This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft File: 1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json) Hash identifier: oyz0poWtfjS55NpHCPh3KPOd9Y9ehK6+8KLIXRTtX5w= Subject key identifier: 5E:9D:2F:06:EC:5F:2A:98:A3:1C:6E:37:3D:2B:BB:7C:1E:45:9B:78 Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D Certificate issuer: /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Certificate serial: 019B32D62D9E9BE8C5290B91E47E6EA540D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft Manifest number: 034F Signing time: Thu 18 Dec 2025 19:00:55 +0000 Manifest this update: Thu 18 Dec 2025 19:00:55 +0000 Manifest next update: Fri 19 Dec 2025 19:00:55 +0000 Files and hashes: 1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: RFogJx226V40GN2gbfHWbXDhClRbUrZgCESIYSy7Gx8=) 2: KMs7aUSS9LqAFlnC_o5ElLedNIc.roa (hash: /x7zWDBe20WK1XP4EQ8MfhJthk5BD7GGqFW7sL/0M74=) 3: hqdB3dvV_dcCWDsTMYzzBUkq1iQ.roa (hash: PqNxdXFESdm3E0fpRf9aF9eGcWyACVXLt/A8w8L4KSw=) 4: ntHtztrMmkHjlQm-nR0AF_-ZVFE.roa (hash: Bf849e8DMlDt314X2PPaLUOxw5PYejhf50bcsgAnmcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:2d:9e:9b:e8:c5:29:0b:91:e4:7e:6e:a5:40:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Validity Not Before: Dec 18 19:00:55 2025 GMT Not After : Dec 19 19:00:55 2025 GMT Subject: CN=5e9d2f06ec5f2a98a31c6e373d2bbb7c1e459b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:6d:a7:b5:b5:76:d8:f4:d1:28:80:64:a6: 1e:28:79:45:c0:4d:8b:07:0f:47:a6:39:91:b5:4b: 7e:03:5b:5b:d8:fd:af:9e:36:1a:92:16:61:4e:b3: 9b:44:81:ec:3b:6c:5b:9e:01:54:e1:48:8d:38:01: d5:07:7d:5a:53:42:57:05:f4:f5:d5:bb:68:0d:bd: 16:58:12:a4:52:50:9e:70:9a:a9:39:4a:35:47:1a: 74:bf:db:1b:d4:39:61:9e:dc:a7:65:72:72:5d:4c: 4e:0e:12:09:41:e5:d1:a4:0b:a5:c0:0b:8a:32:e1: 69:97:6c:48:bc:62:b3:c2:79:47:31:fb:0d:e6:09: da:ac:04:70:5a:08:1e:64:a0:6c:c8:eb:6e:31:87: 06:c8:f3:bc:98:84:a6:54:ed:1f:a7:d3:ca:9a:fc: c7:d4:77:bb:ee:23:45:bc:f0:7c:72:fa:b4:e3:00: f9:20:e2:aa:30:50:9a:f0:ed:fb:8c:f9:d6:7a:ac: eb:d7:c1:57:d4:3b:4a:7e:20:40:55:3c:47:1d:e6: 6b:19:89:da:96:b4:07:d0:75:02:d9:da:bb:00:27: 48:c2:74:99:43:dc:15:21:07:a0:30:40:55:48:d6: a4:89:c6:9b:18:3c:5a:3b:e7:48:33:35:77:81:19: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9D:2F:06:EC:5F:2A:98:A3:1C:6E:37:3D:2B:BB:7C:1E:45:9B:78 X509v3 Authority Key Identifier: keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:4f:8e:19:70:98:69:f9:8c:5e:6b:41:c9:86:67:85:50:38: