This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft File: KovcnBJ_txjiQN-ydW9SAgNv49U.mft (raw, json) Hash identifier: IHAcNBTa8mjHWtTTraUVomk3lJnf1gOuGXsG4PDH7S4= Subject key identifier: B8:9B:EF:5E:05:BC:31:4B:FD:C5:C0:4A:96:27:92:8C:07:D0:C4:83 Authority key identifier: 2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 Certificate issuer: /CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Certificate serial: 019B330CE353C4252F8C12A45C8740DD8DB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 20:00:41 +0000 Manifest this update: Thu 18 Dec 2025 20:00:41 +0000 Manifest next update: Fri 19 Dec 2025 20:00:41 +0000 Files and hashes: 1: JA1Qmok16UVDdfZh6XKyNHXDBms.roa (hash: R2I0tDS2SffmNY3pvYLLZlvv4NZOrPOW0QqVh2PyubA=) 2: KovcnBJ_txjiQN-ydW9SAgNv49U.crl (hash: 2OAiihdYl0xgo4BQxWT4Ltcsi8pL33dCGvjbUNdmNyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:e3:53:c4:25:2f:8c:12:a4:5c:87:40:dd:8d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a8bdc9c127fb718e240dfb2756f5202036fe3d5 Validity Not Before: Dec 18 20:00:41 2025 GMT Not After : Dec 19 20:00:41 2025 GMT Subject: CN=b89bef5e05bc314bfdc5c04a9627928c07d0c483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:33:fd:e5:d1:76:16:f4:12:1b:83:c8:e7:75: b1:fc:3f:6d:a8:3f:72:6a:2f:0b:65:3d:ff:6f:ca: d1:47:39:47:74:c4:03:2e:b5:3a:10:96:54:12:4b: ba:af:de:5c:29:77:df:0c:02:e0:d0:75:a5:b1:7f: a7:bd:69:5d:cd:9e:14:5d:e4:6e:3c:ed:c9:b6:ee: 4b:66:7e:94:8e:5e:57:b1:5f:44:9b:95:3c:aa:51: e1:ce:1a:e0:4e:d5:ef:28:0a:3e:91:26:fc:43:04: 5c:4a:b6:25:c0:93:84:e9:97:44:d7:56:6b:3b:ad: c2:9b:0f:89:1e:67:fd:1b:32:56:9f:13:e5:bf:c8: 3e:85:e4:56:49:01:58:58:51:90:2c:e6:8a:77:ce: 6f:d4:96:00:d6:9b:5f:0b:a4:01:3e:1c:bf:33:44: 34:7e:46:51:ce:f2:2a:26:8e:13:15:2d:3e:e3:98: ad:22:b5:5b:02:5d:b2:fd:15:2f:8d:43:5e:46:5e: ea:05:15:21:c9:0b:83:2a:1e:99:50:fc:18:5d:98: f4:a3:2b:d6:c8:b7:06:26:45:b5:62:10:33:7e:99: af:0e:5c:74:9c:5d:1e:bc:e3:4a:8b:63:eb:8c:03: c4:31:eb:9a:c0:d0:e2:a8:df:3f:cf:64:62:40:3c: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9B:EF:5E:05:BC:31:4B:FD:C5:C0:4A:96:27:92:8C:07:D0:C4:83 X509v3 Authority Key Identifier: keyid:2A:8B:DC:9C:12:7F:B7:18:E2:40:DF:B2:75:6F:52:02:03:6F:E3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KovcnBJ_txjiQN-ydW9SAgNv49U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/322cde-5d75-4f50-a945-8f59a3910bdd/1/KovcnBJ_txjiQN-ydW9SAgNv49U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0a:b3:ba:fe:7b:20:01:61:e9:9b:18:89:7c:4e:f5:65:03: