This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json) Hash identifier: Gyu606y2zurdC3qN2KWeXcJN/QS63n/TlJySsH6QpFo= Subject key identifier: D2:00:CB:ED:32:6D:A0:78:D6:39:6B:06:74:80:CA:D2:92:24:64:1E Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Certificate serial: 019B33E871B6A827C71D197A376F5EFD2E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft Manifest number: 049D Signing time: Fri 19 Dec 2025 00:00:29 +0000 Manifest this update: Fri 19 Dec 2025 00:00:29 +0000 Manifest next update: Sat 20 Dec 2025 00:00:29 +0000 Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: FwBXkNF8JG0LoV5uVmlHtcmLs5JBp3YXIjyASRWoTa4=) 2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:71:b6:a8:27:c7:1d:19:7a:37:6f:5e:fd:2e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Validity Not Before: Dec 19 00:00:29 2025 GMT Not After : Dec 20 00:00:29 2025 GMT Subject: CN=d200cbed326da078d6396b067480cad29224641e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:98:25:33:3d:b9:b3:c4:cd:84:c8:28:bf: 03:66:5b:15:d9:08:21:1e:b2:ed:1c:56:ee:24:bf: 86:d6:8b:1a:da:03:2d:e2:7d:2c:d8:2d:39:35:c0: ad:14:4a:c4:af:02:6f:5e:8a:23:f1:89:43:c1:bc: 9d:bd:c6:16:4b:ad:5b:aa:77:b3:9d:c6:ec:d8:fb: 5c:0c:11:fe:1c:b1:f6:2a:63:ac:09:8c:19:1e:4b: 7f:2c:41:b3:54:68:ec:50:1a:9d:97:94:dc:9a:95: 29:9d:9e:b2:1d:1f:6c:f2:cd:45:56:1e:a8:ca:73: 7c:e4:00:63:a5:a1:83:d9:e5:e2:ac:c0:15:d7:6d: ec:d5:38:86:2d:bc:4f:40:de:ae:d6:f3:49:f5:b1: 26:89:61:1f:f7:5e:e7:c8:ed:20:e6:2b:3b:9d:88: a2:4b:35:f8:88:0a:1d:5b:57:cb:f1:34:75:f7:2c: 98:72:59:20:4a:17:17:e8:81:00:10:81:17:7b:23: a2:97:e9:f4:0a:11:20:51:d3:2c:c4:13:1e:39:b5: 97:ae:f6:46:7e:e5:65:c4:2f:cf:e2:0b:97:fd:f8: 4e:f6:3f:a0:55:5b:44:66:79:57:86:56:32:d1:c1: a3:31:d8:73:93:49:86:f5:c3:96:c3:4c:af:46:6f: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:00:CB:ED:32:6D:A0:78:D6:39:6B:06:74:80:CA:D2:92:24:64:1E X509v3 Authority Key Identifier: keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8d:26:4b:b7:0f:4f:7f:8a:fb:c1:e7:80:5a:04:ef:8e:f8: e5:8f:83:85:23:2a:37:4f:b3:02:34:22:23:4f:09:fb:1b:86: ce:c7:8e:77:a1:4b:06:ca:b1:56:37:a7:06:3b:1b:e0:2f:a0: 04:18:6d:f8:09:84:89:59:74:17:ca:7f:cc:01:a8:c3:8f:5c: 73:13:a9:5a:62:2f:34:27:e0:e1:df:95:a5:27:e0:a0:02:c8: f8:df:8a:0d:d1:b6:bc:0b:57:ed:2a:c0:07:dd:50:21:e2:90: b7:cf:6b:a0:6e:95:45:9a:86:a8:fc:8e:7a:53:be:91:99:c1: d8:e4:76:f6:46:85:b4:2f:24:c7:13:46:1a:2b:17:d4:c3:6b: c9:4e:e6:ac:0e:59:5d:e9:bd:b6:9d:32:9d:25:89:f7:dd:db: 5f:d9:d8:0c:e3:bf:0c:8a:1b:10:96:12:6a:6a:18:00:26:d4: ca:18:53:58:cf:b4:86:66:b4:a7:72:53:da:01:e7:5b:d8:db: 87:c5:7a:d0:7e:b0:19:56:f6:89:a5:7f:31:2c:0f:1d:64:b8: 7c:12:44:a2:f8:f3:45:c7:6c:ba:03:84:30:a3:24:71:a2:c0: 24:86:64:af:0b:a5:da:ca:d9:99:3c:a1:f3:c7:f4:d1:9e:08: 32:81:5a:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6HG2qCfHHRl6N29e/S4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFlOGUwZjg4ZDBjOGMzOWRmNDRmZmE0MWUzMmMyNjI3 YzNhMTUwHhcNMjUxMjE5MDAwMDI5WhcNMjUxMjIwMDAwMDI5WjAzMTEwLwYDVQQD EyhkMjAwY2JlZDMyNmRhMDc4ZDYzOTZiMDY3NDgwY2FkMjkyMjQ2NDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH2YJTM9ubPEzYTIKL8DZlsV2Qgh HrLtHFbuJL+G1osa2gMt4n0s2C05NcCtFErErwJvXooj8YlDwbydvcYWS61bqnez ncbs2PtcDBH+HLH2KmOsCYwZHkt/LEGzVGjsUBqdl5TcmpUpnZ6yHR9s8s1FVh6o ynN85ABjpaGD2eXirMAV123s1TiGLbxPQN6u1vNJ9bEmiWEf917nyO0g5is7nYii SzX4iAodW1fL8TR19yyYclkgShcX6IEAEIEXeyOil+n0ChEgUdMsxBMeObWXrvZG fuVlxC/P4guX/fhO9j+gVVtEZnlXhlYy0cGjMdhzk0mG9cOWw0yvRm9IwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIAy+0ybaB41jlrBnSAytKSJGQeMB8GA1UdIwQY MBaAFCtK6OD4jQyMOd9E/6QeMsJifDoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYt MTA2ODBkMjU2YWUwLzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYtMTA2ODBkMjU2YWUw LzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQo0mS7cP T3+K+8HngFoE74745Y+DhSMqN0+zAjQiI08J+xuGzseOd6FLBsqxVjenBjsb4C+g BBht+AmEiVl0F8p/zAGow49ccxOpWmIvNCfg4d+VpSfgoALI+N+KDdG2vAtX7SrA B91QIeKQt89roG6VRZqGqPyOelO+kZnB2OR29kaFtC8kxxNGGisX1MNryU7mrA5Z Xem9tp0ynSWJ993bX9nYDOO/DIobEJYSamoYACbUyhhTWM+0hma0p3JT2gHnW9jb h8V60H6wGVb2iaV/MSwPHWS4fBJEovjzRcdsugOEMKMkcaLAJIZkrwul2srZmTyh 88f00Z4IMoFaug== -----END CERTIFICATE-----Generated at Fri Dec 19 01:11:38 2025 by rpki-client