e9:ee:3d:7d:94:ec:e2:35:b1:50:2a:9c:5b:fb:7b:98:5a:4a: df:c7:c2:86:7c:59:4a:dc:9c:41:a2:88:8f:a9:b6:05:a8:4c: 0d:b1:10:12:52:65:28:9b:5f:bf:f1:25:2d:f2:1b:43:ce:3d: ab:d3:95:a7:4e:ff:0e:36:3c:09:be:38:74:e3:26:44:21:f1: 09:27:e1:9c:1b:29:13:58:5a:72:aa:83:62:8d:a7:cf:a4:f1: c2:76:19:7c:14:cf:e7:0f:5c:5e:ae:eb:10:6a:3f:5e:c6:a5: 27:ee:e3:14:f9:67:df:a8:6a:18:25:28:2a:01:ba:61:c9:10: 63:b2:e3:57:c3:47:96:9c:ab:b0:3b:47:da:cc:41:06:1b:b1: a1:c7:27:c1:73:f8:99:8c:4d:cb:92:a5:61:42:6d:fd:58:28: 33:a0:61:67:7a:eb:6e:2b:a5:04:d6:c5:5e:62:77:85:82:2c: 0f:93:b5:6b:fd:f4:cf:22:3d:3f:17:a3:ca:d9:7d:6b:a6:8e: 59:da:51:7a:6a:5d:70:4a:2e:c7:2e:4a:17:1e:a0:2a:75:84: 70:0f:c6:c8:17:97:14:2c:9f:99:a3:e3:c0:8e:88:a8:e7:74: 97:f3:53:ec -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsy1i2em+jFKQuR5H5upUDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTJiNjA1YzU4ZTA3NDZhYWRjNWJmMGQ3Y2JjMzZjOTMw N2Y3NGQwHhcNMjUxMjE4MTkwMDU1WhcNMjUxMjE5MTkwMDU1WjAzMTEwLwYDVQQD Eyg1ZTlkMmYwNmVjNWYyYTk4YTMxYzZlMzczZDJiYmI3YzFlNDU5Yjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZFtp7W1dtj00SiAZKYeKHlFwE2L Bw9HpjmRtUt+A1tb2P2vnjYakhZhTrObRIHsO2xbngFU4UiNOAHVB31aU0JXBfT1 1btoDb0WWBKkUlCecJqpOUo1Rxp0v9sb1DlhntynZXJyXUxODhIJQeXRpAulwAuK MuFpl2xIvGKzwnlHMfsN5gnarARwWggeZKBsyOtuMYcGyPO8mISmVO0fp9PKmvzH 1He77iNFvPB8cvq04wD5IOKqMFCa8O37jPnWeqzr18FX1DtKfiBAVTxHHeZrGYna lrQH0HUC2dq7ACdIwnSZQ9wVIQegMEBVSNakicabGDxaO+dIMzV3gRlomQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF6dLwbsXyqYoxxuNz0ru3weRZt4MB8GA1UdIwQY MBaAFPiitgXFjgdGqtxb8NfLw2yTB/dNMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LSzJCY1dPQjBhcTNGdncxOHZEYkpNSDkwMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMDc2ZDM3LTRhYjQtNGVjMy1hNGIw LTUyNDAyNWUxMzIwMi8xLzEtS0syQmNXT0IwYXEzRnZ3MTh2RGJKTUg5MDAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ViLzA3NmQzNy00YWI0LTRlYzMtYTRiMC01MjQwMjVlMTMy MDIvMS8xLUtLMkJjV09CMGFxM0Z2dzE4dkRiSk1IOTAwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU+O GXCYafmMXmtByYZnhVA46e49fZTs4jWxUCqcW/t7mFpK38fChnxZStycQaKIj6m2 BahMDbEQElJlKJtfv/ElLfIbQ849q9OVp07/DjY8Cb44dOMmRCHxCSfhnBspE1ha cqqDYo2nz6TxwnYZfBTP5w9cXq7rEGo/XsalJ+7jFPln36hqGCUoKgG6YckQY7Lj V8NHlpyrsDtH2sxBBhuxoccnwXP4mYxNy5KlYUJt/VgoM6BhZ3rrbiulBNbFXmJ3 hYIsD5O1a/30zyI9Pxejytl9a6aOWdpRempdcEouxy5KFx6gKnWEcA/GyBeXFCyf maPjwI6IqOd0l/NT7A== -----END CERTIFICATE-----Generated at Thu Dec 18 22:10:11 2025 by rpki-client