This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json) Hash identifier: dO39LTFDy3r4e0xvIvk7KwI6v4BXArcXQs12hJjV6Zk= Subject key identifier: 0F:98:33:31:7D:17:34:70:7B:0A:64:FD:72:B0:74:68:65:BC:12:87 Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Certificate serial: 019B5908169A79512E31516B8D140156AB2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft Manifest number: 133D Signing time: Fri 26 Dec 2025 05:01:00 +0000 Manifest this update: Fri 26 Dec 2025 05:01:00 +0000 Manifest next update: Sat 27 Dec 2025 05:01:00 +0000 Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=) 2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: ghmEyo/0h6NWBW80smL4CzUq4YZQB/20+qhkaW/VW3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:16:9a:79:51:2e:31:51:6b:8d:14:01:56:ab:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Validity Not Before: Dec 26 05:01:00 2025 GMT Not After : Dec 27 05:01:00 2025 GMT Subject: CN=0f9833317d1734707b0a64fd72b0746865bc1287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:ff:9a:0f:9b:c2:61:3a:a4:e6:78:ee:22: 36:09:f6:ee:c9:1d:ad:f4:73:bf:a9:2f:91:76:e8: c0:cf:50:97:87:62:63:f0:37:10:11:9e:1e:11:44: 24:a6:b2:5d:6a:f4:8b:b3:64:17:3f:17:6b:0d:ef: b2:07:0b:6e:73:6d:69:ba:e5:42:f2:b2:bc:30:b7: 6c:76:a2:3a:64:f3:0b:4d:11:c4:37:c5:b7:23:dc: 0c:2e:5c:14:dd:1c:ca:74:b1:1e:fc:29:87:6b:29: 22:64:b8:97:3b:ab:0e:c6:70:3d:70:fe:75:92:e3: 4c:fa:4a:e7:89:88:6f:e2:fe:db:3e:86:9e:67:b7: 78:72:ed:48:b8:85:cc:6b:84:c1:78:59:94:38:11: 6d:89:70:16:c3:8f:86:01:90:e6:a2:e3:ea:bb:e4: f6:05:c6:9b:2c:99:d3:81:7d:50:67:71:a5:4a:98: 12:36:3a:31:47:2a:c6:7f:f3:d5:98:39:92:4d:71: eb:c7:06:54:c8:80:54:c3:8f:0d:94:f6:10:10:7a: e6:99:a1:c6:4b:18:58:e5:88:2a:46:a8:71:8d:37: fd:9d:03:1f:f9:88:98:03:7f:e9:ba:26:fe:de:aa: 88:bb:25:2e:6c:fb:63:9f:f8:3f:75:28:f7:b5:d2: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:98:33:31:7D:17:34:70:7B:0A:64:FD:72:B0:74:68:65:BC:12:87 X509v3 Authority Key Identifier: keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4b:b7:45:ed:43:2a:ee:af:87:4f:68:bb:02:0e:8b:06:dc: 25:73:a0:4c:f7:d2:3f:15:39:92:af:e1:81:31:d9:5b:6a:44: 45:67:55:19:04:31:a6:68:67:98:f5:9e:27:50:71:de:ac:72: fc:b6:d4:98:c9:d6:46:31:9a:fc:b7:80:49:b2:34:b9:86:12: 9c:6a:5c:e0:04:90:50:cc:ad:b6:e9:89:28:04:e7:bb:24:83: 6c:06:27:81:1d:44:cc:bd:f8:54:de:fc:49:66:a0:17:8e:1c: ad:17:a0:8b:d5:c8:20:6c:91:f3:22:f0:54:d2:0a:86:00:23: 73:bb:a1:b2:af:4c:ec:9b:a8:4c:ff:35:ab:b9:03:69:7d:5d: 56:af:7a:f2:90:31:b9:9d:2f:af:8f:91:a0:81:2d:19:00:cf: cf:27:6a:b0:04:3a:7f:3b:7d:3c:d6:a3:e5:00:48:c4:35:0a: fb:1c:8a:a9:26:ce:73:3f:1f:c9:e1:bc:6f:ab:5c:b6:60:d2: 60:a5:0e:3e:bc:28:6b:77:2f:90:f2:10:8f:79:e9:7c:d0:c5: 0e:68:98:57:e2:3b:93:b9:1e:77:9d:c6:23:d9:50:09:9b:8c: 06:8d:40:5c:5c:47:f7:18:e6:c3:82:4d:3b:f3:f5:8b:42:5e: ad:7b:fd:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCBaaeVEuMVFrjRQBVqsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiY2MxY2Y4YjhlMjEwNjZiNmVjNjQ3Njk3ZDQ5NDVkOGY5 YmIwNWIwHhcNMjUxMjI2MDUwMTAwWhcNMjUxMjI3MDUwMTAwWjAzMTEwLwYDVQQD EygwZjk4MzMzMTdkMTczNDcwN2IwYTY0ZmQ3MmIwNzQ2ODY1YmMxMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvv/mg+bwmE6pOZ47iI2CfbuyR2t 9HO/qS+RdujAz1CXh2Jj8DcQEZ4eEUQkprJdavSLs2QXPxdrDe+yBwtuc21puuVC 8rK8MLdsdqI6ZPMLTRHEN8W3I9wMLlwU3RzKdLEe/CmHaykiZLiXO6sOxnA9cP51 kuNM+krniYhv4v7bPoaeZ7d4cu1IuIXMa4TBeFmUOBFtiXAWw4+GAZDmouPqu+T2 BcabLJnTgX1QZ3GlSpgSNjoxRyrGf/PVmDmSTXHrxwZUyIBUw48NlPYQEHrmmaHG SxhY5YgqRqhxjTf9nQMf+YiYA3/puib+3qqIuyUubPtjn/g/dSj3tdK0eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+YMzF9FzRwewpk/XKwdGhlvBKHMB8GA1UdIwQY MBaAFCvMHPi44hBmtuxkdpfUlF2Pm7BbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjct MGE3ZTAxOTg5OWNmLzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjctMGE3ZTAxOTg5OWNm LzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACku3Re1D Ku6vh09ouwIOiwbcJXOgTPfSPxU5kq/hgTHZW2pERWdVGQQxpmhnmPWeJ1Bx3qxy /LbUmMnWRjGa/LeASbI0uYYSnGpc4ASQUMyttumJKATnuySDbAYngR1EzL34VN78 SWagF44crRegi9XIIGyR8yLwVNIKhgAjc7uhsq9M7JuoTP81q7kDaX1dVq968pAx uZ0vr4+RoIEtGQDPzydqsAQ6fzt9PNaj5QBIxDUK+xyKqSbOcz8fyeG8b6tctmDS YKUOPrwoa3cvkPIQj3npfNDFDmiYV+I7k7ked53GI9lQCZuMBo1AXFxH9xjmw4JN O/P1i0JerXv9AQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:47 2025 by rpki-client