This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json) Hash identifier: yFSZYmt0N7MIRlpiPk6iGpfzmXO3hYi9YWqtVYXV0KI= Subject key identifier: 69:F5:2A:D6:EB:32:9C:29:62:57:DB:DB:30:F5:27:F9:57:C5:38:AC Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566 Certificate serial: 019B1B051F6CD789472C157FA8451DB73F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 04:01:19 +0000 Manifest this update: Sun 14 Dec 2025 04:01:19 +0000 Manifest next update: Mon 15 Dec 2025 04:01:19 +0000 Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: XPQSIGuR7RAC3yDNssup6wXyodj23/xOIsI6iPlymog=) 2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:1f:6c:d7:89:47:2c:15:7f:a8:45:1d:b7:3f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Validity Not Before: Dec 14 04:01:19 2025 GMT Not After : Dec 15 04:01:19 2025 GMT Subject: CN=69f52ad6eb329c296257dbdb30f527f957c538ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5e:7c:cc:c3:69:92:de:24:4b:08:a3:f6:d1: a5:52:56:09:a2:2e:d8:24:49:3f:f9:80:8a:7a:e9: 7a:de:15:65:aa:59:45:43:76:1a:14:cb:c8:fd:b7: 36:74:71:f6:8f:99:42:08:ad:dd:4c:9b:ff:13:68: 3d:e1:7b:8f:27:ba:8c:ca:ed:88:b9:10:3c:92:95: 9c:7e:f7:d3:dd:3e:d7:3f:2f:21:8c:8e:d9:d0:f1: 56:9a:c9:2b:3f:1a:39:b2:2e:90:8b:c5:db:99:cd: 94:b7:c4:3d:0b:1f:ac:22:44:a0:a4:f4:a2:cd:59: 25:75:fb:a5:a7:5b:51:de:72:00:24:1c:69:4d:7a: 03:a5:c1:94:44:02:44:0c:b7:fa:b6:4b:15:91:06: 41:5d:48:2c:11:2f:ae:d5:48:cb:7e:f7:c5:59:ea: af:2a:75:67:d2:74:b2:ee:2a:2f:0f:7e:3c:4d:e2: 86:36:aa:0f:da:7c:b8:a6:e4:b1:b4:5a:6b:12:79: 90:eb:49:6a:75:b4:45:60:eb:1d:ee:0c:71:2c:04: ad:35:f2:23:17:c1:65:31:c6:da:f2:70:ca:2f:25: 86:d7:7b:45:17:f8:31:a9:ee:dc:39:85:4e:60:9c: 7f:81:01:0b:e3:70:f3:fa:76:73:89:44:60:f9:6c: aa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F5:2A:D6:EB:32:9C:29:62:57:DB:DB:30:F5:27:F9:57:C5:38:AC X509v3 Authority Key Identifier: keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0b:32:ef:4a:60:fc:6b:1e:19:39:7f:9c:6e:25:c2:2e:0c: 76:63:06:f0:0c:4c:b0:d7:6e:4e:cd:2e:dd:eb:9d:04:5b:3e: 74:fa:ef:c6:31:22:6b:1b:28:16:bc:bd:e9:b8:6b:26:44:23: e3:27:ad:1d:7b:23:96:44:52:ae:60:23:ac:71:e1:51:a8:35: 2e:e5:7a:30:c0:36:dc:0f:a1:ee:e2:e6:55:67:3d:ca:f2:a2: bb:b7:70:2d:65:0e:ed:ad:d6:9c:aa:58:68:e3:0a:01:4a:11: 0d:69:c0:73:3d:39:b7:03:37:69:ac:d8:a4:39:11:4b:58:c2: 2d:6a:89:ff:82:48:d0:39:ef:26:31:e8:fd:b0:7b:8f:23:2d: 42:ed:23:a1:47:bd:c9:4b:5b:65:ca:11:9e:3c:8b:c9:c2:71: 92:0c:72:5c:ff:fd:33:3e:10:c4:17:be:36:32:3c:a7:b6:17: f8:15:05:dc:33:4a:ef:85:9b:23:f2:71:ad:2a:07:de:aa:22: ff:9e:0e:c1:19:9f:2a:19:6b:85:2e:28:68:03:fb:ca:9e:e7: f3:a1:b0:8d:4a:95:64:96:8c:e8:c7:b2:18:fb:71:7b:7a:4b: 5b:5c:a1:a7:12:39:0e:6a:50:8d:38:1e:e6:90:45:9e:39:90: 39:a8:90:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBR9s14lHLBV/qEUdtz9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3 YTI1NjYwHhcNMjUxMjE0MDQwMTE5WhcNMjUxMjE1MDQwMTE5WjAzMTEwLwYDVQQD Eyg2OWY1MmFkNmViMzI5YzI5NjI1N2RiZGIzMGY1MjdmOTU3YzUzOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l58zMNpkt4kSwij9tGlUlYJoi7Y JEk/+YCKeul63hVlqllFQ3YaFMvI/bc2dHH2j5lCCK3dTJv/E2g94XuPJ7qMyu2I uRA8kpWcfvfT3T7XPy8hjI7Z0PFWmskrPxo5si6Qi8Xbmc2Ut8Q9Cx+sIkSgpPSi zVkldfulp1tR3nIAJBxpTXoDpcGURAJEDLf6tksVkQZBXUgsES+u1UjLfvfFWeqv KnVn0nSy7iovD348TeKGNqoP2ny4puSxtFprEnmQ60lqdbRFYOsd7gxxLAStNfIj F8FlMcba8nDKLyWG13tFF/gxqe7cOYVOYJx/gQEL43Dz+nZziURg+WyqxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn1KtbrMpwpYlfb2zD1J/lXxTisMB8GA1UdIwQY MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAsy70pg /GseGTl/nG4lwi4MdmMG8AxMsNduTs0u3eudBFs+dPrvxjEiaxsoFry96bhrJkQj 4yetHXsjlkRSrmAjrHHhUag1LuV6MMA23A+h7uLmVWc9yvKiu7dwLWUO7a3WnKpY aOMKAUoRDWnAcz05twM3aazYpDkRS1jCLWqJ/4JI0DnvJjHo/bB7jyMtQu0joUe9 yUtbZcoRnjyLycJxkgxyXP/9Mz4QxBe+NjI8p7YX+BUF3DNK74WbI/JxrSoH3qoi /54OwRmfKhlrhS4oaAP7yp7n86GwjUqVZJaM6MeyGPtxe3pLW1yhpxI5DmpQjTge 5pBFnjmQOaiQlQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:53 2025 by rpki-client