This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json) Hash identifier: WLa0+BboZJ2kpQfRB2hFnfg3by67HY0ZkTPiE3EYntM= Subject key identifier: 85:91:06:58:37:0A:F2:E2:FF:7E:6D:05:04:A2:D2:2A:CB:78:4F:BB Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5 Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5 Certificate serial: 019B424A763A33B4409B78FE92817E39E95F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft Manifest number: 0F43 Signing time: Sun 21 Dec 2025 19:02:14 +0000 Manifest this update: Sun 21 Dec 2025 19:02:14 +0000 Manifest next update: Mon 22 Dec 2025 19:02:14 +0000 Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: CGo96ORdW7W4AFBkkBvaZK8IYnulPIjTkCkycIvVvvc=) 2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:76:3a:33:b4:40:9b:78:fe:92:81:7e:39:e9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5 Validity Not Before: Dec 21 19:02:14 2025 GMT Not After : Dec 22 19:02:14 2025 GMT Subject: CN=85910658370af2e2ff7e6d0504a2d22acb784fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:53:f1:36:5f:fb:d4:53:2f:9e:4d:f0:6e: 86:93:97:52:d3:c9:a8:27:9d:d4:d7:69:e4:17:6a: 63:97:f9:57:71:0d:f9:7d:02:80:b9:6f:0d:02:52: 1c:b7:5f:0f:bc:47:22:66:a2:a8:96:ad:c8:5b:36: f6:09:08:d4:ce:4a:8f:fc:d0:1e:22:95:ca:2a:91: ea:72:ac:73:86:83:39:b9:dd:a8:1e:dd:ae:72:f8: 05:6a:15:f7:9a:71:4d:83:04:67:ea:1f:4d:27:ce: 7e:a7:b1:d3:8c:c7:73:5b:ab:b1:57:b4:e1:75:42: 30:74:5a:03:3b:ed:88:f5:79:a8:c4:25:3a:ba:a9: 90:25:c9:de:94:ba:5c:90:c6:85:5a:9d:4f:7c:aa: 6c:c6:46:1d:40:37:2b:56:12:6f:46:37:64:5d:c3: 5b:35:ab:69:59:af:0c:02:99:44:3f:38:f6:f7:78: 44:4c:84:2a:87:00:a4:5c:c7:ac:a5:04:60:66:87: 6e:ac:0d:d5:70:d9:ee:32:d8:5a:8f:96:a1:54:02: d6:bf:ae:27:22:3e:d3:ac:03:45:76:79:86:cd:71: 1b:55:3d:73:46:c8:87:21:bd:29:0d:4d:59:e8:8a: 29:a1:6b:b7:2f:e0:b4:96:31:00:8a:70:d7:70:de: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:91:06:58:37:0A:F2:E2:FF:7E:6D:05:04:A2:D2:2A:CB:78:4F:BB X509v3 Authority Key Identifier: keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bd:ed:f4:d4:6c:aa:15:c3:9e:38:aa:8b:66:38:f1:5b:54: 8b:bd:3a:f3:f0:7f:25:51:a0:ff:67:67:01:62:40:8a:86:99: 12:5b:3a:f9:1f:15:73:87:87:e1:cc:77:50:97:dc:0e:0b:1f: 6d:52:7a:1c:9d:a5:56:75:1d:37:ec:ee:03:f0:d5:6e:75:72: 45:42:bc:a0:bb:bd:2c:06:d8:e0:1f:92:e0:e1:1f:91:01:ec: 96:e6:f0:f0:10:a0:38:28:45:a2:c1:e9:92:da:1c:e6:ae:c3: db:01:83:6c:7d:72:df:75:bf:91:c2:9f:fc:38:1e:f3:f6:02: 17:c0:b5:0c:df:bd:eb:cf:e2:58:6b:47:1a:92:67:2d:6f:09: 45:9f:fc:a7:19:51:f9:c4:fa:b7:21:16:34:b6:44:40:e5:ae: 49:f0:b1:a2:50:32:76:91:23:e4:da:8c:62:7f:c4:62:fe:b7: 8f:ca:ed:48:69:18:76:66:02:31:f4:82:48:27:d7:29:d0:dd: 2a:ad:9d:bb:e1:1e:55:5d:c3:e1:ad:d0:aa:fc:66:84:72:5d: 02:7f:2d:99:f2:35:48:f8:1a:fa:0e:45:23:12:aa:1d:43:49: 97:fa:5a:c3:fd:20:bf:ba:c0:b6:be:cc:8a:9e:95:32:3a:b9: 10:c7:f0:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSnY6M7RAm3j+koF+OelfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZjBhMDE5Nzg2OGM2ZDhjMzRkZDE2YjNmNDRkZWNjNWU0 MjM2ZjUwHhcNMjUxMjIxMTkwMjE0WhcNMjUxMjIyMTkwMjE0WjAzMTEwLwYDVQQD Eyg4NTkxMDY1ODM3MGFmMmUyZmY3ZTZkMDUwNGEyZDIyYWNiNzg0ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/lT8TZf+9RTL55N8G6Gk5dS08mo J53U12nkF2pjl/lXcQ35fQKAuW8NAlIct18PvEciZqKolq3IWzb2CQjUzkqP/NAe IpXKKpHqcqxzhoM5ud2oHt2ucvgFahX3mnFNgwRn6h9NJ85+p7HTjMdzW6uxV7Th dUIwdFoDO+2I9XmoxCU6uqmQJcnelLpckMaFWp1PfKpsxkYdQDcrVhJvRjdkXcNb NatpWa8MAplEPzj293hETIQqhwCkXMespQRgZodurA3VcNnuMthaj5ahVALWv64n Ij7TrANFdnmGzXEbVT1zRsiHIb0pDU1Z6IopoWu3L+C0ljEAinDXcN7shwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWRBlg3CvLi/35tBQSi0irLeE+7MB8GA1UdIwQY MBaAFCvwoBl4aMbYw03Raz9E3sxeQjb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMt NDhiODM2NmZmMjNlLzEvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80MGQyMjAtNjIxZC00NmZiLWFjOWMtNDhiODM2NmZmMjNl LzEvS19DZ0dYaG94dGpEVGRGclAwVGV6RjVDTnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF73t9NRs qhXDnjiqi2Y48VtUi7068/B/JVGg/2dnAWJAioaZEls6+R8Vc4eH4cx3UJfcDgsf bVJ6HJ2lVnUdN+zuA/DVbnVyRUK8oLu9LAbY4B+S4OEfkQHslubw8BCgOChFosHp ktoc5q7D2wGDbH1y33W/kcKf/Dge8/YCF8C1DN+968/iWGtHGpJnLW8JRZ/8pxlR +cT6tyEWNLZEQOWuSfCxolAydpEj5NqMYn/EYv63j8rtSGkYdmYCMfSCSCfXKdDd Kq2du+EeVV3D4a3QqvxmhHJdAn8tmfI1SPga+g5FIxKqHUNJl/paw/0gv7rAtr7M ip6VMjq5EMfwQg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:15 2025 by rpki-client