This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json) Hash identifier: BvNmjaXgjj91XED3Nbx/cQdJSfPRsFzOtT2Hjkkh708= Subject key identifier: A5:0D:00:3D:80:9C:D8:88:DB:B5:F2:F1:A8:43:E3:D3:E5:A2:39:7E Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c Certificate serial: 019B378E4B157D81EDAD5B581BC36F01C4A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft Manifest number: 0D76 Signing time: Fri 19 Dec 2025 17:00:30 +0000 Manifest this update: Fri 19 Dec 2025 17:00:30 +0000 Manifest next update: Sat 20 Dec 2025 17:00:30 +0000 Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=) 2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: /0nB7ozRD1WOeJuZkyHY7DS3jfxU+vJWQQglRaHA6sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:4b:15:7d:81:ed:ad:5b:58:1b:c3:6f:01:c4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c Validity Not Before: Dec 19 17:00:30 2025 GMT Not After : Dec 20 17:00:30 2025 GMT Subject: CN=a50d003d809cd888dbb5f2f1a843e3d3e5a2397e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:de:b2:38:c2:5c:0d:21:19:34:9c:ee:67: dc:22:24:60:af:2f:c6:34:51:e8:17:ae:5c:36:c3: 51:b6:ec:71:1e:b5:40:78:30:79:15:21:f8:63:64: e3:d8:97:db:a9:44:24:0c:71:ab:d9:d2:f3:20:89: b2:d8:11:70:29:41:cd:64:d4:02:23:c8:80:a4:4e: 43:f9:d4:31:82:a2:d1:5e:01:43:42:14:93:c1:75: 03:23:51:86:1e:e7:6f:0d:fc:72:e7:76:4f:f8:23: 78:f0:0c:06:75:14:94:2d:9a:99:ff:5d:03:60:b9: 11:bb:57:61:80:98:e4:e3:18:c7:69:66:96:75:66: c0:06:ba:ea:ca:ee:f6:63:df:0e:78:01:4e:56:9b: b0:1a:2a:ba:86:b0:74:e9:d8:67:b0:88:8b:28:cd: 55:f9:a5:e3:ed:3d:77:53:55:44:b9:27:bd:fc:11: 1b:c4:06:cc:3d:64:2f:10:0c:b9:19:84:36:9d:30: a7:e5:bf:28:f1:9e:ab:c7:7f:51:13:54:99:24:39: 44:8a:74:24:f3:a0:52:45:b9:8e:4f:c7:f4:09:ed: b2:af:f6:34:4e:e2:96:7b:4c:6c:d3:76:71:79:52: 40:74:dc:01:55:76:ff:4e:cb:03:15:50:89:df:43: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0D:00:3D:80:9C:D8:88:DB:B5:F2:F1:A8:43:E3:D3:E5:A2:39:7E X509v3 Authority Key Identifier: keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ae:07:6f:b5:2e:28:67:b4:8c:de:b9:3d:d8:2e:40:66:68: e5:e5:87:41:20:79:07:5a:23:fc:b0:f1:4b:5b:e7:74:19:49: b6:f4:58:56:5c:1c:28:ed:c8:4a:d4:b1:7a:9c:6e:93:e9:80: 84:1f:a0:9b:64:c9:36:0e:83:7e:08:2f:72:04:40:1a:23:3d: 45:22:35:88:5d:bc:07:4c:9e:60:8e:78:73:d5:f2:bd:d8:18: b9:be:02:50:ca:53:5e:2d:45:1e:a1:de:1d:23:9b:f9:95:ce: eb:53:23:ad:c0:2b:c4:a1:9a:6b:09:63:e6:67:e3:1a:bf:30: 56:1d:f5:19:a4:1b:4f:ee:97:ec:e1:00:72:af:cf:c7:41:45: 2c:10:3d:c3:4f:a6:99:29:33:87:e4:3b:d3:af:f4:c8:52:f1: 94:9c:16:4e:55:18:e2:ad:34:d6:54:cb:70:74:1e:38:9b:8c: 85:7d:3a:b3:fd:6c:c2:b2:2d:11:9e:e0:48:9d:09:ad:cd:55: c2:2b:27:4c:32:b3:d3:e5:29:f4:3a:83:30:10:24:54:6a:6b: 96:02:26:dc:58:55:9d:22:ae:3a:80:ea:04:8c:14:28:96:43: e5:ee:1e:55:0e:59:d1:5f:4e:e3:dc:61:02:c9:29:5d:1f:08: 22:30:08:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jksVfYHtrVtYG8NvAcSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3 ZjI2MWMwHhcNMjUxMjE5MTcwMDMwWhcNMjUxMjIwMTcwMDMwWjAzMTEwLwYDVQQD EyhhNTBkMDAzZDgwOWNkODg4ZGJiNWYyZjFhODQzZTNkM2U1YTIzOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA3esjjCXA0hGTSc7mfcIiRgry/G NFHoF65cNsNRtuxxHrVAeDB5FSH4Y2Tj2JfbqUQkDHGr2dLzIImy2BFwKUHNZNQC I8iApE5D+dQxgqLRXgFDQhSTwXUDI1GGHudvDfxy53ZP+CN48AwGdRSULZqZ/10D YLkRu1dhgJjk4xjHaWaWdWbABrrqyu72Y98OeAFOVpuwGiq6hrB06dhnsIiLKM1V +aXj7T13U1VEuSe9/BEbxAbMPWQvEAy5GYQ2nTCn5b8o8Z6rx39RE1SZJDlEinQk 86BSRbmOT8f0Ce2yr/Y0TuKWe0xs03ZxeVJAdNwBVXb/TssDFVCJ30OpNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUNAD2AnNiI27Xy8ahD49Plojl+MB8GA1UdIwQY MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdK4Hb7Uu KGe0jN65PdguQGZo5eWHQSB5B1oj/LDxS1vndBlJtvRYVlwcKO3IStSxepxuk+mA hB+gm2TJNg6DfggvcgRAGiM9RSI1iF28B0yeYI54c9XyvdgYub4CUMpTXi1FHqHe HSOb+ZXO61MjrcArxKGaawlj5mfjGr8wVh31GaQbT+6X7OEAcq/Px0FFLBA9w0+m mSkzh+Q706/0yFLxlJwWTlUY4q001lTLcHQeOJuMhX06s/1swrItEZ7gSJ0Jrc1V wisnTDKz0+Up9DqDMBAkVGprlgIm3FhVnSKuOoDqBIwUKJZD5e4eVQ5Z0V9O49xh AskpXR8IIjAIpQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:51:35 2025 by rpki-client