This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json) Hash identifier: 0j2ulLY4Qmh8GiyUrQNl+Zwo24NSaWi8mcIUNWFsynk= Subject key identifier: 2D:1A:04:35:2A:87:CF:A7:CC:9F:4D:D8:C2:AA:71:3A:1A:2B:96:94 Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Certificate serial: 019B0F37DF41E8DD69B8ED8B9F270E41E5BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft Manifest number: 048A Signing time: Thu 11 Dec 2025 21:01:18 +0000 Manifest this update: Thu 11 Dec 2025 21:01:18 +0000 Manifest next update: Fri 12 Dec 2025 21:01:18 +0000 Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: oIvX7W15AP6JcKYXZiQrOLivxkdekcaWm2T/k30Vhq0=) 2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:df:41:e8:dd:69:b8:ed:8b:9f:27:0e:41:e5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Validity Not Before: Dec 11 21:01:18 2025 GMT Not After : Dec 12 21:01:18 2025 GMT Subject: CN=2d1a04352a87cfa7cc9f4dd8c2aa713a1a2b9694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:58:14:85:d0:86:5d:5c:b0:fa:70:b2:f4: ee:c0:7f:c3:6a:8e:ff:60:42:b2:e6:da:51:69:71: ed:87:38:54:b9:e1:ca:05:d2:93:fe:7a:1c:47:dc: 12:b6:da:d7:90:e5:e8:5a:e8:10:59:36:a7:03:2a: 5f:2f:12:7f:ed:98:f9:b9:68:31:7a:84:dd:d5:51: fd:a7:97:bb:04:32:7c:6a:f4:4a:2c:ed:95:f5:14: 42:f8:61:db:ad:e7:09:47:40:b2:ad:23:87:d5:1b: 08:36:9b:28:25:58:6b:d8:1d:38:4a:80:09:97:68: a7:7f:11:29:3e:e7:ea:b2:17:08:2a:32:58:fb:62: 03:ab:7e:9d:57:9c:65:ff:9f:0d:4c:57:a7:91:4b: 35:0e:da:4e:96:bb:79:5a:5d:cf:40:49:15:ce:01: ff:64:af:4d:70:a4:60:0d:42:ce:92:db:14:43:89: d5:bc:9d:09:9b:96:19:74:0b:17:fc:26:da:c1:93: 68:6e:01:2a:9a:63:a4:9e:42:6c:03:ed:c4:d0:d8: 2e:8c:a9:d2:44:4a:01:53:55:17:38:2d:22:43:ef: 37:cd:c7:b9:ef:fc:fd:0d:47:d3:c4:33:e8:98:32: ac:f5:53:23:65:ed:00:78:9c:7b:59:e0:71:90:3a: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1A:04:35:2A:87:CF:A7:CC:9F:4D:D8:C2:AA:71:3A:1A:2B:96:94 X509v3 Authority Key Identifier: keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:62:34:85:1d:04:dc:d2:be:4f:7d:9d:8a:3d:53:98:2c:58: 1d:ce:c4:18:e3:e4:e1:0a:99:50:f2:5e:a9:90:0b:7f:06:17: d6:fd:45:87:f5:0e:91:7a:7b:73:a6:c5:2d:d8:b7:69:98:ce: 04:94:9c:77:de:aa:32:be:95:88:6b:15:56:ed:63:d5:ec:7c: fe:f3:fa:b8:33:7e:bb:59:cf:19:d5:9e:a6:f7:b8:cf:43:65: 31:f7:d4:0b:e5:7d:44:7c:3a:ec:df:20:22:e8:34:0d:7a:4d: 04:59:a0:b8:ed:72:a6:9a:f1:c8:73:70:b6:0a:32:44:04:8a: 7a:58:05:4a:f6:b3:9e:ca:c9:8e:98:fd:97:85:0f:b0:57:b6: e5:9a:7c:cf:1a:d4:79:dc:aa:ac:a3:1e:63:e2:72:6a:78:3d: cf:7f:c1:75:09:b6:6d:a5:a6:1a:bf:4b:46:db:2a:3e:c0:c8: 92:d4:a6:cd:8d:56:11:70:37:8c:2f:2b:8f:8a:fd:16:bb:49: c3:bf:41:8e:f1:7d:d9:46:c0:23:95:38:8d:12:81:b8:39:19: 21:c6:18:37:5a:ec:88:37:be:32:5f:01:52:96:8e:bc:e8:2c: 39:78:f1:33:38:41:6c:d7:19:95:74:89:3a:40:94:0e:5f:b8: 6f:5a:84:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN99B6N1puO2LnycOQeW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFlOGUwZjg4ZDBjOGMzOWRmNDRmZmE0MWUzMmMyNjI3 YzNhMTUwHhcNMjUxMjExMjEwMTE4WhcNMjUxMjEyMjEwMTE4WjAzMTEwLwYDVQQD EygyZDFhMDQzNTJhODdjZmE3Y2M5ZjRkZDhjMmFhNzEzYTFhMmI5Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EVYFIXQhl1csPpwsvTuwH/Dao7/ YEKy5tpRaXHthzhUueHKBdKT/nocR9wSttrXkOXoWugQWTanAypfLxJ/7Zj5uWgx eoTd1VH9p5e7BDJ8avRKLO2V9RRC+GHbrecJR0CyrSOH1RsINpsoJVhr2B04SoAJ l2infxEpPufqshcIKjJY+2IDq36dV5xl/58NTFenkUs1DtpOlrt5Wl3PQEkVzgH/ ZK9NcKRgDULOktsUQ4nVvJ0Jm5YZdAsX/CbawZNobgEqmmOknkJsA+3E0NgujKnS REoBU1UXOC0iQ+83zce57/z9DUfTxDPomDKs9VMjZe0AeJx7WeBxkDqo2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0aBDUqh8+nzJ9N2MKqcToaK5aUMB8GA1UdIwQY MBaAFCtK6OD4jQyMOd9E/6QeMsJifDoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYt MTA2ODBkMjU2YWUwLzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYtMTA2ODBkMjU2YWUw LzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmI0hR0E 3NK+T32dij1TmCxYHc7EGOPk4QqZUPJeqZALfwYX1v1Fh/UOkXp7c6bFLdi3aZjO BJScd96qMr6ViGsVVu1j1ex8/vP6uDN+u1nPGdWepve4z0NlMffUC+V9RHw67N8g Iug0DXpNBFmguO1ypprxyHNwtgoyRASKelgFSvaznsrJjpj9l4UPsFe25Zp8zxrU edyqrKMeY+Jyang9z3/BdQm2baWmGr9LRtsqPsDIktSmzY1WEXA3jC8rj4r9FrtJ w79BjvF92UbAI5U4jRKBuDkZIcYYN1rsiDe+Ml8BUpaOvOgsOXjxMzhBbNcZlXSJ OkCUDl+4b1qEHQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:21:52 2025 by rpki-client