This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft File: K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json) Hash identifier: RWfAw4LEqBEyTKiX2rGvlleakXg5moOAaAO222Jv21U= Subject key identifier: 4B:ED:A7:67:37:F7:39:7D:B3:DE:36:F8:9C:73:2E:BD:D6:19:06:79 Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02 Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702 Certificate serial: 019B3CB4F2C498512C50E0977A5647C978AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft Manifest number: 179C Signing time: Sat 20 Dec 2025 17:00:50 +0000 Manifest this update: Sat 20 Dec 2025 17:00:50 +0000 Manifest next update: Sun 21 Dec 2025 17:00:50 +0000 Files and hashes: 1: 0_EpdViy3Y27mqejc66l1--sjBk.roa (hash: 5pxFxSH3+mNeuLlB3lfUr3Q81qL23oDYt7nqdhFYvqU=) 2: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: lkhJ45eqjcv4t1+vWbB0KJbYs6igdLfDMnjlJAxOs44=) 3: LcFyOrobUrG-q36ENaVBWkIxyec.roa (hash: aiGhAwWl1vo/+1mZ5amS0ElRqf0Ru78HcL61kI16D7M=) 4: mJjYnvCF0aJWwcOO87dJLulTej8.roa (hash: cyYF0//qn6HDiGNvk9163fm1e6ldk0sS9GYuhZI3HqU=) 5: oOM7QrbyKmK3sX9tSspvcF4LQYc.roa (hash: FI0q4cfrXLcPzOiQWzP6cR+1RIpvdT5irQXBJq3jipE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f2:c4:98:51:2c:50:e0:97:7a:56:47:c9:78:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702 Validity Not Before: Dec 20 17:00:50 2025 GMT Not After : Dec 21 17:00:50 2025 GMT Subject: CN=4beda76737f7397db3de36f89c732ebdd6190679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:c3:d3:ee:bc:c4:64:b5:fc:f4:81:a2:ac: 6b:b7:db:d4:2a:f4:a8:1a:bf:b6:70:40:9b:af:23: 2a:7e:ad:8d:f3:9c:96:a1:e2:91:ca:50:a7:b0:26: ff:be:2e:34:47:79:1c:c5:d3:ee:ee:78:a3:f9:43: 46:03:31:00:a7:b6:09:08:94:87:a5:5a:cd:26:af: 64:71:3b:ef:b2:67:49:7a:5b:21:39:90:6c:9e:68: 35:8b:ec:22:d9:1c:7b:6c:1a:1e:3c:f9:74:18:94: 5f:cf:0e:28:42:7d:5a:9c:b1:79:66:29:c2:a9:e2: db:25:77:0a:34:39:dd:2e:21:60:08:7c:0a:b6:6c: e0:48:f6:9b:16:35:bc:ca:4f:e2:bb:34:4b:82:18: a3:69:17:60:43:93:bb:96:57:d5:ea:3d:02:43:25: 64:c0:74:c4:71:61:3a:0c:a3:29:1a:42:28:7f:12: 63:33:7b:0a:cf:9d:69:8c:ef:3f:0a:62:4b:64:2e: 98:35:0d:ba:e4:23:65:fe:9b:62:89:29:21:40:a7: 6b:37:0b:7c:cc:b2:5d:b6:5a:3a:34:e1:e1:29:e4: 83:4b:9e:9f:c9:1d:a1:49:95:b4:3d:92:54:8a:22: b6:c1:1a:78:e7:9e:43:03:5a:ec:3f:44:a1:1e:68: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:ED:A7:67:37:F7:39:7D:B3:DE:36:F8:9C:73:2E:BD:D6:19:06:79 