This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json) Hash identifier: rpiZNDKnxOQrKLKhZ6PoFIulJ5O1lhKwGe/+CjMZKsM= Subject key identifier: EB:BB:36:CD:7D:A5:24:E6:7B:66:89:CC:AA:94:9E:6D:B9:57:FC:DA Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce Certificate serial: 019B41A43EC8699885ADE947120581D5DEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft Manifest number: 0F57 Signing time: Sun 21 Dec 2025 16:00:41 +0000 Manifest this update: Sun 21 Dec 2025 16:00:41 +0000 Manifest next update: Mon 22 Dec 2025 16:00:41 +0000 Files and hashes: 1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=) 2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: QV3I+YsqVSRd7DGPSpGLc0oi+QiQA+0MzbPwIjCpn2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:3e:c8:69:98:85:ad:e9:47:12:05:81:d5:de:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce Validity Not Before: Dec 21 16:00:41 2025 GMT Not After : Dec 22 16:00:41 2025 GMT Subject: CN=ebbb36cd7da524e67b6689ccaa949e6db957fcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:f8:39:15:2a:f6:a0:b2:64:82:bd:44:fd: 69:54:42:53:b9:42:17:b2:b6:38:db:b1:01:8b:1f: 1e:3e:f8:45:90:fa:a4:74:8a:c9:01:97:12:16:2a: 59:64:81:0e:bd:ff:bf:db:4a:2c:69:40:cf:53:38: a4:ec:c5:59:bf:d8:8e:34:f6:32:0f:74:c5:31:92: 56:10:c5:d3:ba:c4:f8:fb:3e:ee:2b:31:6a:f4:23: 88:c9:94:44:e7:2f:1d:bc:31:9a:07:1e:6d:bf:be: 56:13:5e:ba:31:fb:df:7c:07:45:33:86:54:fd:00: 65:03:41:3d:30:4f:e4:7c:53:93:13:67:78:72:d8: 5c:a1:03:c2:44:19:72:cd:af:a9:ea:5c:16:a9:79: 0e:7f:99:8a:f0:1c:85:b2:f1:1b:62:5c:e3:eb:6d: 40:27:e0:08:f2:3d:8e:93:cd:f1:1e:43:b5:0b:a1: f1:c4:b1:48:95:8c:fc:1b:ec:3a:97:df:7a:bf:6e: fc:ac:2d:77:6f:92:e2:bd:00:24:32:03:2e:43:2a: 63:b0:55:90:b8:fa:87:73:95:9d:d3:ca:6e:77:c7: 92:50:2a:b5:b7:03:e7:e0:61:57:6d:0d:c7:87:50: 96:fb:6c:ba:48:eb:83:f3:22:c3:67:eb:c9:15:f2: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:36:CD:7D:A5:24:E6:7B:66:89:CC:AA:94:9E:6D:B9:57:FC:DA X509v3 Authority Key Identifier: keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0e:b5:be:73:d2:35:98:38:42:96:6c:f9:60:61:b0:70:f0: 8f:9c:c0:4e:b2:ae:7f:37:ee:24:83:19:a2:14:60:20:ac:69: 65:a6:1f:63:fd:ba:d9:80:bf:55:df:2e:fe:a6:e5:6f:aa:b0: 58:2b:1f:6a:02:9b:8c:1d:ff:f2:45:bf:f2:09:ee:82:7d:db: b7:3d:4b:18:23:ff:4f:15:f1:96:3e:a8:fd:d8:6e:92:54:52: 2a:e5:d9:41:22:25:3c:a0:19:82:65:9e:95:2f:a9:92:9e:43: 37:30:68:b1:89:30:53:bb:c8:2f:4b:e1:fa:05:29:82:74:e4: ff:ba:db:f6:39:73:8a:a5:b5:51:84:0c:32:fb:ad:03:0f:e9: 3d:18:9a:21:10:f5:2f:18:30:70:dd:6c:2d:d8:28:6e:aa:4a: 98:20:dd:cc:e0:bc:0f:97:3e:3d:ed:10:ad:14:b2:d4:ef:74: 34:6b:5c:53:50:13:de:2b:00:5f:23:78:6d:d3:b7:ee:d1:cb: 3f:a2:e9:1b:3a:dc:88:16:71:14:2f:d1:00:13:d2:a2:ea:0b: e2:44:00:cb:8b:63:ed:a2:3b:11:46:c5:4f:ac:df:cd:b4:6b: 13:e1:a6:e4:ae:d9:b0:3f:d4:f1:11:93:2a:08:8f:54:2f:24: 3b:b4:94:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpD7IaZiFrelHEgWB1d6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjc4ZjE0ZjhiMjI4OGQ0OTU1N2NhNmZiMWJkZjQ3OTM5 MjdkY2UwHhcNMjUxMjIxMTYwMDQxWhcNMjUxMjIyMTYwMDQxWjAzMTEwLwYDVQQD EyhlYmJiMzZjZDdkYTUyNGU2N2I2Njg5Y2NhYTk0OWU2ZGI5NTdmY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArun4ORUq9qCyZIK9RP1pVEJTuUIX srY427EBix8ePvhFkPqkdIrJAZcSFipZZIEOvf+/20osaUDPUzik7MVZv9iONPYy D3TFMZJWEMXTusT4+z7uKzFq9COIyZRE5y8dvDGaBx5tv75WE166MfvffAdFM4ZU /QBlA0E9ME/kfFOTE2d4cthcoQPCRBlyza+p6lwWqXkOf5mK8ByFsvEbYlzj621A J+AI8j2Ok83xHkO1C6HxxLFIlYz8G+w6l996v278rC13b5LivQAkMgMuQypjsFWQ uPqHc5Wd08pud8eSUCq1twPn4GFXbQ3Hh1CW+2y6SOuD8yLDZ+vJFfLBMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu7Ns19pSTme2aJzKqUnm25V/zaMB8GA1UdIwQY MBaAFCtnjxT4siiNSVV8pvsb30eTkn3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEt ZjFjYzg3M2MyZTI3LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEtZjFjYzg3M2MyZTI3 LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAow61vnPS NZg4QpZs+WBhsHDwj5zATrKufzfuJIMZohRgIKxpZaYfY/262YC/Vd8u/qblb6qw WCsfagKbjB3/8kW/8gnugn3btz1LGCP/TxXxlj6o/dhuklRSKuXZQSIlPKAZgmWe lS+pkp5DNzBosYkwU7vIL0vh+gUpgnTk/7rb9jlziqW1UYQMMvutAw/pPRiaIRD1 LxgwcN1sLdgobqpKmCDdzOC8D5c+Pe0QrRSy1O90NGtcU1AT3isAXyN4bdO37tHL P6LpGzrciBZxFC/RABPSouoL4kQAy4tj7aI7EUbFT6zfzbRrE+Gm5K7ZsD/U8RGT KgiPVC8kO7SUOA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:46:06 2025 by rpki-client