This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json) Hash identifier: hgRndMGIeo5C3VVdRPdEaEyFPbiCV5GD3wrQaCydUW4= Subject key identifier: C2:7E:86:34:95:C2:86:8C:16:59:CB:10:32:7A:62:26:24:14:64:40 Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf Certificate serial: 019B32D7C060D331CB03DC7A859578FFE766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft Manifest number: 165C Signing time: Thu 18 Dec 2025 19:02:38 +0000 Manifest this update: Thu 18 Dec 2025 19:02:38 +0000 Manifest next update: Fri 19 Dec 2025 19:02:38 +0000 Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: sDh3j/xhdXtJRRy9/dmmpppGIOOgr4uCgh4XvtjQ7TU=) 2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:c0:60:d3:31:cb:03:dc:7a:85:95:78:ff:e7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf Validity Not Before: Dec 18 19:02:38 2025 GMT Not After : Dec 19 19:02:38 2025 GMT Subject: CN=c27e863495c2868c1659cb10327a622624146440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:59:60:92:41:29:42:26:97:fb:95:1d:92: 20:81:01:d1:68:d3:08:ac:bf:10:cc:9b:ae:75:af: 0c:c4:f5:28:70:9d:ed:3e:88:59:e9:92:fb:98:0b: 62:b9:3e:63:ec:7b:20:c0:03:47:fa:f9:4b:af:5b: 86:f7:52:1d:a5:04:e1:37:08:a7:7c:87:8f:b8:d9: 0c:17:52:33:20:c6:88:2c:37:e8:60:51:c0:9a:f2: 78:f0:68:ed:bc:5a:87:88:b8:6c:08:5a:d8:54:81: b0:31:e6:73:1f:29:38:a2:93:92:32:d6:0b:88:8b: 17:09:73:9d:1f:3b:94:4f:b0:4f:db:35:dc:35:e9: 73:24:0f:a0:0c:44:64:bf:ed:b5:97:8f:6e:ed:54: bc:d8:3c:5d:be:b3:a6:ec:8f:3f:f5:61:92:85:d4: 24:d3:3d:23:14:f8:25:b3:98:1c:10:b4:a8:6b:87: 90:6f:50:76:05:37:bf:2a:c4:5b:4e:7c:3e:be:55: 3a:46:82:28:67:e2:c4:36:1e:9c:8b:ae:2c:71:b3: ab:61:0d:3a:81:7e:53:37:7e:80:42:06:85:c9:65: 36:36:94:30:f5:03:41:55:d0:47:fd:a1:21:51:29: ab:f9:7f:cc:57:7d:27:99:92:bd:37:7a:9e:ee:66: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:86:34:95:C2:86:8C:16:59:CB:10:32:7A:62:26:24:14:64:40 X509v3 Authority Key Identifier: keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:bb:8d:cb:68:f5:3e:c7:ab:69:4f:52:51:b3:15:33:37:ef: b2:58:0c:80:bd:db:47:be:9b:39:90:2e:3b:db:5d:ae:8e:fe: 91:4a:d4:71:da:5e:fa:7e:33:0d:64:1e:72:b0:b6:43:d1:b9: 7f:f4:b9:14:ae:c2:6f:29:90:a0:07:26:d1:35:95:bb:3a:6c: 4c:85:d1:a1:a3:e3:c3:98:3c:e5:ff:7a:87:13:76:19:fc:0d: 32:9b:44:53:8f:17:27:fc:a9:8b:e9:a8:26:7f:92:ef:0d:d1: d0:ff:cc:6a:c2:51:3d:94:ee:0b:e9:78:a7:68:7d:a5:3b:6a: 21:f6:18:ac:b1:e1:d3:3e:0d:0a:4b:af:b4:2e:bd:df:33:76: 87:a5:9d:d6:42:a1:a9:01:da:e3:d7:c6:23:6d:ea:5c:47:cd: f5:13:93:bf:03:af:d6:22:49:ac:ce:16:66:61:4d:37:ae:52: a2:d3:32:f9:50:94:7c:e6:82:22:6f:99:9a:c1:ab:bf:38:b4: 5d:b6:a9:86:cc:03:ab:a2:22:7b:65:bc:d8:14:51:29:df:4d: 7a:18:2a:a5:42:a0:0f:9b:1e:e7:2b:96:82:6e:63:f2:3d:65: 02:23:32:bd:0d:a9:a8:d2:f6:3a:c3:d1:dd:52:3b:4e:60:2c: eb:41:93:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy18Bg0zHLA9x6hZV4/+dmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFiNGMxNTE3ZjczMmRmOGIyZWM4M2RlNGFkMjM2OGQ0 NWNmZGYwHhcNMjUxMjE4MTkwMjM4WhcNMjUxMjE5MTkwMjM4WjAzMTEwLwYDVQQD EyhjMjdlODYzNDk1YzI4NjhjMTY1OWNiMTAzMjdhNjIyNjI0MTQ2NDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIZZYJJBKUIml/uVHZIggQHRaNMI rL8QzJuuda8MxPUocJ3tPohZ6ZL7mAtiuT5j7HsgwANH+vlLr1uG91IdpQThNwin fIePuNkMF1IzIMaILDfoYFHAmvJ48GjtvFqHiLhsCFrYVIGwMeZzHyk4opOSMtYL iIsXCXOdHzuUT7BP2zXcNelzJA+gDERkv+21l49u7VS82DxdvrOm7I8/9WGShdQk 0z0jFPgls5gcELSoa4eQb1B2BTe/KsRbTnw+vlU6RoIoZ+LENh6ci64scbOrYQ06 gX5TN36AQgaFyWU2NpQw9QNBVdBH/aEhUSmr+X/MV30nmZK9N3qe7mZR9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ+hjSVwoaMFlnLEDJ6YiYkFGRAMB8GA1UdIwQY MBaAFCtKtMFRf3Mt+LLsg95K0jaNRc/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODIt ZTdhYmNmMjIzNzE1LzEvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODItZTdhYmNmMjIzNzE1 LzEvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLuNy2j1 PseraU9SUbMVMzfvslgMgL3bR76bOZAuO9tdro7+kUrUcdpe+n4zDWQecrC2Q9G5 f/S5FK7CbymQoAcm0TWVuzpsTIXRoaPjw5g85f96hxN2GfwNMptEU48XJ/ypi+mo Jn+S7w3R0P/MasJRPZTuC+l4p2h9pTtqIfYYrLHh0z4NCkuvtC693zN2h6Wd1kKh qQHa49fGI23qXEfN9ROTvwOv1iJJrM4WZmFNN65SotMy+VCUfOaCIm+ZmsGrvzi0 XbaphswDq6Iie2W82BRRKd9NehgqpUKgD5se5yuWgm5j8j1lAiMyvQ2pqNL2OsPR 3VI7TmAs60GTsg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:54:42 2025 by rpki-client