47k5a8MB8GA1UdIwQY MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0ja6HlY AF7KMlm1cfws43Ukver7Xx06CMGXcr3ib8ZebZ5lRjSfEI6hCPng5d0ewpnveaCg pkh7Z7Y8u75ulrjWDS3xrHLw2oBun7gfASk5y7FHjhhZoyRXoUgTIlepa5+8y0tJ lwgOBb6CG+i27km4yOkkMfl2bEIBF/KGZ6q6UP6o9uxSzKFTb4B48utSxjMYdehv foHvNPx9Vg/E7/CMofI0gl2rvhWeMrDz5QEtTFNM2pfO1TOQnJ1jIbxv/1wG9EBo E5hn3b2FDqyHDZaCAr2hY35jx7gu3AXosrp4ZdmctOY6hvHXee7X4VA30MOnFOVz s1IWw14suvOamw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:24 2025 by rpki-client