This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft File: k2eWXig08Yk8-oYxpIQHHmotRbc.mft (raw, json) Hash identifier: djmDIXVYM4AEgmKHDTp8I7uMN3HM1NaiWiD2/e01sdw= Subject key identifier: B3:AF:BB:B6:8E:AF:D4:7E:9C:1E:74:51:D8:04:30:1A:FC:EC:FE:E3 Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Certificate serial: 019B5D1BA780724A0A2348DEBA357AD60528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft Manifest number: 179C Signing time: Sat 27 Dec 2025 00:00:51 +0000 Manifest this update: Sat 27 Dec 2025 00:00:51 +0000 Manifest next update: Sun 28 Dec 2025 00:00:51 +0000 Files and hashes: 1: 8Fy9I-oQhMxbs3z3a1slxp3FSXo.roa (hash: syWqGLAGI08ya5lx0Hert03mbaxaIeNX2fCZeit4wOQ=) 2: Nf9NANpHpYDyjvffxc3Yokjh2Xo.roa (hash: a6nBEkn4InmMm+Pg6s6MSypG+gVY7YcwBjZWW41SjW0=) 3: WdmItzgEujgbNu1eGYJwzawwMog.roa (hash: aIeRx/U40LddmgTD3UvIlve/kjfqwjuwkm6nemky7CA=) 4: aQYXwN1hIPnjjCzzBaRpPeGmHJY.roa (hash: cRP6ljm3HcbCmhQ/DifjNEtuIJrF64sc54A2KruH5EI=) 5: iKe81R-d7NpY31TD5bcPHVmsY2g.roa (hash: NrmL4rDM8Soz+h7m5cCsCbBdg9SwqLhYZsJEc4odfCg=) 6: iRG9ucM5Y1__Y1j40udIIAjWRo4.roa (hash: IhQn4ZuEkIr4xebbPWQUjrsTXErn0Gt0OnIFGQHg8dQ=) 7: k2eWXig08Yk8-oYxpIQHHmotRbc.crl (hash: AvXi/S/7eTiUQEiMzLfBILpA/CZAdMLkUd+GnCA/cz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:1b:a7:80:72:4a:0a:23:48:de:ba:35:7a:d6:05:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Validity Not Before: Dec 27 00:00:51 2025 GMT Not After : Dec 28 00:00:51 2025 GMT Subject: CN=b3afbbb68eafd47e9c1e7451d804301afcecfee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:e3:4b:05:af:2d:bb:86:8f:90:7c:21:60: 54:25:a4:a7:69:2a:5f:4a:05:ed:83:a6:a6:b8:10: e8:38:7b:fb:84:3e:e2:e6:aa:7d:81:d0:55:de:6e: d2:d0:84:fd:c3:b3:9f:82:48:e3:77:10:31:62:23: 04:99:c1:1b:78:b9:f7:b5:04:6d:c0:41:13:aa:98: 85:62:58:db:cb:1d:06:5c:7b:31:5b:16:14:09:2a: 97:36:ce:20:fa:99:75:17:fe:21:cb:52:e7:8a:a9: 69:32:5a:b6:f4:61:16:86:68:bf:12:29:c0:db:81: dc:a2:b8:c8:b7:f5:b9:93:51:fd:59:1a:50:96:8e: 05:ae:03:44:a6:57:2b:cd:12:fb:7d:dc:ba:61:6f: 42:a0:0b:36:a7:cb:08:95:93:b2:2d:04:bc:44:b5: 32:be:f2:56:6f:01:af:cb:6d:b8:71:80:eb:dc:23: 11:ba:5f:ab:91:d8:54:06:d7:20:d0:dc:a3:ac:36: d5:80:e4:12:22:68:67:67:33:b9:48:5f:eb:8b:91: bf:df:77:77:6d:67:b3:6a:c1:b9:9d:3c:e5:42:53: 7b:bc:04:74:3f:19:68:f0:61:20:ef:f7:2b:23:58: 