This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json) Hash identifier: wHG1/VSlfPYDVKaX+rWuJa7Vxih5zjd1fkibZiKrwig= Subject key identifier: 95:18:7D:42:72:F8:D4:92:32:15:DC:10:62:B0:E5:4A:A0:CE:8D:40 Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20 Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20 Certificate serial: 019B2C2F336586E995DA64E98EAF3B94AA2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft Manifest number: 082B Signing time: Wed 17 Dec 2025 12:00:49 +0000 Manifest this update: Wed 17 Dec 2025 12:00:49 +0000 Manifest next update: Thu 18 Dec 2025 12:00:49 +0000 Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: l4aB2PvoH8bccvsWkkJk9l78vDsBvlgsFPIg3pT/tjQ=) 2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:33:65:86:e9:95:da:64:e9:8e:af:3b:94:aa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20 Validity Not Before: Dec 17 12:00:49 2025 GMT Not After : Dec 18 12:00:49 2025 GMT Subject: CN=95187d4272f8d4923215dc1062b0e54aa0ce8d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:ec:34:10:82:4d:be:a8:89:3b:14:e2:85: 64:23:1f:11:27:44:4e:67:30:bd:bd:3e:09:9e:7d: b2:6e:9b:dc:b3:d0:40:f8:56:a8:f6:0e:45:f9:02: cf:58:fe:e5:e4:e6:17:ac:0e:f1:d9:f4:ed:ac:b8: c6:f1:d1:7b:e4:29:05:2a:44:32:03:99:17:ae:49: 75:42:48:af:91:29:f3:a4:4b:16:c8:e9:fe:a2:6c: 90:6c:a3:d6:78:ab:82:31:7d:b7:c6:28:08:bc:b3: f0:80:65:6c:cb:29:01:f2:fe:a0:72:54:0f:33:dd: 03:12:82:3f:42:4c:a0:bb:69:8f:75:3b:20:0b:8f: 86:32:5a:b4:b7:de:60:07:79:eb:a9:b3:b5:ce:ec: 2c:3d:c9:37:2d:66:8b:10:ac:2d:5d:89:5f:c7:f7: e7:a7:cf:66:45:d8:6f:6c:1e:e2:43:f3:65:eb:53: 97:ad:43:66:bb:0a:83:08:2f:9e:d4:59:3d:78:15: 68:87:dc:a9:e8:f7:00:d2:2b:74:d8:78:0a:5a:23: 1c:ae:58:bd:d6:78:f3:90:c0:59:6f:a9:b5:f7:83: f8:b1:3c:b4:32:61:30:80:83:c9:9a:90:11:bb:ba: fc:7f:85:e0:b5:28:ba:94:12:e2:e4:10:6e:6f:ce: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:18:7D:42:72:F8:D4:92:32:15:DC:10:62:B0:E5:4A:A0:CE:8D:40 X509v3 Authority Key Identifier: keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a8:49:ed:f8:43:9c:3b:5d:e6:9c:cd:21:25:07:e6:a6:f0: bc:3c:73:50:08:85:a3:94:76:00:99:00:d5:0d:fc:ed:ed:82: ab:4a:34:9e:9a:b6:43:7b:75:19:24:83:c5:18:4e:44:2f:88: ba:e7:b6:70:62:f7:2b:fe:e4:21:c8:33:d8:61:8b:e6:94:54: f1:bf:4b:cb:59:19:59:32:6e:33:ce:b4:66:21:85:71:41:c7: c6:c2:6f:67:8e:20:c1:ac:a7:27:d6:a4:6b:55:b1:d4:0b:ae: 4e:b7:a6:6e:24:23:6f:e0:50:4a:67:ec:68:a2:40:ed:3e:6a: f2:93:bc:99:d8:4b:08:81:bc:ca:b1:26:a0:69:8d:ba:d2:9b: 21:f2:27:19:7f:cc:03:54:55:4f:22:b0:06:ed:fd:d4:cc:ef: 88:68:e2:61:54:e5:e9:21:6c:e9:b2:55:7a:81:b0:4e:47:b6: dd:c9:8b:f5:2a:5d:b1:b0:c6:5f:db:e6:e1:e1:0f:9a:43:26: ea:f8:3c:b8:bb:90:10:28:86:8f:2c:c2:b3:93:ec:40:81:e7: 13:c0:71:2e:8c:a3:dc:1a:fe:42:6f:0e:25:83:40:19:66:50: 61:86:52:f6:6a:7c:ee:5c:2f:47:9e:31:6d:60:f5:81:dc:23: 28:9c:94:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLzNlhumV2mTpjq87lKosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi ZjdiMjAwHhcNMjUxMjE3MTIwMDQ5WhcNMjUxMjE4MTIwMDQ5WjAzMTEwLwYDVQQD Eyg5NTE4N2Q0MjcyZjhkNDkyMzIxNWRjMTA2MmIwZTU0YWEwY2U4ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKjsNBCCTb6oiTsU4oVkIx8RJ0RO ZzC9vT4Jnn2ybpvcs9BA+Fao9g5F+QLPWP7l5OYXrA7x2fTtrLjG8dF75CkFKkQy A5kXrkl1QkivkSnzpEsWyOn+omyQbKPWeKuCMX23xigIvLPwgGVsyykB8v6gclQP M90DEoI/Qkygu2mPdTsgC4+GMlq0t95gB3nrqbO1zuwsPck3LWaLEKwtXYlfx/fn p89mRdhvbB7iQ/Nl61OXrUNmuwqDCC+e1Fk9eBVoh9yp6PcA0it02HgKWiMcrli9 1njzkMBZb6m194P4sTy0MmEwgIPJmpARu7r8f4XgtSi6lBLi5BBub86FRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUYfUJy+NSSMhXcEGKw5Uqgzo1AMB8GA1UdIwQY MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2 LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZahJ7fhD nDtd5pzNISUH5qbwvDxzUAiFo5R2AJkA1Q387e2Cq0o0npq2Q3t1GSSDxRhORC+I uue2cGL3K/7kIcgz2GGL5pRU8b9Ly1kZWTJuM860ZiGFcUHHxsJvZ44gwaynJ9ak a1Wx1AuuTrembiQjb+BQSmfsaKJA7T5q8pO8mdhLCIG8yrEmoGmNutKbIfInGX/M A1RVTyKwBu391MzviGjiYVTl6SFs6bJVeoGwTke23cmL9SpdsbDGX9vm4eEPmkMm 6vg8uLuQECiGjyzCs5PsQIHnE8BxLoyj3Br+Qm8OJYNAGWZQYYZS9mp87lwvR54x bWD1gdwjKJyU3A== -----END CERTIFICATE-----Generated at Wed Dec 17 20:12:25 2025 by rpki-client