This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json) Hash identifier: YCkocUCweS7Ubfn8hRrzNBn+1qlUtXmFn45mD3ppTRM= Subject key identifier: 1F:7D:48:75:13:05:EB:0E:9A:EA:C0:C8:3B:B8:20:62:78:EA:00:70 Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf Certificate serial: 019AF1D1CAFFF7328B25212C82F02E0A3441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft Manifest number: 0131 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: Ke7MD7f2HHvYdAOWeQIn4RLvIi5jBdJIm3EoBiXqpxY=) 2: MKp_wnfGXJz9vDnuCk6NRSVDYjQ.roa (hash: 5LllIjjTErVD6cEbTzyP47TnfsEC+5tnD2nfvOPP5z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ca:ff:f7:32:8b:25:21:2c:82:f0:2e:0a:34:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=1f7d48751305eb0e9aeac0c83bb8206278ea0070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:8b:5c:84:d7:aa:34:e4:aa:3f:dc:8d:1a: 29:0b:2a:47:65:9d:67:e4:e8:d2:72:70:d3:c2:d3: a2:73:b5:dd:03:39:3b:e4:f4:46:92:4d:c3:cb:4e: 09:7b:1f:81:61:8c:5f:d4:ff:4b:4b:19:11:5c:04: 21:a8:7c:79:bd:e5:6e:24:e5:fc:40:31:06:b0:d0: 5d:5f:95:53:c8:40:5c:7e:14:e6:fa:01:8b:08:4e: 00:d9:22:d2:b0:eb:89:63:d4:ea:27:2b:fe:32:bf: 96:20:9f:e8:c1:0f:8d:5c:19:75:24:33:46:15:e1: 3c:45:ce:ad:83:f9:fa:0d:83:99:95:25:0f:77:45: 00:51:70:0a:7c:8c:ac:68:df:ed:b8:c7:78:fa:39: 52:fa:90:1c:c9:d2:d8:66:ea:e5:5a:c1:92:91:67: b1:f8:68:30:02:25:c4:c0:0a:95:7e:14:48:30:a9: 15:de:46:00:a4:d9:b3:78:33:88:8f:ac:50:db:f9: cb:81:03:15:cd:57:64:16:3e:15:f5:a0:a3:00:bf: 56:4d:b6:95:a4:0f:42:52:7c:9f:02:22:79:fa:7c: 84:f4:5e:3c:c1:aa:25:1a:a5:b2:50:37:f7:01:7d: d9:0b:2a:d9:2c:6e:18:74:47:43:23:1b:21:65:0f: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:48:75:13:05:EB:0E:9A:EA:C0:C8:3B:B8:20:62:78:EA:00:70 X509v3 Authority Key Identifier: keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:85:df:a5:6d:4c:10:92:f5:e8:d6:51:99:22:ee:80:9d:b1: 4a:ce:4c:92:d2:b8:57:31:8f:53:0a:c0:9f:b9:57:55:ef:75: 85:97:a2:6d:9e:95:42:9e:dc:a3:7a:e8:04:4d:08:9f:b9:54: af:2f:1e:0e:7b:8a:6f:ec:73:44:27:b3:7e:62:16:7c:d3:ff: 48:e5:20:66:1d:d3:14:98:d8:e5:e5:68:26:15:eb:d1:14:83: 08:31:78:d8:6b:68:8b:5e:1f:a1:67:03:e9:be:77:59:5e:d7: 81:bd:1e:69:64:de:bb:31:15:33:38:fb:2a:9a:c5:4d:8f:d3: 0a:18:76:13:1e:04:86:19:54:4f:40:e0:22:aa:1c:55:99:f6: 6e:f4:f0:2c:da:d9:b9:ab:1a:82:b6:37:77:71:51:e1:44:d7: 19:ba:b4:4f:2c:1e:26:1e:a7:0f:3b:06:97:74:5a:7f:7b:ec: 89:6d:d5:2a:99:ec:4b:2b:09:c4:b4:61:56:1b:b5:a9:30:f3: aa:09:62:40:26:ea:4b:fa:e5:89:69:3d:ef:61:b4:99:e3:69: 57:ed:4f:31:b5:64:24:31:4b:6e:b4:23:86:6d:b5:67:04:70: 9e:6d:4f:00:3c:a2:a9:3c:94:cd:95:a9:ba:43:c8:37:82:92: 6f:d1:69:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cr/9zKLJSEsgvAuCjRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzdiNTFkYmYzNWFhNDIzOWFiZGFkNTVmOTY2OTQ1NjU5 NDAxY2YwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EygxZjdkNDg3NTEzMDVlYjBlOWFlYWMwYzgzYmI4MjA2Mjc4ZWEwMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5WLXITXqjTkqj/cjRopCypHZZ1n 5OjScnDTwtOic7XdAzk75PRGkk3Dy04Jex+BYYxf1P9LSxkRXAQhqHx5veVuJOX8 QDEGsNBdX5VTyEBcfhTm+gGLCE4A2SLSsOuJY9TqJyv+Mr+WIJ/owQ+NXBl1JDNG FeE8Rc6tg/n6DYOZlSUPd0UAUXAKfIysaN/tuMd4+jlS+pAcydLYZurlWsGSkWex +GgwAiXEwAqVfhRIMKkV3kYApNmzeDOIj6xQ2/nLgQMVzVdkFj4V9aCjAL9WTbaV pA9CUnyfAiJ5+nyE9F48waolGqWyUDf3AX3ZCyrZLG4YdEdDIxshZQ+itQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB99SHUTBesOmurAyDu4IGJ46gBwMB8GA1UdIwQY MBaAFCvHtR2/NapCOava1V+WaUVllAHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQt MmEzODEyNGJhZDhjLzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQtMmEzODEyNGJhZDhj LzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYXfpW1M EJL16NZRmSLugJ2xSs5MktK4VzGPUwrAn7lXVe91hZeibZ6VQp7co3roBE0In7lU ry8eDnuKb+xzRCezfmIWfNP/SOUgZh3TFJjY5eVoJhXr0RSDCDF42Gtoi14foWcD 6b53WV7Xgb0eaWTeuzEVMzj7KprFTY/TChh2Ex4EhhlUT0DgIqocVZn2bvTwLNrZ uasagrY3d3FR4UTXGbq0TyweJh6nDzsGl3Raf3vsiW3VKpnsSysJxLRhVhu1qTDz qgliQCbqS/rliWk972G0meNpV+1PMbVkJDFLbrQjhm21ZwRwnm1PADyiqTyUzZWp ukPIN4KSb9FpwA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:32:14 2025 by rpki-client