This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json) Hash identifier: yWDmACeRuK8L4TgDZk4AqmUsEE2AAzbIZiUiuM3/uY8= Subject key identifier: FD:F5:2B:1B:58:DD:A4:77:93:2D:79:8D:DB:30:6A:BF:76:EC:F4:4F Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Certificate serial: 019AF163EC6754BFC77E94AE47C20B2F7580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft Manifest number: 0BB7 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: uobqc9S8G3JFBav/FTyPsudUeCK1aj5KvuscT8yiqWg=) 2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=) 3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=) 4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ec:67:54:bf:c7:7e:94:ae:47:c2:0b:2f:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19 Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=fdf52b1b58dda477932d798ddb306abf76ecf44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:33:61:30:0a:ca:65:5a:8f:c1:43:98:56: 58:7d:7c:9f:71:e9:4a:17:d5:bd:5b:76:7f:21:a2: 02:b2:9c:7a:f6:1a:d5:c7:cd:9c:c0:71:95:48:82: ec:8b:ed:72:70:20:10:a2:6b:90:a7:1b:2e:7f:cd: 07:ac:12:e8:d7:8c:d7:67:38:66:9f:14:d1:2f:9d: d3:dd:92:26:2e:80:3d:66:eb:1e:c0:a8:3b:ca:45: fb:0f:0b:0c:fb:a8:75:bc:1f:d0:d3:ba:04:a2:46: 96:ce:e4:94:21:25:d0:bf:e8:8c:88:b2:85:36:ac: 9f:a4:91:b0:76:dd:9b:06:3e:f1:0c:c4:79:c1:49: 5b:99:f3:d8:8e:6d:66:d2:b0:de:b1:79:f3:f5:78: 20:5b:e4:6e:0a:e3:c2:00:6f:4f:28:df:1c:d5:d4: 50:93:6b:bd:32:ca:55:6e:d2:40:8e:bc:65:9e:35: e2:1b:45:5f:9b:3a:3b:f2:dd:bb:a5:cf:f0:26:d6: 0b:b1:06:7a:b8:f4:3d:94:ab:90:9f:91:62:cc:61: e5:f0:e9:1f:28:25:18:56:58:dc:88:c2:03:b1:cc: 21:19:a8:0f:8b:72:bf:dd:f9:37:74:44:4a:28:da: 0b:83:dd:d2:5d:eb:98:a0:92:31:89:38:c6:cc:42: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F5:2B:1B:58:DD:A4:77:93:2D:79:8D:DB:30:6A:BF:76:EC:F4:4F X509v3 Authority Key Identifier: keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:5c:6a:68:25:30:53:6b:2d:b6:68:cb:d1:b0:a0:bc:d2:3a: dc:60:60:7c:99:38:7b:02:7b:03:b9:ec:cb:f0:18:85:df:b5: cb:c9:88:97:0c:3a:97:dd:a1:8c:2f:cb:3a:15:b7:bb:a5:d2: 5a:0b:42:a0:3b:fc:26:3f:a2:fa:43:c4:3b:64:87:40:c3:af: a4:19:54:29:37:01:51:b3:27:97:9d:0a:b7:8c:27:3c:06:ad: 78:70:10:41:c1:22:22:f5:e3:5c:1b:80:12:7d:0b:52:2a:c5: 7d:f6:16:f6:6c:f4:ec:81:b5:a4:d5:c7:17:88:3e:99:06:e3: f1:60:0a:63:6a:a0:5f:a3:9f:65:e8:3a:60:79:04:4d:56:e1: 3e:38:55:f7:fb:53:d0:f7:6a:b9:d3:e7:36:29:cc:08:25:44: 4c:09:56:67:3b:92:02:d9:09:51:93:8a:78:03:a6:11:3e:85: 43:cb:e9:01:39:b4:26:8f:17:4a:5c:9c:21:23:73:2a:f2:d7: ae:26:25:4b:e3:3b:ce:a7:79:84:a7:b9:81:00:6d:f6:b7:8c: 00:74:c5:bc:2d:12:53:36:65:b4:12:1e:a1:f7:ee:26:b5:49: da:e6:03:bb:8c:72:c3:ee:41:24:23:a1:ac:70:89:ae:28:1a: 08:3c:9f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+xnVL/HfpSuR8ILL3WAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4 MWFkMTkwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EyhmZGY1MmIxYjU4ZGRhNDc3OTMyZDc5OGRkYjMwNmFiZjc2ZWNmNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZkzYTAKymVaj8FDmFZYfXyfcelK F9W9W3Z/IaICspx69hrVx82cwHGVSILsi+1ycCAQomuQpxsuf80HrBLo14zXZzhm nxTRL53T3ZImLoA9ZusewKg7ykX7DwsM+6h1vB/Q07oEokaWzuSUISXQv+iMiLKF NqyfpJGwdt2bBj7xDMR5wUlbmfPYjm1m0rDesXnz9XggW+RuCuPCAG9PKN8c1dRQ k2u9MspVbtJAjrxlnjXiG0Vfmzo78t27pc/wJtYLsQZ6uPQ9lKuQn5FizGHl8Okf KCUYVljciMIDscwhGagPi3K/3fk3dERKKNoLg93SXeuYoJIxiTjGzEI6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP31KxtY3aR3ky15jdswar927PRPMB8GA1UdIwQY MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1xqaCUw U2sttmjL0bCgvNI63GBgfJk4ewJ7A7nsy/AYhd+1y8mIlww6l92hjC/LOhW3u6XS WgtCoDv8Jj+i+kPEO2SHQMOvpBlUKTcBUbMnl50Kt4wnPAateHAQQcEiIvXjXBuA En0LUirFffYW9mz07IG1pNXHF4g+mQbj8WAKY2qgX6OfZeg6YHkETVbhPjhV9/tT 0PdqudPnNinMCCVETAlWZzuSAtkJUZOKeAOmET6FQ8vpATm0Jo8XSlycISNzKvLX riYlS+M7zqd5hKe5gQBt9reMAHTFvC0SUzZltBIeoffuJrVJ2uYDu4xyw+5BJCOh rHCJrigaCDyffg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:29 2025 by rpki-client