This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json) Hash identifier: dCFSVNSE+cgDcYrwUVqKktiRnmilhiSSTsyZqyxu98Y= Subject key identifier: 81:BD:B7:BF:38:7A:5B:F7:A5:F9:66:46:AD:20:22:F5:83:28:5B:3D Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2 Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2 Certificate serial: 019B25F68DF2EB63DAA557567D9EEA26A944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft Manifest number: 0EDF Signing time: Tue 16 Dec 2025 07:01:13 +0000 Manifest this update: Tue 16 Dec 2025 07:01:13 +0000 Manifest next update: Wed 17 Dec 2025 07:01:13 +0000 Files and hashes: 1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=) 2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: dM8P8m14XMQ/+8SY2E/qjPZPxKZJbjgEQPoRHkHcgYQ=) 3: UwN1BiytNRPdcWnqBjZDDgnoG8U.roa (hash: GAg0iRD5NjIqqH0MJGqVfIOd1Fcwz79I/HxN8NQjQ6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:8d:f2:eb:63:da:a5:57:56:7d:9e:ea:26:a9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2 Validity Not Before: Dec 16 07:01:13 2025 GMT Not After : Dec 17 07:01:13 2025 GMT Subject: CN=81bdb7bf387a5bf7a5f96646ad2022f583285b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:4a:05:19:33:8b:f0:42:a5:70:d4:06:d6: 48:ef:5f:8d:cb:1e:a0:e2:4b:a2:18:49:8c:9f:d5: d7:0a:c1:61:0f:7d:34:bb:51:f2:75:a3:1c:98:ac: b8:93:b9:a6:6b:78:67:f1:f3:54:68:e6:51:60:89: c3:16:42:af:9f:25:3d:cb:2e:22:11:51:9b:87:2f: b5:a5:b5:20:3c:9e:59:7a:a3:ce:b0:12:f1:64:a8: c7:10:67:21:90:83:47:66:7c:62:fc:bc:da:b4:b8: c2:ee:41:e4:d6:a2:15:30:d0:7c:e9:0f:23:ff:a7: 1c:c3:52:41:a7:38:24:a6:62:f4:db:4a:56:b2:b1: 15:34:2a:0e:c2:fa:9f:5b:a3:56:9a:cd:5d:af:91: db:52:00:cc:4e:cb:c4:bf:c4:5b:0f:10:83:13:65: 30:8b:cc:fe:a0:ab:f6:3a:f4:4f:a5:cf:2e:7f:ca: 07:87:a1:9e:d4:72:98:46:48:01:be:4e:b5:e5:35: c4:e9:44:e7:44:bf:ee:d0:3d:90:8a:53:98:d5:b8: ea:0d:32:55:e4:bb:84:10:17:39:88:0f:75:fd:24: 59:d8:bb:70:0c:d0:de:80:36:49:69:31:47:d8:69: dd:75:3c:4e:50:c3:8f:a5:9b:21:b0:ce:f1:c9:76: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BD:B7:BF:38:7A:5B:F7:A5:F9:66:46:AD:20:22:F5:83:28:5B:3D X509v3 Authority Key Identifier: keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c8:44:31:bd:a1:4c:aa:88:37:a9:50:77:ec:42:b4:cd:bd: b8:d3:72:61:88:ec:ac:52:ea:dd:18:81:e5:d6:1b:0b:90:d3: 0f:a9:54:55:97:bd:07:fb:25:fe:29:eb:c0:bc:13:c2:7c:57: e3:02:e3:82:49:16:01:dc:85:0a:a7:94:6e:81:75:7c:75:31: cf:d7:df:69:a3:05:0f:2c:d8:78:df:60:f6:52:ad:52:41:b4: 9f:5c:fa:91:52:3d:71:c9:64:d8:c2:6b:e6:a2:17:f1:4c:05: 0c:b0:ec:d5:7b:5f:81:c4:9a:09:6f:67:0f:f2:d7:e1:f9:e9: 5f:cf:30:e0:c5:62:e1:b4:9a:eb:04:42:ef:47:09:8b:cb:37: 4a:88:4e:85:8d:87:a6:39:7d:4d:e8:aa:17:1b:47:1b:41:ec: b5:44:31:40:48:d3:ff:59:ba:a0:c2:11:44:5c:be:62:3a:83: 0e:8f:fe:e1:4e:dc:78:e0:e8:0f:03:37:f2:9d:c6:b4:15:b4: 75:d5:1e:68:96:bd:d8:9e:f3:5c:7d:d1:09:61:92:01:b4:c7: 52:69:a1:7c:3a:6a:5d:e4:52:8f:65:c7:18:28:21:b9:53:2d: 5e:b9:f8:42:f8:dc:26:0d:cd:ac:a0:27:3e:d7:4a:3a:80:93: cf:2f:6f:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9o3y62PapVdWfZ7qJqlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiN2FiNjU2OWRlNzhkM2M0YTA4MmZkZTZkZDFkNmEzZjBk NTA5YzIwHhcNMjUxMjE2MDcwMTEzWhcNMjUxMjE3MDcwMTEzWjAzMTEwLwYDVQQD Eyg4MWJkYjdiZjM4N2E1YmY3YTVmOTY2NDZhZDIwMjJmNTgzMjg1YjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg5KBRkzi/BCpXDUBtZI71+Nyx6g 4kuiGEmMn9XXCsFhD300u1HydaMcmKy4k7mma3hn8fNUaOZRYInDFkKvnyU9yy4i EVGbhy+1pbUgPJ5ZeqPOsBLxZKjHEGchkINHZnxi/LzatLjC7kHk1qIVMNB86Q8j /6ccw1JBpzgkpmL020pWsrEVNCoOwvqfW6NWms1dr5HbUgDMTsvEv8RbDxCDE2Uw i8z+oKv2OvRPpc8uf8oHh6Ge1HKYRkgBvk615TXE6UTnRL/u0D2QilOY1bjqDTJV 5LuEEBc5iA91/SRZ2LtwDNDegDZJaTFH2GnddTxOUMOPpZshsM7xyXYjJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG9t784elv3pflmRq0gIvWDKFs9MB8GA1UdIwQY MBaAFCt6tlad5408Sggv3m3R1qPw1QnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0Yzgt M2ZjOTY1OTRiNGM1LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0YzgtM2ZjOTY1OTRiNGM1 LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8hEMb2h TKqIN6lQd+xCtM29uNNyYYjsrFLq3RiB5dYbC5DTD6lUVZe9B/sl/inrwLwTwnxX 4wLjgkkWAdyFCqeUboF1fHUxz9ffaaMFDyzYeN9g9lKtUkG0n1z6kVI9cclk2MJr 5qIX8UwFDLDs1XtfgcSaCW9nD/LX4fnpX88w4MVi4bSa6wRC70cJi8s3SohOhY2H pjl9TeiqFxtHG0HstUQxQEjT/1m6oMIRRFy+YjqDDo/+4U7ceODoDwM38p3GtBW0 ddUeaJa92J7zXH3RCWGSAbTHUmmhfDpqXeRSj2XHGCghuVMtXrn4QvjcJg3NrKAn PtdKOoCTzy9vQA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:10:27 2025 by rpki-client