This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json) Hash identifier: 8qMG2ttbBYnI/qNHljly9JjUUvvZlCe52xsm6maEaW4= Subject key identifier: DF:F4:70:39:AC:C5:B9:28:0C:5A:21:D7:42:83:04:30:37:74:62:0B Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Certificate serial: 019B2BF8BE998B43DF5CB3E4C092AC4AAAFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 11:01:20 +0000 Manifest this update: Wed 17 Dec 2025 11:01:20 +0000 Manifest next update: Thu 18 Dec 2025 11:01:20 +0000 Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: nmCqnzlOHXkz5ODCboNW8j2WmUOZRn8dQwCyxt3aYtU=) 2: bUHKbn34m9YZfg0LWUckx1_q0Mc.roa (hash: Bh0vmrRSsDhj05TsHSvScRpLwoC6mmV/tmtMQaNdewI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:be:99:8b:43:df:5c:b3:e4:c0:92:ac:4a:aa:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2 Validity Not Before: Dec 17 11:01:20 2025 GMT Not After : Dec 18 11:01:20 2025 GMT Subject: CN=dff47039acc5b9280c5a21d7428304303774620b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:3d:d2:07:ed:cf:32:23:9d:cd:65:15:13: 9a:31:66:c3:34:79:27:96:db:da:e9:f7:81:7b:20: 20:af:73:a8:f3:c7:50:d4:5d:54:0c:75:df:dd:19: 17:ba:21:6e:58:a7:58:83:b1:f9:c4:68:58:9d:b9: ed:af:10:e6:d0:af:33:12:69:5f:73:f8:29:6f:be: 91:74:58:9d:51:dc:a9:af:4e:9b:02:4e:76:43:20: 63:6a:b6:c5:aa:58:ab:1f:61:de:80:3b:fb:b6:2f: ba:9f:e1:b8:d8:be:00:c1:bc:34:69:5c:c3:bc:5e: f0:8c:73:e3:b0:70:7d:50:2e:65:39:e9:ea:aa:87: cf:ee:23:80:2f:60:28:77:f0:ee:76:ce:c5:09:2f: 56:24:ec:d9:31:2e:42:7b:eb:d7:c7:84:0b:b5:8b: f0:14:62:ea:29:44:63:dc:a8:50:6d:bc:64:e3:60: e7:b3:3b:96:94:a1:37:2e:84:a2:f2:07:55:0e:16: 77:80:3d:af:5b:6d:f3:cd:e9:ef:29:7f:c9:07:e8: 72:52:31:da:71:82:0b:50:91:6e:00:5c:a4:ee:f5: 9f:6d:66:3d:46:22:4a:01:00:6e:0f:3b:5c:c2:3c: bd:db:75:2b:6c:bd:1f:00:e4:bd:14:b0:c1:85:73: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F4:70:39:AC:C5:B9:28:0C:5A:21:D7:42:83:04:30:37:74:62:0B X509v3 Authority Key Identifier: keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:43:94:05:ae:30:81:a7:af:54:90:19:2f:27:7d:1c:0f:5a: 36:6e:8d:af:f9:87:0a:49:78:f7:4b:d1:4e:ba:42:7b:4f:a8: c8:e3:0f:ac:a6:f5:d3:ff:ca:e8:ff:6d:7e:3f:e3:23:b1:32: 81:0e:93:db:70:f5:7b:cc:62:cd:c2:8d:e5:29:f4:a0:5e:ac: b6:6a:1e:38:b6:4e:4f:4c:6c:57:40:26:cc:06:6e:07:d2:e5: d0:00:3c:f5:57:52:53:cb:fd:65:de:36:80:55:29:9b:1c:4a: 46:e5:4b:a3:32:df:43:28:b0:50:38:0a:2d:18:63:35:4c:60: af:e8:be:4f:8c:50:1c:56:c2:d0:5c:47:31:4f:28:f2:91:06: b2:3c:33:71:a3:a5:d2:35:89:a5:54:c9:5c:35:7b:96:dc:1a: 23:9b:15:46:05:1c:27:e0:76:7a:b6:7a:d9:56:3c:a2:24:7d: 3d:8f:90:1c:17:85:00:c0:e9:46:3c:d4:b5:e4:07:c6:c9:cb: dc:2a:97:9a:ad:cf:8b:25:0f:52:1a:fc:9f:0f:7e:79:51:75: 05:7d:2b:76:d1:f8:90:ec:52:ec:86:58:06:43:8b:53:f0:ab: 7c:fd:26:db:0b:6e:e9:06:f7:95:18:b5:c0:fe:ae:ea:b6:aa: c8:1c:e3:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+L6Zi0PfXLPkwJKsSqr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz ZmU0ZjIwHhcNMjUxMjE3MTEwMTIwWhcNMjUxMjE4MTEwMTIwWjAzMTEwLwYDVQQD EyhkZmY0NzAzOWFjYzViOTI4MGM1YTIxZDc0MjgzMDQzMDM3NzQ2MjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGo90gftzzIjnc1lFROaMWbDNHkn ltva6feBeyAgr3Oo88dQ1F1UDHXf3RkXuiFuWKdYg7H5xGhYnbntrxDm0K8zEmlf c/gpb76RdFidUdypr06bAk52QyBjarbFqlirH2HegDv7ti+6n+G42L4Awbw0aVzD vF7wjHPjsHB9UC5lOenqqofP7iOAL2Aod/Duds7FCS9WJOzZMS5Ce+vXx4QLtYvw FGLqKURj3KhQbbxk42DnszuWlKE3LoSi8gdVDhZ3gD2vW23zzenvKX/JB+hyUjHa cYILUJFuAFyk7vWfbWY9RiJKAQBuDztcwjy923UrbL0fAOS9FLDBhXP5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/0cDmsxbkoDFoh10KDBDA3dGILMB8GA1UdIwQY MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkOUBa4w gaevVJAZLyd9HA9aNm6Nr/mHCkl490vRTrpCe0+oyOMPrKb10//K6P9tfj/jI7Ey gQ6T23D1e8xizcKN5Sn0oF6stmoeOLZOT0xsV0AmzAZuB9Ll0AA89VdSU8v9Zd42 gFUpmxxKRuVLozLfQyiwUDgKLRhjNUxgr+i+T4xQHFbC0FxHMU8o8pEGsjwzcaOl 0jWJpVTJXDV7ltwaI5sVRgUcJ+B2erZ62VY8oiR9PY+QHBeFAMDpRjzUteQHxsnL 3CqXmq3PiyUPUhr8nw9+eVF1BX0rdtH4kOxS7IZYBkOLU/CrfP0m2wtu6Qb3lRi1 wP6u6raqyBzjeg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:47 2025 by rpki-client