This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json) Hash identifier: tKOtF3ASLVRYzDPt9AvQggrTsdKH13RLC78gBc0T8xo= Subject key identifier: EB:C9:41:2F:67:2C:69:C9:A7:40:EA:9D:58:EB:B1:53:B1:AC:3C:B8 Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Certificate serial: 019AF12D3064E27B83D002F33FAD42D5FDB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft Manifest number: 04C7 Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=) 2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: 0hr+3ksyBeZq7Fye359ruKsl0xTUnY1pUzMPg8bj1+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:30:64:e2:7b:83:d0:02:f3:3f:ad:42:d5:fd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7 Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=ebc9412f672c69c9a740ea9d58ebb153b1ac3cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:e3:93:1e:2e:27:b5:d7:2f:bc:36:76:be: d4:03:a1:6e:16:02:f7:09:27:4f:33:e5:e1:55:82: e0:a8:85:1c:70:12:cf:04:30:31:bb:17:55:ca:46: 66:0e:0e:ec:7f:b8:a8:e9:07:5e:2e:20:2e:b0:04: 0e:06:89:af:76:06:09:ab:7b:04:bb:6c:63:c1:c1: e9:43:8d:3c:a0:7d:7e:bf:9a:23:a0:d4:ba:b7:7d: 0c:13:af:8f:53:54:f7:be:31:11:0c:0e:28:c0:6c: 6c:9b:94:15:f2:a1:8f:67:2c:ce:21:89:e2:57:9f: ef:62:63:5a:3c:8b:5f:f1:7e:a2:e4:3c:d4:1f:9a: 2c:f1:d5:8d:e5:c7:e9:c3:c7:ba:36:bf:d2:33:2f: 75:79:bd:38:51:ea:be:7b:b0:de:7a:22:ab:a9:3b: 6b:c8:06:5b:57:82:5c:92:aa:10:e6:5a:60:0f:a9: 51:bf:7b:b5:0d:a8:80:af:b7:60:01:df:cd:cd:aa: f7:95:ab:8c:8b:fc:88:20:7e:1b:d2:07:a3:74:ba: 8f:70:df:14:bf:b4:82:99:44:9a:49:f6:8e:8f:54: eb:a6:89:94:32:bb:ce:ff:63:ca:17:6d:49:9e:f7: b5:dc:0b:54:f3:e6:74:fc:35:f9:ad:c5:82:c6:97: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C9:41:2F:67:2C:69:C9:A7:40:EA:9D:58:EB:B1:53:B1:AC:3C:B8 X509v3 Authority Key Identifier: keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:48:a4:3f:5d:bb:f4:9a:99:b4:f0:ef:88:57:95:8d:60:65: 39:62:c5:c1:05:e6:d1:9b:de:e8:bf:d4:f5:5d:e0:29:e4:42: 22:84:cc:11:1a:73:23:b1:80:ca:7e:9e:9a:0f:60:15:6f:f9: 34:12:9b:ef:cb:f4:8c:ed:73:96:6f:fa:dc:30:2e:e3:ee:f9: c8:58:06:f2:07:fc:43:ae:8c:61:8c:a5:7a:87:b8:be:53:14: fc:91:6d:6f:d6:35:1e:87:57:07:36:d7:e0:79:ec:c0:31:a7: 26:7f:bd:da:a6:e0:0f:d4:7f:f8:e3:36:c1:5d:ec:3d:3c:58: 6c:cc:73:61:5a:c0:d4:38:7d:b4:c3:12:0a:55:47:14:c1:4c: 05:a3:54:91:e9:5c:d6:9b:e0:be:08:44:49:36:f0:9d:74:46: ba:12:e8:30:6b:39:2e:4e:6a:9f:af:19:e0:87:91:fc:3d:e2: 00:1e:54:7d:b8:ec:d6:87:3e:cb:45:f5:8b:db:bd:14:ac:cb: 33:80:de:d7:4a:87:bc:db:8f:33:f5:b0:ea:5d:40:ac:ae:02: 42:93:f8:dc:ea:e1:2a:a4:87:da:b4:87:98:7c:3b:42:8f:c1: 79:3c:69:50:e3:eb:f8:53:c4:11:89:b2:46:dc:0d:e9:99:ff: 62:ca:e3:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTBk4nuD0ALzP61C1f2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3 NThkZTcwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD EyhlYmM5NDEyZjY3MmM2OWM5YTc0MGVhOWQ1OGViYjE1M2IxYWMzY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKfjkx4uJ7XXL7w2dr7UA6FuFgL3 CSdPM+XhVYLgqIUccBLPBDAxuxdVykZmDg7sf7io6QdeLiAusAQOBomvdgYJq3sE u2xjwcHpQ408oH1+v5ojoNS6t30ME6+PU1T3vjERDA4owGxsm5QV8qGPZyzOIYni V5/vYmNaPItf8X6i5DzUH5os8dWN5cfpw8e6Nr/SMy91eb04Ueq+e7DeeiKrqTtr yAZbV4JckqoQ5lpgD6lRv3u1DaiAr7dgAd/Nzar3lauMi/yIIH4b0gejdLqPcN8U v7SCmUSaSfaOj1TrpomUMrvO/2PKF21Jnve13AtU8+Z0/DX5rcWCxpcuGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvJQS9nLGnJp0DqnVjrsVOxrDy4MB8GA1UdIwQY MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEikP127 9JqZtPDviFeVjWBlOWLFwQXm0Zve6L/U9V3gKeRCIoTMERpzI7GAyn6emg9gFW/5 NBKb78v0jO1zlm/63DAu4+75yFgG8gf8Q66MYYyleoe4vlMU/JFtb9Y1HodXBzbX 4HnswDGnJn+92qbgD9R/+OM2wV3sPTxYbMxzYVrA1Dh9tMMSClVHFMFMBaNUkelc 1pvgvghESTbwnXRGuhLoMGs5Lk5qn68Z4IeR/D3iAB5Ufbjs1oc+y0X1i9u9FKzL M4De10qHvNuPM/Ww6l1ArK4CQpP43OrhKqSH2rSHmHw7Qo/BeTxpUOPr+FPEEYmy RtwN6Zn/YsrjAg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:04 2025 by rpki-client