This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json) Hash identifier: I6r965otZiQou2VOEpDwtKpoHNFXV/N4ZFLvf/jfSZ8= Subject key identifier: 35:B3:AB:25:DD:1C:A9:24:76:EE:68:CF:21:3E:66:3D:AC:96:00:41 Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d Certificate serial: 019AF0BF5F85ED0198B382FCB2733CA11359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft Manifest number: 052A Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: A051q2opqAh/Xvok7BqRr/AHUnWfvXdBifumVrqZunE=) 2: Sz60tJGpfPEIPRKoNyD58l9TIHk.roa (hash: N59T40jObwP6xQKwd5i1QLcMPk2PBgJ5eVUrj8bdLR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5f:85:ed:01:98:b3:82:fc:b2:73:3c:a1:13:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=35b3ab25dd1ca92476ee68cf213e663dac960041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:a2:ad:1e:86:9e:08:45:9f:7b:2a:bc:fe: 27:d5:e0:80:25:f0:e1:4e:16:80:fb:49:ab:6f:bd: 6d:58:9b:17:bf:b6:42:e3:cb:58:6e:38:93:a9:83: 8a:de:58:2b:b2:2d:5b:b1:3a:88:15:93:ea:93:3c: 0f:61:78:99:db:cb:48:21:73:87:7f:84:c7:e8:08: d9:72:16:75:e3:70:c0:d7:b9:e0:43:98:4a:a1:23: 80:63:b4:eb:16:29:4e:e6:7b:e9:09:7e:48:57:ac: 15:8d:ce:2c:20:39:1d:fa:f7:45:5b:13:fb:b2:65: 10:a4:bc:6c:aa:15:2c:0b:24:61:37:6e:fe:79:0c: ca:b8:8f:97:96:d9:03:bf:8f:cd:68:0d:5d:07:17: 0a:08:6a:de:9c:4c:72:b5:3e:26:a9:6c:7b:37:31: af:d7:41:e0:4a:9d:fb:31:58:26:b0:dd:21:da:85: 20:b1:e9:83:c4:78:e8:9e:5c:92:b8:02:db:b0:07: c6:59:62:33:36:e6:56:6a:0b:2d:af:3c:23:35:88: 31:c3:0e:cc:aa:24:b6:15:32:0d:b8:17:4f:5a:e2: ec:d3:59:cf:ac:fa:81:6a:a2:19:00:14:32:93:ca: e4:d4:7f:24:2b:0a:33:a1:26:22:6b:1e:98:e5:9a: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B3:AB:25:DD:1C:A9:24:76:EE:68:CF:21:3E:66:3D:AC:96:00:41 X509v3 Authority Key Identifier: keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:76:5b:0e:71:a0:f0:37:08:49:17:97:d2:6b:d3:e2:65:62: 89:93:d8:c3:cc:89:96:8d:92:78:58:fd:08:1a:5c:9b:78:8f: 13:78:4d:5e:81:e6:d9:e0:af:20:8b:a9:e9:a3:92:05:e2:18: fb:53:e2:52:bd:2e:2b:bd:b7:b8:36:16:a3:f4:75:a3:2c:c0: b6:89:b6:78:16:6e:dd:32:35:3c:04:14:70:f1:39:1e:4a:b1: 04:c5:bd:9e:d0:be:8f:ad:67:78:1f:82:40:29:30:03:36:1e: 11:b9:5b:2b:99:b3:2b:e0:69:8d:ab:b6:70:90:c0:78:b1:c9: dc:6b:88:45:33:73:15:c9:5a:0a:45:12:e1:df:c7:23:20:54: 0f:da:90:38:5e:13:bd:65:d9:3c:b2:e3:d5:f1:99:3e:31:79: cb:c2:e3:e3:1f:39:9b:82:66:c2:89:f4:23:1e:51:18:e5:a0: ab:15:07:74:06:fb:9c:36:4d:29:96:a3:92:e9:e9:e1:d5:b2: 93:c9:ab:f4:17:66:5f:db:67:2f:76:b9:8b:2a:70:68:d0:67: 5e:40:76:35:f2:20:cb:67:7a:74:98:01:fb:f4:af:1e:70:a4: 25:18:de:20:6e:33:67:b9:9c:73:29:37:53:1a:55:3b:2e:b3: 70:38:ff:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1+F7QGYs4L8snM8oRNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzNhYTg0MzdiYzY3MjM1MTlkMGYzMjBiZjFmMTcwNDE0 MWE1M2QwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EygzNWIzYWIyNWRkMWNhOTI0NzZlZTY4Y2YyMTNlNjYzZGFjOTYwMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdqirR6GnghFn3sqvP4n1eCAJfDh ThaA+0mrb71tWJsXv7ZC48tYbjiTqYOK3lgrsi1bsTqIFZPqkzwPYXiZ28tIIXOH f4TH6AjZchZ143DA17ngQ5hKoSOAY7TrFilO5nvpCX5IV6wVjc4sIDkd+vdFWxP7 smUQpLxsqhUsCyRhN27+eQzKuI+XltkDv4/NaA1dBxcKCGrenExytT4mqWx7NzGv 10HgSp37MVgmsN0h2oUgsemDxHjonlySuALbsAfGWWIzNuZWagstrzwjNYgxww7M qiS2FTINuBdPWuLs01nPrPqBaqIZABQyk8rk1H8kKwozoSYiax6Y5Zq+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWzqyXdHKkkdu5ozyE+Zj2slgBBMB8GA1UdIwQY MBaAFCtzqoQ3vGcjUZ0PMgvx8XBBQaU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMt NTIxZmNlNmI2NGQ5LzEvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMtNTIxZmNlNmI2NGQ5 LzEvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXZbDnGg 8DcISReX0mvT4mViiZPYw8yJlo2SeFj9CBpcm3iPE3hNXoHm2eCvIIup6aOSBeIY +1PiUr0uK723uDYWo/R1oyzAtom2eBZu3TI1PAQUcPE5HkqxBMW9ntC+j61neB+C QCkwAzYeEblbK5mzK+Bpjau2cJDAeLHJ3GuIRTNzFclaCkUS4d/HIyBUD9qQOF4T vWXZPLLj1fGZPjF5y8Lj4x85m4Jmwon0Ix5RGOWgqxUHdAb7nDZNKZajkunp4dWy k8mr9BdmX9tnL3a5iypwaNBnXkB2NfIgy2d6dJgB+/SvHnCkJRjeIG4zZ7mccyk3 UxpVOy6zcDj/Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:38 2025 by rpki-client