This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json) Hash identifier: C8Dj1QkewrzSmkm/k/VY4fBP9nBJJPlbP7vbdBn0dsk= Subject key identifier: 08:E4:FB:EC:31:8C:60:03:DA:E9:6D:16:A4:4F:6E:F3:10:29:88:73 Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Certificate serial: 019AF1D1B8F5371CBA726428FE164926B956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:00:44 +0000 Manifest this update: Sat 06 Dec 2025 04:00:44 +0000 Manifest next update: Sun 07 Dec 2025 04:00:44 +0000 Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: SklM9CdIvj29PGZqT3rVf+A7hZTyq4JIxIdtzDmQxKg=) 2: Xz5fRm1rvrLEvX3nzQNpvfuqwdQ.roa (hash: 3vZNMQRQpFvLq3O7/5316ZbW91wqqPn0EJ7/sIa76eA=) 3: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=) 4: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=) 5: yoc8JMk-9f_YUHXEL_9_ZmX1Dg4.roa (hash: vHYZAYQIcTZ88hbC8SwB+Nm3QsYJxFwlJCLWjy+CEWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b8:f5:37:1c:ba:72:64:28:fe:16:49:26:b9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234 Validity Not Before: Dec 6 04:00:44 2025 GMT Not After : Dec 7 04:00:44 2025 GMT Subject: CN=08e4fbec318c6003dae96d16a44f6ef310298873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:72:e3:26:e7:97:3e:93:e0:e3:05:6e:eb: e4:d5:88:29:9c:ca:77:27:43:23:7c:46:95:46:70: 01:a3:43:c5:b7:e1:a0:80:1b:6b:53:68:cc:e6:66: c2:bf:d1:cf:22:64:29:4e:6e:91:e1:33:1e:b5:8f: 29:27:98:73:a8:17:9e:f7:76:21:a5:f8:6a:ff:53: 39:e5:a3:a2:78:d8:a2:a2:ba:96:12:96:ec:24:67: 41:5f:7b:79:6d:23:6d:b4:0c:e6:67:3a:69:77:35: f4:55:b9:13:89:50:7f:92:45:d6:83:7d:51:21:7f: 26:23:a2:4c:3d:44:9c:b2:03:3a:ba:37:0b:ef:b2: 88:b5:da:f1:ee:ef:1e:4c:e0:49:8b:73:c0:ca:18: 8d:fc:9c:9d:7e:52:16:1d:85:86:e6:e4:b8:66:d8: 2b:72:87:c4:38:6d:68:74:fd:3b:43:0b:71:90:c5: 04:e0:c8:15:a8:60:a1:b6:91:40:63:22:d8:12:b7: 22:4d:63:00:09:b5:b1:fc:5e:d1:89:35:fa:cf:4c: 60:eb:62:a3:44:14:be:64:72:d1:00:6a:42:6c:2f: 5b:95:0c:65:6b:e5:6d:81:15:7d:fd:3e:01:a6:04: c3:a0:db:5f:d5:b2:c0:45:1c:81:a2:c0:3b:4e:e2: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E4:FB:EC:31:8C:60:03:DA:E9:6D:16:A4:4F:6E:F3:10:29:88:73 X509v3 Authority Key Identifier: keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1e:d3:9c:eb:65:a9:e9:39:16:4a:76:93:ac:5e:e1:e1:2b: 4f:0b:15:82:19:87:65:d4:79:6c:07:1e:c2:5d:cd:60:6e:1f: a0:de:be:84:76:81:de:8a:04:6e:91:f9:0d:9d:ad:3d:8f:dd: 33:74:cc:12:d0:1b:30:ee:df:4f:dd:13:65:71:c5:22:aa:3a: a1:9c:0d:09:7b:5a:5c:5b:a6:5f:23:42:21:99:27:b1:52:b3: 0f:d9:ae:ee:64:78:3c:f9:ed:7e:23:c0:aa:e5:1f:87:66:dd: 06:42:d1:01:fe:43:4f:ea:c9:f0:e9:c0:e4:44:d7:c6:6a:d1: fc:ac:d2:0b:94:95:f7:cf:ac:10:ad:06:e4:22:d7:b4:e7:73: 82:b3:97:a6:c1:5b:aa:bb:11:f7:45:50:7e:ac:9c:db:39:a7: b7:b4:46:92:c6:93:a7:7d:c0:0c:48:9c:8a:8e:09:c4:be:17: 57:86:41:73:d1:e4:65:16:a9:a7:d8:46:95:63:02:37:75:04: df:52:7f:fb:f6:a8:8f:6e:26:8e:3a:d6:8f:85:81:c4:97:77: 5b:53:9c:e4:c2:03:08:4c:83:3c:5d:4c:e9:fa:a5:e9:66:6f: b9:1b:cf:3b:ce:6d:70:5b:ac:d9:3e:ba:82:d4:73:91:83:ff: 7c:2b:3e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bj1Nxy6cmQo/hZJJrlWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNmVkZjIzMjY0YjQzODIxZGFlOTdkMTBiZDM2NGNiNmJi N2YyMzQwHhcNMjUxMjA2MDQwMDQ0WhcNMjUxMjA3MDQwMDQ0WjAzMTEwLwYDVQQD EygwOGU0ZmJlYzMxOGM2MDAzZGFlOTZkMTZhNDRmNmVmMzEwMjk4ODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXVy4ybnlz6T4OMFbuvk1YgpnMp3 J0MjfEaVRnABo0PFt+GggBtrU2jM5mbCv9HPImQpTm6R4TMetY8pJ5hzqBee93Yh pfhq/1M55aOieNiiorqWEpbsJGdBX3t5bSNttAzmZzppdzX0VbkTiVB/kkXWg31R IX8mI6JMPUScsgM6ujcL77KItdrx7u8eTOBJi3PAyhiN/JydflIWHYWG5uS4Ztgr cofEOG1odP07QwtxkMUE4MgVqGChtpFAYyLYErciTWMACbWx/F7RiTX6z0xg62Kj RBS+ZHLRAGpCbC9blQxla+VtgRV9/T4BpgTDoNtf1bLARRyBosA7TuK4jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjk++wxjGAD2ultFqRPbvMQKYhzMB8GA1UdIwQY MBaAFCpu3yMmS0OCHa6X0QvTZMtrt/I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUt ZDQyOGYyMzQ5NjYwLzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUtZDQyOGYyMzQ5NjYw LzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALx7TnOtl qek5Fkp2k6xe4eErTwsVghmHZdR5bAcewl3NYG4foN6+hHaB3ooEbpH5DZ2tPY/d M3TMEtAbMO7fT90TZXHFIqo6oZwNCXtaXFumXyNCIZknsVKzD9mu7mR4PPntfiPA quUfh2bdBkLRAf5DT+rJ8OnA5ETXxmrR/KzSC5SV98+sEK0G5CLXtOdzgrOXpsFb qrsR90VQfqyc2zmnt7RGksaTp33ADEicio4JxL4XV4ZBc9HkZRapp9hGlWMCN3UE 31J/+/aoj24mjjrWj4WBxJd3W1Oc5MIDCEyDPF1M6fql6WZvuRvPO85tcFus2T66 gtRzkYP/fCs+Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:09 2025 by rpki-client