This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json) Hash identifier: 4+G3CR+X8TcmweP3S8SnlBYZPnGWY5JNjn23yf0XO80= Subject key identifier: 69:F8:D4:2C:EA:15:3D:21:D3:41:8E:23:A4:6C:21:AB:0D:35:52:67 Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Certificate serial: 019AF5787F4199418D41D3BABA7835024EA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft Manifest number: 0511 Signing time: Sat 06 Dec 2025 21:01:45 +0000 Manifest this update: Sat 06 Dec 2025 21:01:45 +0000 Manifest next update: Sun 07 Dec 2025 21:01:45 +0000 Files and hashes: 1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: yagBwS/QtG9FpKtNIWYtoE1mIHACKHvHJjR/UBZOQ6Y=) 2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:7f:41:99:41:8d:41:d3:ba:ba:78:35:02:4e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3 Validity Not Before: Dec 6 21:01:45 2025 GMT Not After : Dec 7 21:01:45 2025 GMT Subject: CN=69f8d42cea153d21d3418e23a46c21ab0d355267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:e1:26:9a:6c:87:ca:dd:2d:72:4b:f2:ae: 01:18:9d:91:b5:ce:72:85:6d:72:d1:1d:2d:d1:d7: 04:f0:05:25:02:aa:91:ce:25:a2:2c:b9:6e:75:b7: 4b:9b:71:d0:43:3c:2f:de:c2:ad:07:cc:31:0d:ad: 60:61:8a:23:59:5b:ae:29:87:8f:9c:66:62:cd:3d: fd:7d:0d:5d:4d:fa:23:45:2a:22:b2:db:cd:80:b3: f3:74:bd:38:25:78:6b:15:e8:83:a2:bf:31:b0:6b: 09:10:11:5c:88:f0:49:25:4b:3f:ed:64:d5:b5:32: 02:01:17:65:b1:c9:7e:f9:0c:7b:b1:b3:60:17:0f: bd:25:23:1e:5c:5b:7e:66:ae:2d:03:2c:98:28:ad: 23:ae:b2:bb:47:b5:17:2e:64:d4:66:ba:30:72:da: 61:a8:fa:5a:41:2b:a0:7c:dd:03:51:d5:2e:9e:d9: 10:a6:a6:8d:25:c4:b7:98:17:99:eb:4f:56:10:7c: 0f:20:8f:92:47:21:00:3f:9b:3c:e9:af:5b:97:51: 99:50:14:3d:60:e6:94:6c:3f:7a:1a:1c:f9:f9:90: c7:7f:88:b3:99:f9:42:3d:37:9f:c7:a2:62:ed:44: 7c:0d:88:a6:a2:ab:8b:98:57:44:a3:67:4a:ce:45: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F8:D4:2C:EA:15:3D:21:D3:41:8E:23:A4:6C:21:AB:0D:35:52:67 X509v3 Authority Key Identifier: keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:57:06:8f:14:0f:3c:29:8c:47:e4:c9:67:11:f8:1e:fe:2b: 30:be:8f:e2:48:4f:0e:dd:56:a7:e5:b3:8f:c3:96:29:51:31: 11:69:44:57:91:d2:da:63:85:6b:01:83:ad:f0:45:29:41:2e: e4:60:22:7f:ca:cd:99:2b:83:d0:09:dc:6a:49:e3:02:de:3f: f8:cd:47:2c:99:da:58:92:d2:42:02:ea:17:fe:d3:db:43:27: 34:ba:22:e7:78:e2:f1:f8:82:ab:c2:d0:c8:03:03:79:a7:4b: 84:9c:a4:a5:2e:43:bc:5e:56:7c:3f:9a:56:69:f0:b0:2b:f4: e2:cc:f4:4a:85:46:86:52:14:7d:cb:71:b8:47:28:3a:a4:5d: e5:7b:a0:5e:bd:e8:32:2a:12:2c:a4:d1:99:86:1e:b8:68:ac: e2:47:71:ec:15:a6:99:8e:6f:32:31:0b:01:99:3d:9c:ce:f5: c1:e9:9f:5b:e0:fc:3b:05:33:8a:b7:ae:8e:d8:db:a2:21:86: c4:6c:f1:79:f0:c5:2a:f5:97:13:13:fa:92:f9:f6:5e:ba:7b: c8:f5:53:9c:e8:a8:9f:55:30:14:13:a5:88:cf:48:f5:a6:22: 47:ec:87:11:58:9f:8a:35:5c:19:43:8d:b7:2d:b1:c6:30:1a: cb:64:9b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eH9BmUGNQdO6ung1Ak6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh OTE3YjMwHhcNMjUxMjA2MjEwMTQ1WhcNMjUxMjA3MjEwMTQ1WjAzMTEwLwYDVQQD Eyg2OWY4ZDQyY2VhMTUzZDIxZDM0MThlMjNhNDZjMjFhYjBkMzU1MjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgHhJppsh8rdLXJL8q4BGJ2Rtc5y hW1y0R0t0dcE8AUlAqqRziWiLLludbdLm3HQQzwv3sKtB8wxDa1gYYojWVuuKYeP nGZizT39fQ1dTfojRSoistvNgLPzdL04JXhrFeiDor8xsGsJEBFciPBJJUs/7WTV tTICARdlscl++Qx7sbNgFw+9JSMeXFt+Zq4tAyyYKK0jrrK7R7UXLmTUZrowctph qPpaQSugfN0DUdUuntkQpqaNJcS3mBeZ609WEHwPII+SRyEAP5s86a9bl1GZUBQ9 YOaUbD96Ghz5+ZDHf4izmflCPTefx6Ji7UR8DYimoquLmFdEo2dKzkUpMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn41CzqFT0h00GOI6RsIasNNVJnMB8GA1UdIwQY MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt MTdiOTRhYzU4Mzc1LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1 LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVcGjxQP PCmMR+TJZxH4Hv4rML6P4khPDt1Wp+Wzj8OWKVExEWlEV5HS2mOFawGDrfBFKUEu 5GAif8rNmSuD0AncaknjAt4/+M1HLJnaWJLSQgLqF/7T20MnNLoi53ji8fiCq8LQ yAMDeadLhJykpS5DvF5WfD+aVmnwsCv04sz0SoVGhlIUfctxuEcoOqRd5XugXr3o MioSLKTRmYYeuGis4kdx7BWmmY5vMjELAZk9nM71wemfW+D8OwUzireujtjboiGG xGzxefDFKvWXExP6kvn2Xrp7yPVTnOion1UwFBOliM9I9aYiR+yHEVifijVcGUON ty2xxjAay2Sb4A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:54 2025 by rpki-client