This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft File: K4GVFfOZ60LIAx876kqYyOKJ4e0.mft (raw, json) Hash identifier: R/R0RzmzSKy7Tux6oEY86UeAkOo0OBstcsthRhgGk9Q= Subject key identifier: 22:10:1D:B9:44:82:B7:AC:62:E5:E6:6A:FF:EC:B0:A2:19:59:45:2C Authority key identifier: 2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED Certificate issuer: /CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed Certificate serial: 019AF23F6690E38D263B5BE0EF52BA18AE58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft Manifest number: 0196 Signing time: Sat 06 Dec 2025 06:00:32 +0000 Manifest this update: Sat 06 Dec 2025 06:00:32 +0000 Manifest next update: Sun 07 Dec 2025 06:00:32 +0000 Files and hashes: 1: K4GVFfOZ60LIAx876kqYyOKJ4e0.crl (hash: gPEQQVN476FKJ8mmIGTSy+yBMy5WV4axol+n/Y2PtTE=) 2: MRY6fM9QiSsubyguz4kspQmishA.roa (hash: /78lcK4sMBWDJAqkZAAF4XGGhpfWKl2tLUozc3wFeS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:66:90:e3:8d:26:3b:5b:e0:ef:52:ba:18:ae:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed Validity Not Before: Dec 6 06:00:32 2025 GMT Not After : Dec 7 06:00:32 2025 GMT Subject: CN=22101db94482b7ac62e5e66affecb0a21959452c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:4e:a6:d2:f1:01:47:b6:b9:c4:94:06:35: 66:a3:87:59:d3:01:98:5a:7d:12:f7:f7:d5:b6:cf: 57:8d:68:f5:40:a5:4a:b9:94:26:20:a0:b8:fc:8c: df:71:b8:8f:3a:9e:4c:39:9f:a9:08:72:66:7e:32: 4a:0d:08:26:a5:57:57:6b:6f:0e:3d:7b:01:47:04: b6:12:a3:a9:b4:a8:0b:94:a0:ae:61:49:74:ba:fe: 16:c0:e3:46:02:f6:59:e1:2b:82:c2:f8:b5:ba:34: f0:9b:44:c4:f1:2c:3e:b5:d6:67:5d:d0:35:26:17: 29:13:38:dc:71:7b:9a:a6:ac:d0:2d:47:76:7b:d8: 8a:79:e5:98:5b:04:c1:0d:f7:e6:bb:c4:0f:ba:67: 81:0b:61:b6:7d:e8:be:95:78:32:e8:c9:af:ca:51: 30:13:2c:fe:21:63:d5:08:7c:53:f5:32:db:d4:89: c8:cb:3d:4a:62:37:66:a7:bb:bb:c4:f1:d6:ff:e2: 95:43:90:31:ce:ea:15:0c:31:0d:b1:9f:f0:a4:6c: df:cd:2a:0e:0e:5c:64:67:81:52:7a:a0:d8:2e:83: 56:44:a3:6b:da:3c:2b:8c:d7:ad:0a:5a:68:63:12: 84:e6:18:9a:eb:5b:9e:71:49:0b:3f:2b:50:a9:bf: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:10:1D:B9:44:82:B7:AC:62:E5:E6:6A:FF:EC:B0:A2:19:59:45:2C X509v3 Authority Key Identifier: keyid:2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4c:ba:4f:6e:87:74:b0:ad:6a:6c:1b:35:c3:b1:d6:3a:a7: 0b:9e:19:52:1a:c0:fe:b9:49:2f:9c:02:16:89:8b:e0:ce:62: 