This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json) Hash identifier: RPoS+s3lHM1dMDahwx/cWw5B3RrXiS7GTnrXCO5pzhs= Subject key identifier: 4B:C5:DA:75:C5:C8:2C:3C:54:43:A5:65:A6:20:FE:1C:7E:77:A5:94 Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Certificate serial: 019B3DFE9B40D56BF7C845AA06D7B276DE38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft Manifest number: 132F Signing time: Sat 20 Dec 2025 23:00:54 +0000 Manifest this update: Sat 20 Dec 2025 23:00:54 +0000 Manifest next update: Sun 21 Dec 2025 23:00:54 +0000 Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=) 2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: Tleeh2NKxDw+lIadmyahxE2CKv/MizmM6llvf+rBG7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:9b:40:d5:6b:f7:c8:45:aa:06:d7:b2:76:de:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b Validity Not Before: Dec 20 23:00:54 2025 GMT Not After : Dec 21 23:00:54 2025 GMT Subject: CN=4bc5da75c5c82c3c5443a565a620fe1c7e77a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f4:3b:0a:4c:81:e5:c7:8b:9b:ab:ee:e2:49: 23:db:e3:57:c9:89:39:98:e5:0a:c9:8e:6e:07:9a: 52:36:18:a2:2e:60:b1:1b:23:c8:bc:62:00:b9:81: a0:85:78:71:95:90:8d:fb:4c:22:06:25:ce:b5:fa: 4c:0f:0b:03:de:8b:a7:f9:1e:00:76:00:93:54:f3: 0c:71:c2:18:a9:9c:fd:11:e8:8b:2a:d0:82:da:f9: 4b:2c:4a:8e:65:a5:88:1d:38:2e:1f:ca:32:0b:48: 45:86:80:de:d1:7e:1a:6a:bc:39:58:8d:f5:3e:83: ce:7d:6d:5c:db:b0:1c:7f:e8:e9:17:55:10:56:bb: 80:f3:ad:84:f8:95:9b:f2:74:26:96:8b:4c:de:51: fa:bf:28:76:cc:a1:49:d6:01:05:4a:4f:6e:e6:fa: 2b:5c:85:8c:64:9c:e8:32:cb:b1:8e:dd:e0:a6:98: 6b:60:4e:f9:2c:90:91:3c:67:8e:ef:21:9b:27:87: e1:9d:6f:dc:b5:14:4d:36:49:eb:5c:1e:ee:9b:7a: ad:6f:28:fd:4e:4f:d3:8a:d8:d8:8d:56:00:45:17: b5:6b:70:22:92:52:95:e1:0d:11:17:fb:8a:c0:1f: 3d:cb:0b:62:88:c0:c5:24:d0:0d:6f:e4:9b:15:8b: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:DA:75:C5:C8:2C:3C:54:43:A5:65:A6:20:FE:1C:7E:77:A5:94 X509v3 Authority Key Identifier: keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f7:88:89:cf:88:ae:66:5b:82:f5:41:83:6b:bd:33:56:a3: 4c:7c:a8:dd:1a:75:bf:b3:74:62:96:4d:15:b7:db:18:b8:16: 27:ba:ff:6d:42:60:7d:5e:d1:12:f1:57:56:4b:fb:37:37:d0: 51:eb:38:2a:eb:2c:69:d7:90:1c:35:ea:69:1e:69:07:80:f9: 2f:fc:44:aa:5e:49:ee:df:7a:4e:0a:93:5a:d6:93:c9:10:2b: e6:d7:f7:6a:f5:5c:a8:cf:3f:3d:7f:3e:29:65:78:ca:59:2a: f2:a4:5e:81:dc:26:66:27:cd:cd:05:39:50:b2:43:43:d1:67: 45:50:d4:17:bf:b4:a5:1b:78:0b:1f:d5:73:a3:4c:31:0c:d6: 41:87:5b:c8:45:72:74:db:41:90:6b:88:b1:a0:03:61:ff:2c: a2:77:18:af:5d:41:ee:2a:3e:67:7f:f5:6d:23:58:8f:bc:6c: 22:4e:b4:1d:29:f9:54:94:8b:8d:11:d9:7c:f3:c3:37:26:3a: c8:b7:64:d4:9f:d7:df:3f:fd:83:05:f9:89:7d:85:71:b8:dd: 95:c1:7a:34:05:fb:7f:02:6a:5a:31:13:4e:f9:61:90:d0:85: 08:0e:ec:ee:d2:2d:c3:04:42:24:a6:8b:7a:7a:e7:c0:4a:ea: f3:3c:0f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/ptA1Wv3yEWqBteydt44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiY2MxY2Y4YjhlMjEwNjZiNmVjNjQ3Njk3ZDQ5NDVkOGY5 YmIwNWIwHhcNMjUxMjIwMjMwMDU0WhcNMjUxMjIxMjMwMDU0WjAzMTEwLwYDVQQD Eyg0YmM1ZGE3NWM1YzgyYzNjNTQ0M2E1NjVhNjIwZmUxYzdlNzdhNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PQ7CkyB5ceLm6vu4kkj2+NXyYk5 mOUKyY5uB5pSNhiiLmCxGyPIvGIAuYGghXhxlZCN+0wiBiXOtfpMDwsD3oun+R4A dgCTVPMMccIYqZz9EeiLKtCC2vlLLEqOZaWIHTguH8oyC0hFhoDe0X4aarw5WI31 PoPOfW1c27Acf+jpF1UQVruA862E+JWb8nQmlotM3lH6vyh2zKFJ1gEFSk9u5vor XIWMZJzoMsuxjt3gpphrYE75LJCRPGeO7yGbJ4fhnW/ctRRNNknrXB7um3qtbyj9 Tk/TitjYjVYARRe1a3AiklKV4Q0RF/uKwB89ywtiiMDFJNANb+SbFYsf8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvF2nXFyCw8VEOlZaYg/hx+d6WUMB8GA1UdIwQY MBaAFCvMHPi44hBmtuxkdpfUlF2Pm7BbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjct MGE3ZTAxOTg5OWNmLzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjctMGE3ZTAxOTg5OWNm LzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfeIic+I rmZbgvVBg2u9M1ajTHyo3Rp1v7N0YpZNFbfbGLgWJ7r/bUJgfV7REvFXVkv7NzfQ Ues4KussadeQHDXqaR5pB4D5L/xEql5J7t96TgqTWtaTyRAr5tf3avVcqM8/PX8+ KWV4ylkq8qRegdwmZifNzQU5ULJDQ9FnRVDUF7+0pRt4Cx/Vc6NMMQzWQYdbyEVy dNtBkGuIsaADYf8soncYr11B7io+Z3/1bSNYj7xsIk60HSn5VJSLjRHZfPPDNyY6 yLdk1J/X3z/9gwX5iX2FcbjdlcF6NAX7fwJqWjETTvlhkNCFCA7s7tItwwRCJKaL enrnwErq8zwP1A== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:43 2025 by rpki-client