This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json) Hash identifier: HoguYYM8tCtOAYpJM+5qb4KeL8LhKwtPGIcAgbzuCBU= Subject key identifier: CA:D3:C5:C9:EA:9F:57:7C:C9:1B:D1:4B:2D:16:74:B2:CF:73:7C:60 Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Certificate serial: 019B2C66A2504C0F1EF6A9E1FACA61D0C3D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 13:01:22 +0000 Manifest this update: Wed 17 Dec 2025 13:01:22 +0000 Manifest next update: Thu 18 Dec 2025 13:01:22 +0000 Files and hashes: 1: DKeRVwoenDXIzrWNyLGIpQggDrs.roa (hash: 5p/rY96e/v7nlh4ZVNWfswSCV1H2nosoTkJoyOAXVkI=) 2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 4OZ+U7pKU/TLssrRCrleRXNhGeuUzxwjl/PpsNvoZvY=) 3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:a2:50:4c:0f:1e:f6:a9:e1:fa:ca:61:d0:c3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879 Validity Not Before: Dec 17 13:01:22 2025 GMT Not After : Dec 18 13:01:22 2025 GMT Subject: CN=cad3c5c9ea9f577cc91bd14b2d1674b2cf737c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:db:d6:b6:f7:ff:03:72:f0:71:5e:6e:71: d8:59:f4:2a:55:2c:99:52:64:f0:a0:a1:ab:9b:53: 24:96:ba:ba:cd:6a:96:7c:86:6a:f3:c4:2f:ef:b3: 1c:f7:b8:cc:d4:b8:9d:54:75:89:5e:3a:90:f3:dd: 72:c1:dd:b0:5c:0b:fb:d0:07:4c:59:d0:3c:b0:a9: 95:97:f0:16:33:8b:3b:1a:47:7a:34:42:34:4f:09: 37:c7:64:56:df:af:65:47:c1:17:f3:a9:01:2f:79: 09:fe:79:fe:e8:5a:b4:6f:da:62:11:47:7e:32:12: 60:e2:55:51:93:8a:fd:28:1c:50:37:76:fe:b2:c5: e0:93:04:c4:a1:39:18:5d:ef:17:76:e7:3c:50:24: 56:d4:f1:1e:18:52:43:63:d5:10:8e:15:5b:ab:4e: 22:91:86:69:9b:4e:d2:50:4a:ec:55:5c:59:48:a2: 70:43:11:77:35:b3:08:ca:5b:0a:85:c0:3c:a4:7f: c3:bc:e1:50:7d:ff:d1:c1:fc:b2:b6:ac:85:9f:80: c0:64:30:e3:d1:39:8d:34:74:3a:6e:89:63:e9:22: 7f:36:a7:9b:9e:e3:1a:88:e0:a2:d3:13:36:08:7f: f7:3a:fc:bd:f9:c1:99:6b:a8:74:96:87:df:cc:66: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D3:C5:C9:EA:9F:57:7C:C9:1B:D1:4B:2D:16:74:B2:CF:73:7C:60 X509v3 Authority Key Identifier: keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f3:cc:b8:e0:e0:25:99:0c:e8:68:32:89:ab:a5:a7:0b:c5: 56:53:18:85:1e:65:ab:e3:2e:33:94:ae:83:1f:df:a2:17:59: 87:9f:c4:54:f2:e7:43:09:20:8b:67:7d:da:4c:d9:b3:7b:ae: bb:ae:33:93:f4:9d:27:4d:09:f5:43:14:e3:98:aa:89:70:3c: 2f:a3:c3:31:e9:c1:c4:35:2e:f7:72:95:7b:ad:ce:02:0c:b0: 16:d3:d1:ec:2d:21:b1:69:27:4a:48:43:bd:2a:05:1f:90:ec: c2:26:18:30:45:39:b8:07:4d:f6:94:53:6c:0c:8b:9e:ff:6e: 2b:43:d9:d1:69:ac:cf:b9:95:25:b8:86:a6:9b:f5:61:3b:fe: 86:62:88:df:d3:b1:25:e6:74:a2:03:aa:7c:18:d0:b8:6a:cf: 53:46:78:12:6c:d9:dc:a3:51:09:5d:e4:25:6f:5e:d5:36:94: 89:fb:9a:91:92:ce:b1:51:2c:76:c3:68:60:8b:00:2b:e6:69: 3a:0b:26:e1:7b:91:51:62:f9:91:87:fd:c0:a8:ee:02:09:6b: 78:8b:ea:6a:4e:1d:e1:ec:11:9e:82:a9:16:11:c1:d9:48:bd: 4f:97:23:fc:f4:23:90:6d:17:b3:39:37:b4:57:1b:93:52:87: cc:bd:fb:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZqJQTA8e9qnh+sph0MPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk MWM4NzkwHhcNMjUxMjE3MTMwMTIyWhcNMjUxMjE4MTMwMTIyWjAzMTEwLwYDVQQD EyhjYWQzYzVjOWVhOWY1NzdjYzkxYmQxNGIyZDE2NzRiMmNmNzM3YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/zb1rb3/wNy8HFebnHYWfQqVSyZ UmTwoKGrm1Mklrq6zWqWfIZq88Qv77Mc97jM1LidVHWJXjqQ891ywd2wXAv70AdM WdA8sKmVl/AWM4s7Gkd6NEI0Twk3x2RW369lR8EX86kBL3kJ/nn+6Fq0b9piEUd+ MhJg4lVRk4r9KBxQN3b+ssXgkwTEoTkYXe8Xduc8UCRW1PEeGFJDY9UQjhVbq04i kYZpm07SUErsVVxZSKJwQxF3NbMIylsKhcA8pH/DvOFQff/RwfyytqyFn4DAZDDj 0TmNNHQ6bolj6SJ/NqebnuMaiOCi0xM2CH/3Ovy9+cGZa6h0loffzGaT1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrTxcnqn1d8yRvRSy0WdLLPc3xgMB8GA1UdIwQY MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/PMuODg JZkM6GgyiaulpwvFVlMYhR5lq+MuM5Sugx/fohdZh5/EVPLnQwkgi2d92kzZs3uu u64zk/SdJ00J9UMU45iqiXA8L6PDMenBxDUu93KVe63OAgywFtPR7C0hsWknSkhD vSoFH5DswiYYMEU5uAdN9pRTbAyLnv9uK0PZ0Wmsz7mVJbiGppv1YTv+hmKI39Ox JeZ0ogOqfBjQuGrPU0Z4EmzZ3KNRCV3kJW9e1TaUifuakZLOsVEsdsNoYIsAK+Zp Ogsm4XuRUWL5kYf9wKjuAglreIvqak4d4ewRnoKpFhHB2Ui9T5cj/PQjkG0Xszk3 tFcbk1KHzL37XA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:41:32 2025 by rpki-client