This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json) Hash identifier: EtN9UfwZ/f4ranIpr8hYJsqmjNDH0EQUhyhTE0GhniU= Subject key identifier: E5:A8:FD:AA:6A:52:C8:CD:72:0E:40:A7:A8:FD:B6:98:C5:FC:AD:AB Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee Certificate serial: 019AF2AD5B43D5A2552F451D8456DD2A2A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft Manifest number: 1401 Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: Ju+AN0HOKSCc7FZsKgvdogQ0CeoA0UedWQlCyd+7fB8=) 2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5b:43:d5:a2:55:2f:45:1d:84:56:dd:2a:2a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=e5a8fdaa6a52c8cd720e40a7a8fdb698c5fcadab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:9d:43:cb:a4:91:50:69:29:ef:42:b1:31: 47:0e:bd:da:22:d3:43:43:7f:8e:81:0a:10:c7:9b: 6e:08:40:24:72:c1:40:37:b2:2d:63:82:5b:1e:58: c8:cb:31:43:9f:3d:6a:58:53:d7:37:85:d7:8b:9b: 5d:a0:59:26:1f:3b:7e:aa:8a:9a:a6:8a:ca:31:01: 11:65:b7:d9:cd:7c:e2:61:1e:7c:49:36:41:5c:79: c3:e0:50:19:54:a9:e1:ad:32:91:6f:fa:bd:28:75: 8e:e2:be:bc:75:44:13:62:e4:c7:6e:a5:81:93:3b: e4:47:d3:91:6a:96:79:0a:14:5a:93:a1:c0:f2:f7: 1a:a4:a5:e5:9a:8a:5c:f8:5b:d7:90:dc:da:1f:04: d6:82:b0:89:06:67:06:c1:ce:f5:4b:2b:76:fb:3b: af:a0:a5:5c:00:0d:b5:b8:c6:07:ae:55:a1:88:67: 96:f7:54:3f:8a:6e:2a:ce:57:14:8b:56:f8:92:e8: b5:7d:1e:8d:1b:28:26:ef:9d:15:c4:80:5e:bd:a4: 9b:c9:13:f2:cc:d4:17:bf:44:55:ae:3f:b8:44:c4: be:d1:0e:e9:0f:9a:2c:d3:94:74:b1:ac:62:68:b4: da:3e:92:14:c9:e5:04:f8:15:f2:92:08:17:e6:d6: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A8:FD:AA:6A:52:C8:CD:72:0E:40:A7:A8:FD:B6:98:C5:FC:AD:AB X509v3 Authority Key Identifier: keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:1c:2f:f6:54:ee:7a:85:9e:9d:40:82:c0:49:a0:fe:83:3d: be:6f:c3:8a:66:c9:39:51:76:8b:82:b2:a4:3b:de:19:8a:63: e1:b8:4f:42:9e:66:aa:1a:e2:35:db:22:50:ce:16:7d:0b:28: ac:ab:3d:ff:75:26:20:7e:66:61:20:2e:e3:90:67:34:d9:0f: d7:62:da:b8:f3:7e:24:81:74:d1:7e:5b:d3:5a:d7:5e:b2:95: aa:12:62:e5:10:28:60:c8:2c:23:ad:c2:95:ab:ad:81:a5:36: de:18:4a:4e:a7:af:d6:ad:39:d9:d5:17:15:cf:b6:5e:64:d3: df:89:bc:37:08:27:d8:fc:c6:60:3a:e5:9a:25:f4:7a:e5:8c: e7:28:76:e3:6b:ee:13:af:56:8a:76:cb:2f:c2:7b:67:9f:1c: 40:78:0d:5b:10:9d:c9:51:e3:6f:60:d0:7a:ad:c3:cd:5d:1d: 52:4d:8d:fa:3d:d2:4e:bd:b6:8c:72:f4:7a:4b:66:25:0f:33: 2a:1b:3c:b1:7b:10:f4:2b:19:2b:26:77:48:75:30:ca:b0:a0: 0f:7f:1d:eb:01:ba:a4:d9:88:d6:56:7f:1d:bf:5e:c2:df:42: e2:a7:18:22:ba:9b:e4:0b:4b:6f:a8:62:dc:55:29:bc:b1:37: a2:40:dc:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVtD1aJVL0UdhFbdKiooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1 MDhmZWUwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD EyhlNWE4ZmRhYTZhNTJjOGNkNzIwZTQwYTdhOGZkYjY5OGM1ZmNhZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR6dQ8ukkVBpKe9CsTFHDr3aItND Q3+OgQoQx5tuCEAkcsFAN7ItY4JbHljIyzFDnz1qWFPXN4XXi5tdoFkmHzt+qoqa porKMQERZbfZzXziYR58STZBXHnD4FAZVKnhrTKRb/q9KHWO4r68dUQTYuTHbqWB kzvkR9ORapZ5ChRak6HA8vcapKXlmopc+FvXkNzaHwTWgrCJBmcGwc71Syt2+zuv oKVcAA21uMYHrlWhiGeW91Q/im4qzlcUi1b4kui1fR6NGygm750VxIBevaSbyRPy zNQXv0RVrj+4RMS+0Q7pD5os05R0saxiaLTaPpIUyeUE+BXykggX5tafYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWo/apqUsjNcg5Ap6j9tpjF/K2rMB8GA1UdIwQY MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2 LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBwv9lTu eoWenUCCwEmg/oM9vm/DimbJOVF2i4KypDveGYpj4bhPQp5mqhriNdsiUM4WfQso rKs9/3UmIH5mYSAu45BnNNkP12LauPN+JIF00X5b01rXXrKVqhJi5RAoYMgsI63C lautgaU23hhKTqev1q052dUXFc+2XmTT34m8Nwgn2PzGYDrlmiX0euWM5yh242vu E69WinbLL8J7Z58cQHgNWxCdyVHjb2DQeq3DzV0dUk2N+j3STr22jHL0ektmJQ8z Khs8sXsQ9CsZKyZ3SHUwyrCgD38d6wG6pNmI1lZ/Hb9ewt9C4qcYIrqb5AtLb6hi 3FUpvLE3okDcZg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:00 2025 by rpki-client