This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json) Hash identifier: zwCbIhsyMCO6SdEsbQ5VHJbL90PB5CnGgVg8iXo6I6w= Subject key identifier: B4:57:51:DD:87:BE:A8:1B:26:9A:64:0E:36:C8:F5:8F:6C:6B:C7:21 Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Certificate serial: 019B2C66C6D3DC4F784DF4B1292780B277A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft Manifest number: 0675 Signing time: Wed 17 Dec 2025 13:01:31 +0000 Manifest this update: Wed 17 Dec 2025 13:01:31 +0000 Manifest next update: Thu 18 Dec 2025 13:01:31 +0000 Files and hashes: 1: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: T4wF3Il3rutYMK3rxOHXqtXUm6d/lVsyEIjzf8QqrAw=) 2: qlrujtDgO3zeMbwPEkJ03bLGHis.roa (hash: i2RptnrGx9cKdx8wTVXzQdDDISGAu4H3l+Bep209z8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:c6:d3:dc:4f:78:4d:f4:b1:29:27:80:b2:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Validity Not Before: Dec 17 13:01:31 2025 GMT Not After : Dec 18 13:01:31 2025 GMT Subject: CN=b45751dd87bea81b269a640e36c8f58f6c6bc721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:93:15:8c:dd:5d:dc:65:c2:83:92:07:45: 9a:7a:10:42:91:8d:ba:4f:0c:fb:25:f0:37:b8:a2: ca:9d:45:0a:99:b4:82:ee:fe:5c:38:05:63:d7:db: 7f:f3:81:f8:ec:09:d4:41:fa:8f:b6:42:c1:27:8c: b6:b0:b0:ab:ef:9a:86:4e:db:d6:17:76:ae:fd:1e: 04:0e:6c:b2:8b:71:ca:23:0a:17:85:ad:21:7f:17: 73:4b:be:68:c5:e1:9f:be:10:22:1e:c6:34:e0:90: 67:25:2c:5e:a7:28:7d:a5:a3:4c:13:59:ec:7b:80: 7f:f4:12:6f:b2:ed:d2:ce:b3:65:93:cd:57:15:6c: 4d:5f:57:68:ed:fa:6b:f3:24:aa:9a:a9:d4:e9:50: 70:5e:d1:9f:d1:6c:2f:6a:90:55:3e:c0:d0:89:1b: 3c:43:88:0a:4d:9b:07:fd:95:47:c0:83:72:d5:b1: 9c:5a:4a:cf:f7:f4:09:c7:46:45:07:4f:06:1b:a3: 7c:2e:f7:9f:1d:a7:89:df:ea:0b:0c:25:a3:27:f6: 17:5b:f8:ec:a8:d1:07:cd:4d:c0:5b:06:7c:6e:cb: b5:f5:e6:7a:eb:e7:c1:ff:9d:ba:44:be:36:52:83: 00:f1:a3:ad:64:15:2d:0e:da:42:21:37:74:e2:be: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:57:51:DD:87:BE:A8:1B:26:9A:64:0E:36:C8:F5:8F:6C:6B:C7:21 X509v3 Authority Key Identifier: keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5c:0c:42:5d:dc:4e:43:9f:8b:ce:ec:aa:f3:44:48:83:57: 35:ce:a2:19:91:a9:6b:e6:78:ed:a1:28:3c:ef:60:10:89:51: 05:b1:d7:53:60:13:ae:70:df:91:fc:9d:da:b0:7d:c8:8a:e9: c7:fb:08:9c:b2:d0:6d:75:f1:96:1b:e2:ff:c2:ae:51:d3:94: 93:0c:2c:9a:c3:ba:29:08:6a:26:41:92:16:64:4e:22:02:31: 97:a6:d7:ec:68:61:78:89:db:c6:da:d3:ae:07:57:64:94:12: c5:bd:6a:9f:38:cb:4c:5e:e6:63:3b:2d:2e:8a:4f:82:5a:9a: 23:02:be:65:72:78:5f:38:07:31:90:56:bf:34:90:0e:4f:af: 3a:80:00:a9:9b:11:23:a4:02:e4:17:15:53:0e:e5:d9:86:5f: 9b:ed:21:b3:4c:64:a0:cd:79:89:f6:34:a2:32:fe:91:c9:ef: 9a:52:32:44:3a:2b:a0:d2:e2:9a:7a:65:e1:da:b5:62:0f:9a: fe:69:5c:f1:a3:75:b1:3a:25:e0:c4:fa:dd:88:36:31:8c:8f: 80:63:92:73:7c:1a:55:c0:a2:5f:af:eb:e3:f3:ad:4c:01:89: 5e:b3:ee:fc:38:03:6a:72:51:b7:17:29:ae:55:ba:aa:b1:08: 91:63:89:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZsbT3E94TfSxKSeAsnegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh ZDVjZTcwHhcNMjUxMjE3MTMwMTMxWhcNMjUxMjE4MTMwMTMxWjAzMTEwLwYDVQQD EyhiNDU3NTFkZDg3YmVhODFiMjY5YTY0MGUzNmM4ZjU4ZjZjNmJjNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPuTFYzdXdxlwoOSB0WaehBCkY26 Twz7JfA3uKLKnUUKmbSC7v5cOAVj19t/84H47AnUQfqPtkLBJ4y2sLCr75qGTtvW F3au/R4EDmyyi3HKIwoXha0hfxdzS75oxeGfvhAiHsY04JBnJSxepyh9paNME1ns e4B/9BJvsu3SzrNlk81XFWxNX1do7fpr8ySqmqnU6VBwXtGf0WwvapBVPsDQiRs8 Q4gKTZsH/ZVHwINy1bGcWkrP9/QJx0ZFB08GG6N8LvefHaeJ3+oLDCWjJ/YXW/js qNEHzU3AWwZ8bsu19eZ66+fB/526RL42UoMA8aOtZBUtDtpCITd04r6xUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRXUd2HvqgbJppkDjbI9Y9sa8chMB8GA1UdIwQY MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3 LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVwMQl3c TkOfi87sqvNESINXNc6iGZGpa+Z47aEoPO9gEIlRBbHXU2ATrnDfkfyd2rB9yIrp x/sInLLQbXXxlhvi/8KuUdOUkwwsmsO6KQhqJkGSFmROIgIxl6bX7GhheInbxtrT rgdXZJQSxb1qnzjLTF7mYzstLopPglqaIwK+ZXJ4XzgHMZBWvzSQDk+vOoAAqZsR I6QC5BcVUw7l2YZfm+0hs0xkoM15ifY0ojL+kcnvmlIyRDoroNLimnpl4dq1Yg+a /mlc8aN1sTol4MT63Yg2MYyPgGOSc3waVcCiX6/r4/OtTAGJXrPu/DgDanJRtxcp rlW6qrEIkWOJag== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:01 2025 by rpki-client