This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json) Hash identifier: cwqy/bSTAT2M9SAFfCK43gg2+0plNqKTjHRaC6CIGXU= Subject key identifier: 62:34:2E:A6:05:B2:2E:17:7B:E8:65:BA:56:64:69:53:E9:AB:31:59 Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Certificate serial: 019B484B63ED06CBC088CA8AAF670A7FD8FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 23:00:58 +0000 Manifest this update: Mon 22 Dec 2025 23:00:58 +0000 Manifest next update: Tue 23 Dec 2025 23:00:58 +0000 Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=) 2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: TFMAiUFl28S6wYp1zW+ZtUag9YGmvo+hXHjZDnAMhNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:63:ed:06:cb:c0:88:ca:8a:af:67:0a:7f:d8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Validity Not Before: Dec 22 23:00:58 2025 GMT Not After : Dec 23 23:00:58 2025 GMT Subject: CN=62342ea605b22e177be865ba56646953e9ab3159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:d1:a3:71:c9:5e:81:a0:ec:25:df:4c:b4: 79:3a:cb:b8:58:d1:42:d5:a8:c8:25:16:4c:74:fd: 4b:43:72:88:86:5f:b9:c4:a2:15:b2:d5:99:d6:b2: a0:c1:50:6c:01:38:4a:9c:66:45:b9:f6:33:b7:2f: 5f:3d:84:9c:ba:0d:af:11:d5:24:49:24:05:d8:b4: f3:3f:79:84:46:ed:85:32:3e:ed:7d:5e:14:6f:44: a3:98:10:cc:33:4d:0f:83:b4:23:c1:f0:41:3d:e2: 10:2d:12:5c:82:f5:07:5d:68:67:a9:06:9a:6f:ca: 1c:36:f3:27:1a:e7:03:ab:4b:05:49:b5:02:53:eb: 55:59:b8:f7:7a:97:63:70:fa:b4:b5:87:7e:fb:75: 59:4c:2e:1b:51:81:c7:41:2d:fd:62:5d:1a:ea:8d: 3f:b0:37:9c:89:ca:c5:e9:a6:12:d4:10:fb:ea:19: 25:e2:b7:f3:80:ba:ea:be:86:00:2d:69:d2:1e:ce: 8a:13:64:76:ba:6e:74:76:de:fa:bd:10:2f:05:99: 10:13:83:ee:be:29:45:b9:fe:fb:4b:72:c6:ed:a1: a9:81:bd:f1:49:63:56:44:34:7f:82:71:3a:af:66: f6:da:03:8d:7e:a8:e6:c3:8c:12:79:fe:2c:6e:52: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:2E:A6:05:B2:2E:17:7B:E8:65:BA:56:64:69:53:E9:AB:31:59 X509v3 Authority Key Identifier: keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8b:89:2e:65:7b:67:1e:7b:88:c1:ad:c1:45:20:3a:6e:90: dc:26:6a:9e:45:1d:10:25:6b:51:26:5b:f9:21:41:6a:84:15: 58:cc:0f:e4:ad:48:cd:ff:5e:2c:ae:80:47:d2:0a:eb:52:e8: a4:c5:19:a5:0c:4b:7e:35:4b:ed:5b:5d:89:10:b4:c1:59:9d: 3a:0d:74:38:2e:8e:90:49:22:b7:8e:8e:ec:9d:d4:9a:19:b3: 03:63:74:96:02:f0:8b:97:7b:fa:6b:c9:d4:cf:dc:01:3d:9e: 2b:be:fb:cf:d7:a7:b3:b7:ca:e7:cd:1e:55:4a:86:78:d1:25: bb:a1:85:87:e5:a4:2a:ed:5b:35:45:22:1c:51:2c:51:c9:3d: 37:29:26:84:92:9d:72:3b:93:5b:40:ba:38:c9:91:38:14:bb: d5:c0:aa:c3:97:21:a9:01:48:0e:54:6d:fe:67:4d:1e:a7:ee: 71:89:91:42:fc:62:84:a2:86:33:b0:ac:ad:b6:f6:32:d4:af: 43:24:7d:ac:b5:ca:05:dc:54:8a:3d:0b:42:13:94:8c:08:4b: f9:1f:a6:62:b1:a5:58:8f:92:3c:71:a1:8b:86:dd:1a:d1:32: 67:b5:1b:17:30:0b:54:db:b9:6b:7c:0f:11:2c:05:3d:09:a1: c9:c2:34:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS2PtBsvAiMqKr2cKf9j7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGJkYzljMTI3ZmI3MThlMjQwZGZiMjc1NmY1MjAyMDM2 ZmUzZDUwHhcNMjUxMjIyMjMwMDU4WhcNMjUxMjIzMjMwMDU4WjAzMTEwLwYDVQQD Eyg2MjM0MmVhNjA1YjIyZTE3N2JlODY1YmE1NjY0Njk1M2U5YWIzMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB/Ro3HJXoGg7CXfTLR5Osu4WNFC 1ajIJRZMdP1LQ3KIhl+5xKIVstWZ1rKgwVBsAThKnGZFufYzty9fPYScug2vEdUk SSQF2LTzP3mERu2FMj7tfV4Ub0SjmBDMM00Pg7QjwfBBPeIQLRJcgvUHXWhnqQaa b8ocNvMnGucDq0sFSbUCU+tVWbj3epdjcPq0tYd++3VZTC4bUYHHQS39Yl0a6o0/ sDecicrF6aYS1BD76hkl4rfzgLrqvoYALWnSHs6KE2R2um50dt76vRAvBZkQE4Pu vilFuf77S3LG7aGpgb3xSWNWRDR/gnE6r2b22gONfqjmw4wSef4sblIVDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGI0LqYFsi4Xe+hlulZkaVPpqzFZMB8GA1UdIwQY MBaAFCqL3JwSf7cY4kDfsnVvUgIDb+PVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUt OGY1OWEzOTEwYmRkLzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUtOGY1OWEzOTEwYmRk LzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYuJLmV7 Zx57iMGtwUUgOm6Q3CZqnkUdECVrUSZb+SFBaoQVWMwP5K1Izf9eLK6AR9IK61Lo pMUZpQxLfjVL7VtdiRC0wVmdOg10OC6OkEkit46O7J3UmhmzA2N0lgLwi5d7+mvJ 1M/cAT2eK777z9ens7fK580eVUqGeNElu6GFh+WkKu1bNUUiHFEsUck9NykmhJKd cjuTW0C6OMmROBS71cCqw5chqQFIDlRt/mdNHqfucYmRQvxihKKGM7Csrbb2MtSv QyR9rLXKBdxUij0LQhOUjAhL+R+mYrGlWI+SPHGhi4bdGtEyZ7UbFzALVNu5a3wP ESwFPQmhycI0Qw== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:48 2025 by rpki-client