This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json) Hash identifier: tWYtGHSuKAycnOsrgf7hao8xkZY7uXd9W3u696AVJu8= Subject key identifier: 8F:0C:4B:F0:E0:68:76:9E:76:AD:93:3F:9F:F7:22:6C:5D:CE:29:25 Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Certificate serial: 019B353325A6F479178DD0A47BF120842A43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 06:01:42 +0000 Manifest this update: Fri 19 Dec 2025 06:01:42 +0000 Manifest next update: Sat 20 Dec 2025 06:01:42 +0000 Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=) 2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: Hhrj6XOuMTzXLEcJHlfLgzZzi2CmVUmC022/nWD5aDY=) 3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=) 4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:25:a6:f4:79:17:8d:d0:a4:7b:f1:20:84:2a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Validity Not Before: Dec 19 06:01:42 2025 GMT Not After : Dec 20 06:01:42 2025 GMT Subject: CN=8f0c4bf0e068769e76ad933f9ff7226c5dce2925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:30:80:c4:83:16:f4:7f:3c:c7:a2:93:37: 62:64:47:b1:7c:49:d3:5e:62:22:e7:73:d4:a2:4c: bc:a1:6d:4c:e4:0e:1e:c3:39:ac:a3:87:2d:ac:56: 7a:83:d1:8c:a7:28:4c:62:55:9c:26:43:9f:3f:2d: ba:c4:aa:b0:82:9f:de:9d:de:a8:75:47:ba:9b:de: ec:bb:fc:6e:ef:cc:de:0f:39:dc:da:13:24:e6:a6: 4b:29:e6:78:42:c3:62:e2:91:28:23:ca:f6:83:2b: 9c:27:95:fe:e0:74:e1:1d:b0:ac:52:a0:eb:81:8d: 99:ee:44:50:10:8c:4e:c0:2f:ac:6f:92:ba:5e:f5: b1:0a:dd:4a:8a:00:f0:32:1c:c3:c6:8a:7f:52:18: 03:e5:b0:dd:67:1c:ef:32:c3:90:81:4b:e2:04:24: 87:e0:4e:40:d0:14:9e:2f:c4:64:02:59:98:a4:71: d1:96:ab:62:ab:9a:24:0d:b2:64:e3:e7:c9:a7:27: 16:1e:80:13:30:14:9e:e7:8e:c5:d0:be:72:f1:0d: c7:28:35:b2:a0:ef:20:15:1b:fd:bc:53:bd:cb:f8: 47:0e:02:76:71:33:13:f7:ac:7e:69:fd:13:f6:77: be:e9:e3:8e:ff:80:66:22:91:3b:1c:22:df:4a:09: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0C:4B:F0:E0:68:76:9E:76:AD:93:3F:9F:F7:22:6C:5D:CE:29:25 X509v3 Authority Key Identifier: keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e5:76:55:93:27:b2:e6:e9:7b:3b:ff:ae:87:63:fb:91:20: d1:a8:e1:f5:56:56:cc:7e:e5:50:ab:f4:e9:62:3a:cc:d8:c7: a5:42:92:a0:6f:8b:40:d7:43:4b:f1:e2:55:65:5a:96:04:eb: a7:9e:35:7a:84:ea:fb:dc:0f:a5:e9:9a:c7:fc:87:99:c2:ef: 07:4f:f8:69:7c:4a:d0:6b:33:f3:9e:11:f1:d4:15:8a:be:76: 37:9c:3a:d5:11:2d:c9:5a:cb:0e:f4:d2:5a:3b:76:30:f0:3c: 0b:15:61:b5:4e:a8:d8:c5:d3:32:79:70:fc:e5:75:ca:25:df: fd:c3:11:09:b8:ff:34:8a:c1:16:37:2b:3e:5e:3a:4b:9c:7d: e3:c1:a5:1b:b7:33:22:15:bd:b2:73:54:a2:6c:56:c5:9e:d8: 3c:d6:f2:2e:e7:86:91:88:68:0b:8c:d2:bd:2f:25:ae:c5:b5: bc:aa:ea:14:51:31:2e:fa:7b:71:e8:d8:2c:70:4c:24:44:c2: 71:79:eb:01:37:7f:bf:b5:1a:c5:6e:83:e1:ec:bd:6f:2a:f9: cb:1c:53:86:8f:99:ea:49:d1:53:3d:7e:35:e4:02:40:a8:02: 3c:47:a8:69:ad:fe:2e:83:17:7a:03:a3:f7:d2:3f:58:81:75: 36:66:8b:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MyWm9HkXjdCke/EghCpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGUyZDM0Y2NlZTQ1NzZiNWNlNzYwNWEwODRlNmMwODUy MmMyMjgwHhcNMjUxMjE5MDYwMTQyWhcNMjUxMjIwMDYwMTQyWjAzMTEwLwYDVQQD Eyg4ZjBjNGJmMGUwNjg3NjllNzZhZDkzM2Y5ZmY3MjI2YzVkY2UyOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz4wgMSDFvR/PMeikzdiZEexfEnT XmIi53PUoky8oW1M5A4ewzmso4ctrFZ6g9GMpyhMYlWcJkOfPy26xKqwgp/end6o dUe6m97su/xu78zeDznc2hMk5qZLKeZ4QsNi4pEoI8r2gyucJ5X+4HThHbCsUqDr gY2Z7kRQEIxOwC+sb5K6XvWxCt1KigDwMhzDxop/UhgD5bDdZxzvMsOQgUviBCSH 4E5A0BSeL8RkAlmYpHHRlqtiq5okDbJk4+fJpycWHoATMBSe547F0L5y8Q3HKDWy oO8gFRv9vFO9y/hHDgJ2cTMT96x+af0T9ne+6eOO/4BmIpE7HCLfSgmBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8MS/DgaHaedq2TP5/3ImxdziklMB8GA1UdIwQY MBaAFCtOLTTM7kV2tc52BaCE5sCFIsIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMt MDc3YmM4YmExZTVkLzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMtMDc3YmM4YmExZTVk LzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOV2VZMn subpezv/rodj+5Eg0ajh9VZWzH7lUKv06WI6zNjHpUKSoG+LQNdDS/HiVWValgTr p541eoTq+9wPpemax/yHmcLvB0/4aXxK0Gsz854R8dQVir52N5w61REtyVrLDvTS Wjt2MPA8CxVhtU6o2MXTMnlw/OV1yiXf/cMRCbj/NIrBFjcrPl46S5x948GlG7cz IhW9snNUomxWxZ7YPNbyLueGkYhoC4zSvS8lrsW1vKrqFFExLvp7cejYLHBMJETC cXnrATd/v7UaxW6D4ey9byr5yxxTho+Z6knRUz1+NeQCQKgCPEeoaa3+LoMXegOj 99I/WIF1NmaL5w== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:27 2025 by rpki-client