This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json) Hash identifier: tQA1GrTgp1EWsVxV86PZjx1c+kDbybA6k39WopOeINI= Subject key identifier: A5:AC:66:07:6C:C6:84:4F:E1:43:1C:77:33:C9:41:8B:59:2B:56:8E Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Certificate serial: 019AF23FCBD90047AA0395A04DD8DC3B1A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft Manifest number: 047B Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: 2jyWYtZhWuSpNnNx2TQP3DHSptkgcmfLJJiC6XdG5Dk=) 2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cb:d9:00:47:aa:03:95:a0:4d:d8:dc:3b:1a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=a5ac66076cc6844fe1431c7733c9418b592b568e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:40:10:db:bd:87:af:61:de:6c:02:44:38: ca:c3:df:97:4b:42:fb:7b:c1:e0:36:63:6c:0f:d7: 19:0e:28:e2:6d:65:f0:a0:d5:90:0f:1f:86:f4:28: d1:1d:59:80:ae:14:0a:91:ff:d0:e2:c2:2c:50:a8: ee:86:0f:b8:30:37:b4:5a:54:6d:e4:18:9d:42:ac: ee:dd:e8:a9:ef:86:bd:d7:71:72:d6:a8:b1:6d:41: fa:f1:c8:71:13:f0:a2:4b:29:54:ea:81:f9:67:1c: 73:f6:d1:f5:40:c3:52:f7:a9:ca:51:65:2e:be:62: 6b:4b:48:7a:62:e9:80:39:9f:40:db:77:fd:ad:8c: 14:38:74:d0:7e:dd:94:7a:09:83:0c:c0:8f:eb:d3: ad:05:1e:ea:d4:39:6d:25:d4:b3:ae:0f:12:8e:d9: 4a:8a:a6:34:81:b6:af:4b:d1:43:0d:18:32:e3:2e: 31:54:3b:ca:ce:6d:5d:9c:3d:26:dc:53:8f:fb:56: 98:ce:da:e9:9a:9c:49:79:cb:c2:72:8d:79:5c:9a: d6:53:c0:84:31:a9:6a:1b:76:99:ba:58:48:66:fd: 8a:3b:38:48:b9:f9:f1:ab:83:51:3b:4b:77:50:0b: b1:ab:36:d2:ca:a2:18:5a:fb:79:b5:5c:7f:81:7a: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:66:07:6C:C6:84:4F:E1:43:1C:77:33:C9:41:8B:59:2B:56:8E X509v3 Authority Key Identifier: keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fc:21:1f:6b:bd:e8:71:c9:37:28:62:27:d2:bf:65:9f:72: b9:aa:ab:a0:9b:57:c0:0d:50:da:f0:c5:7c:a7:76:5f:5c:a2: 57:33:0e:00:83:a9:5d:a0:c3:a0:49:f8:f7:91:4e:c6:4d:84: 4c:e3:98:08:27:38:85:68:89:e8:26:d3:44:0a:8e:52:ed:a1: 9d:0e:49:ac:20:af:47:3a:25:ef:e3:86:3b:75:9d:02:a3:82: db:28:98:36:a0:70:30:f1:1a:7f:8b:26:40:d1:91:dd:bc:1a: 07:34:a1:3d:75:d1:a2:9d:f4:53:00:97:20:50:cf:dd:1a:19: be:e9:ae:31:f3:b6:3f:d8:c0:70:74:79:d3:15:f4:f7:25:b6: b0:ce:45:93:7d:a4:47:e1:4c:3e:aa:05:f3:d3:98:b9:7a:7d: ad:98:e8:6b:f8:24:da:78:dd:26:d4:c3:63:b8:3f:7d:c8:b1: eb:19:74:b9:3d:e6:d9:77:83:5a:56:23:d1:dd:ba:f5:34:91: 34:88:29:bf:cd:ba:1d:16:88:bf:bb:a9:a7:74:48:11:23:5a: 3a:bc:b3:55:b9:b7:53:f8:0b:40:4d:ec:46:16:1f:f7:92:e3: 4d:56:1f:54:c1:80:4e:dc:78:0c:46:98:ce:e6:ff:7b:2c:92: de:a0:cd:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8vZAEeqA5WgTdjcOxpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFlOGUwZjg4ZDBjOGMzOWRmNDRmZmE0MWUzMmMyNjI3 YzNhMTUwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EyhhNWFjNjYwNzZjYzY4NDRmZTE0MzFjNzczM2M5NDE4YjU5MmI1NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNlAENu9h69h3mwCRDjKw9+XS0L7 e8HgNmNsD9cZDijibWXwoNWQDx+G9CjRHVmArhQKkf/Q4sIsUKjuhg+4MDe0WlRt 5BidQqzu3eip74a913Fy1qixbUH68chxE/CiSylU6oH5Zxxz9tH1QMNS96nKUWUu vmJrS0h6YumAOZ9A23f9rYwUOHTQft2UegmDDMCP69OtBR7q1DltJdSzrg8SjtlK iqY0gbavS9FDDRgy4y4xVDvKzm1dnD0m3FOP+1aYztrpmpxJecvCco15XJrWU8CE MalqG3aZulhIZv2KOzhIufnxq4NRO0t3UAuxqzbSyqIYWvt5tVx/gXr72wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWsZgdsxoRP4UMcdzPJQYtZK1aOMB8GA1UdIwQY MBaAFCtK6OD4jQyMOd9E/6QeMsJifDoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYt MTA2ODBkMjU2YWUwLzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYtMTA2ODBkMjU2YWUw LzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPwhH2u9 6HHJNyhiJ9K/ZZ9yuaqroJtXwA1Q2vDFfKd2X1yiVzMOAIOpXaDDoEn495FOxk2E TOOYCCc4hWiJ6CbTRAqOUu2hnQ5JrCCvRzol7+OGO3WdAqOC2yiYNqBwMPEaf4sm QNGR3bwaBzShPXXRop30UwCXIFDP3RoZvumuMfO2P9jAcHR50xX09yW2sM5Fk32k R+FMPqoF89OYuXp9rZjoa/gk2njdJtTDY7g/fcix6xl0uT3m2XeDWlYj0d269TSR NIgpv826HRaIv7upp3RIESNaOryzVbm3U/gLQE3sRhYf95LjTVYfVMGATtx4DEaY zub/eyyS3qDNvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:25:36 2025 by rpki-client