This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json) Hash identifier: OGCIMDuiRvRwjX5y717GHfvwks3yAyYSFUQwMMukMMY= Subject key identifier: B5:6F:47:B2:DA:77:4C:D8:AF:9A:7F:0A:9D:B0:78:49:A6:2F:C0:3B Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Certificate serial: 019B5ABFC56BC7584444F124D1C6287CDC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft Manifest number: 068D Signing time: Fri 26 Dec 2025 13:01:15 +0000 Manifest this update: Fri 26 Dec 2025 13:01:15 +0000 Manifest next update: Sat 27 Dec 2025 13:01:15 +0000 Files and hashes: 1: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: LZNfUMX5foiLhTlsN6FWpwLCkanZJgVxu00MYnQUY2w=) 2: qlrujtDgO3zeMbwPEkJ03bLGHis.roa (hash: i2RptnrGx9cKdx8wTVXzQdDDISGAu4H3l+Bep209z8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:c5:6b:c7:58:44:44:f1:24:d1:c6:28:7c:dc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Validity Not Before: Dec 26 13:01:15 2025 GMT Not After : Dec 27 13:01:15 2025 GMT Subject: CN=b56f47b2da774cd8af9a7f0a9db07849a62fc03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:42:29:3d:2d:37:68:d7:2d:90:6b:29:1e: 26:b8:2e:61:ee:cc:63:48:2f:4f:46:bb:d9:4c:f7: 1f:86:a6:86:58:dc:fb:a9:7d:15:33:a0:4d:e8:68: c1:2e:85:4d:84:d7:2b:af:c0:50:21:d4:62:db:60: 27:c0:24:2e:3e:6f:99:00:0a:da:08:a1:38:25:3b: 59:ea:6a:fb:c5:63:96:bf:61:cb:b9:fb:53:9a:29: b2:38:86:d0:67:24:5f:a3:ab:c7:ed:41:ce:4a:18: 37:6b:15:e7:bc:7b:ca:e6:43:67:a5:63:5b:52:5f: 17:cc:fd:1d:9a:29:d4:f6:14:10:ac:6a:b7:f7:13: 92:05:b0:10:dc:f5:f3:a2:75:d1:90:4a:de:68:47: db:49:e8:0e:39:c3:d7:61:5c:d0:bf:37:d9:b2:e8: 04:b0:ec:43:f6:19:db:c1:98:4b:a6:32:fc:fd:e3: 8c:f8:91:ef:1d:7b:4a:7c:3b:e2:8a:87:8d:45:e4: 26:c3:25:56:11:d9:95:a4:09:93:75:db:9d:30:21: cb:2c:5c:46:d7:80:73:1c:73:b2:91:2c:f3:3e:b4: b2:24:42:5d:38:eb:11:27:84:98:99:4a:c9:65:52: 1b:84:63:91:96:f7:4a:7b:4a:b8:80:c6:34:b8:b6: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:47:B2:DA:77:4C:D8:AF:9A:7F:0A:9D:B0:78:49:A6:2F:C0:3B X509v3 Authority Key Identifier: keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:89:c4:b8:be:a1:49:4e:50:fc:7e:64:ca:41:eb:ea:67:12: c7:de:dd:2e:06:87:dc:01:bb:bb:ad:c5:d5:6d:d8:e7:dd:ad: 66:0c:d0:ea:2c:3a:76:f5:ab:07:9b:75:55:f5:d5:17:af:a6: 41:0a:f9:39:87:f1:15:ae:08:99:5f:8d:bd:24:23:31:a1:f5: c6:88:e5:d6:68:04:0e:30:82:f0:97:1d:9d:7d:0b:f8:d4:81: 5d:d9:73:62:c5:ec:a6:83:1c:d2:a1:dd:f8:93:37:50:49:bf: 6e:1f:f1:8d:ab:26:07:91:11:76:3d:33:f5:45:db:f9:ef:46: 90:0a:8a:20:3e:07:af:7a:14:c9:bd:f9:c7:d2:06:64:0f:4a: 31:6b:52:b2:c0:a7:20:ff:32:34:12:8d:85:84:f9:e5:37:9f: 87:20:8d:50:94:4b:74:f6:17:10:91:ce:8c:76:97:0c:2a:54: d0:69:c5:d2:cd:60:e7:bd:be:49:ca:e9:35:a8:48:fc:b4:ad: 34:8e:dc:6f:77:99:bb:bb:2f:2e:87:26:7b:de:f9:97:3d:17: f7:63:a2:71:98:99:00:0b:0d:8b:85:06:0e:68:83:0b:80:c3: a6:b4:cb:12:38:b3:b8:cd:7d:eb:e5:17:64:ad:42:1b:52:36: ee:da:d1:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8Vrx1hERPEk0cYofNwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh ZDVjZTcwHhcNMjUxMjI2MTMwMTE1WhcNMjUxMjI3MTMwMTE1WjAzMTEwLwYDVQQD EyhiNTZmNDdiMmRhNzc0Y2Q4YWY5YTdmMGE5ZGIwNzg0OWE2MmZjMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxtCKT0tN2jXLZBrKR4muC5h7sxj SC9PRrvZTPcfhqaGWNz7qX0VM6BN6GjBLoVNhNcrr8BQIdRi22AnwCQuPm+ZAAra CKE4JTtZ6mr7xWOWv2HLuftTmimyOIbQZyRfo6vH7UHOShg3axXnvHvK5kNnpWNb Ul8XzP0dminU9hQQrGq39xOSBbAQ3PXzonXRkEreaEfbSegOOcPXYVzQvzfZsugE sOxD9hnbwZhLpjL8/eOM+JHvHXtKfDviioeNReQmwyVWEdmVpAmTddudMCHLLFxG 14BzHHOykSzzPrSyJEJdOOsRJ4SYmUrJZVIbhGORlvdKe0q4gMY0uLY5PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVvR7Lad0zYr5p/Cp2weEmmL8A7MB8GA1UdIwQY MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3 LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYnEuL6h SU5Q/H5kykHr6mcSx97dLgaH3AG7u63F1W3Y592tZgzQ6iw6dvWrB5t1VfXVF6+m QQr5OYfxFa4ImV+NvSQjMaH1xojl1mgEDjCC8JcdnX0L+NSBXdlzYsXspoMc0qHd +JM3UEm/bh/xjasmB5ERdj0z9UXb+e9GkAqKID4Hr3oUyb35x9IGZA9KMWtSssCn IP8yNBKNhYT55TefhyCNUJRLdPYXEJHOjHaXDCpU0GnF0s1g572+ScrpNahI/LSt NI7cb3eZu7svLocme975lz0X92OicZiZAAsNi4UGDmiDC4DDprTLEjizuM196+UX ZK1CG1I27trR+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:19 2025 by rpki-client