95:10:d4:0d:cf:e6:4b:b0:7b:90:42:34:32:1e:e9:d4:f5:c5: d8:99:1b:df:bb:99:67:2f:1a:68:f2:c7:50:f1:a9:fa:24:83: 17:04:9f:4d:6d:5b:b1:8c:49:9f:d0:38:e1:dd:69:8c:de:a9: 33:ef:07:79:f4:f3:46:38:46:3f:1a:0a:07:64:25:b5:d8:08: c1:ba:00:60:57:bf:a2:40:52:1d:72:04:b5:4a:d3:89:1a:06: b5:a3:9a:60:79:ad:71:5f:00:dd:94:74:ca:92:2d:6b:59:9b: ad:f9:4b:c7:ad:7d:e5:4e:1a:7c:59:a0:0b:0f:09:da:c0:c6: 3e:1d:75:0d:e2:98:b0:f1:08:08:cc:34:36:89:d9:5e:8f:f7: da:a6:c6:55:dd:2f:59:74:8d:45:60:dc:ee:1e:01:da:b4:26: 17:ec:a7:8a:eb:10:b4:53:8b:96:1f:9d:5f:88:4f:41:77:5d: 5a:98:4c:79:16:16:18:6a:b5:b8:1e:c4:e3:7d:ee:7a:bb:cd: 79:6f:e9:70:b1:11:38:dd:fd:f4:76:aa:b7:fa:b1:a9:16:db: a1:6a:eb:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2aQ440mO1vg71K6GK5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODE5NTE1ZjM5OWViNDJjODAzMWYzYmVhNGE5OGM4ZTI4 OWUxZWQwHhcNMjUxMjA2MDYwMDMyWhcNMjUxMjA3MDYwMDMyWjAzMTEwLwYDVQQD EygyMjEwMWRiOTQ0ODJiN2FjNjJlNWU2NmFmZmVjYjBhMjE5NTk0NTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb9OptLxAUe2ucSUBjVmo4dZ0wGY Wn0S9/fVts9XjWj1QKVKuZQmIKC4/IzfcbiPOp5MOZ+pCHJmfjJKDQgmpVdXa28O PXsBRwS2EqOptKgLlKCuYUl0uv4WwONGAvZZ4SuCwvi1ujTwm0TE8Sw+tdZnXdA1 JhcpEzjccXuapqzQLUd2e9iKeeWYWwTBDffmu8QPumeBC2G2fei+lXgy6MmvylEw Eyz+IWPVCHxT9TLb1InIyz1KYjdmp7u7xPHW/+KVQ5AxzuoVDDENsZ/wpGzfzSoO DlxkZ4FSeqDYLoNWRKNr2jwrjNetClpoYxKE5hia61uecUkLPytQqb9U+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIQHblEgresYuXmav/ssKIZWUUsMB8GA1UdIwQY MBaAFCuBlRXzmetCyAMfO+pKmMjiieHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRHVkZmT1o2MExJQXg4NzZrcVl5T0tKNGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MWY3ZGMtMDBmMi00ZDMxLWE3NTct MDcxNmRlYzczMWFiLzEvSzRHVkZmT1o2MExJQXg4NzZrcVl5T0tKNGUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82MWY3ZGMtMDBmMi00ZDMxLWE3NTctMDcxNmRlYzczMWFi LzEvSzRHVkZmT1o2MExJQXg4NzZrcVl5T0tKNGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0y6T26H dLCtamwbNcOx1jqnC54ZUhrA/rlJL5wCFomL4M5ilRDUDc/mS7B7kEI0Mh7p1PXF 2Jkb37uZZy8aaPLHUPGp+iSDFwSfTW1bsYxJn9A44d1pjN6pM+8HefTzRjhGPxoK B2QltdgIwboAYFe/okBSHXIEtUrTiRoGtaOaYHmtcV8A3ZR0ypIta1mbrflLx619 5U4afFmgCw8J2sDGPh11DeKYsPEICMw0NonZXo/32qbGVd0vWXSNRWDc7h4B2rQm F+yniusQtFOLlh+dX4hPQXddWphMeRYWGGq1uB7E433uervNeW/pcLERON399Haq t/qxqRbboWrrSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:48 2025 by rpki-client