This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json) Hash identifier: 8rR2fb7/YAGa6LmI1NPUbEnyNmPqqDVQ/rHQhKwiq/0= Subject key identifier: 44:C4:96:C3:E4:44:94:C1:71:16:81:76:A8:37:78:D1:A3:34:5E:24 Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566 Certificate serial: 019AF088C53C88F6599EDE18719459AB5F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 22:01:26 +0000 Manifest this update: Fri 05 Dec 2025 22:01:26 +0000 Manifest next update: Sat 06 Dec 2025 22:01:26 +0000 Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: UjKLTB/GqxiPGtC0XK+MTenRK4Bg9ZO9uxSyete5Lfk=) 2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c5:3c:88:f6:59:9e:de:18:71:94:59:ab:5f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Validity Not Before: Dec 5 22:01:26 2025 GMT Not After : Dec 6 22:01:26 2025 GMT Subject: CN=44c496c3e44494c171168176a83778d1a3345e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:42:11:12:d8:9f:f2:82:6e:30:94:66:4d: 9d:15:a7:9f:55:aa:36:39:2c:de:b4:7a:af:b0:e1: ed:63:05:69:0e:85:61:de:62:c6:ca:a2:d8:99:6f: 49:4e:33:79:d9:05:a3:98:b1:f2:da:0e:39:c7:d3: ba:6b:07:d4:81:77:a2:dd:87:65:56:9d:81:b0:8d: f9:6e:5a:42:86:84:cd:7e:5a:5f:27:42:e6:89:91: 64:59:39:5a:ae:fc:6b:2d:97:0a:78:94:cc:1a:61: e7:76:77:6d:41:29:f9:12:57:dc:03:a8:03:f6:fe: 28:2b:8f:fb:93:d7:06:f8:00:d8:57:bc:8d:e3:0b: 8d:b8:19:f8:b2:0c:a5:ec:a4:91:7f:69:87:e5:1e: 37:69:fa:cf:95:48:98:1d:7a:c5:6d:72:e0:5f:e2: 2d:5b:5e:b2:7c:9f:cd:7c:4f:7f:87:fe:97:65:7c: fb:b4:8b:43:93:17:da:2f:d8:6b:66:18:3a:5f:48: 64:37:67:f2:98:a8:1c:fd:97:86:37:d2:69:4d:e1: 29:0b:9d:ab:87:28:4b:25:6c:85:6a:8e:a0:3f:f3: 47:49:60:08:73:a5:e5:c9:63:28:69:d2:e8:1f:30: af:52:fc:b3:96:41:6c:4a:c5:ae:c2:f7:23:89:fd: fd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:96:C3:E4:44:94:C1:71:16:81:76:A8:37:78:D1:A3:34:5E:24 X509v3 Authority Key Identifier: keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e0:0f:7d:df:26:58:c2:d2:3d:37:c7:87:a3:97:f6:0f:19: fd:80:d1:39:cb:90:f8:07:65:e9:01:fb:2a:4f:7f:f9:72:99: cf:dd:4a:0d:4b:91:2e:c5:36:76:07:18:e4:3c:68:da:d7:4d: ab:c4:11:1a:ac:0d:46:d8:56:c6:08:df:bc:3f:59:5d:93:f7: 75:6c:22:f4:a5:bb:ff:cb:52:34:bd:91:01:d3:71:2b:fc:6b: a5:98:30:73:75:a4:7e:c1:75:47:c4:85:ad:c4:ad:e0:a4:9d: 58:b3:09:90:6c:25:e5:5f:89:3c:e1:51:23:51:3d:27:6f:97: 0b:77:39:ce:3e:ef:16:20:03:1a:a9:db:cb:96:90:e1:ec:2f: 70:b5:d0:4c:18:17:ac:85:ca:2a:28:77:d7:d6:30:e7:36:82: d3:ea:ef:fe:98:35:6e:11:7e:fd:66:c8:38:fc:d3:c5:b7:5c: 02:f7:0d:29:84:24:83:1a:f0:41:38:1d:f6:a2:61:0e:a2:9e: 08:d5:4f:94:8d:8d:34:ad:be:73:08:7b:b6:be:c7:2a:95:5a: 90:38:5c:02:35:13:2d:8c:09:e3:ff:a8:b3:6b:dd:92:f6:d6: 88:17:8c:fd:b5:dd:c3:6a:22:02:d9:4a:58:c2:90:98:d9:32: c4:41:a2:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMU8iPZZnt4YcZRZq18HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3 YTI1NjYwHhcNMjUxMjA1MjIwMTI2WhcNMjUxMjA2MjIwMTI2WjAzMTEwLwYDVQQD Eyg0NGM0OTZjM2U0NDQ5NGMxNzExNjgxNzZhODM3NzhkMWEzMzQ1ZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJCERLYn/KCbjCUZk2dFaefVao2 OSzetHqvsOHtYwVpDoVh3mLGyqLYmW9JTjN52QWjmLHy2g45x9O6awfUgXei3Ydl Vp2BsI35blpChoTNflpfJ0LmiZFkWTlarvxrLZcKeJTMGmHndndtQSn5ElfcA6gD 9v4oK4/7k9cG+ADYV7yN4wuNuBn4sgyl7KSRf2mH5R43afrPlUiYHXrFbXLgX+It W16yfJ/NfE9/h/6XZXz7tItDkxfaL9hrZhg6X0hkN2fymKgc/ZeGN9JpTeEpC52r hyhLJWyFao6gP/NHSWAIc6XlyWMoadLoHzCvUvyzlkFsSsWuwvcjif39CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETElsPkRJTBcRaBdqg3eNGjNF4kMB8GA1UdIwQY MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeAPfd8m WMLSPTfHh6OX9g8Z/YDROcuQ+Adl6QH7Kk9/+XKZz91KDUuRLsU2dgcY5Dxo2tdN q8QRGqwNRthWxgjfvD9ZXZP3dWwi9KW7/8tSNL2RAdNxK/xrpZgwc3WkfsF1R8SF rcSt4KSdWLMJkGwl5V+JPOFRI1E9J2+XC3c5zj7vFiADGqnby5aQ4ewvcLXQTBgX rIXKKih319Yw5zaC0+rv/pg1bhF+/WbIOPzTxbdcAvcNKYQkgxrwQTgd9qJhDqKe CNVPlI2NNK2+cwh7tr7HKpVakDhcAjUTLYwJ4/+os2vdkvbWiBeM/bXdw2oiAtlK WMKQmNkyxEGi+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:14 2025 by rpki-client