This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json) Hash identifier: YFdazNrge2h+dKi34/wZC6PzJdC7YcilX3VCe9tcQG8= Subject key identifier: 5D:DC:15:29:48:C6:3D:2F:67:05:94:FB:5B:24:92:F5:C8:17:E5:E4 Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0 Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0 Certificate serial: 019AF19AB45F7A5B62433C96150FB322438C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft Manifest number: 0772 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: 8wYTapUQn4xLaBDBB93N2+kZj9bPF64Ps1OlUu6ZmOk=) 2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b4:5f:7a:5b:62:43:3c:96:15:0f:b3:22:43:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=5ddc152948c63d2f670594fb5b2492f5c817e5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:f0:ad:be:e8:45:1a:88:7a:d2:46:b4:fc: 7c:74:18:f7:37:80:7e:e9:21:30:41:4d:9e:3d:a6: 84:3c:64:eb:d6:00:85:3b:4e:75:5e:65:71:59:f8: 1d:17:44:43:8e:07:b7:97:95:8c:fe:68:9b:9c:4d: d7:e2:ef:28:b0:ef:df:cf:c7:24:11:b8:28:fd:50: c0:66:b4:a8:f9:46:4a:b8:76:ce:5e:26:b9:31:b7: 63:c5:2d:a0:33:f6:d9:81:cd:eb:ab:be:f0:06:80: 5a:ae:f8:70:5e:db:2d:ca:d8:c7:34:e9:3f:9c:a5: 4b:0b:e0:d4:ca:8f:95:bd:77:79:c6:e6:84:09:53: 34:b5:f2:58:f6:04:c7:b0:6a:5e:fe:1c:93:65:c8: ce:dc:31:61:a0:52:1f:6a:c7:1a:e1:e0:9e:39:f9: f8:06:1a:f4:74:5b:ab:a5:a7:6d:f3:39:7f:a6:e7: 67:8e:e3:86:82:27:7f:98:82:bb:72:56:74:1b:21: 18:22:de:54:70:c5:a4:a3:14:5b:59:d9:87:2a:6f: 20:47:74:da:2b:53:4f:a0:c5:6c:86:2c:8e:38:cc: 40:20:9c:86:a8:11:b2:d3:bb:67:cd:70:d3:ff:40: 36:43:a7:87:eb:2f:0e:d8:d1:98:38:e4:5b:b7:8d: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DC:15:29:48:C6:3D:2F:67:05:94:FB:5B:24:92:F5:C8:17:E5:E4 X509v3 Authority Key Identifier: keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fd:08:86:83:43:94:3f:b4:3f:1b:8c:f3:99:38:5b:9a:a0: 6f:c2:84:1f:9c:a0:a0:ac:1e:95:5d:39:bb:bf:c6:98:c3:c5: 7c:c1:59:91:21:b2:f0:1d:72:a9:9a:0f:a2:7b:0d:f2:12:92: 93:84:14:28:5d:0a:d0:d5:7e:18:7d:bc:9a:94:82:b1:0e:de: 84:47:b1:96:21:0b:ac:3d:3c:d0:16:bf:ac:25:48:25:72:49: ff:2d:08:af:06:08:5d:6d:4a:76:77:b0:f1:9c:31:1e:34:4f: 6d:1e:07:1e:b1:40:66:13:3b:7a:17:1b:64:40:ff:80:de:b6: 12:4f:18:7e:04:b5:41:ca:f0:a1:0b:eb:fc:7e:d5:97:be:5b: 1c:e0:7d:01:93:e9:ce:55:aa:3c:42:66:94:4e:01:09:be:cf: 10:ef:dd:49:c2:2a:28:e2:43:82:76:fa:79:c8:20:cd:63:4a: ac:5d:f9:25:db:a0:10:c5:3a:a1:4a:9e:8e:f4:85:3e:73:4a: 5c:fa:77:fb:e5:ca:d5:98:b7:2e:5f:7e:42:7a:5d:59:c2:4e: ac:38:b9:12:b2:42:da:4c:48:cb:c6:f9:f0:94:6e:0f:80:07: 81:05:84:a3:42:25:28:04:b2:64:da:51:8a:12:a6:58:41:06: 5a:13:d1:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrRfeltiQzyWFQ+zIkOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDZjOWNjZjdmZjdiZGNjZjgzNzc2MmEwZTE1N2JkYzEz NTcwZTAwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD Eyg1ZGRjMTUyOTQ4YzYzZDJmNjcwNTk0ZmI1YjI0OTJmNWM4MTdlNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyjwrb7oRRqIetJGtPx8dBj3N4B+ 6SEwQU2ePaaEPGTr1gCFO051XmVxWfgdF0RDjge3l5WM/mibnE3X4u8osO/fz8ck Ebgo/VDAZrSo+UZKuHbOXia5MbdjxS2gM/bZgc3rq77wBoBarvhwXtstytjHNOk/ nKVLC+DUyo+VvXd5xuaECVM0tfJY9gTHsGpe/hyTZcjO3DFhoFIfasca4eCeOfn4 Bhr0dFurpadt8zl/pudnjuOGgid/mIK7clZ0GyEYIt5UcMWkoxRbWdmHKm8gR3Ta K1NPoMVshiyOOMxAIJyGqBGy07tnzXDT/0A2Q6eH6y8O2NGYOORbt42sVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3cFSlIxj0vZwWU+1skkvXIF+XkMB8GA1UdIwQY MBaAFCtGycz3/3vcz4N3YqDhV73BNXDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5Njgt YzdhMmQ1ZjlmZDYwLzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zNGNjZmUtODBlNi00ZDk2LWI5NjgtYzdhMmQ1ZjlmZDYw LzEvSzBiSnpQZl9lOXpQZzNkaW9PRlh2Y0UxY09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf0IhoND lD+0PxuM85k4W5qgb8KEH5ygoKwelV05u7/GmMPFfMFZkSGy8B1yqZoPonsN8hKS k4QUKF0K0NV+GH28mpSCsQ7ehEexliELrD080Ba/rCVIJXJJ/y0IrwYIXW1Kdnew 8ZwxHjRPbR4HHrFAZhM7ehcbZED/gN62Ek8YfgS1QcrwoQvr/H7Vl75bHOB9AZPp zlWqPEJmlE4BCb7PEO/dScIqKOJDgnb6ecggzWNKrF35JdugEMU6oUqejvSFPnNK XPp3++XK1Zi3Ll9+QnpdWcJOrDi5ErJC2kxIy8b58JRuD4AHgQWEo0IlKASyZNpR ihKmWEEGWhPRVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:56 2025 by rpki-client