b7:a2:7e:f5:89:ea:15:10:83:a4:27:53:f5:52:3b:5e:29:3e: 47:b8:b6:f8:ff:54:98:a4:f6:a2:34:52:d8:23:16:51:6a:4d: 73:5c:52:d6:43:a2:e8:9b:1c:70:91:41:f2:3e:9c:e1:9f:d9: 69:2e:0a:e3:50:aa:32:43:42:72:df:37:a8:20:18:61:b5:a0: 2f:57:75:32:1d:0f:13:22:61:33:ae:06:86:22:d2:75:97:7e: 82:4f:bf:02:91:aa:59:c6:a1:a1:9d:e2:39:ea:0d:c7:44:a2: 5a:71:2a:66:67:0a:bb:0e:2b:f1:57:f6:07:6e:6a:b0:e3:bb: 5e:d2:af:b3:05:90:23:e4:7b:eb:0b:0e:29:8c:98:eb:cc:3d: ca:fe:dd:fb:d9:a3:60:3e:f3:89:82:73:6d:cb:e5:d1:75:94: f0:c3:28:9e:1d:da:48:72:d4:38:5e:6b:97:cd:ae:28:f0:ff: 11:e0:89:5a:e6:ac:2d:5f:b0:fe:99:6b:dd:2e:da:64:57:2d: 9b:67:a4:a2:f7:a4:9a:51:38:a3:91:51:43:f1:ab:ee:04:3c: 73:61:30:41:f5:e0:43:54:1b:cc:0a:6b:00:2d:5a:34:61:bc: 23:95:a8:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDONTxCUvjBKkXIdA3Y2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOGJkYzljMTI3ZmI3MThlMjQwZGZiMjc1NmY1MjAyMDM2 ZmUzZDUwHhcNMjUxMjE4MjAwMDQxWhcNMjUxMjE5MjAwMDQxWjAzMTEwLwYDVQQD EyhiODliZWY1ZTA1YmMzMTRiZmRjNWMwNGE5NjI3OTI4YzA3ZDBjNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijP95dF2FvQSG4PI53Wx/D9tqD9y ai8LZT3/b8rRRzlHdMQDLrU6EJZUEku6r95cKXffDALg0HWlsX+nvWldzZ4UXeRu PO3Jtu5LZn6Ujl5XsV9Em5U8qlHhzhrgTtXvKAo+kSb8QwRcSrYlwJOE6ZdE11Zr O63Cmw+JHmf9GzJWnxPlv8g+heRWSQFYWFGQLOaKd85v1JYA1ptfC6QBPhy/M0Q0 fkZRzvIqJo4TFS0+45itIrVbAl2y/RUvjUNeRl7qBRUhyQuDKh6ZUPwYXZj0oyvW yLcGJkW1YhAzfpmvDlx0nF0evONKi2PrjAPEMeuawNDiqN8/z2RiQDzxxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLib714FvDFL/cXASpYnkowH0MSDMB8GA1UdIwQY MBaAFCqL3JwSf7cY4kDfsnVvUgIDb+PVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUt OGY1OWEzOTEwYmRkLzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMjJjZGUtNWQ3NS00ZjUwLWE5NDUtOGY1OWEzOTEwYmRk LzEvS292Y25CSl90eGppUU4teWRXOVNBZ052NDlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQqzuv57 IAFh6ZsYiXxO9WUDt6J+9YnqFRCDpCdT9VI7Xik+R7i2+P9UmKT2ojRS2CMWUWpN c1xS1kOi6JsccJFB8j6c4Z/ZaS4K41CqMkNCct83qCAYYbWgL1d1Mh0PEyJhM64G hiLSdZd+gk+/ApGqWcahoZ3iOeoNx0SiWnEqZmcKuw4r8Vf2B25qsOO7XtKvswWQ I+R76wsOKYyY68w9yv7d+9mjYD7ziYJzbcvl0XWU8MMonh3aSHLUOF5rl82uKPD/ EeCJWuasLV+w/plr3S7aZFctm2ekovekmlE4o5FRQ/Gr7gQ8c2EwQfXgQ1QbzApr AC1aNGG8I5WoEA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:24:16 2025 by rpki-client