This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json) Hash identifier: Tjshctqyq5X0kpitAEFDdyFx2zUnlEzECFadh+1wU7U= Subject key identifier: 58:05:37:68:D2:E4:FF:C6:FC:7E:2E:1B:28:30:BB:08:8A:A4:03:90 Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Certificate serial: 019B0E937C8D90AB60CE637E535105240655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 18:01:44 +0000 Manifest this update: Thu 11 Dec 2025 18:01:44 +0000 Manifest next update: Fri 12 Dec 2025 18:01:44 +0000 Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=) 2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: F5vURrFNW+Pd8uX/REO9D5HmyzBlVQvAbLDl6uEgvAA=) 3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=) 4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:7c:8d:90:ab:60:ce:63:7e:53:51:05:24:06:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Validity Not Before: Dec 11 18:01:44 2025 GMT Not After : Dec 12 18:01:44 2025 GMT Subject: CN=58053768d2e4ffc6fc7e2e1b2830bb088aa40390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:ad:53:32:4d:54:5d:54:cf:bc:9c:71:9c: 20:22:34:1b:27:f1:41:5b:52:7d:58:14:f9:ce:8b: 5b:73:51:9e:5a:a7:ee:29:f7:72:22:2d:34:e4:24: c6:d0:0a:ec:f7:d3:a1:8d:10:e3:0c:b4:80:23:fa: 9e:46:31:92:f3:db:cb:dd:f4:1b:d9:a8:f7:cf:5e: 72:0e:69:50:ae:41:e6:68:76:02:01:67:9a:e0:17: fa:d8:1f:2a:ed:e4:f2:bc:86:8a:5c:db:f6:f8:5b: 1c:15:3d:ab:82:3d:7e:e9:51:cb:5e:db:95:51:ea: 1e:14:bc:53:c4:5e:89:a9:2a:0b:cb:88:48:36:0e: ae:e5:64:5d:77:18:79:be:94:21:c0:ba:68:f0:df: f3:e8:4f:9c:96:cd:4c:da:e9:ae:d4:11:e6:f0:b2: ca:59:6d:a8:55:1b:88:b9:1f:64:1d:5c:8d:1c:30: 60:a8:df:7b:5a:62:ca:f1:2a:db:ef:50:5a:f5:c2: 23:9d:2e:19:cc:19:c1:79:7f:71:71:66:90:be:e4: 11:5a:49:6c:00:30:0b:3a:fb:bb:84:87:05:5c:c0: b3:92:ba:bf:73:34:a5:67:69:44:85:b9:43:e3:78: 6e:f9:53:35:01:ab:60:33:e6:28:cd:d3:61:f1:15: 78:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:05:37:68:D2:E4:FF:C6:FC:7E:2E:1B:28:30:BB:08:8A:A4:03:90 X509v3 Authority Key Identifier: keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:22:91:a0:af:57:55:e3:18:bb:37:0f:70:2d:ba:dd:20:a3: 58:ee:ab:bc:d7:80:80:32:b0:28:79:67:4c:30:13:d2:4f:05: 12:24:56:f1:72:cb:36:50:86:ee:01:d1:e1:77:4b:86:cb:f3: bd:d7:a7:5b:53:96:7d:95:b1:45:e6:95:fc:2c:ad:b2:4b:41: 08:a8:d4:8a:71:fd:55:33:0f:4f:01:35:84:a5:22:6d:11:87: 41:7b:88:b2:fa:39:28:01:4c:16:89:82:2b:11:85:c4:0c:64: 06:8c:7d:5f:6a:77:d3:96:aa:a7:cc:f1:9c:71:31:d0:76:e3: 71:80:1b:2f:23:5a:6f:c2:fb:8f:1f:b1:62:b4:64:fd:29:2a: 5a:8f:62:5b:ac:31:2c:bc:85:4f:af:38:95:e7:a0:bc:d1:41: 45:e9:cb:0e:96:fb:71:11:f8:f1:2d:cc:96:04:2b:cc:41:1d: 4b:67:e6:92:fc:ba:c8:8b:43:9b:8d:d4:0c:b9:ce:4c:7e:ae: 7d:fc:64:1b:1a:2e:c1:77:68:fe:f9:43:a4:01:cd:a6:9b:43: a0:9d:91:54:89:3e:83:6b:92:2b:c7:81:23:bb:7a:93:f6:2e: 7b:9c:be:96:dc:fa:26:59:77:93:4d:e8:2b:e9:da:f4:f6:a7: ae:33:0c:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk3yNkKtgzmN+U1EFJAZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGUyZDM0Y2NlZTQ1NzZiNWNlNzYwNWEwODRlNmMwODUy MmMyMjgwHhcNMjUxMjExMTgwMTQ0WhcNMjUxMjEyMTgwMTQ0WjAzMTEwLwYDVQQD Eyg1ODA1Mzc2OGQyZTRmZmM2ZmM3ZTJlMWIyODMwYmIwODhhYTQwMzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHitUzJNVF1Uz7yccZwgIjQbJ/FB W1J9WBT5zotbc1GeWqfuKfdyIi005CTG0Ars99OhjRDjDLSAI/qeRjGS89vL3fQb 2aj3z15yDmlQrkHmaHYCAWea4Bf62B8q7eTyvIaKXNv2+FscFT2rgj1+6VHLXtuV UeoeFLxTxF6JqSoLy4hINg6u5WRddxh5vpQhwLpo8N/z6E+cls1M2umu1BHm8LLK WW2oVRuIuR9kHVyNHDBgqN97WmLK8Srb71Ba9cIjnS4ZzBnBeX9xcWaQvuQRWkls ADALOvu7hIcFXMCzkrq/czSlZ2lEhblD43hu+VM1AatgM+YozdNh8RV4gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgFN2jS5P/G/H4uGygwuwiKpAOQMB8GA1UdIwQY MBaAFCtOLTTM7kV2tc52BaCE5sCFIsIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMt MDc3YmM4YmExZTVkLzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMtMDc3YmM4YmExZTVk LzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCKRoK9X VeMYuzcPcC263SCjWO6rvNeAgDKwKHlnTDAT0k8FEiRW8XLLNlCG7gHR4XdLhsvz vdenW1OWfZWxReaV/CytsktBCKjUinH9VTMPTwE1hKUibRGHQXuIsvo5KAFMFomC KxGFxAxkBox9X2p305aqp8zxnHEx0HbjcYAbLyNab8L7jx+xYrRk/SkqWo9iW6wx LLyFT684leegvNFBRenLDpb7cRH48S3MlgQrzEEdS2fmkvy6yItDm43UDLnOTH6u ffxkGxouwXdo/vlDpAHNpptDoJ2RVIk+g2uSK8eBI7t6k/Yue5y+ltz6Jll3k03o K+na9PanrjMMCg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:50 2025 by rpki-client