This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json) Hash identifier: u0Ug7IXcyjvqwpIjXIKvqLqav9HIqkTYXhr8Gu4fYvc= Subject key identifier: 93:29:C9:FE:FA:D0:7D:9D:D5:27:A9:F3:77:D0:4D:2D:49:BA:28:DD Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Certificate serial: 019AF01B0F2DA70EA81D7D7EFF0B50D85EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft Manifest number: 0150 Signing time: Fri 05 Dec 2025 20:01:36 +0000 Manifest this update: Fri 05 Dec 2025 20:01:36 +0000 Manifest next update: Sat 06 Dec 2025 20:01:36 +0000 Files and hashes: 1: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: YgLBDCm4vwfB3ajbhPcFpNmyexOdv949e/6uh0IgyrM=) 2: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=) 3: lVkRZLgugVMJGuDdXaiu9H9U2Qw.roa (hash: cENQFbkj8p8qEi8NksPajunUhEGXlFBx1bfM8cV4t5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1b:0f:2d:a7:0e:a8:1d:7d:7e:ff:0b:50:d8:5e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Validity Not Before: Dec 5 20:01:36 2025 GMT Not After : Dec 6 20:01:36 2025 GMT Subject: CN=9329c9fefad07d9dd527a9f377d04d2d49ba28dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:24:55:ac:4b:65:e8:51:12:e6:45:73:39: 72:9f:ef:fc:f3:64:a3:26:62:80:82:2b:69:43:0e: 10:17:e7:e9:90:82:63:f2:f3:a4:61:a2:69:f2:4e: e8:a1:c6:6c:e8:91:bd:15:af:fa:b5:e7:08:b4:b0: 37:e3:e3:27:37:c0:5d:2e:94:5d:87:09:b0:64:0a: 42:b4:64:01:04:9e:cd:c9:40:4a:57:7d:3f:77:b4: e1:57:98:d6:6c:b1:75:29:70:e4:41:99:cd:ad:2f: 17:1b:3f:a5:b3:cd:94:53:94:ea:b4:ba:75:83:5d: 82:04:0c:13:66:ca:36:00:b8:62:06:b2:cb:ca:52: de:ce:ee:90:97:51:ac:54:3c:98:3b:2f:5e:0e:b2: ae:9b:01:99:a9:72:b6:8a:9f:f6:6f:62:1e:dd:b1: 11:92:4e:28:61:4e:e8:de:59:d9:7e:2f:46:80:c9: c7:4d:67:61:77:10:c8:3f:81:b1:a4:90:02:70:b0: 5b:e6:fc:72:c9:14:ab:b5:87:00:65:f2:be:08:05: e0:df:03:eb:18:25:8d:39:5f:3e:2a:5b:2b:bd:f2: 7c:18:e4:12:6b:56:a1:ee:1b:b7:f2:0e:54:4b:78: 13:e2:d0:ce:7d:af:38:b2:fc:42:02:7a:11:2b:1d: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:29:C9:FE:FA:D0:7D:9D:D5:27:A9:F3:77:D0:4D:2D:49:BA:28:DD X509v3 Authority Key Identifier: keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1f:64:27:96:e9:99:9d:2c:e2:8b:5f:7a:83:ed:da:6a:63: 5f:f2:90:be:83:18:9f:19:da:7d:13:46:9a:81:a5:06:6f:4c: 59:ba:3d:08:93:74:f0:a3:94:ae:19:01:ad:07:9c:27:b5:46: 72:17:87:d3:5d:a6:54:a1:54:60:a2:93:7c:a4:cd:b3:07:ab: 51:d2:84:21:ba:cb:ff:9a:9b:b4:ae:00:da:ca:2b:2d:07:0a: 0b:07:79:c0:3c:8d:8d:a7:91:be:88:85:f9:65:5a:df:c3:3d: 81:bf:af:36:d6:f1:53:e2:1b:55:01:21:60:b0:c4:e3:e4:da: c9:51:f6:a4:bc:b0:b1:ed:58:cc:2c:cc:c0:91:6c:a7:6a:b0: 9b:b4:94:9a:00:18:9c:a8:0e:4e:8c:44:46:e4:b8:6e:61:72: 4e:a1:16:22:09:b8:7f:23:4f:49:5c:08:61:1f:2c:e1:fe:c8: db:cb:ff:66:ed:f9:3b:06:cd:4c:45:25:55:5e:35:cf:2b:b6: 68:ed:43:b5:76:96:f4:99:6e:12:6f:f8:bd:d1:fa:2b:98:ef: a8:7c:a2:9f:8a:82:8a:73:ae:d8:e2:d9:08:7e:09:68:fa:14: a0:d9:9a:03:d5:90:2f:90:07:5c:1c:f7:fa:91:c7:4b:8e:6b: df:38:aa:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGw8tpw6oHX1+/wtQ2F6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm NjQyZTMwHhcNMjUxMjA1MjAwMTM2WhcNMjUxMjA2MjAwMTM2WjAzMTEwLwYDVQQD Eyg5MzI5YzlmZWZhZDA3ZDlkZDUyN2E5ZjM3N2QwNGQyZDQ5YmEyOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolIkVaxLZehREuZFczlyn+/882Sj JmKAgitpQw4QF+fpkIJj8vOkYaJp8k7oocZs6JG9Fa/6tecItLA34+MnN8BdLpRd hwmwZApCtGQBBJ7NyUBKV30/d7ThV5jWbLF1KXDkQZnNrS8XGz+ls82UU5TqtLp1 g12CBAwTZso2ALhiBrLLylLezu6Ql1GsVDyYOy9eDrKumwGZqXK2ip/2b2Ie3bER kk4oYU7o3lnZfi9GgMnHTWdhdxDIP4GxpJACcLBb5vxyyRSrtYcAZfK+CAXg3wPr GCWNOV8+KlsrvfJ8GOQSa1ah7hu38g5US3gT4tDOfa84svxCAnoRKx01QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMpyf760H2d1Sep83fQTS1JuijdMB8GA1UdIwQY MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt N2Y2ZWU3YTc2NTY1LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1 LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZh9kJ5bp mZ0s4otfeoPt2mpjX/KQvoMYnxnafRNGmoGlBm9MWbo9CJN08KOUrhkBrQecJ7VG cheH012mVKFUYKKTfKTNswerUdKEIbrL/5qbtK4A2sorLQcKCwd5wDyNjaeRvoiF +WVa38M9gb+vNtbxU+IbVQEhYLDE4+TayVH2pLywse1YzCzMwJFsp2qwm7SUmgAY nKgOToxERuS4bmFyTqEWIgm4fyNPSVwIYR8s4f7I28v/Zu35OwbNTEUlVV41zyu2 aO1DtXaW9JluEm/4vdH6K5jvqHyin4qCinOu2OLZCH4JaPoUoNmaA9WQL5AHXBz3 +pHHS45r3ziqNA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:51:15 2025 by rpki-client