This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft File: K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json) Hash identifier: U8FhoNECvJIks+FW3vit60TDIipiV7c9Ev9YjczHs7g= Subject key identifier: 59:A3:DB:81:B2:03:47:20:3D:84:B1:97:6E:3E:CF:24:74:3F:4A:69 Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0 Certificate issuer: /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0 Certificate serial: 019AF1D20A9F1175DB1A40B5D3BC24298345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: w2OaxM4Wlfuug6CpPYA672CDLRcEt3gDSucFnU8Me0o=) 2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0a:9f:11:75:db:1a:40:b5:d3:bc:24:29:83:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=59a3db81b20347203d84b1976e3ecf24743f4a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c9:a4:ac:63:21:97:ce:77:cc:34:bf:c5:8f: 06:58:73:ed:2b:37:86:05:46:74:07:c3:a7:37:fc: 38:24:86:b6:8e:56:72:0e:37:f8:60:66:a4:32:3e: 40:4c:53:ee:ae:a3:0b:a4:21:f5:51:24:95:8e:53: b6:da:dd:8e:eb:32:0d:d6:6d:e2:80:2a:aa:34:49: 49:57:f3:43:f9:13:04:c5:ce:e5:ad:70:cc:7e:33: 35:4d:0f:f1:8e:d9:61:88:70:52:a4:64:0b:4a:00: 65:44:97:23:8f:a4:2b:12:60:e7:7e:57:49:40:a8: 9a:47:6b:8b:8b:05:2a:1e:1b:e3:e6:86:be:18:95: ed:2a:89:c8:09:c1:cb:b3:c4:eb:a1:4f:e2:02:c0: 8a:b6:58:ce:ff:b9:e3:e3:c3:e3:77:16:b4:db:8e: 4e:e7:fb:3f:e0:07:ac:57:ef:c6:80:a2:76:98:47: c2:fc:c1:1b:be:92:80:f8:e1:47:f2:56:ad:b2:2b: 93:2b:d9:9b:c6:12:12:f4:e0:6e:b7:72:45:76:4d: c2:2a:89:04:98:11:cd:46:98:31:26:1f:f7:df:96: 5c:d3:21:d0:99:3d:3f:b8:99:bc:46:5b:42:4e:81: 09:90:9a:aa:e2:25:01:17:42:45:26:98:59:d0:d9: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A3:DB:81:B2:03:47:20:3D:84:B1:97:6E:3E:CF:24:74:3F:4A:69 X509v3 Authority Key Identifier: keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:38:c4:03:02:ef:62:41:45:93:b3:55:eb:35:f2:ae:dd:5d: 2b:29:cc:3b:6b:fa:87:59:41:b3:05:6a:ef:18:bc:0c:67:53: 42:dd:c5:6e:95:09:fb:7f:75:55:6b:9d:6c:f1:ba:bf:51:25: 99:74:a4:90:47:6c:56:96:86:5a:1a:b2:3b:8d:7d:65:13:3a: 20:a5:17:2f:2f:99:0d:e5:d9:88:62:dd:09:59:e6:5c:26:a1: 9a:a1:f0:eb:9c:ed:37:26:a5:d4:89:7d:f9:c6:e6:0a:e8:2c: 10:70:e7:fc:15:8f:d0:cc:e2:88:82:86:fc:80:6a:68:e5:7c: 6c:05:4e:cb:a1:3d:04:b2:2d:60:ea:b5:c8:cf:e6:b2:b5:7e: 1f:66:31:e2:66:23:d5:ef:97:3c:86:a1:f3:23:75:fa:11:a0: bc:73:fc:cf:95:29:f1:8c:76:19:a7:7a:52:34:b8:3f:6d:41: 8a:38:80:06:f8:6e:33:b6:14:12:46:ba:ba:17:73:68:0d:60: 84:71:b0:4d:1f:e3:54:02:7f:ee:75:b9:b6:90:bf:a9:ef:42: d4:08:1d:37:f2:a1:01:fc:f3:a5:95:ed:a7:62:b1:89:1e:4e: 60:b6:b0:64:f6:aa:b3:59:ab:b8:2d:ff:7c:d2:5b:df:a0:f2: 6a:22:5b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gqfEXXbGkC107wkKYNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzNmZTE1YzE1N2YwNmZlOWFiMjE5NWRjYzNiZDdiZDA3 MTY4YTAwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD Eyg1OWEzZGI4MWIyMDM0NzIwM2Q4NGIxOTc2ZTNlY2YyNDc0M2Y0YTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMmkrGMhl853zDS/xY8GWHPtKzeG BUZ0B8OnN/w4JIa2jlZyDjf4YGakMj5ATFPurqMLpCH1USSVjlO22t2O6zIN1m3i gCqqNElJV/ND+RMExc7lrXDMfjM1TQ/xjtlhiHBSpGQLSgBlRJcjj6QrEmDnfldJ QKiaR2uLiwUqHhvj5oa+GJXtKonICcHLs8TroU/iAsCKtljO/7nj48Pjdxa0245O 5/s/4AesV+/GgKJ2mEfC/MEbvpKA+OFH8latsiuTK9mbxhIS9OBut3JFdk3CKokE mBHNRpgxJh/335Zc0yHQmT0/uJm8RltCToEJkJqq4iUBF0JFJphZ0NnJLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmj24GyA0cgPYSxl24+zyR0P0ppMB8GA1UdIwQY MBaAFCtz/hXBV/Bv6ashldzDvXvQcWigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNQLUZjRlg4R19wcXlHVjNNTzllOUJ4YUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82ZGQxMGEtNGY1Zi00OTMyLWExNjAt MDUxNzFiMWIwZWZkLzEvSzNQLUZjRlg4R19wcXlHVjNNTzllOUJ4YUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82ZGQxMGEtNGY1Zi00OTMyLWExNjAtMDUxNzFiMWIwZWZk LzEvSzNQLUZjRlg4R19wcXlHVjNNTzllOUJ4YUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjjEAwLv YkFFk7NV6zXyrt1dKynMO2v6h1lBswVq7xi8DGdTQt3FbpUJ+391VWudbPG6v1El mXSkkEdsVpaGWhqyO419ZRM6IKUXLy+ZDeXZiGLdCVnmXCahmqHw65ztNyal1Il9 +cbmCugsEHDn/BWP0MziiIKG/IBqaOV8bAVOy6E9BLItYOq1yM/msrV+H2Yx4mYj 1e+XPIah8yN1+hGgvHP8z5Up8Yx2Gad6UjS4P21BijiABvhuM7YUEka6uhdzaA1g hHGwTR/jVAJ/7nW5tpC/qe9C1AgdN/KhAfzzpZXtp2KxiR5OYLawZPaqs1mruC3/ fNJb36DyaiJbcw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:16 2025 by rpki-client