This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json) Hash identifier: 3J1RlKHNfjv8mXplJc5RHxcLpIOm0wCcLAOkuBc6Ipo= Subject key identifier: 49:DE:04:F7:30:77:38:62:7B:5C:42:30:FF:51:A3:7B:5C:DF:F9:E0 Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Certificate serial: 019AF12E4EEA61BDB6323E375F42AEFEA128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft Manifest number: 0655 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=) 2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: b3JGKLZFloj8ViJS/RRB5VOct9UX0fBleMsvJIJkpTA=) 3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4e:ea:61:bd:b6:32:3e:37:5f:42:ae:fe:a1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=49de04f7307738627b5c4230ff51a37b5cdff9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:6f:26:94:b5:f0:ad:22:e0:65:d3:ac:52: 93:d9:d0:71:0f:1e:21:44:fa:2d:75:79:44:db:af: 63:7c:f4:ea:a0:bb:06:2e:76:3e:ef:81:d8:b4:d7: be:1d:6d:2d:1c:48:a2:6a:d1:e9:c0:f5:f1:42:10: 0c:e0:45:da:94:70:86:1e:22:3c:70:57:1c:08:49: 90:17:1e:fc:97:35:45:0b:73:ed:3f:fd:39:47:78: c3:8c:33:0b:98:71:0c:df:3c:19:c5:49:61:a3:4e: fd:99:a0:bb:e0:91:3c:7e:85:15:e4:cf:43:74:d0: 03:76:3f:08:ae:67:46:8b:21:56:82:ca:bc:46:23: a0:53:f9:3d:1c:11:70:22:ae:74:39:ea:2d:8e:74: 2e:49:24:09:1e:5a:ba:a2:35:1c:a6:75:ba:74:23: 8b:5c:84:f3:1e:76:a5:98:d6:d7:e9:8b:80:a5:d4: 05:31:8f:2b:93:8d:11:d6:db:4d:4f:cf:85:38:e5: ea:3b:36:73:5f:99:bf:cd:8d:96:fe:55:f8:10:0a: f8:c9:6c:14:8c:27:2e:2c:fd:8e:1e:ea:00:73:2f: 00:a0:8d:83:a8:97:fe:a8:c7:b1:34:b7:90:75:2a: 9c:e9:60:5f:2d:d6:52:06:de:50:f3:31:d0:83:e4: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DE:04:F7:30:77:38:62:7B:5C:42:30:FF:51:A3:7B:5C:DF:F9:E0 X509v3 Authority Key Identifier: keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b6:d8:4e:82:41:d1:d6:37:1a:e4:dc:ef:a2:22:f4:8f:50: ca:3c:a4:8c:39:23:4f:cc:bb:7f:78:5f:a2:6a:66:47:68:d4: 50:06:7e:0c:3a:f7:08:6f:55:5b:6f:42:e1:a9:18:d5:cb:32: 5c:e5:5b:12:57:8b:12:31:bb:6a:6c:c3:34:f7:32:20:00:d9: 90:9e:45:b5:91:8c:a2:dc:54:ff:1d:89:fc:db:b1:78:8b:d3: d6:54:35:ca:c7:ef:50:cc:20:84:49:60:37:23:f7:61:44:9b: e4:61:8b:53:a3:57:fd:a9:31:48:86:1b:f1:16:fd:e5:37:bb: c7:02:79:4a:61:97:a2:97:6c:7f:59:df:85:69:b1:57:20:28: f6:0d:de:40:44:36:ab:0b:3e:fa:5b:35:41:3a:12:73:43:43: 99:9f:1f:cc:15:45:6b:21:ea:2d:3f:b6:35:7a:6f:1a:50:82: 1a:3d:05:c4:08:d4:15:45:6c:d2:f7:4d:d9:9d:da:74:60:83: a3:51:3b:92:87:84:c8:03:56:68:7d:4a:2c:1d:88:f0:f0:8d: 6f:a3:77:5f:ab:d7:20:6c:d4:62:d2:0e:0e:ee:ca:04:73:79: 1a:04:0a:03:1b:2c:e3:b2:45:d8:b8:f3:12:d7:b4:b5:12:00: cd:9a:d5:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk7qYb22Mj43X0Ku/qEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh ZDVjZTcwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD Eyg0OWRlMDRmNzMwNzczODYyN2I1YzQyMzBmZjUxYTM3YjVjZGZmOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDxvJpS18K0i4GXTrFKT2dBxDx4h RPotdXlE269jfPTqoLsGLnY+74HYtNe+HW0tHEiiatHpwPXxQhAM4EXalHCGHiI8 cFccCEmQFx78lzVFC3PtP/05R3jDjDMLmHEM3zwZxUlho079maC74JE8foUV5M9D dNADdj8IrmdGiyFWgsq8RiOgU/k9HBFwIq50OeotjnQuSSQJHlq6ojUcpnW6dCOL XITzHnalmNbX6YuApdQFMY8rk40R1ttNT8+FOOXqOzZzX5m/zY2W/lX4EAr4yWwU jCcuLP2OHuoAcy8AoI2DqJf+qMexNLeQdSqc6WBfLdZSBt5Q8zHQg+QJSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEneBPcwdzhie1xCMP9Ro3tc3/ngMB8GA1UdIwQY MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3 LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrbYToJB 0dY3GuTc76Ii9I9QyjykjDkjT8y7f3hfompmR2jUUAZ+DDr3CG9VW29C4akY1csy XOVbEleLEjG7amzDNPcyIADZkJ5FtZGMotxU/x2J/NuxeIvT1lQ1ysfvUMwghElg NyP3YUSb5GGLU6NX/akxSIYb8Rb95Te7xwJ5SmGXopdsf1nfhWmxVyAo9g3eQEQ2 qws++ls1QToSc0NDmZ8fzBVFayHqLT+2NXpvGlCCGj0FxAjUFUVs0vdN2Z3adGCD o1E7koeEyANWaH1KLB2I8PCNb6N3X6vXIGzUYtIODu7KBHN5GgQKAxss47JF2Ljz Ete0tRIAzZrVtw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:16 2025 by rpki-client