This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json) Hash identifier: y+lbx9Widi6QA+ccehRyVfVnx/mXn5DNktMIvoOExRU= Subject key identifier: 39:9F:A2:05:A5:BA:19:69:76:C2:68:AC:0B:77:58:86:B3:41:9C:72 Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95 Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195 Certificate serial: 019AF1D261DE8035C298E8565B3BB2DD7DD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft Manifest number: 098A Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: wBdDMDwhf8YK0ylzJvt8v0AhKZLlDjRpbTXaiJCcCf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:61:de:80:35:c2:98:e8:56:5b:3b:b2:dd:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=399fa205a5ba196976c268ac0b775886b3419c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:28:81:82:87:ed:ac:b0:59:77:7e:6e:8f: d9:11:51:7f:af:ee:59:66:43:66:4d:ee:01:10:87: 49:ac:54:84:19:95:88:b3:7a:ad:df:fb:9f:2d:d3: 34:df:32:8b:ae:52:6c:d4:c5:09:cb:ed:e3:63:ff: 2c:83:58:f8:ef:68:b0:46:78:7b:ed:bc:60:37:0c: 83:2f:da:14:f5:84:8f:6a:54:52:a5:34:1e:4c:71: 65:2a:ea:f0:83:ff:e2:41:6d:f7:f5:57:9d:01:71: d3:90:20:dd:70:e0:4a:64:74:cb:5c:8b:c0:38:87: 4b:d4:85:47:5a:5a:70:f1:51:27:f6:a2:3c:53:23: 5f:07:7e:51:03:11:7e:d7:0e:71:38:03:ad:4c:0b: 82:13:de:6b:c7:4a:92:48:00:59:5f:43:0e:0d:02: e7:13:3f:d4:c4:17:4c:f8:fe:37:f5:90:76:9f:8a: 9d:a8:bf:4f:d7:14:91:1d:4d:ef:95:b3:2c:b6:99: 8b:18:cb:ef:30:73:78:35:15:c3:75:a9:b6:34:1e: 83:bc:75:71:cb:2c:4e:cb:ef:eb:20:62:8b:35:f6: 72:41:5a:3a:7d:9f:4a:d5:ef:2d:30:bb:d8:de:bf: 10:df:06:d5:83:4d:3b:20:5e:6c:32:90:b6:83:09: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9F:A2:05:A5:BA:19:69:76:C2:68:AC:0B:77:58:86:B3:41:9C:72 X509v3 Authority Key Identifier: keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:da:c3:03:44:22:c3:9f:dd:75:eb:34:72:81:37:33:59:7c: 6a:76:b4:18:39:eb:dc:ae:60:7f:d5:13:a5:63:19:16:aa:47: 2a:93:cb:7a:cf:8c:29:aa:5c:45:9e:3a:85:01:1f:fa:3f:5b: 66:0d:24:59:ac:b9:d3:7b:a2:e8:f1:92:ec:5b:6c:79:ac:8c: d2:62:46:d4:12:35:d4:86:5b:72:cb:3a:43:e4:2e:a2:59:d4: f4:1f:29:ea:ca:ab:c9:b1:17:c7:eb:3b:1f:15:5e:e9:a7:d7: f3:9f:44:ce:75:6e:f3:18:d9:e8:9c:b6:35:ec:ba:cb:8d:73: c1:11:ac:de:b9:f6:42:6a:12:de:cb:9f:7d:e2:77:d5:d1:91: 8c:45:0d:9d:b2:ad:7e:81:f9:30:15:f2:72:fa:8b:6e:d8:f9: 85:35:a8:5f:0f:f8:df:7a:be:7b:d0:c5:07:59:6d:74:d1:c6: 41:01:f3:13:3c:ab:ba:a4:1c:a7:8f:55:92:88:34:c0:12:86: ea:99:6f:6f:ac:d0:12:3e:3e:01:93:dc:ba:06:45:19:06:a4: 87:02:b5:dc:5c:ff:ac:f1:14:3d:86:9b:c0:b7:5c:a3:b2:a2: 48:93:d3:3a:31:9f:a5:d3:c3:f3:1a:64:ff:64:06:67:40:33: 6d:c2:6a:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mHegDXCmOhWWzuy3X3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk4OWZlM2NhY2EzZjMwNDQzYzU0YTkwMmY2OTEyMTEw ZDkxOTUwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EygzOTlmYTIwNWE1YmExOTY5NzZjMjY4YWMwYjc3NTg4NmIzNDE5YzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWYogYKH7aywWXd+bo/ZEVF/r+5Z ZkNmTe4BEIdJrFSEGZWIs3qt3/ufLdM03zKLrlJs1MUJy+3jY/8sg1j472iwRnh7 7bxgNwyDL9oU9YSPalRSpTQeTHFlKurwg//iQW339VedAXHTkCDdcOBKZHTLXIvA OIdL1IVHWlpw8VEn9qI8UyNfB35RAxF+1w5xOAOtTAuCE95rx0qSSABZX0MODQLn Ez/UxBdM+P439ZB2n4qdqL9P1xSRHU3vlbMstpmLGMvvMHN4NRXDdam2NB6DvHVx yyxOy+/rIGKLNfZyQVo6fZ9K1e8tMLvY3r8Q3wbVg007IF5sMpC2gwmzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmfogWluhlpdsJorAt3WIazQZxyMB8GA1UdIwQY MBaAFCtJif48rKPzBEPFSpAvaRIRDZGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMt NWMzOGU3ZmU4ZTgxLzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMtNWMzOGU3ZmU4ZTgx LzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdrDA0Qi w5/ddes0coE3M1l8ana0GDnr3K5gf9UTpWMZFqpHKpPLes+MKapcRZ46hQEf+j9b Zg0kWay503ui6PGS7FtseayM0mJG1BI11IZbcss6Q+QuolnU9B8p6sqrybEXx+s7 HxVe6afX859EznVu8xjZ6Jy2Ney6y41zwRGs3rn2QmoS3suffeJ31dGRjEUNnbKt foH5MBXycvqLbtj5hTWoXw/433q+e9DFB1ltdNHGQQHzEzyruqQcp49Vkog0wBKG 6plvb6zQEj4+AZPcugZFGQakhwK13Fz/rPEUPYabwLdco7KiSJPTOjGfpdPD8xpk /2QGZ0AzbcJq2w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:33:34 2025 by rpki-client