This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json) Hash identifier: BcAJV7eeS8xo9k9z4QTPF48LQyp0litn23CY66FAphA= Subject key identifier: 6D:E3:C6:EC:7A:9E:A8:D5:BC:55:E6:71:FD:71:DC:23:02:16:8B:85 Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Certificate serial: 019AF087FB7F7EFD0F84568BE13B40880D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:00:34 +0000 Manifest this update: Fri 05 Dec 2025 22:00:34 +0000 Manifest next update: Sat 06 Dec 2025 22:00:34 +0000 Files and hashes: 1: DKeRVwoenDXIzrWNyLGIpQggDrs.roa (hash: 5p/rY96e/v7nlh4ZVNWfswSCV1H2nosoTkJoyOAXVkI=) 2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: m2fPCb41tFbbh1Dl7irbB18Imbg0pwQixpESNko3V+Y=) 3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:fb:7f:7e:fd:0f:84:56:8b:e1:3b:40:88:0d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Validity Not Before: Dec 5 22:00:34 2025 GMT Not After : Dec 6 22:00:34 2025 GMT Subject: CN=6de3c6ec7a9ea8d5bc55e671fd71dc2302168b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:c5:3b:e0:01:04:73:00:54:0c:07:14:de: e0:9c:21:e8:4b:01:04:6c:df:6f:02:66:8a:9c:78: cd:5c:d7:a3:23:d4:a0:91:ab:04:21:fc:95:ab:ca: 5a:75:2f:1a:e9:d3:ca:04:9b:d8:18:a8:cf:c4:06: 7b:a3:9d:89:b8:60:2e:d2:b9:19:2d:4f:f5:56:b2: fa:c3:01:8d:86:3a:c2:00:b2:5e:d0:5f:e9:e1:11: ce:81:cd:26:ed:64:0f:e2:96:af:38:2a:da:a3:df: 46:60:c7:b1:0d:bf:2b:1b:af:8a:c7:68:7e:d8:46: 11:d8:80:fc:0c:ba:a6:cf:9e:d2:7b:ce:87:db:5a: 51:18:fc:69:62:eb:fe:70:88:a8:d1:19:e2:9b:60: 62:64:b1:e4:ef:b8:ca:fe:3a:97:55:57:e4:13:0f: 8d:be:69:88:5d:44:d6:7d:cf:96:f3:40:d3:ff:3b: 32:22:f4:0a:15:55:ad:3d:ff:c3:2f:b0:64:f4:ac: 93:65:d4:63:b5:7d:bd:af:6f:58:ce:34:49:59:ed: f9:7f:fa:f4:7a:68:72:14:f6:e7:83:91:30:9b:68: 40:de:b9:6d:ae:07:4b:35:d4:8a:b3:a5:a7:10:aa: a0:90:8c:bb:50:e5:1b:7c:57:9d:bd:9d:77:ca:70: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:C6:EC:7A:9E:A8:D5:BC:55:E6:71:FD:71:DC:23:02:16:8B:85 X509v3 Authority Key Identifier: keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:da:78:fe:c2:47:09:83:c1:60:77:7d:3a:92:88:73:f0:62: 00:07:9c:d6:44:4d:9f:02:59:a9:9b:18:c3:c7:8a:82:04:9e: b1:6b:c1:63:ad:ee:f9:6f:17:c4:b4:81:23:4b:69:db:af:af: a5:cf:6d:c8:8c:43:7c:ff:95:49:af:c8:af:fa:dc:38:47:44: b7:7a:9c:1a:0c:29:fb:0a:93:9f:c0:25:bd:ea:a5:ea:62:8e: dc:a8:7b:e9:f4:68:b0:6f:3c:1d:88:b4:b5:61:c6:ef:aa:73: 28:4f:0b:92:bb:61:c3:43:3c:01:e3:93:58:fd:f7:fb:46:ff: 04:a6:76:16:9a:60:57:77:fa:f8:d5:d9:e6:0a:9d:28:c3:9b: 76:46:dd:4a:d3:6d:0f:a3:a0:25:e1:31:71:2f:b1:0e:98:d1: 67:02:96:ab:85:b8:b8:0d:b5:cc:84:43:5a:80:0c:91:73:c3: d2:8f:35:f9:c1:58:e5:b6:8b:9b:1e:a6:1b:79:33:f0:c9:b0: dc:78:fe:54:70:f9:9e:df:63:99:48:4f:2a:12:a9:e7:2f:6a: bc:e3:37:7b:e7:a3:5a:85:14:d6:1f:5e:be:08:0f:f9:45:f6: 47:93:e9:8e:da:d1:10:c2:6e:97:d5:2e:92:01:f2:a1:de:90: 9b:32:88:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/t/fv0PhFaL4TtAiA2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk MWM4NzkwHhcNMjUxMjA1MjIwMDM0WhcNMjUxMjA2MjIwMDM0WjAzMTEwLwYDVQQD Eyg2ZGUzYzZlYzdhOWVhOGQ1YmM1NWU2NzFmZDcxZGMyMzAyMTY4Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPrFO+ABBHMAVAwHFN7gnCHoSwEE bN9vAmaKnHjNXNejI9SgkasEIfyVq8padS8a6dPKBJvYGKjPxAZ7o52JuGAu0rkZ LU/1VrL6wwGNhjrCALJe0F/p4RHOgc0m7WQP4pavOCrao99GYMexDb8rG6+Kx2h+ 2EYR2ID8DLqmz57Se86H21pRGPxpYuv+cIio0Rnim2BiZLHk77jK/jqXVVfkEw+N vmmIXUTWfc+W80DT/zsyIvQKFVWtPf/DL7Bk9KyTZdRjtX29r29YzjRJWe35f/r0 emhyFPbng5Ewm2hA3rltrgdLNdSKs6WnEKqgkIy7UOUbfFedvZ13ynAwxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3jxux6nqjVvFXmcf1x3CMCFouFMB8GA1UdIwQY MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtp4/sJH CYPBYHd9OpKIc/BiAAec1kRNnwJZqZsYw8eKggSesWvBY63u+W8XxLSBI0tp26+v pc9tyIxDfP+VSa/Ir/rcOEdEt3qcGgwp+wqTn8Alveql6mKO3Kh76fRosG88HYi0 tWHG76pzKE8Lkrthw0M8AeOTWP33+0b/BKZ2FppgV3f6+NXZ5gqdKMObdkbdStNt D6OgJeExcS+xDpjRZwKWq4W4uA21zIRDWoAMkXPD0o81+cFY5baLmx6mG3kz8Mmw 3Hj+VHD5nt9jmUhPKhKp5y9qvOM3e+ejWoUU1h9evggP+UX2R5PpjtrREMJul9Uu kgHyod6QmzKISg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:57 2025 by rpki-client