This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft File: k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json) Hash identifier: T8mmjRRYGxj/dS9ie/QHnyOGDlRp9vqakykqR9dLu1A= Subject key identifier: 71:75:FF:91:E6:B4:1B:FE:8A:EE:B7:55:A3:93:64:A6:6E:7A:C5:7E Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7 Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7 Certificate serial: 019AF19B051AB7AE7BEE7DA861962AE4FA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=) 2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: lmuy0PechE3dZ42oc+2BluwctepZ/MzMpc2xpjzAYqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:05:1a:b7:ae:7b:ee:7d:a8:61:96:2a:e4:fa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=7175ff91e6b41bfe8aeeb755a39364a66e7ac57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:43:48:e0:00:8c:e8:1b:00:07:e2:fc:16: b7:03:a3:bf:c9:e2:ef:f9:80:bf:d1:06:4b:6a:1c: ab:2b:a5:82:01:dd:d1:9d:9d:9d:e3:a0:ae:6c:17: d3:f0:3b:8c:27:be:48:5d:60:36:28:f0:e8:4a:b2: af:d9:06:83:bf:36:4f:d5:f1:33:bd:40:9c:f3:e1: 98:5c:fa:fc:b2:dd:48:c4:98:be:d2:16:da:6d:ae: 62:fb:2b:71:d2:cc:05:ba:10:5d:9e:6f:3d:89:d9: 7d:6b:11:7a:f5:02:a1:d4:ce:5f:81:ee:fd:cd:0d: 5a:09:ec:e3:33:57:b3:2f:97:2d:ee:46:ed:69:c5: 2e:2c:87:fe:03:60:7b:e2:43:f3:4e:d0:93:81:63: 4c:c6:52:d7:c0:7f:53:1f:be:ac:70:4c:42:a3:13: bd:94:43:fa:5d:ba:2f:3f:36:fe:08:70:50:74:c5: a7:93:79:bc:ad:bb:14:b3:79:ea:0e:ce:b8:90:78: 5c:7b:e0:3b:42:cf:1a:e9:87:9b:ac:ea:18:a5:a8: c3:74:2e:51:a5:8a:67:65:a2:11:52:b9:1f:02:c7: 38:31:2b:c3:38:0b:28:d1:9a:8f:a8:56:db:c8:d1: 6d:2b:66:3b:cb:2d:20:93:e8:d4:8b:45:65:28:36: 2d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:75:FF:91:E6:B4:1B:FE:8A:EE:B7:55:A3:93:64:A6:6E:7A:C5:7E X509v3 Authority Key Identifier: keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:eb:c7:eb:b7:33:5f:25:bb:23:71:6d:db:00:7b:b4:c3:75: 46:a1:f9:39:77:92:c2:81:6e:52:d7:bc:c5:86:b1:ca:a5:03: 0d:88:f1:bb:93:10:0c:70:16:d4:49:89:12:ae:d3:98:60:f1: 47:e5:84:3a:c4:69:7d:7d:95:59:fc:01:4e:2d:f6:a3:56:2e: 1c:0c:c8:f3:e4:2a:fa:71:f4:57:0e:e6:3c:b1:bb:91:dc:70: 4c:bf:5a:37:6a:6a:10:62:b6:4b:f2:6d:0a:cb:99:9a:09:25: f0:a4:74:aa:34:93:e8:a5:69:0e:9a:34:d3:2b:65:68:e0:c5: 36:3e:b5:0e:45:3d:8d:16:92:38:4e:db:77:f3:89:e5:08:53: 86:1a:1a:c7:52:b6:83:17:b2:34:45:a3:b3:eb:3e:3b:69:cb: ae:29:19:08:17:3b:86:b9:6b:ce:48:d8:4a:29:8d:6c:87:04: 03:47:d9:57:38:2b:ff:84:6b:de:52:0d:38:79:70:08:72:16: 96:0a:bc:97:61:16:2c:bd:9a:5c:4e:41:0e:c8:45:db:cd:df: af:c8:82:c0:1a:f6:d4:e8:ae:8d:49:60:49:b1:53:0b:ae:e9: b4:d2:07:d9:fc:af:85:31:cb:fd:ac:7d:4b:56:91:e7:3e:71: 8e:c6:6a:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwUat6577n2oYZYq5PokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzODJiZGZjOWIxYjI1MDAyMDM5MTIzNzc5ZmZhZjI0NzNm ODUxYjcwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD Eyg3MTc1ZmY5MWU2YjQxYmZlOGFlZWI3NTVhMzkzNjRhNjZlN2FjNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5hDSOAAjOgbAAfi/Ba3A6O/yeLv +YC/0QZLahyrK6WCAd3RnZ2d46CubBfT8DuMJ75IXWA2KPDoSrKv2QaDvzZP1fEz vUCc8+GYXPr8st1IxJi+0hbaba5i+ytx0swFuhBdnm89idl9axF69QKh1M5fge79 zQ1aCezjM1ezL5ct7kbtacUuLIf+A2B74kPzTtCTgWNMxlLXwH9TH76scExCoxO9 lEP6XbovPzb+CHBQdMWnk3m8rbsUs3nqDs64kHhce+A7Qs8a6YebrOoYpajDdC5R pYpnZaIRUrkfAsc4MSvDOAso0ZqPqFbbyNFtK2Y7yy0gk+jUi0VlKDYtowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF1/5HmtBv+iu63VaOTZKZuesV+MB8GA1UdIwQY MBaAFJOCvfybGyUAIDkSN3n/ryRz+FG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYt MjRiZjQwYzEzMDhmLzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iZWYyMDAtMjJjNi00NDE3LWE4OTYtMjRiZjQwYzEzMDhm LzEvazRLOV9Kc2JKUUFnT1JJM2VmLXZKSFA0VWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOvH67cz XyW7I3Ft2wB7tMN1RqH5OXeSwoFuUte8xYaxyqUDDYjxu5MQDHAW1EmJEq7TmGDx R+WEOsRpfX2VWfwBTi32o1YuHAzI8+Qq+nH0Vw7mPLG7kdxwTL9aN2pqEGK2S/Jt CsuZmgkl8KR0qjST6KVpDpo00ytlaODFNj61DkU9jRaSOE7bd/OJ5QhThhoax1K2 gxeyNEWjs+s+O2nLrikZCBc7hrlrzkjYSimNbIcEA0fZVzgr/4Rr3lINOHlwCHIW lgq8l2EWLL2aXE5BDshF283fr8iCwBr21OiujUlgSbFTC67ptNIH2fyvhTHL/ax9 S1aR5z5xjsZqTw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:22 2025 by rpki-client