This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json) Hash identifier: 15d5U4g8FxsavKU+y9BWJOSSatsDUFSD0c8+Cr0IRgQ= Subject key identifier: 2E:2B:C8:54:33:57:51:B8:6D:10:8C:A3:33:F9:0B:4A:A8:7C:6A:03 Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b Certificate serial: 019B3EDA0EDFBA14470E9F267A919EC21D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft Manifest number: 154F Signing time: Sun 21 Dec 2025 03:00:36 +0000 Manifest this update: Sun 21 Dec 2025 03:00:36 +0000 Manifest next update: Mon 22 Dec 2025 03:00:36 +0000 Files and hashes: 1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=) 2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: d1+AkLgrQl2phop113JrVnT8HMnKt6Xc8v9FBRXAYJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:0e:df:ba:14:47:0e:9f:26:7a:91:9e:c2:1d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b Validity Not Before: Dec 21 03:00:36 2025 GMT Not After : Dec 22 03:00:36 2025 GMT Subject: CN=2e2bc854335751b86d108ca333f90b4aa87c6a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:fd:0a:2f:d4:c2:29:44:56:d8:7f:45:d0: f6:72:6a:37:f1:33:72:4f:9e:b8:3f:22:eb:a4:e8: c6:84:b1:e8:97:81:9e:36:7c:11:03:03:04:13:1f: e6:2b:82:c6:d1:3c:53:30:38:28:66:f4:6f:40:0f: 03:21:90:45:fa:4a:2a:f5:ec:72:0c:0e:06:0f:e8: 0a:fc:9f:79:86:0c:f8:16:d2:e9:60:03:e5:af:06: 7b:82:f6:1e:86:bf:4e:67:85:8a:50:6a:f4:19:ce: e7:35:e7:c9:84:ad:a7:be:70:a3:5a:ec:27:11:05: 39:a9:ce:97:5a:97:f1:93:30:16:be:8f:e0:7b:c2: 11:74:f7:c4:80:a9:15:70:a5:ff:7f:7d:5a:3e:82: 1b:15:1b:11:88:42:aa:ca:4d:44:c5:85:f3:05:c1: e0:68:71:00:f3:06:c1:df:cc:7c:db:21:a6:0e:88: 72:ff:cc:75:54:d6:3c:e5:59:59:87:8f:36:f2:1e: 49:60:0f:38:b9:f2:91:7f:4d:24:7a:31:79:96:a8: d6:7e:20:23:60:35:9c:46:e5:00:12:59:f3:a2:58: 6c:81:73:47:0b:15:41:43:ad:83:11:69:5a:05:24: 77:71:f1:5a:28:d1:3c:28:55:5c:7b:4a:0e:83:03: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2B:C8:54:33:57:51:B8:6D:10:8C:A3:33:F9:0B:4A:A8:7C:6A:03 X509v3 Authority Key Identifier: keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:85:34:8b:a5:7f:6f:7c:2d:80:79:e2:41:52:82:4d:5f:7e: 4f:6c:e5:47:ba:e4:1a:91:66:1a:3f:4a:34:4d:4e:12:83:48: 5c:37:7f:da:a9:e9:bd:be:7f:70:f6:72:51:5a:66:0c:e8:14: a1:96:ca:de:63:44:66:59:5d:16:97:9f:77:87:2f:a2:b1:0b: cc:a3:b9:b8:27:a0:54:b2:06:8c:af:d3:73:33:5e:f3:76:58: 9b:c0:2b:db:98:06:e2:b5:29:d1:73:c4:5c:b1:09:16:1f:f8: 25:c6:6c:41:97:e6:e0:3d:88:43:b5:9b:cd:ae:18:89:b4:38: d8:d2:2c:17:84:74:4e:08:91:d9:aa:14:77:dc:b1:fd:cb:9c: ae:e3:85:69:ba:5b:e3:0a:fb:21:17:de:28:0b:97:8e:f7:b5: dc:b2:9d:0a:42:62:52:3a:ed:c2:2c:51:39:21:ae:ef:c5:23: b0:57:e5:74:8a:b0:6a:7b:56:69:25:0f:bc:e5:f6:f8:36:09: 46:73:3b:d3:27:64:27:8a:6d:94:47:90:b3:0e:1c:aa:fb:44: 48:ab:bb:3b:10:12:9e:44:6b:bd:d0:50:89:08:be:18:ea:d5: c8:ef:d3:49:8e:2c:91:8a:b7:40:fa:62:64:38:70:8f:74:9d: 05:52:91:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2g7fuhRHDp8mepGewh1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYmM4ZGRiODAzMmUxODRjOTJiZmUyMDZlMzI4ZjJjMDVk NzhlNGIwHhcNMjUxMjIxMDMwMDM2WhcNMjUxMjIyMDMwMDM2WjAzMTEwLwYDVQQD EygyZTJiYzg1NDMzNTc1MWI4NmQxMDhjYTMzM2Y5MGI0YWE4N2M2YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSD9Ci/UwilEVth/RdD2cmo38TNy T564PyLrpOjGhLHol4GeNnwRAwMEEx/mK4LG0TxTMDgoZvRvQA8DIZBF+koq9exy DA4GD+gK/J95hgz4FtLpYAPlrwZ7gvYehr9OZ4WKUGr0Gc7nNefJhK2nvnCjWuwn EQU5qc6XWpfxkzAWvo/ge8IRdPfEgKkVcKX/f31aPoIbFRsRiEKqyk1ExYXzBcHg aHEA8wbB38x82yGmDohy/8x1VNY85VlZh4828h5JYA84ufKRf00kejF5lqjWfiAj YDWcRuUAElnzolhsgXNHCxVBQ62DEWlaBSR3cfFaKNE8KFVce0oOgwOHnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4ryFQzV1G4bRCMozP5C0qofGoDMB8GA1UdIwQY MBaAFJO8jduAMuGEySv+IG4yjywF145LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEt YjkxNjc3NDhhOGEzLzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mODEzY2YtMGQ2YS00Nzk4LTk4ZjEtYjkxNjc3NDhhOGEz LzEvazd5TjI0QXk0WVRKS180Z2JqS1BMQVhYamtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIU0i6V/ b3wtgHniQVKCTV9+T2zlR7rkGpFmGj9KNE1OEoNIXDd/2qnpvb5/cPZyUVpmDOgU oZbK3mNEZlldFpefd4cvorELzKO5uCegVLIGjK/TczNe83ZYm8Ar25gG4rUp0XPE XLEJFh/4JcZsQZfm4D2IQ7Wbza4YibQ42NIsF4R0TgiR2aoUd9yx/cucruOFabpb 4wr7IRfeKAuXjve13LKdCkJiUjrtwixROSGu78UjsFfldIqwantWaSUPvOX2+DYJ RnM70ydkJ4ptlEeQsw4cqvtESKu7OxASnkRrvdBQiQi+GOrVyO/TSY4skYq3QPpi ZDhwj3SdBVKR7Q== -----END CERTIFICATE-----Generated at Sun Dec 21 11:08:01 2025 by rpki-client