This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json) Hash identifier: SK40a2fgXdGMfZE4foc4ypQ9KS4i6Kl5FJdq49ADWAk= Subject key identifier: 82:F6:FD:43:B1:18:B8:94:3E:43:DE:68:F2:F7:43:F1:56:D9:D0:FA Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Certificate serial: 019AF578362D3030E4A09CA15A475560F005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 21:01:27 +0000 Manifest this update: Sat 06 Dec 2025 21:01:27 +0000 Manifest next update: Sun 07 Dec 2025 21:01:27 +0000 Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=) 2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: A8hYcf1pBEkMnkyufI9wdY39lybpx2nNl3wzk0/wgX0=) 3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=) 4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:36:2d:30:30:e4:a0:9c:a1:5a:47:55:60:f0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228 Validity Not Before: Dec 6 21:01:27 2025 GMT Not After : Dec 7 21:01:27 2025 GMT Subject: CN=82f6fd43b118b8943e43de68f2f743f156d9d0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:2a:47:23:17:18:d1:ee:fa:5f:75:48:99: 28:4d:1f:3e:b4:3d:34:c1:d4:1b:a9:1c:d2:7f:43: c4:94:7e:c6:14:ac:b3:a5:13:95:23:c1:62:20:82: cf:a1:da:ef:b4:70:5b:39:14:1d:0a:b5:ab:c1:19: 03:e0:67:51:83:dd:db:22:7e:e7:1c:c3:aa:f5:68: c0:d0:8c:eb:2a:0c:8f:d5:49:8a:b4:35:31:77:3b: 82:a0:92:3a:62:ee:7a:d1:9a:4e:8d:42:2d:02:eb: c7:02:d9:c0:a8:b6:84:d2:3d:cb:13:02:4b:db:52: fb:5b:53:23:3b:e9:e6:24:d2:9d:1a:cf:c9:88:f0: 4a:27:c9:ef:b3:2a:59:c6:4d:a5:b4:cb:38:19:fb: 00:e8:ab:5c:0b:54:f9:38:9b:1b:c6:9e:cb:85:66: 51:c4:81:5f:c3:38:ff:ba:3d:6e:9b:34:43:8c:8b: 99:38:01:b7:fe:13:48:02:db:48:f5:5c:a7:e3:d3: 5a:cd:99:90:40:c6:07:d0:96:61:03:8e:0d:22:1e: ff:5c:23:84:d6:56:22:52:28:0f:20:83:e7:45:9b: 3e:ca:35:44:3a:a9:6f:0d:cd:15:88:3f:bd:0a:e5: 28:24:06:f5:88:d1:39:aa:d7:a7:17:83:05:73:30: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F6:FD:43:B1:18:B8:94:3E:43:DE:68:F2:F7:43:F1:56:D9:D0:FA X509v3 Authority Key Identifier: keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:55:e8:c3:37:1a:72:0d:3c:34:f6:20:94:66:2c:fc:b4:1a: 17:d6:ad:6b:fd:c2:70:44:dd:52:8a:db:40:78:ec:3b:72:19: ac:c7:97:17:2d:75:9a:01:31:18:d2:e6:ef:ea:41:6f:7d:0e: 45:8c:0b:99:06:c9:28:59:91:52:98:70:58:3f:06:d7:23:da: e2:f5:06:07:53:df:24:04:e8:ee:9c:1e:76:91:01:9a:3a:24: 9c:48:68:a0:50:83:04:fb:7c:a8:19:b8:ac:07:3e:01:20:51: 9f:92:f8:a5:0b:cf:b9:a1:4a:6d:ce:5f:29:42:98:eb:44:75: 28:51:a8:cd:0b:77:6a:35:4b:d2:e5:76:36:9c:a0:8b:96:1a: d6:7d:68:2a:b0:fa:09:c2:2c:15:2f:bb:79:7b:96:19:93:6b: 6c:bf:fb:7c:61:96:e1:86:72:36:60:0b:59:73:f3:6c:a3:72: ab:5e:18:de:d0:4d:08:ed:70:62:a8:28:1f:f7:80:2d:de:91: 3e:73:01:90:fa:c4:64:aa:95:bb:a7:1c:16:51:ce:8a:f1:ba: 49:55:e7:92:a3:0f:8e:77:93:60:76:fd:05:eb:7d:9e:20:28: 2a:45:88:5e:7d:a3:de:48:ad:95:78:aa:0d:cb:e9:d0:1e:f2: 27:eb:d0:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eDYtMDDkoJyhWkdVYPAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGUyZDM0Y2NlZTQ1NzZiNWNlNzYwNWEwODRlNmMwODUy MmMyMjgwHhcNMjUxMjA2MjEwMTI3WhcNMjUxMjA3MjEwMTI3WjAzMTEwLwYDVQQD Eyg4MmY2ZmQ0M2IxMThiODk0M2U0M2RlNjhmMmY3NDNmMTU2ZDlkMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20sqRyMXGNHu+l91SJkoTR8+tD00 wdQbqRzSf0PElH7GFKyzpROVI8FiIILPodrvtHBbORQdCrWrwRkD4GdRg93bIn7n HMOq9WjA0IzrKgyP1UmKtDUxdzuCoJI6Yu560ZpOjUItAuvHAtnAqLaE0j3LEwJL 21L7W1MjO+nmJNKdGs/JiPBKJ8nvsypZxk2ltMs4GfsA6KtcC1T5OJsbxp7LhWZR xIFfwzj/uj1umzRDjIuZOAG3/hNIAttI9Vyn49NazZmQQMYH0JZhA44NIh7/XCOE 1lYiUigPIIPnRZs+yjVEOqlvDc0ViD+9CuUoJAb1iNE5qtenF4MFczAJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL2/UOxGLiUPkPeaPL3Q/FW2dD6MB8GA1UdIwQY MBaAFCtOLTTM7kV2tc52BaCE5sCFIsIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMt MDc3YmM4YmExZTVkLzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kODk5Y2MtNTM1Ny00NzFhLWJjMWMtMDc3YmM4YmExZTVk LzEvSzA0dE5NenVSWGExem5ZRm9JVG13SVVpd2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVXowzca cg08NPYglGYs/LQaF9ata/3CcETdUorbQHjsO3IZrMeXFy11mgExGNLm7+pBb30O RYwLmQbJKFmRUphwWD8G1yPa4vUGB1PfJATo7pwedpEBmjoknEhooFCDBPt8qBm4 rAc+ASBRn5L4pQvPuaFKbc5fKUKY60R1KFGozQt3ajVL0uV2Npygi5Ya1n1oKrD6 CcIsFS+7eXuWGZNrbL/7fGGW4YZyNmALWXPzbKNyq14Y3tBNCO1wYqgoH/eALd6R PnMBkPrEZKqVu6ccFlHOivG6SVXnkqMPjneTYHb9Bet9niAoKkWIXn2j3kitlXiq Dcvp0B7yJ+vQSQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:21 2025 by rpki-client