This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json) Hash identifier: IQcEVitU3gS2GWYe9Lz2C0aoND77pv0tdAvhXK6adcA= Subject key identifier: 1F:51:38:38:5D:F3:4C:DB:EB:53:FE:13:95:5E:48:7D:DD:AC:59:4C Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Certificate serial: 019B3FECA0B6BF3C5526AF51208C685CF4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft Manifest number: 1330 Signing time: Sun 21 Dec 2025 08:00:30 +0000 Manifest this update: Sun 21 Dec 2025 08:00:30 +0000 Manifest next update: Mon 22 Dec 2025 08:00:30 +0000 Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=) 2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: 6/5OjLi0YEPWy/rxkDkl+8nXINunTSbbSKjZoSX0llg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:a0:b6:bf:3c:55:26:af:51:20:8c:68:5c:f4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Validity Not Before: Dec 21 08:00:30 2025 GMT Not After : Dec 22 08:00:30 2025 GMT Subject: CN=1f5138385df34cdbeb53fe13955e487dddac594c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:00:91:6b:45:19:aa:c3:b0:d3:ce:29:d0: 14:84:f8:7a:77:8f:13:bd:e2:47:4f:ac:79:61:74: df:fe:49:ed:ee:3f:c0:49:5d:f5:ad:7b:f0:c1:b0: 70:d4:ed:55:96:21:3a:49:a3:19:f3:08:22:d5:66: 14:dc:24:77:9f:bb:29:8c:bc:64:96:6c:90:d4:c2: ff:21:d1:4e:f7:0e:50:c9:d0:81:5b:80:bb:a5:12: bd:a2:bb:d0:7d:e0:5d:f5:98:05:c9:40:0e:42:77: 79:cd:67:06:02:a7:be:58:05:d4:c9:d5:3a:af:db: 4e:b9:49:d5:0e:ef:65:4f:ca:0b:f4:9f:71:ed:64: c8:f2:7a:a7:b8:28:17:6d:53:e5:0c:ed:5b:d2:fe: 7e:e5:9b:38:ac:6c:02:f4:6a:2a:bd:7e:f7:61:00: 33:06:88:91:cf:02:5e:66:50:5d:0e:4f:3f:69:43: 6d:b9:77:5c:e9:1d:a2:eb:c2:47:35:80:6e:89:62: 46:0a:ce:86:54:0c:c2:a0:7e:42:8a:dd:c5:90:29: a6:ef:c5:54:48:50:1e:8b:24:e2:ce:af:53:d0:8c: a1:4e:8c:24:3a:7f:ea:e4:c0:d8:0d:85:1c:29:ab: a1:a6:fa:05:b4:b1:90:fa:0f:87:f4:0e:68:11:2f: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:51:38:38:5D:F3:4C:DB:EB:53:FE:13:95:5E:48:7D:DD:AC:59:4C X509v3 Authority Key Identifier: keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c8:b7:53:4d:ff:67:32:0c:fa:e0:c2:b7:3a:4a:79:35:f6: 38:17:e5:16:75:f8:68:fc:c3:cd:80:46:49:a5:20:4b:41:21: 9b:f5:5d:1b:6d:f4:2b:9d:06:1e:af:73:cd:47:c7:67:34:f7: e2:00:17:cf:6e:cd:51:42:1c:7a:e5:61:8a:6d:61:10:7f:6a: 2a:a6:a3:61:a4:67:51:58:31:20:6f:bb:59:15:d4:f6:f3:de: 46:33:10:2a:e4:ac:9e:9e:ae:fd:bd:fb:a1:4d:f7:7a:3a:1b: 43:07:3a:24:84:7d:2c:9c:79:43:74:9f:d5:b5:12:c9:91:00: 95:2b:10:78:61:de:7f:af:dc:ac:6a:1e:ed:80:78:73:ac:91: 69:d8:ff:e7:74:23:bf:7d:9b:a0:83:25:35:df:5c:66:10:9a: ca:ab:9e:83:1f:6c:4c:cf:9d:e2:6f:ad:6a:5c:a3:96:cf:89: f4:73:69:66:d4:53:3b:ea:ec:8b:62:3d:1d:00:cb:29:8f:c9: a3:c0:6c:28:3f:9e:0f:b1:38:f9:b7:c4:34:13:cd:23:b8:3f: 27:cc:b6:b6:16:4d:bc:05:4f:3b:65:62:b1:0d:c5:25:b9:b4: 56:2e:28:55:f3:18:ef:3c:b9:c2:a3:eb:6f:47:9a:65:ba:11: 49:79:dc:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7KC2vzxVJq9RIIxoXPT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiY2MxY2Y4YjhlMjEwNjZiNmVjNjQ3Njk3ZDQ5NDVkOGY5 YmIwNWIwHhcNMjUxMjIxMDgwMDMwWhcNMjUxMjIyMDgwMDMwWjAzMTEwLwYDVQQD EygxZjUxMzgzODVkZjM0Y2RiZWI1M2ZlMTM5NTVlNDg3ZGRkYWM1OTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjsAkWtFGarDsNPOKdAUhPh6d48T veJHT6x5YXTf/knt7j/ASV31rXvwwbBw1O1VliE6SaMZ8wgi1WYU3CR3n7spjLxk lmyQ1ML/IdFO9w5QydCBW4C7pRK9orvQfeBd9ZgFyUAOQnd5zWcGAqe+WAXUydU6 r9tOuUnVDu9lT8oL9J9x7WTI8nqnuCgXbVPlDO1b0v5+5Zs4rGwC9GoqvX73YQAz BoiRzwJeZlBdDk8/aUNtuXdc6R2i68JHNYBuiWJGCs6GVAzCoH5Cit3FkCmm78VU SFAeiyTizq9T0IyhTowkOn/q5MDYDYUcKauhpvoFtLGQ+g+H9A5oES92twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9RODhd80zb61P+E5VeSH3drFlMMB8GA1UdIwQY MBaAFCvMHPi44hBmtuxkdpfUlF2Pm7BbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjct MGE3ZTAxOTg5OWNmLzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjctMGE3ZTAxOTg5OWNm LzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsi3U03/ ZzIM+uDCtzpKeTX2OBflFnX4aPzDzYBGSaUgS0Ehm/VdG230K50GHq9zzUfHZzT3 4gAXz27NUUIceuVhim1hEH9qKqajYaRnUVgxIG+7WRXU9vPeRjMQKuSsnp6u/b37 oU33ejobQwc6JIR9LJx5Q3Sf1bUSyZEAlSsQeGHef6/crGoe7YB4c6yRadj/53Qj v32boIMlNd9cZhCayquegx9sTM+d4m+talyjls+J9HNpZtRTO+rsi2I9HQDLKY/J o8BsKD+eD7E4+bfENBPNI7g/J8y2thZNvAVPO2VisQ3FJbm0Vi4oVfMY7zy5wqPr b0eaZboRSXncOQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:52 2025 by rpki-client