This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json) Hash identifier: yk86MKzIgwTfgJRhrr5T7hjq9W36IQnpJ609mqdSyVY= Subject key identifier: 20:41:B6:57:4A:20:74:FF:2A:D8:9C:92:B7:66:0E:7F:1D:F8:96:67 Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566 Certificate serial: 019B56E2E235EFD328BB81C0CF22A3418052 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 19:01:08 +0000 Manifest this update: Thu 25 Dec 2025 19:01:08 +0000 Manifest next update: Fri 26 Dec 2025 19:01:08 +0000 Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: XsxCs16YiOsBjkVxkodzqSD22TQZw8tVY7ddU/YPa2Y=) 2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e2:e2:35:ef:d3:28:bb:81:c0:cf:22:a3:41:80:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566 Validity Not Before: Dec 25 19:01:08 2025 GMT Not After : Dec 26 19:01:08 2025 GMT Subject: CN=2041b6574a2074ff2ad89c92b7660e7f1df89667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:d0:87:2a:41:e8:42:43:d9:c7:8d:dd:29: ae:47:0a:e3:85:67:17:08:91:37:d9:01:6c:4c:4d: 13:0f:f0:56:da:f9:42:31:cd:b2:d3:92:4f:53:d0: 83:b3:6b:57:18:c0:c3:25:31:96:d0:3d:b2:32:60: 8a:15:45:de:aa:0a:35:bb:d1:aa:11:5c:f5:6d:97: 5e:f5:92:d2:6c:9f:d2:81:84:67:b8:33:a1:7d:84: 98:8e:c9:66:f7:26:62:9b:fe:15:8e:95:78:45:fa: a0:ee:2d:ff:17:87:1d:78:4b:3e:2f:f0:f2:b4:ad: f5:9d:7d:f3:88:2e:8a:67:d2:70:c4:42:e2:9e:6b: 1a:77:bc:74:1a:88:27:14:13:82:f3:19:0f:20:cc: ae:3d:7d:e8:5b:59:1b:95:8a:08:11:fc:ee:a8:de: 50:47:3d:57:53:13:af:33:cc:06:36:81:c1:86:1b: ee:4a:bf:3f:47:82:ea:9a:16:0e:d0:f1:62:3d:2c: 90:cc:96:a3:85:f2:31:c4:d8:c9:24:e7:ba:75:21: b9:00:0d:4d:93:44:90:d1:2e:97:c1:86:1d:6b:06: 77:d0:5e:2e:c3:4f:05:b9:ac:b3:25:0d:72:5e:ca: 0e:17:0c:11:89:c0:69:e5:d7:90:08:c6:34:91:ee: 4b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:B6:57:4A:20:74:FF:2A:D8:9C:92:B7:66:0E:7F:1D:F8:96:67 X509v3 Authority Key Identifier: keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:99:02:16:73:50:52:fa:67:35:ab:fe:e6:bb:53:ff:c7:88: f6:73:1d:65:65:9f:89:2c:aa:0e:8a:87:cb:53:60:ba:83:66: e9:f5:a9:23:49:50:44:ef:bf:6a:3b:ee:43:db:0c:2e:6f:84: 30:f0:bc:61:0e:ce:f2:9f:38:97:02:54:5c:d0:80:9a:d8:0e: 17:00:59:c3:be:74:cc:40:9f:c2:dc:bc:8a:01:44:d7:f9:cd: fd:39:5f:ce:27:7f:d8:29:91:45:38:87:00:e7:94:39:d2:f0: c2:fe:60:22:05:0e:3a:aa:00:66:12:dc:92:bf:11:ca:73:ca: 52:d5:c1:94:39:a2:b6:b7:8c:80:88:53:01:06:9a:83:fa:2d: 6e:d0:c9:85:32:f0:00:fd:3f:3a:47:da:eb:c1:68:07:63:10: ff:b0:08:4f:41:5a:a5:d4:31:5e:60:49:19:01:54:6f:ef:e3: de:b1:34:37:37:6c:f0:dd:a4:0b:71:28:c9:2b:e3:2b:ab:77: 89:87:f5:b8:f7:ca:65:e9:f5:03:e2:a2:47:5d:a8:8f:f5:0e: ff:31:97:a9:e0:98:c9:e1:40:29:25:7a:80:71:4b:ef:e9:f3: 54:d7:0d:7c:c2:2d:c4:04:32:d4:32:7b:3a:f2:9c:c6:0f:17: ba:48:29:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW4uI179Mou4HAzyKjQYBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3 YTI1NjYwHhcNMjUxMjI1MTkwMTA4WhcNMjUxMjI2MTkwMTA4WjAzMTEwLwYDVQQD EygyMDQxYjY1NzRhMjA3NGZmMmFkODljOTJiNzY2MGU3ZjFkZjg5NjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RfQhypB6EJD2ceN3SmuRwrjhWcX CJE32QFsTE0TD/BW2vlCMc2y05JPU9CDs2tXGMDDJTGW0D2yMmCKFUXeqgo1u9Gq EVz1bZde9ZLSbJ/SgYRnuDOhfYSYjslm9yZim/4VjpV4Rfqg7i3/F4cdeEs+L/Dy tK31nX3ziC6KZ9JwxELinmsad7x0GognFBOC8xkPIMyuPX3oW1kblYoIEfzuqN5Q Rz1XUxOvM8wGNoHBhhvuSr8/R4LqmhYO0PFiPSyQzJajhfIxxNjJJOe6dSG5AA1N k0SQ0S6XwYYdawZ30F4uw08FuayzJQ1yXsoOFwwRicBp5deQCMY0ke5LrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBBtldKIHT/KtickrdmDn8d+JZnMB8GA1UdIwQY MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpkCFnNQ UvpnNav+5rtT/8eI9nMdZWWfiSyqDoqHy1NguoNm6fWpI0lQRO+/ajvuQ9sMLm+E MPC8YQ7O8p84lwJUXNCAmtgOFwBZw750zECfwty8igFE1/nN/Tlfzid/2CmRRTiH AOeUOdLwwv5gIgUOOqoAZhLckr8RynPKUtXBlDmitreMgIhTAQaag/otbtDJhTLw AP0/Okfa68FoB2MQ/7AIT0FapdQxXmBJGQFUb+/j3rE0Nzds8N2kC3EoySvjK6t3 iYf1uPfKZen1A+KiR12oj/UO/zGXqeCYyeFAKSV6gHFL7+nzVNcNfMItxAQy1DJ7 OvKcxg8XukgpYA== -----END CERTIFICATE-----Generated at Thu Dec 25 23:57:34 2025 by rpki-client