This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft File: K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json) Hash identifier: 4M4wQnLkThgbYBrHAQlAZ6Jogr50CoykslJh/SGnZNE= Subject key identifier: 91:E9:1D:EB:77:02:FC:37:B7:E2:26:91:65:DF:5C:7F:6D:63:B8:E6 Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e Certificate serial: 019AF1D1FD921E12B36F78F7F419999EDFC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft Manifest number: 116F Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: +PrtW24sUNSOPZkQR58CsXGhXi0hj9IN7K63q+H5i8o=) 2: aK_WMtrzKAXs0LTqbVOCa8ChzP8.roa (hash: f1Um7efAs/j5iF2wB08cWIqaipZskvxt+HmOXtWDHMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fd:92:1e:12:b3:6f:78:f7:f4:19:99:9e:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=91e91deb7702fc37b7e2269165df5c7f6d63b8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7c:fa:5c:b5:1b:0f:39:8a:32:4e:5a:f2:b0: 80:64:06:f6:4a:90:e3:d2:cd:a9:56:20:c1:3c:e0: ff:22:8c:c2:1d:a0:0e:cb:6e:a7:63:c9:b7:67:0e: 5b:57:12:70:2d:d8:75:86:56:19:dc:c0:93:85:74: 95:ce:14:85:7f:1e:58:6f:5a:c8:1d:6c:f1:7c:f8: 41:37:e4:12:fb:ae:ce:e9:49:d9:17:a7:b9:2a:0d: b0:94:62:7a:55:93:f9:4c:4c:59:a2:1e:67:5c:af: 07:53:70:03:a0:b8:0a:19:ac:97:58:ec:58:24:3e: 19:43:28:42:8f:24:4f:ef:f4:93:fe:86:a5:84:fe: 4b:a6:85:3e:cc:80:90:90:41:8d:a6:70:ff:e2:a9: b2:c6:50:ee:fc:bb:e5:fd:ce:66:4e:f1:18:d7:16: b5:29:6e:67:b4:e0:70:d9:e9:20:7a:56:17:ba:46: 92:1c:9c:15:b5:64:08:1b:1e:86:09:92:75:a3:49: 19:7f:df:da:90:eb:a5:a2:b8:d0:e4:02:72:e4:5d: 8d:01:7d:66:51:fc:1f:37:74:f7:a7:53:64:25:2d: 9d:38:f3:0a:6c:e2:20:ec:e4:f4:91:80:72:fe:01: 7d:21:f3:24:e8:14:a6:dd:2e:60:a9:27:51:a2:69: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E9:1D:EB:77:02:FC:37:B7:E2:26:91:65:DF:5C:7F:6D:63:B8:E6 X509v3 Authority Key Identifier: keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e4:a5:76:1b:52:1d:2e:50:1e:4d:91:b7:40:27:eb:7b:8e: da:49:93:2c:fe:b7:1d:44:e6:f6:8b:eb:31:f6:f5:a5:16:9a: a6:03:bc:0e:8b:bc:1c:11:0d:3b:bf:0a:e4:c9:3b:11:88:d7: 08:c5:e3:d9:5b:53:c3:15:d3:6b:aa:92:7c:69:b8:36:c5:0d: 77:46:73:0c:72:6b:38:3c:5f:ee:0b:86:62:13:24:ee:02:5b: 00:4b:30:48:b9:ce:e1:72:31:56:2f:a5:84:6c:ac:6f:66:2d: cc:e6:ab:75:88:d6:75:8c:54:2b:4c:19:54:38:30:3c:d6:f6: c9:a3:39:15:73:f0:20:a1:fb:20:70:c8:02:9d:5f:c3:ca:a8: f4:89:17:ee:31:fa:59:54:3b:9d:d4:3e:4f:61:9d:0a:0f:d7: 90:66:90:a7:58:38:72:4f:36:84:c3:5c:ce:53:d5:03:bf:b5: 9e:c1:f9:3a:53:b7:f2:dc:67:8c:75:66:93:93:14:a1:26:d2: 3e:72:52:89:aa:b2:14:20:ed:e6:90:2d:d9:2c:da:de:76:99: 41:28:19:33:a2:00:49:0e:aa:f0:8c:d7:73:2c:e3:cd:b5:7a: 25:a4:de:b2:e1:a7:a9:d5:99:0d:7d:b2:a7:0a:9b:da:53:d9: 5e:1f:35:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0f2SHhKzb3j39BmZnt/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODFjNzUzYjc3NjY1ZTdhNTlmOGU1MDgzMTRmMTU5MzU2 YzIyOGUwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD Eyg5MWU5MWRlYjc3MDJmYzM3YjdlMjI2OTE2NWRmNWM3ZjZkNjNiOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknz6XLUbDzmKMk5a8rCAZAb2SpDj 0s2pViDBPOD/IozCHaAOy26nY8m3Zw5bVxJwLdh1hlYZ3MCThXSVzhSFfx5Yb1rI HWzxfPhBN+QS+67O6UnZF6e5Kg2wlGJ6VZP5TExZoh5nXK8HU3ADoLgKGayXWOxY JD4ZQyhCjyRP7/ST/oalhP5LpoU+zICQkEGNpnD/4qmyxlDu/Lvl/c5mTvEY1xa1 KW5ntOBw2ekgelYXukaSHJwVtWQIGx6GCZJ1o0kZf9/akOulorjQ5AJy5F2NAX1m UfwfN3T3p1NkJS2dOPMKbOIg7OT0kYBy/gF9IfMk6BSm3S5gqSdRommaPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHpHet3Avw3t+ImkWXfXH9tY7jmMB8GA1UdIwQY MBaAFCuBx1O3dmXnpZ+OUIMU8Vk1bCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmIt NTg3YWVmNmRjMjg1LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmItNTg3YWVmNmRjMjg1 LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOSldhtS HS5QHk2Rt0An63uO2kmTLP63HUTm9ovrMfb1pRaapgO8Dou8HBENO78K5Mk7EYjX CMXj2VtTwxXTa6qSfGm4NsUNd0ZzDHJrODxf7guGYhMk7gJbAEswSLnO4XIxVi+l hGysb2YtzOardYjWdYxUK0wZVDgwPNb2yaM5FXPwIKH7IHDIAp1fw8qo9IkX7jH6 WVQ7ndQ+T2GdCg/XkGaQp1g4ck82hMNczlPVA7+1nsH5OlO38txnjHVmk5MUoSbS PnJSiaqyFCDt5pAt2Sza3naZQSgZM6IASQ6q8IzXcyzjzbV6JaTesuGnqdWZDX2y pwqb2lPZXh81vw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:10 2025 by rpki-client