This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft File: 1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json) Hash identifier: H6ZO2bUeDrLbpeTl3qiLA7QyeCNlE5mKTIOzWYYSGSw= Subject key identifier: 5F:63:36:EE:D4:E6:EA:4B:AB:47:48:3A:63:45:24:30:F2:25:36:70 Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D Certificate issuer: /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Certificate serial: 019B2B1DDACE4EC561D2F2AC1E43067DEAE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft Manifest number: 034B Signing time: Wed 17 Dec 2025 07:02:15 +0000 Manifest this update: Wed 17 Dec 2025 07:02:15 +0000 Manifest next update: Thu 18 Dec 2025 07:02:15 +0000 Files and hashes: 1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: IZc7xd/UuCMtWM/572A+Dov5j2BIqATubxUdB1myKqs=) 2: KMs7aUSS9LqAFlnC_o5ElLedNIc.roa (hash: /x7zWDBe20WK1XP4EQ8MfhJthk5BD7GGqFW7sL/0M74=) 3: hqdB3dvV_dcCWDsTMYzzBUkq1iQ.roa (hash: PqNxdXFESdm3E0fpRf9aF9eGcWyACVXLt/A8w8L4KSw=) 4: ntHtztrMmkHjlQm-nR0AF_-ZVFE.roa (hash: Bf849e8DMlDt314X2PPaLUOxw5PYejhf50bcsgAnmcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:da:ce:4e:c5:61:d2:f2:ac:1e:43:06:7d:ea:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Validity Not Before: Dec 17 07:02:15 2025 GMT Not After : Dec 18 07:02:15 2025 GMT Subject: CN=5f6336eed4e6ea4bab47483a63452430f2253670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:48:a3:74:11:e6:c8:e3:fe:00:1f:3f:6f: a7:e3:bf:2b:e1:f7:eb:59:2b:59:69:2a:65:6d:ce: fb:67:8f:c3:b6:73:02:16:0a:bb:ba:b4:14:c7:db: 0b:1c:d8:f8:dd:d1:09:5e:f8:15:d0:7b:35:b4:73: 7e:93:2e:ca:11:03:fb:82:9e:b1:07:7b:bc:cd:5c: b6:d1:75:14:64:1f:18:d3:a0:c4:54:01:60:b2:a1: c8:a7:b0:56:2c:82:87:0e:d9:a3:dd:58:87:6e:97: 89:92:36:f5:84:7c:20:e2:b5:00:e7:c6:6c:68:df: 98:22:de:49:2c:35:91:86:74:de:02:b4:4b:e2:ea: 1e:13:29:b9:a4:d6:b8:b2:f6:39:42:fd:e3:31:9e: a9:88:7c:9f:56:ce:c7:bf:40:c7:86:a4:ec:07:28: b8:74:d0:84:43:29:2e:22:7c:af:be:00:f2:ba:2e: 7e:7d:94:2f:53:ec:54:5a:ec:9b:78:32:7b:b0:b7: 5f:eb:dc:66:d3:91:1b:5f:16:fe:22:87:47:bd:0c: 07:b8:dd:2a:85:0b:07:8b:65:9d:95:2b:0d:5e:ce: 55:86:ae:62:5d:81:91:da:d4:65:e1:72:d9:4f:88: ba:1d:7b:57:fe:41:30:23:03:33:e1:73:d2:9c:7c: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:63:36:EE:D4:E6:EA:4B:AB:47:48:3A:63:45:24:30:F2:25:36:70 X509v3 Authority Key Identifier: keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c1:e4:c9:7e:88:58:85:ce:4e:7f:02:4f:da:4a:7a:7a:e0: 