This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json) Hash identifier: DKbgPOCBubJoW4Sq331IJBwDqMuvsJWc0gc5Wr74kwI= Subject key identifier: EB:D1:58:FE:AC:17:06:24:83:5E:A2:8B:B0:F0:9B:B4:1A:F9:24:CF Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf Certificate serial: 019AF12D834156EF871E16103CB25781E000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft Manifest number: 163A Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: y+QplPWpwnYNFzeILP3AdhIyjfKm1NXakIIp5tW/qQQ=) 2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:83:41:56:ef:87:1e:16:10:3c:b2:57:81:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=ebd158feac170624835ea28bb0f09bb41af924cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:84:c9:1b:cc:cc:4f:08:54:85:22:18:b3: 9d:4f:01:b4:81:8e:f2:c4:5e:ba:e5:40:7e:a6:9c: a7:6b:85:09:3c:b1:1f:3d:9c:a0:62:78:4f:f8:6d: f5:6a:82:d6:e9:6b:df:54:be:d1:ba:2d:05:ed:4d: 34:73:10:9f:be:55:b3:ae:c3:b6:11:2c:e6:2b:e4: 9d:4d:a2:ed:35:c2:e6:88:4a:59:79:31:0d:9f:0f: 88:c7:3f:57:5a:7d:81:f9:8a:08:2e:3f:cf:37:13: 13:30:aa:f7:f5:2b:ad:6b:ef:4c:d0:8d:7c:75:0b: 94:a2:ce:e9:9a:a8:3c:d4:48:79:99:86:9b:54:ee: 18:5e:a8:58:cb:72:8e:ae:99:fd:0d:df:1f:02:40: 2d:77:1d:7c:97:a4:12:5f:fb:4c:78:29:a6:e6:4b: 2b:52:71:81:4d:4c:3e:f9:ee:f5:b4:5c:a2:00:ec: 4b:8c:ea:f6:10:a2:20:87:b0:ad:f9:52:7f:0f:ca: f3:2e:dd:1d:50:c1:e7:8d:ee:c3:d8:04:ef:56:8c: 6c:79:04:2a:e5:23:25:ce:4f:a0:25:30:04:84:e7: a5:d5:2a:b8:0c:2b:00:87:66:c3:79:48:49:0f:41: 71:81:31:82:e7:b7:d5:8f:da:5b:21:6a:8f:99:7d: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D1:58:FE:AC:17:06:24:83:5E:A2:8B:B0:F0:9B:B4:1A:F9:24:CF X509v3 Authority Key Identifier: keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6e:50:9f:52:d4:13:95:3b:22:47:14:ad:9d:43:c5:ec:95: da:35:0a:39:ff:ee:cf:69:ce:ea:12:56:5f:62:46:f1:f7:33: 85:b1:3a:59:5a:df:68:ef:6b:59:f0:fc:62:9e:2f:0b:48:7d: 69:65:e6:5c:dc:ba:c5:2a:14:dc:f1:9a:1c:4e:51:21:40:2a: 29:6e:dd:dd:0d:fe:9e:dc:aa:70:5d:c6:6e:8c:0b:cc:95:77: 6f:3d:d7:05:f6:f9:87:45:0f:03:5f:df:1f:ed:18:4c:d4:78: 60:67:0b:42:54:ac:45:a4:4b:b3:e8:0b:0d:1d:e5:ad:90:7a: b4:38:ad:45:49:65:8c:ca:a8:a8:35:7f:b3:fd:af:8d:b8:1c: 6a:89:ee:d1:72:05:ab:70:66:ea:2d:9d:e7:db:11:82:30:2d: a8:c6:93:da:a2:19:a5:22:2a:97:bf:98:d4:6f:b7:1a:f1:40: c7:bd:ee:41:70:46:97:c2:f7:f9:22:c0:f7:92:37:9c:be:fa: a2:df:ff:ac:60:a8:68:a0:d5:7e:b2:9a:16:e5:e1:d9:22:c1: 91:07:f0:01:19:b8:1d:7d:7a:1b:fb:9a:4d:68:ea:47:41:01: 96:5d:82:29:d6:f1:aa:c7:10:b2:17:16:02:1e:37:cd:2e:b7: a0:c2:ea:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYNBVu+HHhYQPLJXgeAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFiNGMxNTE3ZjczMmRmOGIyZWM4M2RlNGFkMjM2OGQ0 NWNmZGYwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD EyhlYmQxNThmZWFjMTcwNjI0ODM1ZWEyOGJiMGYwOWJiNDFhZjkyNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEOEyRvMzE8IVIUiGLOdTwG0gY7y xF665UB+ppyna4UJPLEfPZygYnhP+G31aoLW6WvfVL7Rui0F7U00cxCfvlWzrsO2 ESzmK+SdTaLtNcLmiEpZeTENnw+Ixz9XWn2B+YoILj/PNxMTMKr39Suta+9M0I18 dQuUos7pmqg81Eh5mYabVO4YXqhYy3KOrpn9Dd8fAkAtdx18l6QSX/tMeCmm5ksr UnGBTUw++e71tFyiAOxLjOr2EKIgh7Ct+VJ/D8rzLt0dUMHnje7D2ATvVoxseQQq 5SMlzk+gJTAEhOel1Sq4DCsAh2bDeUhJD0FxgTGC57fVj9pbIWqPmX0A/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvRWP6sFwYkg16ii7Dwm7Qa+STPMB8GA1UdIwQY MBaAFCtKtMFRf3Mt+LLsg95K0jaNRc/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODIt ZTdhYmNmMjIzNzE1LzEvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8yN2M3YTMtOTQzYy00YjI5LWJkODItZTdhYmNmMjIzNzE1 LzEvSzBxMHdWRl9jeTM0c3V5RDNrclNObzFGejk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm5Qn1LU E5U7IkcUrZ1DxeyV2jUKOf/uz2nO6hJWX2JG8fczhbE6WVrfaO9rWfD8Yp4vC0h9 aWXmXNy6xSoU3PGaHE5RIUAqKW7d3Q3+ntyqcF3GbowLzJV3bz3XBfb5h0UPA1/f H+0YTNR4YGcLQlSsRaRLs+gLDR3lrZB6tDitRUlljMqoqDV/s/2vjbgcaonu0XIF q3Bm6i2d59sRgjAtqMaT2qIZpSIql7+Y1G+3GvFAx73uQXBGl8L3+SLA95I3nL76 ot//rGCoaKDVfrKaFuXh2SLBkQfwARm4HX16G/uaTWjqR0EBll2CKdbxqscQshcW Ah43zS63oMLqJA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:33 2025 by rpki-client