8e:84:d4:74:7f:bc:21:65:fa:8c:18:81:05:1d:1a: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:BB:B6:8E:AF:D4:7E:9C:1E:74:51:D8:04:30:1A:FC:EC:FE:E3 X509v3 Authority Key Identifier: keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ac:67:f5:c3:50:b5:b5:fd:f4:81:13:10:69:cd:c7:e1:51: cf:38:4b:5d:89:3a:92:7d:96:11:a6:12:53:5e:bf:37:cd:cf: 55:a3:b6:87:0d:58:c5:b9:94:ff:57:4f:40:0b:f3:26:e2:1e: c5:1d:6b:ac:c7:32:55:a3:1d:ae:47:32:a0:1d:36:ce:07:91: 2e:64:c1:46:77:56:07:ca:56:6f:bb:58:23:2e:1f:8a:32:4f: cb:4a:be:ef:a4:f3:42:67:45:5e:ad:50:1a:4d:e9:f7:f3:a2: 86:1d:ea:24:b9:92:75:1c:2f:5f:4c:c4:7d:46:c5:5e:c2:da: 09:9c:bc:cb:e5:d9:29:d8:b8:0b:fe:7c:19:67:cd:86:14:85: d7:66:05:42:f7:86:28:8a:c3:4f:85:6e:40:85:d3:ac:0e:fa: 89:00:a7:74:7c:af:63:f8:28:a8:c6:39:61:99:3d:1d:50:1a: 5f:13:d8:2f:5e:a4:ca:26:17:10:d2:8f:c5:46:52:af:6e:93: 1b:9b:2e:3d:37:6d:7d:51:49:56:b6:75:8d:15:8b:19:cf:3f: db:5f:df:73:2f:8b:07:fb:d2:a7:6c:7a:33:41:87:50:9c:a2: d5:32:78:3f:fe:55:b6:88:b7:06:c1:8b:36:8a:a1:35:54:13: eb:eb:70:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdG6eAckoKI0jeujV61gUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy ZDQ1YjcwHhcNMjUxMjI3MDAwMDUxWhcNMjUxMjI4MDAwMDUxWjAzMTEwLwYDVQQD EyhiM2FmYmJiNjhlYWZkNDdlOWMxZTc0NTFkODA0MzAxYWZjZWNmZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2PjSwWvLbuGj5B8IWBUJaSnaSpf SgXtg6amuBDoOHv7hD7i5qp9gdBV3m7S0IT9w7OfgkjjdxAxYiMEmcEbeLn3tQRt wEETqpiFYljbyx0GXHsxWxYUCSqXNs4g+pl1F/4hy1LniqlpMlq29GEWhmi/EinA 24HcorjIt/W5k1H9WRpQlo4FrgNEplcrzRL7fdy6YW9CoAs2p8sIlZOyLQS8RLUy vvJWbwGvy224cYDr3CMRul+rkdhUBtcg0NyjrDbVgOQSImhnZzO5SF/ri5G/33d3 bWezasG5nTzlQlN7vAR0Pxlo8GEg7/crI1iOhNR0f7whZfqMGIEFHRrf0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOvu7aOr9R+nB50UdgEMBr87P7jMB8GA1UdIwQY MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt ZjA5M2UxN2IyN2VmLzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqxn9cNQ tbX99IETEGnNx+FRzzhLXYk6kn2WEaYSU16/N83PVaO2hw1YxbmU/1dPQAvzJuIe xR1rrMcyVaMdrkcyoB02zgeRLmTBRndWB8pWb7tYIy4fijJPy0q+76TzQmdFXq1Q Gk3p9/Oihh3qJLmSdRwvX0zEfUbFXsLaCZy8y+XZKdi4C/58GWfNhhSF12YFQveG KIrDT4VuQIXTrA76iQCndHyvY/goqMY5YZk9HVAaXxPYL16kyiYXENKPxUZSr26T G5suPTdtfVFJVrZ1jRWLGc8/21/fcy+LB/vSp2x6M0GHUJyi1TJ4P/5Vtoi3BsGL NoqhNVQT6+tw/w== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:59 2025 by rpki-client