This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json) Hash identifier: hzmVViOUy2z7iMeLaCD39h1XWoCvyW1KzsrDfWiIEs4= Subject key identifier: A8:B9:98:F5:5D:82:DF:69:2C:8B:7C:67:62:4D:3D:A6:55:75:DF:59 Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c Certificate serial: 019B6BB27F40666BCD9938419897F343DFF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft Manifest number: 0D91 Signing time: Mon 29 Dec 2025 20:00:18 +0000 Manifest this update: Mon 29 Dec 2025 20:00:18 +0000 Manifest next update: Tue 30 Dec 2025 20:00:18 +0000 Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=) 2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: mjW/2FW5mYh14dJsv/myuUVuRCPPSs94Gk2gLZTz88M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:7f:40:66:6b:cd:99:38:41:98:97:f3:43:df:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c Validity Not Before: Dec 29 20:00:18 2025 GMT Not After : Dec 30 20:00:18 2025 GMT Subject: CN=a8b998f55d82df692c8b7c67624d3da65575df59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:5a:a4:e6:f8:42:e6:38:e0:34:8e:f6:60: c1:eb:27:ab:9c:28:a9:31:60:4f:2e:22:c0:08:92: 8d:7f:88:05:71:48:e0:d3:bc:5b:a6:a2:e9:56:f3: 8a:8f:56:05:a2:c0:18:1b:07:57:30:d8:38:1e:31: 08:30:71:a9:0b:d7:a0:c7:0a:ab:dc:dc:3a:84:07: 0b:d4:03:f1:d9:3f:c2:ff:7e:ca:b0:5d:bf:8f:f1: 23:29:db:51:ba:20:88:2a:3a:3f:ae:53:c4:56:35: c5:fb:07:27:ea:a0:be:f4:76:a4:5a:6b:1f:f1:b1: d2:90:3f:6d:9a:81:83:73:38:21:d1:73:5a:86:0a: 33:8f:c6:cd:88:7f:c4:7c:20:55:e2:d8:60:16:c5: fd:9f:af:20:8a:22:5d:98:bf:5c:51:27:9a:06:8a: 43:49:6d:64:d0:55:05:78:e6:fc:5a:c3:8a:be:a9: e7:8d:39:15:62:3a:d5:0e:b5:82:8a:74:36:cd:02: df:88:f7:43:aa:6b:ca:5f:3b:c3:bd:39:5f:9c:d8: f0:19:54:36:24:aa:d1:87:5d:d5:38:21:eb:13:64: a5:94:53:00:bc:a6:e4:30:ac:ae:d7:05:13:5e:d0: 11:3e:5d:4d:69:75:69:57:d4:69:c9:70:ad:11:a8: 50:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B9:98:F5:5D:82:DF:69:2C:8B:7C:67:62:4D:3D:A6:55:75:DF:59 X509v3 Authority Key Identifier: keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d8:08:08:a2:61:aa:4c:a8:8e:dc:d9:58:c8:57:e9:27:e5: 5e:5d:72:15:b7:8b:5e:93:c0:a5:01:e7:b5:50:48:a8:75:95: 6b:d5:c2:06:22:fb:ba:1a:c2:dc:e8:e8:88:47:ca:c4:a6:70: 46:67:d8:c7:a5:5b:0a:62:b4:7a:ca:e5:04:4b:12:ea:8a:05: 99:7a:c7:87:d7:c4:f2:22:e5:5c:6f:21:c5:f1:27:bc:0c:96: 54:b0:29:2a:4b:08:59:a6:d4:0b:9f:54:d1:77:39:95:19:4e: 5d:ad:da:3f:a5:23:41:16:cc:50:b5:f1:98:4e:04:48:c9:71: 91:3a:c3:30:be:80:31:1d:11:d3:14:c6:9b:2f:57:0d:02:a8: 1e:a4:d1:8b:a7:a7:71:0c:41:06:d7:0f:35:51:03:35:11:ef: cd:71:09:39:69:5b:f7:36:fa:52:be:0d:0c:ec:d2:dc:09:61: 95:8d:e4:aa:2a:24:1d:0f:5e:4b:ad:22:17:20:a8:09:c5:2a: b2:ee:90:5d:eb:7e:f9:37:71:36:98:68:47:32:7a:1b:5f:ac: a8:a4:9d:ea:50:b0:91:37:0d:9c:06:6f:78:e5:69:76:85:d0: 8a:fa:4b:6f:44:ee:1c:21:2a:32:6c:a6:e1:5e:7d:3b:ca:da: 2f:f1:65:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsn9AZmvNmThBmJfzQ9/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3 ZjI2MWMwHhcNMjUxMjI5MjAwMDE4WhcNMjUxMjMwMjAwMDE4WjAzMTEwLwYDVQQD EyhhOGI5OThmNTVkODJkZjY5MmM4YjdjNjc2MjRkM2RhNjU1NzVkZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofdapOb4QuY44DSO9mDB6yernCip MWBPLiLACJKNf4gFcUjg07xbpqLpVvOKj1YFosAYGwdXMNg4HjEIMHGpC9egxwqr 3Nw6hAcL1APx2T/C/37KsF2/j/EjKdtRuiCIKjo/rlPEVjXF+wcn6qC+9HakWmsf 8bHSkD9tmoGDczgh0XNahgozj8bNiH/EfCBV4thgFsX9n68giiJdmL9cUSeaBopD SW1k0FUFeOb8WsOKvqnnjTkVYjrVDrWCinQ2zQLfiPdDqmvKXzvDvTlfnNjwGVQ2 JKrRh13VOCHrE2SllFMAvKbkMKyu1wUTXtARPl1NaXVpV9RpyXCtEahQdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKi5mPVdgt9pLIt8Z2JNPaZVdd9ZMB8GA1UdIwQY MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNgICKJh qkyojtzZWMhX6SflXl1yFbeLXpPApQHntVBIqHWVa9XCBiL7uhrC3OjoiEfKxKZw RmfYx6VbCmK0esrlBEsS6ooFmXrHh9fE8iLlXG8hxfEnvAyWVLApKksIWabUC59U 0Xc5lRlOXa3aP6UjQRbMULXxmE4ESMlxkTrDML6AMR0R0xTGmy9XDQKoHqTRi6en cQxBBtcPNVEDNRHvzXEJOWlb9zb6Ur4NDOzS3AlhlY3kqiokHQ9eS60iFyCoCcUq su6QXet++TdxNphoRzJ6G1+sqKSd6lCwkTcNnAZveOVpdoXQivpLb0TuHCEqMmym 4V59O8raL/Fl1Q== -----END CERTIFICATE-----Generated at Mon Dec 29 22:47:26 2025 by rpki-client