This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json) Hash identifier: dpiw70HwksuksAicEPWZsWmXaTAhDwWyk/Seu7jRnDI= Subject key identifier: 4B:FE:22:5A:B2:43:73:E0:2B:DC:CB:6A:71:B0:B7:47:EA:08:A4:13 Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Certificate serial: 019B52CEF934886AB3A44CD01164ED78A4A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft Manifest number: 04AD Signing time: Thu 25 Dec 2025 00:00:54 +0000 Manifest this update: Thu 25 Dec 2025 00:00:54 +0000 Manifest next update: Fri 26 Dec 2025 00:00:54 +0000 Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: qwLxL2xeijc5xBCPmpmwgRINvlp9NOT/czQMIMZK4So=) 2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:f9:34:88:6a:b3:a4:4c:d0:11:64:ed:78:a4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15 Validity Not Before: Dec 25 00:00:54 2025 GMT Not After : Dec 26 00:00:54 2025 GMT Subject: CN=4bfe225ab24373e02bdccb6a71b0b747ea08a413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:bf:e9:1f:d3:e1:57:fb:af:b4:6d:f4:18: 25:10:14:af:03:8d:22:c5:36:54:ec:31:ea:85:7d: c6:e2:f1:fb:2a:7b:6c:95:b2:1e:4b:b1:77:b9:f8: 6f:a8:10:68:2b:aa:3f:de:d7:1f:75:ca:20:ed:69: c8:13:04:fd:aa:5e:ff:7d:9d:f3:2c:f0:7f:05:6a: b5:ea:88:a0:a8:54:3d:29:4a:ab:39:48:75:0f:1b: 8c:63:77:9f:f2:30:d4:e0:64:90:ce:37:23:a1:b3: cf:56:10:dd:d7:1f:b1:bb:39:06:14:0d:65:fc:47: e5:aa:98:70:14:d0:dc:85:10:7d:eb:b0:dc:80:a9: 1b:84:ce:3c:46:62:5c:7a:7d:bf:7b:d6:6e:39:8a: 20:c5:f8:62:3c:e3:18:ee:17:62:d1:ea:eb:2d:c0: dd:54:fd:52:f4:1e:ae:8c:f2:46:e2:20:65:4d:da: 88:d8:ac:41:11:4b:65:69:44:31:e2:f0:ab:8d:b7: cb:38:30:cc:27:63:74:2c:42:43:30:a5:74:2a:e3: 0d:9b:6c:b9:74:1a:a3:ba:c3:ca:89:fc:f1:b7:46: cd:0f:39:9d:8e:84:e2:78:59:95:93:71:80:0a:01: dc:25:95:94:83:ba:2c:3b:ed:c0:bd:5e:73:cc:c3: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FE:22:5A:B2:43:73:E0:2B:DC:CB:6A:71:B0:B7:47:EA:08:A4:13 X509v3 Authority Key Identifier: keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:33:bf:58:0a:34:a6:8f:9d:ae:8f:99:77:e1:d1:64:2f:65: a0:fe:16:ef:fc:bd:e6:c1:cb:1c:61:51:99:cb:f9:88:15:82: 1b:eb:7d:24:03:17:6b:36:03:56:4b:a1:2b:5e:02:f3:ae:6e: a7:b0:35:d5:88:3c:10:84:9e:48:ea:e5:68:60:93:06:37:0c: 7f:64:cb:0d:31:83:78:a8:7b:56:3c:4c:da:c9:5f:3c:96:df: 71:9a:5d:df:dc:e2:05:60:b4:a1:53:98:99:4a:b8:47:88:9c: b5:e1:cc:6b:63:f2:a9:b4:eb:e7:9f:d6:59:c6:9d:e1:c5:a2: d9:5a:f3:d8:e8:7d:69:aa:2d:ad:42:a7:42:59:63:9f:70:20: 94:be:a6:a8:89:da:6f:a0:fc:62:f3:2c:0a:fe:9a:df:c7:e3: a1:a4:57:34:e0:5f:fb:d0:e6:f5:0f:3f:b3:63:50:9d:30:9b: 39:06:61:0b:13:12:d7:26:8a:2d:ec:21:bd:e5:c2:72:84:5f: d4:aa:c7:10:d4:3b:cd:85:47:d5:81:7f:f3:b9:59:e2:3d:c4: 53:f7:e4:d1:18:7f:f1:77:c9:fc:b5:aa:27:47:b2:4b:24:f1: 81:f0:c9:fe:56:ab:f7:ba:d3:b3:58:85:50:42:81:24:b0:c5: 1a:30:06:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzvk0iGqzpEzQEWTteKSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGFlOGUwZjg4ZDBjOGMzOWRmNDRmZmE0MWUzMmMyNjI3 YzNhMTUwHhcNMjUxMjI1MDAwMDU0WhcNMjUxMjI2MDAwMDU0WjAzMTEwLwYDVQQD Eyg0YmZlMjI1YWIyNDM3M2UwMmJkY2NiNmE3MWIwYjc0N2VhMDhhNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zm/6R/T4Vf7r7Rt9BglEBSvA40i xTZU7DHqhX3G4vH7KntslbIeS7F3ufhvqBBoK6o/3tcfdcog7WnIEwT9ql7/fZ3z LPB/BWq16oigqFQ9KUqrOUh1DxuMY3ef8jDU4GSQzjcjobPPVhDd1x+xuzkGFA1l /EflqphwFNDchRB967DcgKkbhM48RmJcen2/e9ZuOYogxfhiPOMY7hdi0errLcDd VP1S9B6ujPJG4iBlTdqI2KxBEUtlaUQx4vCrjbfLODDMJ2N0LEJDMKV0KuMNm2y5 dBqjusPKifzxt0bNDzmdjoTieFmVk3GACgHcJZWUg7osO+3AvV5zzMN3OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv+IlqyQ3PgK9zLanGwt0fqCKQTMB8GA1UdIwQY MBaAFCtK6OD4jQyMOd9E/6QeMsJifDoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYt MTA2ODBkMjU2YWUwLzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy85OWMxZjYtZTdjMS00YWIzLTllZDYtMTA2ODBkMjU2YWUw LzEvSzBybzRQaU5ESXc1MzBUX3BCNHl3bUo4T2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTO/WAo0 po+dro+Zd+HRZC9loP4W7/y95sHLHGFRmcv5iBWCG+t9JAMXazYDVkuhK14C865u p7A11Yg8EISeSOrlaGCTBjcMf2TLDTGDeKh7VjxM2slfPJbfcZpd39ziBWC0oVOY mUq4R4icteHMa2PyqbTr55/WWcad4cWi2Vrz2Oh9aaotrUKnQlljn3AglL6mqIna b6D8YvMsCv6a38fjoaRXNOBf+9Dm9Q8/s2NQnTCbOQZhCxMS1yaKLewhveXCcoRf 1KrHENQ7zYVH1YF/87lZ4j3EU/fk0Rh/8XfJ/LWqJ0eySyTxgfDJ/lar97rTs1iF UEKBJLDFGjAGWw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:22:54 2025 by rpki-client