This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json) Hash identifier: daMf2GXG6y1rZA1q3VS/ZJX/IszCl40FonaayEBu/fs= Subject key identifier: 14:A3:40:C6:69:44:98:5B:C7:60:20:3B:3F:38:F4:44:8D:AB:A3:40 Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Certificate serial: 019B3D91256C738B918D785BD6BB40ED20D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft Manifest number: 0D2A Signing time: Sat 20 Dec 2025 21:01:20 +0000 Manifest this update: Sat 20 Dec 2025 21:01:20 +0000 Manifest next update: Sun 21 Dec 2025 21:01:20 +0000 Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=) 2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: bGPBWUYlEtkU2AdjaGq9ZT0UfiGgdY3Iom/pMAw3gYU=) 3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:25:6c:73:8b:91:8d:78:5b:d6:bb:40:ed:20:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Validity Not Before: Dec 20 21:01:20 2025 GMT Not After : Dec 21 21:01:20 2025 GMT Subject: CN=14a340c66944985bc760203b3f38f4448daba340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:1b:75:7c:7f:ef:7c:18:ac:4f:27:1a:f0: ca:b9:66:7f:37:e7:be:78:c2:09:c9:91:11:a9:32: 9a:5d:84:f6:83:93:c2:1b:1c:93:28:e5:dc:2f:e9: a8:22:d9:eb:f9:7d:83:6a:eb:15:c0:69:3e:db:41: 3c:4e:e4:3b:50:b9:51:56:9a:a0:c5:08:68:23:98: 6e:dc:7c:a6:b8:f0:59:92:77:b5:b3:11:25:61:de: cb:99:8f:6e:a4:f7:6d:83:8d:99:6d:39:c3:c8:58: 26:38:7b:93:ae:c9:46:89:c4:39:0c:6a:3b:7b:aa: aa:ae:ae:73:bb:8d:42:6c:69:8c:93:6d:38:17:8a: 71:d2:6d:ff:15:d9:42:b4:0a:b9:22:b0:bd:03:7a: ae:2a:f6:d3:4e:e0:09:c1:14:63:d7:ae:03:7a:4c: 0c:82:50:04:41:11:2f:c7:64:5a:7a:ff:3d:26:9c: 4b:90:62:a8:69:3d:72:30:9d:28:34:fa:bf:2f:fd: f0:c4:1f:8f:2c:12:44:3c:2f:b2:3a:fb:da:4f:f4: fe:33:4d:4e:cc:63:46:60:3e:7f:90:d2:d2:bd:3f: 6c:fa:b2:69:be:be:1c:47:aa:02:3a:36:40:cd:94: d1:7c:ee:48:8a:e6:28:ff:b0:f3:2f:aa:65:37:3d: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A3:40:C6:69:44:98:5B:C7:60:20:3B:3F:38:F4:44:8D:AB:A3:40 X509v3 Authority Key Identifier: keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:49:6c:83:84:00:21:c6:f9:8c:9c:b7:6e:6d:2d:a2:7d:53: 1a:aa:03:3c:c6:0d:b3:9f:02:95:5f:75:ef:2e:71:80:d4:60: b1:81:fe:f2:dd:3f:f6:4c:cb:49:cc:ad:82:03:a4:2f:6d:d6: 13:02:23:f6:18:2b:b7:1b:9c:d7:b9:41:a5:6d:93:fe:b9:50: e1:8f:ff:14:41:e9:30:8f:9d:fc:5f:27:9b:a3:a8:43:b3:84: cd:db:60:bf:00:c6:30:64:6a:56:63:93:d3:cf:e6:39:b6:58: 4c:7f:58:0b:99:4b:e7:f1:ee:06:1d:6a:1e:ed:8d:34:93:b2: 32:99:ac:9e:47:81:ff:7e:82:59:5b:0c:70:4f:d6:60:f5:8c: 59:72:f3:c6:c9:2d:d2:ad:aa:18:e2:15:57:cb:1d:d9:99:ec: 9e:f2:71:24:03:1c:21:3b:ea:54:a1:6a:05:e5:59:ec:7d:59: 63:37:85:af:59:43:47:cb:f9:3c:74:29:e1:11:9d:2d:cd:b9: fe:66:9b:49:95:8c:0b:ab:22:5e:78:b4:db:9f:ce:27:6e:36: 2f:26:45:e7:74:18:e5:8a:95:16:68:a6:e6:32:6f:4e:c1:10: f7:08:6d:01:f0:30:2c:77:28:33:fc:0d:a6:84:15:66:0b:0b: 26:a8:d8:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kSVsc4uRjXhb1rtA7SDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0 NGJmNDYwHhcNMjUxMjIwMjEwMTIwWhcNMjUxMjIxMjEwMTIwWjAzMTEwLwYDVQQD EygxNGEzNDBjNjY5NDQ5ODViYzc2MDIwM2IzZjM4ZjQ0NDhkYWJhMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtykbdXx/73wYrE8nGvDKuWZ/N+e+ eMIJyZERqTKaXYT2g5PCGxyTKOXcL+moItnr+X2DausVwGk+20E8TuQ7ULlRVpqg xQhoI5hu3HymuPBZkne1sxElYd7LmY9upPdtg42ZbTnDyFgmOHuTrslGicQ5DGo7 e6qqrq5zu41CbGmMk204F4px0m3/FdlCtAq5IrC9A3quKvbTTuAJwRRj164DekwM glAEQREvx2Raev89JpxLkGKoaT1yMJ0oNPq/L/3wxB+PLBJEPC+yOvvaT/T+M01O zGNGYD5/kNLSvT9s+rJpvr4cR6oCOjZAzZTRfO5IiuYo/7DzL6plNz3dtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSjQMZpRJhbx2AgOz849ESNq6NAMB8GA1UdIwQY MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt MTM3MTA5MzY5NjIxLzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOklsg4QA Icb5jJy3bm0ton1TGqoDPMYNs58ClV917y5xgNRgsYH+8t0/9kzLScytggOkL23W EwIj9hgrtxuc17lBpW2T/rlQ4Y//FEHpMI+d/F8nm6OoQ7OEzdtgvwDGMGRqVmOT 08/mObZYTH9YC5lL5/HuBh1qHu2NNJOyMpmsnkeB/36CWVsMcE/WYPWMWXLzxskt 0q2qGOIVV8sd2ZnsnvJxJAMcITvqVKFqBeVZ7H1ZYzeFr1lDR8v5PHQp4RGdLc25 /mabSZWMC6siXni025/OJ242LyZF53QY5YqVFmim5jJvTsEQ9whtAfAwLHcoM/wN poQVZgsLJqjYKg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:58 2025 by rpki-client