2b:6f:ae:3c:da:3b:54:08:8c:a9:90:47:79:25:1e:ff:bf:2a: 9d:d1:5c:04:62:73:fc:28:26:b9:05:25:ef:a3:11:a4:93:c2: e1:01:20:b7:f9:42:28:8e:f3:56:b8:d3:c9:c5:58:11:09:24: 80:87:a9:cb:29:f5:a7:fe:e2:c2:25:15:54:58:74:76:4d:0b: 86:d3:b1:b4:5f:86:ef:1d:90:7a:cd:0e:0d:83:94:30:36:55: 7d:0d:08:d5:d7:5d:c0:bf:89:f0:6d:00:2b:d3:78:26:a6:47: 8b:db:7e:20:41:fe:ab:20:92:d3:6f:4a:4e:c8:37:dd:ab:f5: c2:3d:42:82:69:cf:cc:ca:bc:ea:c2:a1:f8:29:98:e5:ef:92: c4:3b:3c:4e:1b:96:23:42:11:56:01:b5:a2:cf:de:ae:af:4d: 6f:65:e6:57:05:12:0d:97:ab:d6:20:95:df:fe:5d:9f:3a:01: 94:d2:b5:65:0d:04:34:b1:84:05:6f:b4:46:a4:41:9a:18:72: e4:66:21:26:91:b4:fe:6a:84:0f:1d:5d:67:26:a8:66:24:fc: 58:11:0e:00:75:8a:7e:95:0e:89:1e:70:02:e1:3a:3c:fa:81: 79:53:6d:b6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsrHdrOTsVh0vKsHkMGfernMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTJiNjA1YzU4ZTA3NDZhYWRjNWJmMGQ3Y2JjMzZjOTMw N2Y3NGQwHhcNMjUxMjE3MDcwMjE1WhcNMjUxMjE4MDcwMjE1WjAzMTEwLwYDVQQD Eyg1ZjYzMzZlZWQ0ZTZlYTRiYWI0NzQ4M2E2MzQ1MjQzMGYyMjUzNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWRIo3QR5sjj/gAfP2+n478r4ffr WStZaSplbc77Z4/DtnMCFgq7urQUx9sLHNj43dEJXvgV0Hs1tHN+ky7KEQP7gp6x B3u8zVy20XUUZB8Y06DEVAFgsqHIp7BWLIKHDtmj3ViHbpeJkjb1hHwg4rUA58Zs aN+YIt5JLDWRhnTeArRL4uoeEym5pNa4svY5Qv3jMZ6piHyfVs7Hv0DHhqTsByi4 dNCEQykuInyvvgDyui5+fZQvU+xUWuybeDJ7sLdf69xm05EbXxb+IodHvQwHuN0q hQsHi2WdlSsNXs5Vhq5iXYGR2tRl4XLZT4i6HXtX/kEwIwMz4XPSnHyqMwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF9jNu7U5upLq0dIOmNFJDDyJTZwMB8GA1UdIwQY MBaAFPiitgXFjgdGqtxb8NfLw2yTB/dNMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LSzJCY1dPQjBhcTNGdncxOHZEYkpNSDkwMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMDc2ZDM3LTRhYjQtNGVjMy1hNGIw LTUyNDAyNWUxMzIwMi8xLzEtS0syQmNXT0IwYXEzRnZ3MTh2RGJKTUg5MDAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ViLzA3NmQzNy00YWI0LTRlYzMtYTRiMC01MjQwMjVlMTMy MDIvMS8xLUtLMkJjV09CMGFxM0Z2dzE4dkRiSk1IOTAwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcHk yX6IWIXOTn8CT9pKenrgK2+uPNo7VAiMqZBHeSUe/78qndFcBGJz/CgmuQUl76MR pJPC4QEgt/lCKI7zVrjTycVYEQkkgIepyyn1p/7iwiUVVFh0dk0LhtOxtF+G7x2Q es0ODYOUMDZVfQ0I1dddwL+J8G0AK9N4JqZHi9t+IEH+qyCS029KTsg33av1wj1C gmnPzMq86sKh+CmY5e+SxDs8ThuWI0IRVgG1os/erq9Nb2XmVwUSDZer1iCV3/5d nzoBlNK1ZQ0ENLGEBW+0RqRBmhhy5GYhJpG0/mqEDx1dZyaoZiT8WBEOAHWKfpUO iR5wAuE6PPqBeVNttg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:05:50 2025 by rpki-client