This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json) Hash identifier: pN7q97zt7Gc8wBl5lR6ssMvli5X0r7MSFQzBhhTbWfY= Subject key identifier: 9A:C6:BE:C5:B6:04:58:CB:B9:DB:49:37:7C:53:F7:37:04:01:F2:94 Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c Certificate serial: 019AF20996A66B3008804B2933E0B90B38DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft Manifest number: 0D52 Signing time: Sat 06 Dec 2025 05:01:45 +0000 Manifest this update: Sat 06 Dec 2025 05:01:45 +0000 Manifest next update: Sun 07 Dec 2025 05:01:45 +0000 Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=) 2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: VnRRXFN1puUMQZ7YaEKJGqc2EECmDGOr18zvFZ2ZlP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:96:a6:6b:30:08:80:4b:29:33:e0:b9:0b:38:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c Validity Not Before: Dec 6 05:01:45 2025 GMT Not After : Dec 7 05:01:45 2025 GMT Subject: CN=9ac6bec5b60458cbb9db49377c53f7370401f294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:87:f1:4a:9f:0b:b6:f9:b9:d1:18:1b:9d: 9e:3d:b5:96:c3:01:19:41:f2:39:e7:8b:56:79:c5: 9b:ce:fb:8f:46:20:0c:9e:4c:ef:fb:d3:9c:ee:42: eb:c7:b4:7e:dd:ee:d2:9b:24:f1:31:0c:e0:9a:f0: 5a:03:66:66:0c:0b:f8:40:80:d8:4b:9c:ed:cd:55: e2:8b:e8:db:e8:cb:fe:d3:64:68:0e:44:9f:ff:9b: fd:3a:96:40:4b:f2:f6:83:ef:ec:8b:93:3d:e3:60: 1b:f3:11:a4:b1:bb:2a:ea:8c:f7:78:dc:39:09:b0: 18:d7:31:45:59:19:86:cc:48:b0:68:27:51:e4:41: 84:52:68:7e:52:c4:a3:e3:4e:1c:6e:46:76:1e:2c: f7:16:cc:88:e7:5b:39:dd:d1:7b:93:19:b5:01:50: 65:04:5e:3a:b0:8a:36:3f:4e:e9:03:80:e1:72:52: eb:e4:ef:df:3f:8a:41:46:81:15:56:06:aa:f0:4f: af:61:bf:d6:5f:8a:18:16:c8:03:b2:e0:28:4d:85: f9:f9:d5:dc:8f:a6:87:e5:69:73:fa:a7:c0:d6:3b: ae:bc:ce:fb:1f:40:80:c3:a0:51:76:7a:9a:6c:f1: f7:dc:e0:e1:6e:21:e5:0f:fd:19:e8:cf:ad:ab:5c: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C6:BE:C5:B6:04:58:CB:B9:DB:49:37:7C:53:F7:37:04:01:F2:94 X509v3 Authority Key Identifier: keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:59:2d:aa:1d:6f:4c:a3:91:f4:35:d8:ad:48:6d:e6:04:ce: 53:c3:37:57:ce:ee:b8:a4:74:94:b2:70:ba:00:75:ad:1a:ce: 19:e0:1a:31:8e:9d:8d:75:71:3f:f6:01:bb:70:48:a2:8a:dc: 32:0d:95:a6:c7:5a:a1:a8:8e:79:48:34:de:c4:63:9c:9c:cf: d5:7c:d3:c1:44:00:07:44:32:08:3b:83:69:fa:f6:a2:0c:b3: 30:17:b0:e1:b7:57:5d:f8:76:18:f9:7e:a1:15:bd:1b:91:d0: 5c:c6:3f:5b:b4:f2:50:30:26:22:66:cf:06:6e:1e:bf:96:62: 89:d1:26:fb:5a:0e:78:bd:f2:c2:13:be:e5:34:f2:5d:7f:56: 5d:78:8e:b0:d5:e0:55:c7:8b:a1:83:be:06:e4:6f:41:ca:47: e4:84:d9:ed:46:ad:5b:bb:fb:35:1e:ac:8d:d5:51:b4:bf:32: 66:d0:a1:27:05:42:53:be:24:6f:42:f8:cb:e6:20:ab:43:88: e9:c2:dc:75:23:c3:37:33:3d:6e:20:94:f8:6a:12:e9:3e:7e: 2e:c5:d6:67:ea:d1:46:0b:df:1b:85:fd:e1:a1:c1:67:8d:78: 46:90:ef:0a:a5:d6:dd:49:54:fc:50:1d:9c:06:04:cd:e2:26: 70:ee:00:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZamazAIgEspM+C5CzjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3 ZjI2MWMwHhcNMjUxMjA2MDUwMTQ1WhcNMjUxMjA3MDUwMTQ1WjAzMTEwLwYDVQQD Eyg5YWM2YmVjNWI2MDQ1OGNiYjlkYjQ5Mzc3YzUzZjczNzA0MDFmMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu96H8UqfC7b5udEYG52ePbWWwwEZ QfI554tWecWbzvuPRiAMnkzv+9Oc7kLrx7R+3e7SmyTxMQzgmvBaA2ZmDAv4QIDY S5ztzVXii+jb6Mv+02RoDkSf/5v9OpZAS/L2g+/si5M942Ab8xGksbsq6oz3eNw5 CbAY1zFFWRmGzEiwaCdR5EGEUmh+UsSj404cbkZ2Hiz3FsyI51s53dF7kxm1AVBl BF46sIo2P07pA4DhclLr5O/fP4pBRoEVVgaq8E+vYb/WX4oYFsgDsuAoTYX5+dXc j6aH5Wlz+qfA1juuvM77H0CAw6BRdnqabPH33ODhbiHlD/0Z6M+tq1wtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrGvsW2BFjLudtJN3xT9zcEAfKUMB8GA1UdIwQY MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVktqh1v TKOR9DXYrUht5gTOU8M3V87uuKR0lLJwugB1rRrOGeAaMY6djXVxP/YBu3BIoorc Mg2VpsdaoaiOeUg03sRjnJzP1XzTwUQAB0QyCDuDafr2ogyzMBew4bdXXfh2GPl+ oRW9G5HQXMY/W7TyUDAmImbPBm4ev5ZiidEm+1oOeL3ywhO+5TTyXX9WXXiOsNXg VceLoYO+BuRvQcpH5ITZ7UatW7v7NR6sjdVRtL8yZtChJwVCU74kb0L4y+Ygq0OI 6cLcdSPDNzM9biCU+GoS6T5+LsXWZ+rRRgvfG4X94aHBZ414RpDvCqXW3UlU/FAd nAYEzeImcO4Acw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:05:01 2025 by rpki-client