This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json) Hash identifier: KAoSlHiLHjTkOnEyEcpvL+5wJUzDPKe501iAeoanzdk= Subject key identifier: 3C:AF:46:21:18:21:BC:D7:BB:FE:7B:2C:09:A8:7B:78:D2:E5:6E:CD Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Certificate serial: 019B37FC5ED0A52C9631A3DDFA4D6951AF61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft Manifest number: 067B Signing time: Fri 19 Dec 2025 19:00:44 +0000 Manifest this update: Fri 19 Dec 2025 19:00:44 +0000 Manifest next update: Sat 20 Dec 2025 19:00:44 +0000 Files and hashes: 1: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: ffSLIwQLaGQTdaXwrmjTrSHNiHzpImjIET2SYxlJ2ns=) 2: qlrujtDgO3zeMbwPEkJ03bLGHis.roa (hash: i2RptnrGx9cKdx8wTVXzQdDDISGAu4H3l+Bep209z8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:5e:d0:a5:2c:96:31:a3:dd:fa:4d:69:51:af:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Validity Not Before: Dec 19 19:00:44 2025 GMT Not After : Dec 20 19:00:44 2025 GMT Subject: CN=3caf46211821bcd7bbfe7b2c09a87b78d2e56ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:bb:bc:3a:92:20:5e:a6:e9:b4:ec:92:29: d5:b2:68:05:76:e3:b0:d4:bc:99:78:3a:7c:93:d5: 7e:f9:0b:fe:b4:c0:3a:43:ae:40:ba:63:5e:71:2a: aa:4b:fa:6b:dd:2b:4d:ef:32:19:d8:42:95:66:91: 35:d2:1f:bb:58:60:17:32:1a:13:db:db:33:2a:1e: 39:84:d4:20:51:d8:42:7c:59:79:05:cb:65:d2:ec: 8d:a7:0c:6e:89:ee:7a:41:78:9c:d1:b0:b6:54:65: 81:8a:1d:0c:00:61:4d:f4:f9:57:f0:ac:73:86:98: 7b:02:4c:31:4f:c6:51:60:f1:95:ba:5a:20:ec:56: 28:91:b9:33:8b:8f:29:57:84:a4:f9:2c:fc:02:51: 97:62:96:11:7e:63:a3:b2:dc:2a:13:32:65:0f:70: 59:25:6f:ee:6f:06:84:09:e5:2f:72:29:0a:c5:1d: d4:1d:90:8e:30:8c:b7:02:94:aa:b7:e2:a0:e2:c3: 15:40:7f:11:d8:99:8f:61:03:b8:f7:08:27:c4:58: 36:69:1e:7d:2b:b1:4d:18:ef:f9:e8:df:4b:dc:c4: a3:7a:21:de:6e:e4:89:bd:bc:b0:66:e0:32:7a:26: ff:5e:3e:b9:24:4d:c8:6d:09:e1:23:1c:2d:68:dd: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AF:46:21:18:21:BC:D7:BB:FE:7B:2C:09:A8:7B:78:D2:E5:6E:CD X509v3 Authority Key Identifier: keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ab:76:73:f3:47:d4:8e:87:67:e4:52:bb:d2:7e:f8:d2:02: c7:59:c8:4c:84:96:61:38:3d:85:45:66:f4:9d:6c:9c:05:df: db:7b:0a:74:0d:77:cc:b7:38:18:39:b0:0c:94:be:dc:44:38: 39:f1:96:98:bb:b0:09:0c:43:ee:25:38:69:2b:0c:e9:d4:29: c1:90:71:8c:7a:f4:21:e4:da:d0:a5:53:63:3f:b6:7c:33:5a: cb:1c:c7:15:72:7c:34:d6:29:d2:9e:ae:96:0e:45:ae:f8:fb: 46:62:fb:e5:23:aa:76:87:4a:bf:44:88:76:eb:98:d1:ea:a1: f7:2a:c4:ed:52:3d:d9:1f:6c:13:49:26:74:62:81:3b:20:b5: d1:de:04:95:13:21:24:e6:63:b7:76:40:53:3e:cc:a5:02:29: 53:dd:9d:a8:ab:9a:53:bf:98:a4:47:cb:9d:a4:09:9d:2b:bc: b1:c0:22:e9:04:79:fa:8b:60:ea:62:b4:a1:86:04:7c:12:84: ed:d8:88:de:63:a6:0d:73:d5:47:f2:65:47:b2:75:13:89:1f: 86:53:3b:45:84:18:87:8e:d7:53:b2:f6:fe:02:ee:f7:34:d9: bf:93:21:22:3c:ac:fd:e8:39:15:8c:d9:fa:fe:89:ac:f0:cd: 72:dd:bc:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/F7QpSyWMaPd+k1pUa9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh ZDVjZTcwHhcNMjUxMjE5MTkwMDQ0WhcNMjUxMjIwMTkwMDQ0WjAzMTEwLwYDVQQD EygzY2FmNDYyMTE4MjFiY2Q3YmJmZTdiMmMwOWE4N2I3OGQyZTU2ZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24y7vDqSIF6m6bTskinVsmgFduOw 1LyZeDp8k9V++Qv+tMA6Q65AumNecSqqS/pr3StN7zIZ2EKVZpE10h+7WGAXMhoT 29szKh45hNQgUdhCfFl5Bctl0uyNpwxuie56QXic0bC2VGWBih0MAGFN9PlX8Kxz hph7AkwxT8ZRYPGVulog7FYokbkzi48pV4Sk+Sz8AlGXYpYRfmOjstwqEzJlD3BZ JW/ubwaECeUvcikKxR3UHZCOMIy3ApSqt+Kg4sMVQH8R2JmPYQO49wgnxFg2aR59 K7FNGO/56N9L3MSjeiHebuSJvbywZuAyeib/Xj65JE3IbQnhIxwtaN170QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyvRiEYIbzXu/57LAmoe3jS5W7NMB8GA1UdIwQY MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3 LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEat2c/NH 1I6HZ+RSu9J++NICx1nITISWYTg9hUVm9J1snAXf23sKdA13zLc4GDmwDJS+3EQ4 OfGWmLuwCQxD7iU4aSsM6dQpwZBxjHr0IeTa0KVTYz+2fDNayxzHFXJ8NNYp0p6u lg5Frvj7RmL75SOqdodKv0SIduuY0eqh9yrE7VI92R9sE0kmdGKBOyC10d4ElRMh JOZjt3ZAUz7MpQIpU92dqKuaU7+YpEfLnaQJnSu8scAi6QR5+otg6mK0oYYEfBKE 7diI3mOmDXPVR/JlR7J1E4kfhlM7RYQYh47XU7L2/gLu9zTZv5MhIjys/eg5FYzZ +v6JrPDNct28vg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:26 2025 by rpki-client