This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json) Hash identifier: ugKKOkSjqYnfswiW061Xp7zVapJ6/cTZv/R1Y2giZvw= Subject key identifier: BA:FB:92:22:B7:EA:13:9B:D8:18:39:97:B9:42:CD:AE:44:2C:D9:4C Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb Certificate serial: 019B2B1C5F5EF0AAC88CE6F7174ACBFF11DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft Manifest number: 177A Signing time: Wed 17 Dec 2025 07:00:38 +0000 Manifest this update: Wed 17 Dec 2025 07:00:38 +0000 Manifest next update: Thu 18 Dec 2025 07:00:38 +0000 Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: L1YVPOEmrz48HZwkqw+k1OUVJ8WVjolieASE3IkF3kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:5f:5e:f0:aa:c8:8c:e6:f7:17:4a:cb:ff:11:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb Validity Not Before: Dec 17 07:00:38 2025 GMT Not After : Dec 18 07:00:38 2025 GMT Subject: CN=bafb9222b7ea139bd8183997b942cdae442cd94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:20:2e:b1:06:2b:88:1b:9e:1a:a6:ca:5a: 1d:12:b7:47:22:41:e2:02:9b:ea:41:f1:94:35:0c: f3:a4:7a:7a:ce:2b:18:7f:78:7d:e4:7e:4b:17:1d: 49:2d:c4:c4:59:d8:8e:aa:66:ae:3c:c2:53:8c:68: 25:eb:f4:2d:99:db:ef:17:f5:8f:04:6a:fb:71:8c: 6c:3c:c9:61:75:60:18:00:cb:28:b1:2a:43:4a:ed: 07:ad:43:cc:fc:48:76:cf:07:fd:80:a3:12:ab:e5: 41:83:a8:bc:43:4a:d5:e6:d0:06:a1:df:bc:12:2c: be:7f:36:c8:cb:cf:c1:16:84:25:1f:f0:78:d4:d6: de:df:65:25:3b:b8:7b:d8:ae:ca:93:77:61:54:56: 3c:d7:36:b5:2d:95:ab:73:cd:0d:23:d9:97:05:22: 12:f8:0d:01:03:8d:4f:73:44:4f:88:81:4b:fb:9d: ad:85:34:f8:1d:0c:ae:60:c3:69:b1:bb:22:26:8d: 1d:81:4b:a4:bd:f2:d7:2f:bd:82:60:41:96:17:17: 9f:93:e5:e3:8f:81:2d:22:cc:6b:4b:da:9d:24:97: ba:dc:12:d6:0e:87:94:48:34:29:22:42:7a:e9:13: bf:1c:f5:03:dd:d1:b2:01:de:7b:96:8d:de:5f:77: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:92:22:B7:EA:13:9B:D8:18:39:97:B9:42:CD:AE:44:2C:D9:4C X509v3 Authority Key Identifier: keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d7:6c:1c:7e:c0:65:ab:e8:b5:bf:b5:42:94:89:9a:0d:99: 7a:74:0f:03:80:56:73:d2:71:2a:49:99:b9:6e:87:09:44:bd: 0e:56:1a:06:18:c9:3c:17:18:f1:05:26:6e:45:59:39:1e:c5: e6:b3:c6:1f:e7:21:82:c6:f1:36:3c:33:d6:6d:0c:2d:7a:27: 81:71:d1:73:f8:33:65:04:69:69:a4:fe:46:87:b1:2e:ab:5c: bf:63:86:e1:65:0f:c8:20:50:81:c0:d7:fe:06:4f:73:dd:cb: 14:38:ae:21:33:29:dc:07:42:d0:c2:5f:42:e4:6f:6a:61:5e: ea:43:b7:df:44:e0:d2:f8:c0:3c:db:14:81:b7:5a:d0:ab:9e: 73:1c:bf:b3:6e:4d:2d:d9:59:59:a3:4e:f8:f2:3e:c9:e8:db: 0c:36:ce:db:03:4c:49:79:12:44:d5:3b:14:ac:8d:c1:d4:1b: b5:d5:96:fa:c8:80:40:9c:af:e3:ee:5d:bb:ee:09:d5:99:c5: 05:6b:3b:78:8d:7e:89:40:59:0e:b7:62:61:b2:3d:2c:d2:d4: ff:c4:a1:08:3c:29:88:09:b8:68:cc:a0:1c:72:85:46:20:bb: 09:50:fe:fd:a3:2d:73:98:46:3a:fd:18:62:d5:72:cf:56:35: d3:2c:8f:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHF9e8KrIjOb3F0rL/xHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDllODg0YTQ0MWYwNGI3ZjVlMmVkNDc0YjU4NDdlODMy MTJiY2IwHhcNMjUxMjE3MDcwMDM4WhcNMjUxMjE4MDcwMDM4WjAzMTEwLwYDVQQD EyhiYWZiOTIyMmI3ZWExMzliZDgxODM5OTdiOTQyY2RhZTQ0MmNkOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMIgLrEGK4gbnhqmylodErdHIkHi ApvqQfGUNQzzpHp6zisYf3h95H5LFx1JLcTEWdiOqmauPMJTjGgl6/QtmdvvF/WP BGr7cYxsPMlhdWAYAMsosSpDSu0HrUPM/Eh2zwf9gKMSq+VBg6i8Q0rV5tAGod+8 Eiy+fzbIy8/BFoQlH/B41Nbe32UlO7h72K7Kk3dhVFY81za1LZWrc80NI9mXBSIS +A0BA41Pc0RPiIFL+52thTT4HQyuYMNpsbsiJo0dgUukvfLXL72CYEGWFxefk+Xj j4EtIsxrS9qdJJe63BLWDoeUSDQpIkJ66RO/HPUD3dGyAd57lo3eX3eelwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr7kiK36hOb2Bg5l7lCza5ELNlMMB8GA1UdIwQY MBaAFCtJ6ISkQfBLf14u1HS1hH6DISvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMt NDJkZDk4NWNkN2IwLzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMtNDJkZDk4NWNkN2Iw LzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtdsHH7A Zavotb+1QpSJmg2ZenQPA4BWc9JxKkmZuW6HCUS9DlYaBhjJPBcY8QUmbkVZOR7F 5rPGH+chgsbxNjwz1m0MLXongXHRc/gzZQRpaaT+RoexLqtcv2OG4WUPyCBQgcDX /gZPc93LFDiuITMp3AdC0MJfQuRvamFe6kO330Tg0vjAPNsUgbda0Kuecxy/s25N LdlZWaNO+PI+yejbDDbO2wNMSXkSRNU7FKyNwdQbtdWW+siAQJyv4+5du+4J1ZnF BWs7eI1+iUBZDrdiYbI9LNLU/8ShCDwpiAm4aMygHHKFRiC7CVD+/aMtc5hGOv0Y YtVyz1Y10yyPbw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:41:45 2025 by rpki-client