This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json) Hash identifier: d92+yR7IFA9Kf9GNjQfdnN+xPV0L+ELwrPTeePqFGYU= Subject key identifier: E4:DB:69:60:05:1B:DF:53:5B:21:AC:FD:23:BA:2C:C0:36:AE:C9:6D Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Certificate serial: 019AF209AC0AAADD58CB72CA6FAF066E343A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: 3tVg/eJOA8wBsydvOW9sD/X1mSgNwjzX9yrMFP8rJCc=) 2: bUHKbn34m9YZfg0LWUckx1_q0Mc.roa (hash: Bh0vmrRSsDhj05TsHSvScRpLwoC6mmV/tmtMQaNdewI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ac:0a:aa:dd:58:cb:72:ca:6f:af:06:6e:34:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=e4db6960051bdf535b21acfd23ba2cc036aec96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:09:f4:aa:be:13:cd:59:ac:61:62:ee:c3: 42:e0:2f:cb:3f:e2:62:7a:d4:ae:53:ae:52:0a:f6: 16:cf:4b:83:20:55:fb:04:13:a6:f0:23:a0:21:9f: 74:2d:74:1f:ed:f9:be:07:42:e8:b0:23:7f:60:4b: 07:94:8c:e1:90:cc:13:b1:17:51:d2:78:5f:98:09: 18:87:38:64:1d:ae:10:a6:e8:1f:31:e8:45:14:f6: dc:0b:af:65:ab:9d:36:c7:50:4a:2b:e3:41:cf:39: 11:5d:d0:6c:6d:2e:f7:87:a5:81:88:61:a0:f9:87: 68:d6:52:83:08:a5:30:6e:c7:b2:aa:e2:93:5d:92: 71:ed:31:2a:f9:c8:05:dd:7c:d3:80:08:7c:50:0f: 31:ce:10:56:3e:36:e7:fc:13:c1:48:c9:e4:c6:e2: 66:63:95:51:db:0a:00:68:0c:9e:9f:4c:1d:da:d1: 9a:8b:05:4b:55:e9:a4:9a:bf:8b:98:cc:2a:d6:1e: 4c:42:37:70:b0:5d:d8:4a:5b:aa:36:9d:98:47:64: 25:52:0a:6b:cd:92:4a:d2:f7:c9:6c:6a:2f:bb:3c: 17:b7:63:e9:e5:f1:90:ba:e0:0a:23:a3:88:13:8b: 11:3c:31:24:83:69:b6:25:e3:db:0e:27:54:fa:4b: 23:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DB:69:60:05:1B:DF:53:5B:21:AC:FD:23:BA:2C:C0:36:AE:C9:6D X509v3 Authority Key Identifier: keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:67:e5:1e:a5:be:98:d0:47:fc:41:d1:1f:83:e0:6b:f2:b9: e9:f9:a4:78:24:b5:53:50:d8:81:22:3e:22:70:66:d8:7a:4a: e8:21:d5:01:92:f3:4c:9b:45:4f:da:d1:33:a7:58:9b:50:0c: eb:1c:1d:e6:79:bd:67:e9:d6:cf:17:d2:fc:5a:3a:97:1a:da: 6f:fc:dc:02:2b:d2:5e:3b:b3:83:ae:b8:50:5a:7d:14:88:73: 76:e1:44:6e:8c:6c:61:59:71:bb:72:6f:f0:5e:a4:78:2f:0c: 0a:2a:57:59:75:ca:2f:89:77:9a:8a:d8:df:96:1b:3e:27:09: 17:91:b5:ec:92:47:7f:5f:0e:9f:e9:61:cd:f1:5c:0f:c2:88: c6:63:ca:47:5a:38:dd:dd:04:d5:90:1c:52:3f:33:49:ec:39: d1:0f:b0:2f:9f:5b:21:f4:c3:c9:e4:1d:8d:b8:bc:99:4f:ab: 2c:c8:73:fe:a4:06:12:ee:c3:c7:e5:7e:db:fe:7d:87:38:16: d4:36:a5:6e:87:df:9a:54:9b:20:02:c0:df:36:97:61:9e:07: 1b:64:92:29:9e:45:c8:cd:3a:68:1a:61:8c:db:1c:1b:db:42: 2d:0d:a2:a5:0a:a8:26:43:d4:94:14:19:a1:4f:db:4e:c3:d9: b4:6f:80:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCawKqt1Yy3LKb68GbjQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz ZmU0ZjIwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhlNGRiNjk2MDA1MWJkZjUzNWIyMWFjZmQyM2JhMmNjMDM2YWVjOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bQJ9Kq+E81ZrGFi7sNC4C/LP+Ji etSuU65SCvYWz0uDIFX7BBOm8COgIZ90LXQf7fm+B0LosCN/YEsHlIzhkMwTsRdR 0nhfmAkYhzhkHa4QpugfMehFFPbcC69lq502x1BKK+NBzzkRXdBsbS73h6WBiGGg +Ydo1lKDCKUwbseyquKTXZJx7TEq+cgF3XzTgAh8UA8xzhBWPjbn/BPBSMnkxuJm Y5VR2woAaAyen0wd2tGaiwVLVemkmr+LmMwq1h5MQjdwsF3YSluqNp2YR2QlUgpr zZJK0vfJbGovuzwXt2Pp5fGQuuAKI6OIE4sRPDEkg2m2JePbDidU+ksjBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTbaWAFG99TWyGs/SO6LMA2rsltMB8GA1UdIwQY MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2WflHqW+ mNBH/EHRH4Pga/K56fmkeCS1U1DYgSI+InBm2HpK6CHVAZLzTJtFT9rRM6dYm1AM 6xwd5nm9Z+nWzxfS/Fo6lxrab/zcAivSXjuzg664UFp9FIhzduFEboxsYVlxu3Jv 8F6keC8MCipXWXXKL4l3morY35YbPicJF5G17JJHf18On+lhzfFcD8KIxmPKR1o4 3d0E1ZAcUj8zSew50Q+wL59bIfTDyeQdjbi8mU+rLMhz/qQGEu7Dx+V+2/59hzgW 1DalboffmlSbIALA3zaXYZ4HG2SSKZ5FyM06aBphjNscG9tCLQ2ipQqoJkPUlBQZ oU/bTsPZtG+A/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:00 2025 by rpki-client