X509v3 Authority Key Identifier: keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a6:67:a2:38:0b:c9:a0:35:7f:c3:1c:58:a4:99:32:e3:e7: 46:ca:30:45:75:ee:45:64:e2:87:1f:0a:2b:55:32:d8:d9:d6: 8b:72:78:44:6a:24:bc:9b:d3:69:86:9b:46:71:81:99:94:cb: 16:4e:f2:c4:39:66:e0:4a:1f:6e:e4:2a:3d:04:0e:f6:85:c2: ba:1b:e0:02:d4:ab:ba:b7:15:56:4a:38:a7:73:ef:2f:16:ad: e8:12:af:65:e2:cf:1f:bd:d0:41:63:34:0a:e6:3c:d1:fd:0e: a2:03:be:25:21:72:88:0c:64:a5:c3:e4:ca:16:6e:b7:12:c0: fe:1b:b4:64:bc:d4:28:fa:ac:b8:ce:89:e4:9e:9e:92:e1:c3: 1c:d3:3e:a1:b7:1f:43:f7:95:98:de:5f:9e:8c:28:d8:fc:a7: 4a:3a:db:9c:e6:70:7d:2e:9f:39:ec:2f:4c:06:82:ac:18:63: a1:75:16:9b:3a:b9:61:d3:f6:39:fb:9c:2c:b0:2e:0a:d5:34: 9a:cd:cf:17:73:48:8e:f2:8d:e0:29:e7:4c:d6:5d:6b:21:0e: 64:79:0d:f5:d8:43:d7:29:10:e5:0f:e8:d6:a8:b8:0d:ff:57: 96:5d:c9:d1:1e:16:44:92:55:e9:2e:41:5c:3d:29:5a:1c:2b: 17:75:55:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPLEmFEsUOCXelZHyXisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzg2OTU3NzJmMGU2NGYzYjlhMTYyMTczM2NjMDI1MDZm NzQ3MDIwHhcNMjUxMjIwMTcwMDUwWhcNMjUxMjIxMTcwMDUwWjAzMTEwLwYDVQQD Eyg0YmVkYTc2NzM3ZjczOTdkYjNkZTM2Zjg5YzczMmViZGQ2MTkwNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw/D0+68xGS1/PSBoqxrt9vUKvSo Gr+2cECbryMqfq2N85yWoeKRylCnsCb/vi40R3kcxdPu7nij+UNGAzEAp7YJCJSH pVrNJq9kcTvvsmdJelshOZBsnmg1i+wi2Rx7bBoePPl0GJRfzw4oQn1anLF5ZinC qeLbJXcKNDndLiFgCHwKtmzgSPabFjW8yk/iuzRLghijaRdgQ5O7llfV6j0CQyVk wHTEcWE6DKMpGkIofxJjM3sKz51pjO8/CmJLZC6YNQ265CNl/ptiiSkhQKdrNwt8 zLJdtlo6NOHhKeSDS56fyR2hSZW0PZJUiiK2wRp4555DA1rsP0ShHmgdLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvtp2c39zl9s942+JxzLr3WGQZ5MB8GA1UdIwQY MBaAFCvIaVdy8OZPO5oWIXM8wCUG90cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMt NDNkNjZhMDMzMWVjLzEvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYmZhOWItMDI5MS00OGUzLTgwNWMtNDNkNjZhMDMzMWVj LzEvSzhocFYzTHc1azg3bWhZaGN6ekFKUWIzUndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaZnojgL yaA1f8McWKSZMuPnRsowRXXuRWTihx8KK1Uy2NnWi3J4RGokvJvTaYabRnGBmZTL Fk7yxDlm4EofbuQqPQQO9oXCuhvgAtSrurcVVko4p3PvLxat6BKvZeLPH73QQWM0 CuY80f0OogO+JSFyiAxkpcPkyhZutxLA/hu0ZLzUKPqsuM6J5J6ekuHDHNM+obcf Q/eVmN5fnowo2PynSjrbnOZwfS6fOewvTAaCrBhjoXUWmzq5YdP2OfucLLAuCtU0 ms3PF3NIjvKN4CnnTNZdayEOZHkN9dhD1ykQ5Q/o1qi4Df9Xll3J0R4WRJJV6S5B XD0pWhwrF3VVGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:32 2025 by rpki-client