This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json) Hash identifier: 4FQHZOFYsOmM8rjVNimDqWRsTqiIt2Q94UcRzhZ5ueg= Subject key identifier: 55:9E:D3:2E:43:8B:DF:55:C1:DE:1F:01:C4:63:B5:E5:82:F4:BB:66 Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566 Certificate serial: 019B1916B583F8201F2FF578A7D8F6BBFB96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 19:01:17 +0000 Manifest this update: Sat 13 Dec 2025 19:01:17 +0000 Manifest next update: Sun 14 Dec 2025 19:01:17 +0000 Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: xSWwjM4qsFRtLtPJZsC5F/97puSMerIpIm1pxpSC6lw=) 2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:b5:83:f8:20:1f:2f:f5:78:a7:d8:f6:bb:fb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Validity Not Before: Dec 13 19:01:17 2025 GMT Not After : Dec 14 19:01:17 2025 GMT Subject: CN=559ed32e438bdf55c1de1f01c463b5e582f4bb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:d0:1a:ad:92:b1:fb:71:9e:5b:f2:cc:3a: be:3b:a8:66:49:a9:62:58:c7:fd:02:6a:30:b7:e0: 05:24:21:db:45:40:db:db:c9:1e:91:e6:76:aa:c2: 33:cf:40:6c:d5:09:ca:84:f6:27:92:22:fe:1a:5e: 00:55:1a:21:45:d6:c7:58:6b:b0:97:a2:d1:56:2f: e9:cc:03:6a:70:5f:b9:79:c7:ab:f7:2b:42:6d:fe: 4e:67:a4:d3:08:6e:d0:b2:d5:19:c8:d2:8b:e0:4a: 6c:83:2a:34:ed:24:1e:c1:0c:01:7a:e6:d0:5f:2a: 85:4d:96:3e:22:08:bf:1b:23:52:1b:3c:9f:71:d9: aa:e9:28:df:7d:69:47:6a:66:01:5a:b1:f8:24:d6: 9d:42:f9:06:94:7e:27:c9:36:0f:81:16:83:76:05: 89:59:4c:35:2f:2c:90:61:fe:fb:4a:9e:8e:a9:c0: fd:4c:3d:58:b1:22:b6:9e:68:65:ea:67:a4:c8:75: 73:0e:95:7e:cb:39:19:39:cd:d6:8d:ce:f3:2a:f9: 3a:21:c3:cc:18:11:58:47:f1:27:b7:99:e1:b1:26: e7:ef:7c:7f:1b:0b:3a:ca:b2:e9:dd:e6:e8:a0:52: 73:4b:12:1b:9f:c6:9f:c6:ae:c1:75:e8:10:48:1b: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9E:D3:2E:43:8B:DF:55:C1:DE:1F:01:C4:63:B5:E5:82:F4:BB:66 X509v3 Authority Key Identifier: keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:94:1f:d9:81:f2:f0:e5:0c:bc:99:86:2f:43:50:c6:bc:70: a8:8d:74:45:83:37:2a:d8:1d:e4:4a:14:88:53:77:37:dc:43: 2a:64:76:79:9a:43:f7:cd:e9:e2:23:3a:ad:cc:cb:cc:fd:40: 99:12:da:80:f4:8f:49:3a:85:99:a8:cb:e8:a9:56:59:21:a8: b7:8f:39:d8:7f:10:87:25:f1:1e:a3:0a:34:c9:8e:21:2d:8b: cc:5f:ef:f1:2b:88:c4:d1:6d:58:26:37:b4:e5:6f:44:f6:ee: 94:2a:1d:0a:46:40:32:68:c8:0b:2a:60:14:fe:d5:b4:46:c7: 93:23:46:61:47:8a:cf:72:a6:9d:55:65:45:ac:01:c7:c0:a9: 8d:19:07:b9:ca:7d:57:b4:9e:bc:59:2a:74:63:55:da:cd:e9: bf:c7:0f:02:fe:5c:bf:30:56:90:05:7b:cf:b8:00:96:d5:c0: 6c:3a:ad:2e:25:e7:d0:18:d5:08:31:d5:c5:e4:48:55:3e:de: cb:a2:46:89:32:6f:78:f2:c1:a2:f5:a9:53:90:5c:d4:1f:f8: a4:e6:5d:7d:00:5d:9f:7c:f5:00:2d:10:98:41:2e:8b:f5:05: 0a:4c:c0:40:d5:c8:9c:dd:a0:ff:27:f9:52:fb:d8:ac:a4:eb: 77:49:4f:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFrWD+CAfL/V4p9j2u/uWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3 YTI1NjYwHhcNMjUxMjEzMTkwMTE3WhcNMjUxMjE0MTkwMTE3WjAzMTEwLwYDVQQD Eyg1NTllZDMyZTQzOGJkZjU1YzFkZTFmMDFjNDYzYjVlNTgyZjRiYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9TQGq2SsftxnlvyzDq+O6hmSali WMf9Amowt+AFJCHbRUDb28kekeZ2qsIzz0Bs1QnKhPYnkiL+Gl4AVRohRdbHWGuw l6LRVi/pzANqcF+5ecer9ytCbf5OZ6TTCG7QstUZyNKL4Epsgyo07SQewQwBeubQ XyqFTZY+Igi/GyNSGzyfcdmq6SjffWlHamYBWrH4JNadQvkGlH4nyTYPgRaDdgWJ WUw1LyyQYf77Sp6OqcD9TD1YsSK2nmhl6mekyHVzDpV+yzkZOc3Wjc7zKvk6IcPM GBFYR/Ent5nhsSbn73x/Gws6yrLp3ebooFJzSxIbn8afxq7BdegQSBtO7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWe0y5Di99Vwd4fAcRjteWC9LtmMB8GA1UdIwQY MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipQf2YHy 8OUMvJmGL0NQxrxwqI10RYM3Ktgd5EoUiFN3N9xDKmR2eZpD983p4iM6rczLzP1A mRLagPSPSTqFmajL6KlWWSGot4852H8QhyXxHqMKNMmOIS2LzF/v8SuIxNFtWCY3 tOVvRPbulCodCkZAMmjICypgFP7VtEbHkyNGYUeKz3KmnVVlRawBx8CpjRkHucp9 V7SevFkqdGNV2s3pv8cPAv5cvzBWkAV7z7gAltXAbDqtLiXn0BjVCDHVxeRIVT7e y6JGiTJvePLBovWpU5Bc1B/4pOZdfQBdn3z1AC0QmEEui/UFCkzAQNXInN2g/yf5 UvvYrKTrd0lPqQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:01 2025 by rpki-client