This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json) Hash identifier: ijemR+zycBodeKaDPP+4b/q8EDj0uklYAgx1VJm1Y0Y= Subject key identifier: EF:BD:3F:B8:96:24:C7:A3:27:8E:47:4A:FC:D7:83:7C:4E:AB:F1:D8 Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566 Certificate serial: 019B269B39A8455A981B955BD55DB05444F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 10:01:05 +0000 Manifest this update: Tue 16 Dec 2025 10:01:05 +0000 Manifest next update: Wed 17 Dec 2025 10:01:05 +0000 Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: lb2JpnWI5O8NiAchToSMHJ/KS8oKwSUwcx1hgAVpV6s=) 2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:39:a8:45:5a:98:1b:95:5b:d5:5d:b0:54:44:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Validity Not Before: Dec 16 10:01:05 2025 GMT Not After : Dec 17 10:01:05 2025 GMT Subject: CN=efbd3fb89624c7a3278e474afcd7837c4eabf1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:63:89:33:5e:3d:36:9c:e7:c1:fb:18:cc: 54:c0:81:ff:48:58:1e:f9:9a:7f:4e:37:08:45:ad: 29:19:56:e2:1b:3c:9b:75:b2:ff:b9:73:b0:e3:59: e5:c9:9c:6e:98:f8:be:01:ba:14:80:be:fe:2d:d9: bd:61:bb:9b:b1:9b:5a:b3:53:f2:3f:bc:b1:98:bb: 1b:7c:e2:df:5d:c3:2f:22:af:81:fe:d8:eb:a8:83: d7:d1:1c:45:a4:aa:f4:45:31:d8:92:a7:fa:75:a3: 99:90:62:50:35:5d:5b:7b:25:8e:b7:46:11:ea:cd: 76:a7:d7:28:60:bc:d2:c1:c3:a9:9d:aa:a8:c0:bc: b0:f2:37:b0:0a:fe:5e:d2:69:90:cb:d7:ae:fe:58: 4d:7f:c7:47:81:ed:75:16:58:b7:a9:a4:a4:e7:e6: b7:a0:b2:ad:fa:13:78:c3:e6:f3:0c:07:29:b5:97: 0a:10:7e:37:4e:b4:2f:12:b4:f2:a7:b5:31:41:43: 70:ab:37:d9:33:5c:a6:8e:3e:29:0e:34:9e:09:73: a0:c3:e6:1a:3a:4c:79:dc:4c:d4:36:f2:e7:d4:ac: 25:08:3c:a9:56:48:be:89:91:60:9c:d8:7a:b0:8c: f8:85:53:c8:f7:98:4c:92:98:9f:00:5c:a9:98:e0: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BD:3F:B8:96:24:C7:A3:27:8E:47:4A:FC:D7:83:7C:4E:AB:F1:D8 X509v3 Authority Key Identifier: keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2e:66:26:1e:6d:82:c1:df:e6:6a:b0:c2:51:4b:03:15:25: 41:7f:3f:9e:ad:d8:99:d3:a8:36:ee:d5:9f:e2:08:44:93:5c: 12:8c:41:81:7e:ea:35:d3:4b:0f:48:e6:26:da:84:70:4f:88: 1f:11:51:36:3a:ad:35:6d:b4:fc:00:04:94:3a:db:46:20:83: a5:f1:31:df:f1:45:28:08:8f:a5:45:37:d6:ec:0a:96:af:e2: 91:1f:04:f2:62:75:1b:81:67:12:55:22:2a:0a:95:fe:59:12: 0f:6b:6f:8b:66:d3:7c:31:9b:22:4b:e6:bf:03:10:31:01:21: 78:ed:ab:3a:3f:4b:49:db:96:a5:d4:aa:c0:0e:c4:7d:37:30: 77:4c:c3:71:c2:9d:94:6d:a5:37:f0:19:6f:36:cd:c7:b1:f5: e1:f3:cf:2a:81:68:ac:c8:e0:83:b9:1a:90:2d:fc:c4:b5:c0: 55:5b:75:71:e9:5e:83:a7:7c:95:68:6e:ce:bd:de:6f:d1:3b: 9c:98:c4:f9:9a:d6:b2:fc:76:42:5b:e0:f3:f3:e1:cd:a0:60: a9:d5:97:00:95:85:ea:7e:68:1c:4f:57:50:45:86:56:91:c8: 6d:f1:44:79:71:22:15:bc:03:e4:54:80:68:c5:e8:1c:31:d9: ab:4d:1b:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmmzmoRVqYG5Vb1V2wVETzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3 YTI1NjYwHhcNMjUxMjE2MTAwMTA1WhcNMjUxMjE3MTAwMTA1WjAzMTEwLwYDVQQD EyhlZmJkM2ZiODk2MjRjN2EzMjc4ZTQ3NGFmY2Q3ODM3YzRlYWJmMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUFjiTNePTac58H7GMxUwIH/SFge +Zp/TjcIRa0pGVbiGzybdbL/uXOw41nlyZxumPi+AboUgL7+Ldm9YbubsZtas1Py P7yxmLsbfOLfXcMvIq+B/tjrqIPX0RxFpKr0RTHYkqf6daOZkGJQNV1beyWOt0YR 6s12p9coYLzSwcOpnaqowLyw8jewCv5e0mmQy9eu/lhNf8dHge11Fli3qaSk5+a3 oLKt+hN4w+bzDAcptZcKEH43TrQvErTyp7UxQUNwqzfZM1ymjj4pDjSeCXOgw+Ya Okx53EzUNvLn1KwlCDypVki+iZFgnNh6sIz4hVPI95hMkpifAFypmOBBxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+9P7iWJMejJ45HSvzXg3xOq/HYMB8GA1UdIwQY MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS5mJh5t gsHf5mqwwlFLAxUlQX8/nq3YmdOoNu7Vn+IIRJNcEoxBgX7qNdNLD0jmJtqEcE+I HxFRNjqtNW20/AAElDrbRiCDpfEx3/FFKAiPpUU31uwKlq/ikR8E8mJ1G4FnElUi KgqV/lkSD2tvi2bTfDGbIkvmvwMQMQEheO2rOj9LSduWpdSqwA7EfTcwd0zDccKd lG2lN/AZbzbNx7H14fPPKoForMjgg7kakC38xLXAVVt1celeg6d8lWhuzr3eb9E7 nJjE+ZrWsvx2Qlvg8/PhzaBgqdWXAJWF6n5oHE9XUEWGVpHIbfFEeXEiFbwD5FSA aMXoHDHZq00bqg== -----END CERTIFICATE-----Generated at Tue Dec 16 17:57:43 2025 by rpki-client