This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json) Hash identifier: 8x1/cnQBXoskScgeluTRs5Po+aHCbUzgzZpQJbwgB4g= Subject key identifier: CA:08:17:A5:03:BA:76:77:8A:CA:F8:1F:57:F1:1A:55:08:6B:9E:20 Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20 Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20 Certificate serial: 019B300BEB9DE119D06D9A09971C93FB4978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft Manifest number: 082D Signing time: Thu 18 Dec 2025 06:00:46 +0000 Manifest this update: Thu 18 Dec 2025 06:00:46 +0000 Manifest next update: Fri 19 Dec 2025 06:00:46 +0000 Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: 1Cr8NKNTi6W89+6qdDgcV8rBwHXjhohI+p1Drai4YL8=) 2: SKL1Cd8Tn-ZKbcOxgMo9-wJ0gbQ.roa (hash: 4u4TOuVY+peXwBlO4N668GLOAFUf52/Bj870kxpoG3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:eb:9d:e1:19:d0:6d:9a:09:97:1c:93:fb:49:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20 Validity Not Before: Dec 18 06:00:46 2025 GMT Not After : Dec 19 06:00:46 2025 GMT Subject: CN=ca0817a503ba76778acaf81f57f11a55086b9e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:ff:7e:db:c6:6f:73:21:52:bf:89:91:3f: b6:a8:9d:ab:a9:ee:e3:bf:32:ee:bb:8a:ab:52:72: 0b:1a:9f:79:f6:f8:26:34:0f:6a:63:dc:8f:66:fb: dc:cf:63:df:1e:ff:7c:c7:cb:d0:a7:3b:66:65:75: 78:1f:a1:83:f5:61:07:6e:bf:62:c5:c8:14:3c:53: 2f:23:ef:52:32:40:ad:54:3a:f1:85:5f:10:c0:f3: 57:8a:b3:8f:e1:88:dc:c6:5f:15:75:d9:5c:94:f8: f8:73:7d:52:8b:4a:c9:7f:06:35:b0:70:6d:38:c6: 6d:df:99:4a:aa:cf:97:e9:36:46:ed:05:a2:fd:e2: 8d:d4:4e:5d:29:a3:21:07:97:30:8e:dd:7e:81:ed: a4:d7:25:1e:93:7f:58:cb:05:67:f7:64:e3:38:62: 2f:27:32:b1:c7:cb:dd:a4:02:68:f7:09:f4:a1:31: 4a:ff:fc:73:18:a2:87:ca:40:bf:94:d0:75:66:09: 3e:93:c8:6c:14:d0:ee:f4:a7:f3:95:5f:69:9b:ae: a6:35:a0:79:5b:4f:56:3b:4e:90:58:c1:fa:bf:b2: 04:47:e7:ce:2e:99:84:46:3a:17:c7:cd:bd:8e:45: 0c:0f:c9:25:8f:35:9d:01:6e:5f:eb:fb:3d:73:f3: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:17:A5:03:BA:76:77:8A:CA:F8:1F:57:F1:1A:55:08:6B:9E:20 X509v3 Authority Key Identifier: keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ff:db:9f:55:45:4e:89:71:43:31:e9:0d:dd:d5:fb:4f:e8: 5e:ea:51:15:6c:4e:44:05:a7:82:b7:86:93:73:c5:0c:24:58: 32:86:ae:58:11:79:ef:df:3d:a1:49:54:e0:6d:49:e1:77:e2: df:04:41:09:39:79:81:f5:51:ce:72:b9:61:10:ec:6d:ac:55: 64:7f:e9:29:d0:db:32:a6:a2:e0:24:f1:2d:2c:60:25:a7:67: 77:8f:0f:3c:c9:55:fc:8a:ca:ef:2b:65:d3:7a:01:b2:09:fc: 24:7a:9e:71:9c:ce:b8:be:c2:87:2c:44:f9:f1:60:02:e2:e4: b2:f0:f4:71:e4:0a:9b:d1:8f:f3:02:b6:0d:8b:96:cc:d0:f0: 6a:6d:2a:f6:e7:2c:a5:d9:7d:91:a5:93:be:f3:1c:46:cc:19: 99:b3:f9:1f:48:45:7d:c8:2c:61:20:ba:ba:66:3e:a6:49:42: e7:d6:a7:a5:61:b1:65:53:d4:43:cd:7e:db:30:d1:7c:d3:98: 52:57:2c:28:0a:38:81:03:b1:9c:34:8b:86:89:6f:d6:da:bd: e7:f1:29:57:e7:40:c7:41:ad:8a:0e:d2:19:63:04:91:fa:78: 44:94:70:ba:97:b9:e7:ae:1c:38:2e:e0:f9:75:3d:5d:fa:c5: 4e:63:f5:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC+ud4RnQbZoJlxyT+0l4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi ZjdiMjAwHhcNMjUxMjE4MDYwMDQ2WhcNMjUxMjE5MDYwMDQ2WjAzMTEwLwYDVQQD EyhjYTA4MTdhNTAzYmE3Njc3OGFjYWY4MWY1N2YxMWE1NTA4NmI5ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod7/ftvGb3MhUr+JkT+2qJ2rqe7j vzLuu4qrUnILGp959vgmNA9qY9yPZvvcz2PfHv98x8vQpztmZXV4H6GD9WEHbr9i xcgUPFMvI+9SMkCtVDrxhV8QwPNXirOP4Yjcxl8VddlclPj4c31Si0rJfwY1sHBt OMZt35lKqs+X6TZG7QWi/eKN1E5dKaMhB5cwjt1+ge2k1yUek39YywVn92TjOGIv JzKxx8vdpAJo9wn0oTFK//xzGKKHykC/lNB1Zgk+k8hsFNDu9KfzlV9pm66mNaB5 W09WO06QWMH6v7IER+fOLpmERjoXx829jkUMD8kljzWdAW5f6/s9c/MWhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoIF6UDunZ3isr4H1fxGlUIa54gMB8GA1UdIwQY MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2 LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf/bn1VF TolxQzHpDd3V+0/oXupRFWxORAWngreGk3PFDCRYMoauWBF57989oUlU4G1J4Xfi 3wRBCTl5gfVRznK5YRDsbaxVZH/pKdDbMqai4CTxLSxgJadnd48PPMlV/IrK7ytl 03oBsgn8JHqecZzOuL7ChyxE+fFgAuLksvD0ceQKm9GP8wK2DYuWzNDwam0q9ucs pdl9kaWTvvMcRswZmbP5H0hFfcgsYSC6umY+pklC59anpWGxZVPUQ81+2zDRfNOY UlcsKAo4gQOxnDSLholv1tq95/EpV+dAx0Gtig7SGWMEkfp4RJRwupe5564cOC7g +XU9XfrFTmP1Xg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:04:31 2025 by rpki-client