This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json) Hash identifier: KZlAnuL8GgT3eFSX/kbQu3Ivw3lq5Ny2T0BcNfZmdi4= Subject key identifier: 2B:98:1D:31:9A:34:7B:7E:FD:F5:C7:84:2D:D8:61:F8:9C:90:D4:99 Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Certificate serial: 019B416D3A33AFA3E069AB9B12CF0E55EB4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft Manifest number: 0D2C Signing time: Sun 21 Dec 2025 15:00:35 +0000 Manifest this update: Sun 21 Dec 2025 15:00:35 +0000 Manifest next update: Mon 22 Dec 2025 15:00:35 +0000 Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=) 2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: Zpbl8avTc5Gf/w+c2IEQVUGtZ9AWLOo8st0pXaUbw6g=) 3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:3a:33:af:a3:e0:69:ab:9b:12:cf:0e:55:eb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Validity Not Before: Dec 21 15:00:35 2025 GMT Not After : Dec 22 15:00:35 2025 GMT Subject: CN=2b981d319a347b7efdf5c7842dd861f89c90d499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:ab:59:5d:17:ea:18:78:cb:ec:d5:be:85: 93:43:0a:85:c7:00:e0:3e:b7:f8:35:d9:ad:00:7a: ae:c9:60:db:7d:53:e6:07:4b:98:e7:f8:94:c9:5c: 8a:c7:b0:d8:59:7b:12:5a:3a:5b:d4:1b:49:84:13: 57:e6:6d:71:f0:9b:04:d0:af:89:d4:00:f0:5f:ef: 60:81:30:0b:3e:fd:c4:db:de:9f:57:82:4d:52:8e: b2:a4:e8:6f:04:2a:a4:76:f6:7d:85:f4:d0:b9:66: 0b:23:5b:fa:c6:ca:54:df:49:d9:70:44:85:67:4a: 78:6c:87:bd:ef:af:36:bc:4c:3f:46:24:51:74:aa: fb:d5:88:53:60:e5:f8:bc:8a:22:2a:21:3a:6a:60: c3:1b:7d:64:ce:f3:4a:a8:18:10:8a:e4:2e:3d:04: f3:d9:78:e0:15:c1:46:96:cd:ee:fe:07:73:f2:29: 84:51:87:03:ee:df:9d:8b:10:2a:9c:21:54:2d:d3: af:eb:24:01:b0:ce:73:eb:a3:32:74:06:1e:73:e6: e7:89:61:2e:41:15:b0:c6:19:43:18:1e:a8:7d:21: c8:11:4e:03:c6:16:19:45:21:5b:6b:fa:35:43:57: d0:aa:c8:c0:a6:f3:7e:e6:eb:51:30:0a:8e:9b:41: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:98:1D:31:9A:34:7B:7E:FD:F5:C7:84:2D:D8:61:F8:9C:90:D4:99 X509v3 Authority Key Identifier: keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:47:76:34:22:d5:23:48:e1:56:97:79:96:b3:6e:c1:d7:45: dd:4b:1f:a5:f8:13:57:03:ea:23:ce:1d:7b:06:6f:66:69:76: 79:17:7d:f0:53:10:74:21:5f:62:86:49:01:1a:7c:96:f0:e8: e3:0a:8d:8a:f8:48:24:7c:e4:97:ef:e3:ad:db:39:c0:dc:ec: 43:d3:9b:c4:2c:91:2a:90:7b:0d:dd:f0:e7:b6:b9:5f:1a:ab: 12:b4:d1:e7:70:7b:9c:3f:51:09:71:4c:5f:6e:27:15:55:b0: 30:18:f6:db:cd:00:e5:42:27:fb:59:7a:b0:e2:cf:b3:28:99: f2:61:71:ca:08:e6:60:04:a7:2f:c1:19:66:21:5f:6d:3a:2b: 93:32:7a:86:84:3f:56:1a:81:2a:53:0b:36:44:9b:89:17:24: bc:a3:dd:d8:1b:38:9a:9e:57:12:bb:9d:0d:9f:70:d8:a2:2c: e5:74:d6:d0:96:8d:4c:69:3a:e3:ae:81:20:b0:d6:1c:4a:46: 15:f4:8a:14:ad:fb:a5:41:4a:19:5b:6d:0d:08:fb:0a:c8:39: c4:27:c4:4f:bb:6a:07:f6:4d:74:31:0c:18:0e:77:c1:db:ff: 6f:67:d6:4d:b8:8a:2a:f0:30:d6:36:00:11:ef:1f:a3:8a:7b: 41:7d:3c:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbTozr6PgaaubEs8OVetPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0 NGJmNDYwHhcNMjUxMjIxMTUwMDM1WhcNMjUxMjIyMTUwMDM1WjAzMTEwLwYDVQQD EygyYjk4MWQzMTlhMzQ3YjdlZmRmNWM3ODQyZGQ4NjFmODljOTBkNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiarWV0X6hh4y+zVvoWTQwqFxwDg Prf4NdmtAHquyWDbfVPmB0uY5/iUyVyKx7DYWXsSWjpb1BtJhBNX5m1x8JsE0K+J 1ADwX+9ggTALPv3E296fV4JNUo6ypOhvBCqkdvZ9hfTQuWYLI1v6xspU30nZcESF Z0p4bIe97682vEw/RiRRdKr71YhTYOX4vIoiKiE6amDDG31kzvNKqBgQiuQuPQTz 2XjgFcFGls3u/gdz8imEUYcD7t+dixAqnCFULdOv6yQBsM5z66MydAYec+bniWEu QRWwxhlDGB6ofSHIEU4DxhYZRSFba/o1Q1fQqsjApvN+5utRMAqOm0FLnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuYHTGaNHt+/fXHhC3YYfickNSZMB8GA1UdIwQY MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt MTM3MTA5MzY5NjIxLzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0d2NCLV I0jhVpd5lrNuwddF3UsfpfgTVwPqI84dewZvZml2eRd98FMQdCFfYoZJARp8lvDo 4wqNivhIJHzkl+/jrds5wNzsQ9ObxCyRKpB7Dd3w57a5XxqrErTR53B7nD9RCXFM X24nFVWwMBj2280A5UIn+1l6sOLPsyiZ8mFxygjmYASnL8EZZiFfbTorkzJ6hoQ/ VhqBKlMLNkSbiRckvKPd2Bs4mp5XErudDZ9w2KIs5XTW0JaNTGk6466BILDWHEpG FfSKFK37pUFKGVttDQj7Csg5xCfET7tqB/ZNdDEMGA53wdv/b2fWTbiKKvAw1jYA Ee8fo4p7QX08bQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:56 2025 by rpki-client