This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft File: K94VUTok977ZjoTw4zigbGcObzY.mft (raw, json) Hash identifier: LlCqQwpd7me8gzhHPOy6/QCr75baFHL0judJGM8wIWY= Subject key identifier: 72:62:3F:1A:01:8F:2E:2B:3C:99:99:39:02:32:51:B5:13:0D:7C:6F Authority key identifier: 2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36 Certificate issuer: /CN=2bde15513a24f7bed98e84f0e338a06c670e6f36 Certificate serial: 019AF389A7A2307B951E63A50A777031C518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft Manifest number: 24 Signing time: Sat 06 Dec 2025 12:01:16 +0000 Manifest this update: Sat 06 Dec 2025 12:01:16 +0000 Manifest next update: Sun 07 Dec 2025 12:01:16 +0000 Files and hashes: 1: K94VUTok977ZjoTw4zigbGcObzY.crl (hash: L0aPrI7uWhISnoWJYo0eq6fhH0nhYqcys783VO8LvUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a7:a2:30:7b:95:1e:63:a5:0a:77:70:31:c5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bde15513a24f7bed98e84f0e338a06c670e6f36 Validity Not Before: Dec 6 12:01:16 2025 GMT Not After : Dec 7 12:01:16 2025 GMT Subject: CN=72623f1a018f2e2b3c999939023251b5130d7c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:5d:32:77:3c:e8:2e:8e:c1:d5:f3:7c:cf: a7:25:1a:2a:d2:07:97:61:9b:0a:17:78:f9:c7:fb: 38:13:12:71:c5:e3:21:77:8c:5d:fc:e5:bd:5d:53: 30:96:68:82:80:72:81:53:ee:3f:e9:1e:a1:0b:b1: 01:27:c4:f6:37:92:76:70:0f:21:51:b5:a8:8a:24: 74:48:71:eb:14:59:59:a1:da:95:b5:62:68:f2:09: 5a:53:7c:22:52:cb:cc:b2:d2:cb:fd:f8:b1:65:17: 8d:9c:f0:00:9d:f5:9c:2e:99:59:c9:d5:8f:dc:a9: 05:2c:00:e8:a8:7d:f7:4b:2d:45:ca:24:09:d0:03: 31:cd:f2:d9:0d:a6:18:45:95:6c:e6:9f:16:0e:b0: 4d:b5:c9:92:ad:85:10:fd:1e:52:f7:c9:d8:89:17: 9b:dc:6b:f0:ff:52:1f:f3:06:20:5f:53:6e:7e:20: 22:91:9a:66:34:40:ef:7d:8d:3f:76:22:4a:20:9c: 8e:9b:5e:40:40:f0:aa:76:a2:7e:81:7b:6e:eb:80: f7:00:89:89:3c:fb:4f:2e:99:84:62:6a:aa:96:39: c0:52:65:8b:eb:1c:bb:e3:a1:1b:80:3b:73:66:6e: 1f:46:70:b9:b3:01:ea:be:22:4c:e9:be:6d:17:8f: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:3F:1A:01:8F:2E:2B:3C:99:99:39:02:32:51:B5:13:0D:7C:6F X509v3 Authority Key Identifier: keyid:2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ef:9a:03:0d:bf:22:9c:a0:32:0a:eb:5e:f6:18:cf:40:37: 2b:4c:54:b1:fa:f4:8a:3e:fd:cc:3f:42:a3:64:54:4f:1d:b4: e2:3f:5c:74:b3:65:40:a2:d9:25:14:59:ba:a6:a8:ee:ee:1d: ca:df:a2:7c:c3:fa:4d:9f:c3:d0:4d:4f:90:cf:72:2a:82:80: aa:0b:f4:c9:c6:45:12:da:53:f5:46:fd:27:ca:e7:df:be:94: a3:1f:ec:9f:93:2a:e0:e4:fe:d4:9f:6c:46:db:ae:14:aa:e5: c2:c3:c0:b9:36:73:9c:b9:89:b9:2f:9f:ab:a4:3f:b3:db:98: 45:9f:95:20:50:55:e8:e3:ad:a1:ce:54:f4:06:bd:25:a0:49: d7:e4:d5:52:fa:f1:77:57:c3:a2:09:5c:c5:4d:fb:9e:c8:da: e0:cd:01:18:43:50:42:56:bb:5f:bb:0e:a8:b7:ed:88:cf:70: 5f:f3:e9:bf:59:d0:9d:93:ef:b6:04:29:cb:b6:82:5c:a5:63: 6d:28:ff:8a:67:95:2e:ab:bd:0f:e7:3f:04:0b:89:6c:e6:7b: d1:30:32:e1:c1:a9:58:af:3d:ef:e8:0b:43:c7:1f:1f:8b:55: 31:68:2e:37:5e:60:bf:6c:58:a3:a5:1a:e7:cf:8b:f7:5f:4d: 92:b5:b9:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaeiMHuVHmOlCndwMcUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZGUxNTUxM2EyNGY3YmVkOThlODRmMGUzMzhhMDZjNjcw ZTZmMzYwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD Eyg3MjYyM2YxYTAxOGYyZTJiM2M5OTk5MzkwMjMyNTFiNTEzMGQ3YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2BdMnc86C6OwdXzfM+nJRoq0geX YZsKF3j5x/s4ExJxxeMhd4xd/OW9XVMwlmiCgHKBU+4/6R6hC7EBJ8T2N5J2cA8h UbWoiiR0SHHrFFlZodqVtWJo8glaU3wiUsvMstLL/fixZReNnPAAnfWcLplZydWP 3KkFLADoqH33Sy1FyiQJ0AMxzfLZDaYYRZVs5p8WDrBNtcmSrYUQ/R5S98nYiReb 3Gvw/1If8wYgX1NufiAikZpmNEDvfY0/diJKIJyOm15AQPCqdqJ+gXtu64D3AImJ PPtPLpmEYmqqljnAUmWL6xy746EbgDtzZm4fRnC5swHqviJM6b5tF4+fJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJiPxoBjy4rPJmZOQIyUbUTDXxvMB8GA1UdIwQY MBaAFCveFVE6JPe+2Y6E8OM4oGxnDm82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi80MGI2NjAtMmQ5Zi00NTU1LThkMDQt NGQ3ZGY0MGMwZjVjLzEvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi80MGI2NjAtMmQ5Zi00NTU1LThkMDQtNGQ3ZGY0MGMwZjVj LzEvSzk0VlVUb2s5Nzdaam9UdzR6aWdiR2NPYnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ++aAw2/ IpygMgrrXvYYz0A3K0xUsfr0ij79zD9Co2RUTx204j9cdLNlQKLZJRRZuqao7u4d yt+ifMP6TZ/D0E1PkM9yKoKAqgv0ycZFEtpT9Ub9J8rn376Uox/sn5Mq4OT+1J9s RtuuFKrlwsPAuTZznLmJuS+fq6Q/s9uYRZ+VIFBV6OOtoc5U9Aa9JaBJ1+TVUvrx d1fDoglcxU37nsja4M0BGENQQla7X7sOqLftiM9wX/Ppv1nQnZPvtgQpy7aCXKVj bSj/imeVLqu9D+c/BAuJbOZ70TAy4cGpWK897+gLQ8cfH4tVMWguN15gv2xYo6Ua 58+L919NkrW5CA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:31:12 2025 by rpki-client