This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json) Hash identifier: oL1NVvK+8DmXEsIKwsEx68nIekWSdP157J+kNa0knUQ= Subject key identifier: 84:B3:07:A2:F1:A1:3C:63:40:36:B5:5F:F3:99:DF:EC:C5:CD:4E:37 Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e Certificate serial: 019B2EFADB1390C6C4B61FFDF3AB3D0DCEFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft Manifest number: 0F60 Signing time: Thu 18 Dec 2025 01:02:30 +0000 Manifest this update: Thu 18 Dec 2025 01:02:30 +0000 Manifest next update: Fri 19 Dec 2025 01:02:30 +0000 Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: ryRw+//rLOLYoCFjKhtxPaaDiO8taNvU+slMUAg2KBY=) 2: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (hash: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:db:13:90:c6:c4:b6:1f:fd:f3:ab:3d:0d:ce:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e Validity Not Before: Dec 18 01:02:30 2025 GMT Not After : Dec 19 01:02:30 2025 GMT Subject: CN=84b307a2f1a13c634036b55ff399dfecc5cd4e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:fb:2e:21:ca:21:83:a7:2a:93:cd:87:a2: 69:36:f9:0e:e1:fe:fd:ff:ee:fa:38:75:33:42:fa: 2c:47:a2:6d:da:2c:97:e1:26:c5:67:73:e7:3b:81: 19:63:0f:17:ad:43:19:60:28:72:61:4f:70:95:a9: 70:d7:99:67:a1:c4:56:34:01:a4:9e:03:45:c1:3b: e4:b6:02:ae:be:68:43:74:ee:53:f2:18:ba:5c:31: 8d:9f:e4:21:46:af:20:86:7f:29:b8:d0:7e:86:04: b9:19:9b:f4:65:f5:03:59:2a:04:b3:68:81:44:e6: 45:41:38:ac:2a:07:eb:2c:31:b7:db:d9:21:49:67: 51:c3:54:46:56:99:2d:e6:0e:ab:1c:c9:b5:a4:c9: 57:21:5a:89:ce:61:1b:d6:0b:7c:5e:3e:e6:8e:45: 65:e0:23:a0:df:12:79:0d:cb:08:23:9c:b8:78:b9: c9:b9:de:d9:7c:17:85:5e:ec:a3:bb:c8:4b:70:86: 5e:7b:56:43:70:d7:59:f0:8b:04:01:33:2b:1a:05: 62:f6:3b:5f:5c:c9:3f:e1:a6:79:7f:0a:df:e0:85: 96:19:35:c5:b0:b0:93:05:24:52:a7:da:ee:fb:09: 95:69:20:91:3f:c0:c0:d6:cb:fd:aa:a9:36:42:9e: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B3:07:A2:F1:A1:3C:63:40:36:B5:5F:F3:99:DF:EC:C5:CD:4E:37 X509v3 Authority Key Identifier: keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:57:5a:61:c9:c2:f5:cf:d9:33:7c:06:65:b2:3d:57:d4:8f: 24:41:a4:79:27:45:2f:8e:b3:08:9f:9a:84:16:bc:b9:a9:20: c1:f1:cd:55:5b:9b:f6:db:1c:73:8b:1d:86:c4:fa:5e:fb:f7: d0:9f:7c:33:87:b5:42:13:2c:33:de:25:16:4b:4f:65:0c:be: 8d:bb:eb:a8:2f:00:3b:f0:26:c4:10:23:90:26:42:15:b8:13: 21:0b:29:0d:73:37:df:b9:e2:a4:43:6c:a5:5e:fa:59:b5:5f: 3b:b2:24:4f:02:36:cb:c3:7c:5d:58:a1:cf:92:dd:02:ed:66: 8b:c4:bc:f8:4e:75:e4:5f:7f:19:3f:07:c4:6d:9b:9f:ac:6c: 1d:70:e5:22:d8:9c:0f:3b:32:27:c7:7f:65:11:c4:99:cb:e6: 4c:9a:d9:b0:2b:79:de:57:e6:96:2a:e2:3e:a5:20:81:e0:ae: 8f:64:64:73:96:17:4b:38:66:b0:1c:4d:91:b7:9f:dd:c1:78: 2a:02:52:1a:52:e3:76:39:f0:86:b7:dc:6d:d2:b4:e5:0f:17: 64:3a:e5:be:cb:a2:68:07:ac:9a:f0:6c:fc:f3:c8:9f:67:b6: 50:12:f2:63:82:85:3b:6a:ff:46:de:3c:1c:f3:96:7a:60:12: f8:1c:0a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+tsTkMbEth/986s9Dc76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmFkOTBiNjM2NDJiOGZhZGM5MDA3YWEzNTUyMzllZGZh ZjM1NGUwHhcNMjUxMjE4MDEwMjMwWhcNMjUxMjE5MDEwMjMwWjAzMTEwLwYDVQQD Eyg4NGIzMDdhMmYxYTEzYzYzNDAzNmI1NWZmMzk5ZGZlY2M1Y2Q0ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCj7LiHKIYOnKpPNh6JpNvkO4f79 /+76OHUzQvosR6Jt2iyX4SbFZ3PnO4EZYw8XrUMZYChyYU9wlalw15lnocRWNAGk ngNFwTvktgKuvmhDdO5T8hi6XDGNn+QhRq8ghn8puNB+hgS5GZv0ZfUDWSoEs2iB ROZFQTisKgfrLDG329khSWdRw1RGVpkt5g6rHMm1pMlXIVqJzmEb1gt8Xj7mjkVl 4COg3xJ5DcsII5y4eLnJud7ZfBeFXuyju8hLcIZee1ZDcNdZ8IsEATMrGgVi9jtf XMk/4aZ5fwrf4IWWGTXFsLCTBSRSp9ru+wmVaSCRP8DA1sv9qqk2Qp7+nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISzB6LxoTxjQDa1X/OZ3+zFzU43MB8GA1UdIwQY MBaAFCtq2QtjZCuPrckAeqNVI57frzVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDkt YmM5YjQxM2I4ZWVkLzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDktYmM5YjQxM2I4ZWVk LzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1daYcnC 9c/ZM3wGZbI9V9SPJEGkeSdFL46zCJ+ahBa8uakgwfHNVVub9tscc4sdhsT6Xvv3 0J98M4e1QhMsM94lFktPZQy+jbvrqC8AO/AmxBAjkCZCFbgTIQspDXM337nipENs pV76WbVfO7IkTwI2y8N8XVihz5LdAu1mi8S8+E515F9/GT8HxG2bn6xsHXDlItic DzsyJ8d/ZRHEmcvmTJrZsCt53lfmliriPqUggeCuj2Rkc5YXSzhmsBxNkbef3cF4 KgJSGlLjdjnwhrfcbdK05Q8XZDrlvsuiaAesmvBs/PPIn2e2UBLyY4KFO2r/Rt48 HPOWemAS+BwKPg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:16:28 2025 by rpki-client