This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json) Hash identifier: 4q/eLieU6E2fpDy1PKEEvjvYr6jtOW08aAshHvPX8Es= Subject key identifier: 24:99:86:0B:B9:31:3B:B3:9B:0E:BA:DD:89:6D:BC:CA:B3:A1:FD:87 Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc Certificate serial: 019B6B455FC8231A2B83C9A5F65B774B700F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft Manifest number: 07D8 Signing time: Mon 29 Dec 2025 18:01:07 +0000 Manifest this update: Mon 29 Dec 2025 18:01:07 +0000 Manifest next update: Tue 30 Dec 2025 18:01:07 +0000 Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: sDEr6PAZzpd8M7q3sWHSA3QtN/1dYHiBKkvLAR7JSRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:5f:c8:23:1a:2b:83:c9:a5:f6:5b:77:4b:70:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc Validity Not Before: Dec 29 18:01:07 2025 GMT Not After : Dec 30 18:01:07 2025 GMT Subject: CN=2499860bb9313bb39b0ebadd896dbccab3a1fd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:90:e6:e9:1b:90:b2:3b:47:06:c6:09:ed:3a: d9:16:76:9c:d7:73:da:3b:91:02:d8:b7:ff:3d:a9: d3:7f:d0:40:f2:14:c6:2e:91:c6:94:52:55:ed:60: ae:c2:41:38:fe:f1:8e:be:96:c6:2c:23:d9:ee:44: 1b:61:a2:74:ef:9c:b8:56:46:1c:f8:d4:6b:71:c1: 31:0f:8b:78:19:37:0f:5f:94:50:46:82:e4:cf:e1: 35:61:c8:89:ce:6c:9f:5f:ad:f3:53:2d:95:55:a5: a3:4c:38:d7:66:32:68:eb:af:b9:0e:e3:26:36:7a: 7c:0c:ef:bf:10:e4:36:d2:31:73:1c:1b:00:25:a3: 83:84:48:38:f1:69:17:d6:36:87:56:f7:6c:dd:db: e1:16:68:62:b6:78:09:da:9c:63:a1:2f:7d:cd:62: e3:1f:21:3e:45:b5:8b:0e:c7:34:3f:18:09:98:a5: af:35:4d:06:31:4b:3f:a8:e4:e2:e2:54:1e:86:8b: 8c:07:98:eb:95:e1:c0:e1:1c:ab:32:1d:c2:5c:db: e3:d9:20:09:97:c7:1d:af:9b:c7:db:27:d6:66:4e: fb:bb:4e:23:86:38:bd:db:d7:bb:38:d7:f7:1b:fc: f9:74:8b:80:13:a2:9f:3f:29:2f:35:7c:d3:33:1d: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:86:0B:B9:31:3B:B3:9B:0E:BA:DD:89:6D:BC:CA:B3:A1:FD:87 X509v3 Authority Key Identifier: keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a4:69:a4:69:d0:4b:56:94:d4:26:4a:42:41:0a:70:66:ff: f1:e5:01:99:34:dc:95:6d:c5:61:3a:5e:7c:bc:63:fd:f3:f6: 8d:26:a5:89:93:72:75:45:5e:0f:37:d6:c0:b8:5a:f9:b4:f8: ce:66:7d:fc:5a:e4:d8:16:8a:dd:2a:99:b6:9f:10:b1:ca:6d: 3d:55:fd:7a:b9:52:1a:03:79:72:54:5e:33:8a:59:a1:8a:1b: 1f:7d:6b:97:5c:28:da:34:9c:74:ae:ab:f6:77:b3:f1:fc:95: 4b:64:90:6c:2a:68:fa:23:0a:90:9f:2d:d6:24:45:77:d5:ce: e1:98:83:cb:f3:84:2d:80:70:10:98:24:80:28:a3:6d:02:f0: 37:ad:06:4b:99:e1:b4:a0:77:e1:a3:0a:01:3a:86:a4:10:c0: ba:09:00:e1:70:a4:95:cc:cf:4d:cb:60:e5:86:4c:c6:a3:b2: b9:15:7a:53:e3:45:c6:6d:d8:84:9f:61:19:12:6d:0c:81:21: 47:1f:8c:03:b9:3e:30:7b:2a:ba:30:22:7c:46:3d:cb:44:98: 36:30:99:c1:81:8a:aa:56:43:d5:da:71:3d:31:5f:0a:1a:70: da:6d:ca:81:82:4c:9f:e6:9c:ad:d7:3c:39:fb:16:ad:80:38: ce:c9:db:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRV/IIxorg8ml9lt3S3APMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjFlMmQ5MzI3NTZmMDFlM2M2YjczYWM4MjY4OTQ2MWQw ZjYxY2MwHhcNMjUxMjI5MTgwMTA3WhcNMjUxMjMwMTgwMTA3WjAzMTEwLwYDVQQD EygyNDk5ODYwYmI5MzEzYmIzOWIwZWJhZGQ4OTZkYmNjYWIzYTFmZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZDm6RuQsjtHBsYJ7TrZFnac13Pa O5EC2Lf/PanTf9BA8hTGLpHGlFJV7WCuwkE4/vGOvpbGLCPZ7kQbYaJ075y4VkYc +NRrccExD4t4GTcPX5RQRoLkz+E1YciJzmyfX63zUy2VVaWjTDjXZjJo66+5DuMm Nnp8DO+/EOQ20jFzHBsAJaODhEg48WkX1jaHVvds3dvhFmhitngJ2pxjoS99zWLj HyE+RbWLDsc0PxgJmKWvNU0GMUs/qOTi4lQehouMB5jrleHA4RyrMh3CXNvj2SAJ l8cdr5vH2yfWZk77u04jhji929e7ONf3G/z5dIuAE6KfPykvNXzTMx37FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSZhgu5MTuzmw663YltvMqzof2HMB8GA1UdIwQY MBaAFCth4tkydW8B48a3OsgmiUYdD2HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTkt M2YyYmQwYWVmY2IwLzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTktM2YyYmQwYWVmY2Iw LzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKRppGnQ S1aU1CZKQkEKcGb/8eUBmTTclW3FYTpefLxj/fP2jSaliZNydUVeDzfWwLha+bT4 zmZ9/Frk2BaK3SqZtp8QscptPVX9erlSGgN5clReM4pZoYobH31rl1wo2jScdK6r 9nez8fyVS2SQbCpo+iMKkJ8t1iRFd9XO4ZiDy/OELYBwEJgkgCijbQLwN60GS5nh tKB34aMKATqGpBDAugkA4XCklczPTctg5YZMxqOyuRV6U+NFxm3YhJ9hGRJtDIEh Rx+MA7k+MHsqujAifEY9y0SYNjCZwYGKqlZD1dpxPTFfChpw2m3KgYJMn+acrdc8 OfsWrYA4zsnbJg== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:16 2025 by rpki-client