This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json) Hash identifier: CGRkh2F2nn8noZ/mtRc/SxmBT4ny/a9uu+bB1QkEiq8= Subject key identifier: 28:5A:65:8B:8C:4D:7A:05:83:23:BD:BB:5F:E1:92:78:66:5F:01:E5 Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41 Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641 Certificate serial: 019B3A90E3714220A8F0CC88C5231FD47062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft Manifest number: 08E6 Signing time: Sat 20 Dec 2025 07:02:12 +0000 Manifest this update: Sat 20 Dec 2025 07:02:12 +0000 Manifest next update: Sun 21 Dec 2025 07:02:12 +0000 Files and hashes: 1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=) 2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: DM3BQXoGN2V5XRTHvopU3POKwgt/OQ6SsT7/d10pzzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:e3:71:42:20:a8:f0:cc:88:c5:23:1f:d4:70:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641 Validity Not Before: Dec 20 07:02:12 2025 GMT Not After : Dec 21 07:02:12 2025 GMT Subject: CN=285a658b8c4d7a058323bdbb5fe19278665f01e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:04:f3:b9:5c:8a:98:a4:d7:5a:b2:d5:af: 4f:0c:b4:09:80:dc:32:75:e5:29:0f:fe:48:c8:2c: f6:c7:28:b1:8b:3c:b1:49:d6:9d:6e:84:f7:fc:bb: e9:39:34:58:8c:49:4e:4a:67:50:f4:64:60:29:83: 7b:ce:10:0e:67:6e:48:1a:ea:ce:24:4e:ab:2a:2d: bc:78:a6:23:08:d2:e9:d0:63:16:09:f8:85:d5:d8: f1:89:a3:1c:d2:2b:07:e6:72:39:fe:36:97:0b:5b: 0c:2f:c2:65:2e:8b:e1:89:80:e9:eb:c2:dc:d8:37: b5:6f:88:da:ad:1d:27:18:79:35:11:87:86:a2:53: 1f:9f:b6:0c:80:a5:18:ff:2a:34:3a:da:3a:c4:36: f5:8e:d8:53:51:7f:0d:6f:7e:2d:8d:81:06:80:7f: 74:27:d9:b9:45:73:05:05:30:25:f1:91:1e:c4:46: 04:e0:ce:b8:8f:be:f3:70:f2:df:24:0e:c7:a1:65: ef:e0:21:da:30:40:89:45:5b:da:c1:7f:f6:1c:87: ba:48:df:1c:f2:1e:da:8a:ea:ae:2a:c7:54:c4:3d: 56:4b:55:9b:e5:0c:73:78:7d:00:82:45:04:bf:00: 81:87:3f:c9:4a:67:0c:44:d2:5d:70:a4:52:90:38: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:65:8B:8C:4D:7A:05:83:23:BD:BB:5F:E1:92:78:66:5F:01:E5 X509v3 Authority Key Identifier: keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:63:0f:2a:32:23:6f:dc:1f:4c:a7:f3:02:3a:6c:f4:91:e3: d9:a5:85:67:4c:45:15:1e:6f:bf:fd:b5:7d:6e:9c:9a:12:04: 80:7b:bf:f1:64:fd:42:1f:8c:af:34:15:b5:92:d1:80:6d:6d: 7d:ae:e4:00:b9:85:37:2f:39:f6:34:04:61:50:9f:98:40:57: e4:eb:fb:ab:14:1c:c2:59:b8:dc:c8:3a:8e:3c:24:e5:5d:b9: 6b:8f:a4:bd:ac:2d:6b:5b:44:06:bd:50:48:21:10:ad:2c:de: 6d:0c:dc:e4:50:8b:4d:35:aa:ba:6b:cd:2d:2b:30:b7:e0:8b: ee:33:5e:76:a2:a6:8b:82:15:7d:6f:4d:c6:d3:26:a7:8e:da: ee:92:cc:c1:bc:5f:0e:2f:2a:e2:bc:ae:21:b4:3c:88:e5:91: 6a:46:35:72:94:31:5b:74:5f:4e:a6:8e:24:ae:2b:77:61:7c: 2e:91:0b:36:9b:be:5e:dc:3d:5e:29:d2:9e:86:5f:19:ef:99: 42:11:45:ec:a1:d2:d0:92:cd:99:ff:4a:1a:a6:ad:e6:19:79: 7b:0d:69:5f:18:01:e2:00:38:88:0b:a7:89:b6:8f:ed:50:cb: 23:3f:2f:3d:2f:94:17:b9:4a:07:1d:7c:82:53:19:d0:60:21: 19:e5:9c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kONxQiCo8MyIxSMf1HBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzOGEyZDcyZTc5MDI2ZjUyYmY1NjU3ZTk3ZmZkMWIxMWJl ODg2NDEwHhcNMjUxMjIwMDcwMjEyWhcNMjUxMjIxMDcwMjEyWjAzMTEwLwYDVQQD EygyODVhNjU4YjhjNGQ3YTA1ODMyM2JkYmI1ZmUxOTI3ODY2NWYwMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDIE87lcipik11qy1a9PDLQJgNwy deUpD/5IyCz2xyixizyxSdadboT3/LvpOTRYjElOSmdQ9GRgKYN7zhAOZ25IGurO JE6rKi28eKYjCNLp0GMWCfiF1djxiaMc0isH5nI5/jaXC1sML8JlLovhiYDp68Lc 2De1b4jarR0nGHk1EYeGolMfn7YMgKUY/yo0Oto6xDb1jthTUX8Nb34tjYEGgH90 J9m5RXMFBTAl8ZEexEYE4M64j77zcPLfJA7HoWXv4CHaMECJRVvawX/2HIe6SN8c 8h7aiuquKsdUxD1WS1Wb5QxzeH0AgkUEvwCBhz/JSmcMRNJdcKRSkDhXuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChaZYuMTXoFgyO9u1/hknhmXwHlMB8GA1UdIwQY MBaAFJOKLXLnkCb1K/Vlfpf/0bEb6IZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAt YzM2OTc2MzYzOTY4LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAtYzM2OTc2MzYzOTY4 LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmMPKjIj b9wfTKfzAjps9JHj2aWFZ0xFFR5vv/21fW6cmhIEgHu/8WT9Qh+MrzQVtZLRgG1t fa7kALmFNy859jQEYVCfmEBX5Ov7qxQcwlm43Mg6jjwk5V25a4+kvawta1tEBr1Q SCEQrSzebQzc5FCLTTWqumvNLSswt+CL7jNedqKmi4IVfW9NxtMmp47a7pLMwbxf Di8q4ryuIbQ8iOWRakY1cpQxW3RfTqaOJK4rd2F8LpELNpu+Xtw9XinSnoZfGe+Z QhFF7KHS0JLNmf9KGqat5hl5ew1pXxgB4gA4iAunibaP7VDLIz8vPS+UF7lKBx18 glMZ0GAhGeWc3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 14:12:21 2025 by rpki-client