This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json) Hash identifier: /bPhxfS3KqZVb2dfdnplTiKkl9TovSkNxkW5+lCXD00= Subject key identifier: F6:BD:EE:24:8D:FD:14:58:7D:FB:1F:0A:B2:33:36:2A:DC:AC:4F:36 Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Certificate serial: 019AF352312BD3274099DAD111BE16B90144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=) 2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: fNaF8X+TgUZflEk1AZhhjD8zQVxrGLP2t+oA9B8RkDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:31:2b:d3:27:40:99:da:d1:11:be:16:b9:01:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=f6bdee248dfd14587dfb1f0ab233362adcac4f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d8:20:4f:51:3f:70:46:f1:5c:77:8b:38:13: 7e:25:2f:78:1a:b3:cb:82:70:d2:d5:e7:8e:d1:62: 83:3c:0c:76:0a:17:f9:ae:f2:80:cc:c9:80:ec:b7: 29:54:5b:5c:d3:65:12:4c:2f:46:cc:d1:95:9d:77: f5:09:54:f9:22:c1:d2:86:09:2d:cd:de:fc:bb:71: f8:75:6e:b6:7d:9d:91:49:4e:7b:cd:ee:c6:9f:ed: 07:41:40:35:f6:c6:bf:5a:75:7b:49:b5:53:23:fb: df:3f:93:08:72:25:ff:c2:52:bf:a7:c1:61:e8:3c: 7a:a8:c1:a6:ae:e9:40:de:4c:93:1f:9a:ec:13:b2: c2:eb:0e:65:35:37:f7:14:2d:17:34:04:e2:01:cb: 24:d4:78:a0:e5:c3:5c:f9:14:f5:02:4d:0c:20:da: 44:9c:93:5b:48:c9:e3:70:2a:cd:d1:d3:d8:76:9e: 7a:c8:52:94:78:64:50:72:a8:e5:d5:e2:3e:ec:82: ec:d3:15:2b:18:6e:c7:f4:73:6a:d4:ba:ab:4f:4b: e5:b8:29:41:e3:61:40:2b:09:6b:18:ec:25:fe:38: 87:3a:42:e2:ed:d2:bb:ae:68:8a:85:1d:53:75:6e: 94:a5:a2:3f:5f:3b:c1:46:a1:71:9b:70:6b:13:e2: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:EE:24:8D:FD:14:58:7D:FB:1F:0A:B2:33:36:2A:DC:AC:4F:36 X509v3 Authority Key Identifier: keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2d:e2:cb:9c:bf:0d:04:5b:2b:eb:71:5a:01:8a:a1:05:b0: 83:d5:11:52:26:9d:84:9e:9a:7e:6f:ae:86:b8:c7:97:82:f3: a3:79:d0:b7:89:56:b2:46:59:df:1e:c2:87:3e:97:1d:0f:58: e5:30:4e:b4:08:8d:d1:55:ba:aa:22:ba:3c:dd:c9:bd:f4:c6: 5e:a8:37:fa:c8:14:79:82:37:27:6b:9d:19:b5:9f:cf:b6:bd: 6e:7a:92:b9:a2:90:b3:fb:c1:d0:d6:f6:b1:29:f2:04:e2:6b: c7:24:bb:c6:96:c4:8e:46:a5:54:20:c5:f9:d9:ff:38:0c:fe: 8b:74:05:c4:e2:85:a1:0f:b9:bf:b9:22:05:73:02:5e:10:85: 27:75:63:2b:62:01:f2:2b:0b:a4:62:6a:a6:82:e1:de:83:b9: b0:09:c8:fa:c2:12:16:1c:dd:cd:8c:6b:d1:42:3f:fe:72:c4: 6a:9b:1f:4f:b8:bf:fd:7a:38:00:29:3a:2b:9a:67:e4:85:ac: 30:9e:8e:47:2e:4e:69:71:02:5d:4e:5c:12:ed:b9:ca:7e:09: 38:c7:30:28:6e:40:87:f4:a4:65:c4:1b:77:f6:25:2c:47:ae: 02:ef:a9:93:6b:58:a8:e6:30:76:92:df:0c:a8:6b:dc:7c:0f: 7e:52:ac:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjEr0ydAmdrREb4WuQFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGJkYzljMTI3ZmI3MThlMjQwZGZiMjc1NmY1MjAyMDM2 ZmUzZDUwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD EyhmNmJkZWUyNDhkZmQxNDU4N2RmYjFmMGFiMjMzMzYyYWRjYWM0ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NggT1E/cEbxXHeLOBN+JS94GrPL gnDS1eeO0WKDPAx2Chf5rvKAzMmA7LcpVFtc02USTC9GzNGVnXf1CVT5IsHShgkt zd78u3H4dW62fZ2RSU57ze7Gn+0HQUA19sa/WnV7SbVTI/vfP5MIciX/wlK/p8Fh 6Dx6qMGmrulA3kyTH5rsE7LC6w5lNTf3FC0XNATiAcsk1Hig5cNc+RT1Ak0MINpE nJNbSMnjcCrN0dPYdp56yFKUeGRQcqjl1eI+7ILs0xUrGG7H9HNq1LqrT0vluClB 42FAKwlrGOwl/jiHOkLi7dK7rmiKhR1TdW6UpaI/XzvBRqFxm3BrE+L3EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPa97iSN/RRYffsfCrIzNircrE82MB8GA1UdIwQY MBaAFCqL3JwSf7cY4kDfsnVvUgIDb+PVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUt OGY1OWEzOTEwYmRkLzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUtOGY1OWEzOTEwYmRk LzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANi3iy5y/ DQRbK+txWgGKoQWwg9URUiadhJ6afm+uhrjHl4Lzo3nQt4lWskZZ3x7Chz6XHQ9Y 5TBOtAiN0VW6qiK6PN3JvfTGXqg3+sgUeYI3J2udGbWfz7a9bnqSuaKQs/vB0Nb2 sSnyBOJrxyS7xpbEjkalVCDF+dn/OAz+i3QFxOKFoQ+5v7kiBXMCXhCFJ3VjK2IB 8isLpGJqpoLh3oO5sAnI+sISFhzdzYxr0UI//nLEapsfT7i//Xo4ACk6K5pn5IWs MJ6ORy5OaXECXU5cEu25yn4JOMcwKG5Ah/SkZcQbd/YlLEeuAu+pk2tYqOYwdpLf DKhr3HwPflKsuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:01 2025 by rpki-client