This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json) Hash identifier: o6ePyOftN0syU75bxwDxY0Fc1Ro9thIGsxi40YvWMHc= Subject key identifier: 73:A6:36:C3:CA:E5:86:A5:96:99:7E:CE:76:E0:77:98:11:BA:B8:8A Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Certificate serial: 019B39B3A856375951A29B9350EA8E73452A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft Manifest number: 0356 Signing time: Sat 20 Dec 2025 03:00:33 +0000 Manifest this update: Sat 20 Dec 2025 03:00:33 +0000 Manifest next update: Sun 21 Dec 2025 03:00:33 +0000 Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: tYUio8p+KZ6+g+gnFm611b9RGzGLxnyFiO666KipKYw=) 2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:a8:56:37:59:51:a2:9b:93:50:ea:8e:73:45:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Validity Not Before: Dec 20 03:00:33 2025 GMT Not After : Dec 21 03:00:33 2025 GMT Subject: CN=73a636c3cae586a596997ece76e0779811bab88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:86:46:74:dd:ce:d2:47:25:63:5c:7f:54: 9f:d8:16:2c:a1:f9:8b:29:92:43:78:d1:ab:5a:84: ae:9a:dc:a5:fb:18:23:5a:7f:97:f9:95:b2:cb:cd: 1d:1c:11:f8:ff:f1:57:fe:4a:7f:33:f6:db:83:17: f0:15:57:da:08:31:7f:27:64:bf:bd:f4:ea:b5:8b: 80:c0:41:32:d7:a2:1c:26:9f:6a:b6:e8:66:88:a6: 92:e9:99:88:7a:61:5f:05:23:24:4d:35:c3:38:6a: 86:db:ca:5f:e0:c9:9c:8b:70:3e:a9:95:10:8e:7f: 1a:72:66:15:6d:fa:0d:82:72:88:d0:6b:ce:03:95: 13:fe:78:c5:57:62:0d:88:e0:bc:1c:2f:81:eb:2d: f3:1f:82:5f:51:8c:6b:9d:ce:b4:bf:3d:d4:fc:79: 37:74:d9:1e:0e:1e:c8:50:9c:09:86:80:5b:07:e4: 25:3c:e3:5d:25:64:e8:7a:66:66:ae:77:ef:17:b8: 5d:34:cd:cf:bb:13:f3:ff:c7:93:d4:c8:85:99:0f: a8:93:cb:37:c9:65:72:04:cb:7c:aa:fa:25:9b:b9: 52:21:b8:92:eb:04:50:06:af:e6:d6:88:8d:ae:79: 88:02:4a:71:45:ea:3a:d2:ed:60:54:2a:9b:d0:d4: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A6:36:C3:CA:E5:86:A5:96:99:7E:CE:76:E0:77:98:11:BA:B8:8A X509v3 Authority Key Identifier: keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ab:a1:18:c2:22:8c:6d:3b:10:bf:1f:35:73:83:15:6f:56: 7d:c9:8c:d3:f0:ee:93:3b:da:48:da:b3:dc:59:86:d0:98:17: 56:20:b4:6a:a3:6f:1e:48:87:f0:bb:d4:2a:e5:ba:a1:90:07: 7e:40:d8:52:58:5c:50:e0:12:a9:23:96:47:cc:f2:89:20:9c: f2:22:55:fe:97:69:7a:4b:52:d7:fa:90:ef:49:c3:1d:72:dc: 37:57:82:1e:31:36:2b:43:7f:36:1f:fb:17:ae:7d:11:38:35: 9f:a7:83:fe:11:66:cb:41:cf:3d:94:21:0c:61:a8:fb:5c:01: 8e:7b:8f:4e:24:09:0c:27:9f:91:04:46:23:57:8d:aa:04:f6: 9c:15:e3:b9:e7:34:d1:06:83:01:3b:7c:f3:f3:76:5c:24:c3: 08:ba:58:67:b1:e7:aa:77:b9:f7:3d:16:e6:60:eb:5c:3e:d8: bc:55:fb:aa:f1:5b:4f:00:97:23:69:71:ce:05:96:8c:cc:fe: f3:e4:67:b3:a1:28:e1:47:96:ad:d2:37:e0:33:5a:2e:12:30: df:ac:f4:b3:20:de:72:78:c9:c1:8d:37:32:55:09:78:2f:09: 98:c5:15:7c:db:80:0c:89:4a:e9:65:6a:f1:fa:ea:ba:ca:5a: b7:5a:a7:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s6hWN1lRopuTUOqOc0UqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj NzkwYzkwHhcNMjUxMjIwMDMwMDMzWhcNMjUxMjIxMDMwMDMzWjAzMTEwLwYDVQQD Eyg3M2E2MzZjM2NhZTU4NmE1OTY5OTdlY2U3NmUwNzc5ODExYmFiODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE6GRnTdztJHJWNcf1Sf2BYsofmL KZJDeNGrWoSumtyl+xgjWn+X+ZWyy80dHBH4//FX/kp/M/bbgxfwFVfaCDF/J2S/ vfTqtYuAwEEy16IcJp9qtuhmiKaS6ZmIemFfBSMkTTXDOGqG28pf4Mmci3A+qZUQ jn8acmYVbfoNgnKI0GvOA5UT/njFV2INiOC8HC+B6y3zH4JfUYxrnc60vz3U/Hk3 dNkeDh7IUJwJhoBbB+QlPONdJWToemZmrnfvF7hdNM3PuxPz/8eT1MiFmQ+ok8s3 yWVyBMt8qvolm7lSIbiS6wRQBq/m1oiNrnmIAkpxReo60u1gVCqb0NQAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOmNsPK5Yallpl+znbgd5gRuriKMB8GA1UdIwQY MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnauhGMIi jG07EL8fNXODFW9WfcmM0/DukzvaSNqz3FmG0JgXViC0aqNvHkiH8LvUKuW6oZAH fkDYUlhcUOASqSOWR8zyiSCc8iJV/pdpektS1/qQ70nDHXLcN1eCHjE2K0N/Nh/7 F659ETg1n6eD/hFmy0HPPZQhDGGo+1wBjnuPTiQJDCefkQRGI1eNqgT2nBXjuec0 0QaDATt88/N2XCTDCLpYZ7Hnqne59z0W5mDrXD7YvFX7qvFbTwCXI2lxzgWWjMz+ 8+Rns6Eo4UeWrdI34DNaLhIw36z0syDecnjJwY03MlUJeC8JmMUVfNuADIlK6WVq 8frquspat1qnxw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:37 2025 by rpki-client