This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json) Hash identifier: KM81zYppQuSsK2WOLIy5oNrGOc/QlKONx1w1saCbWf4= Subject key identifier: 66:CA:8A:0D:27:D7:EB:1A:2A:92:CD:58:42:8A:14:92:58:89:31:A8 Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61 Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061 Certificate serial: 019AF49C4D31F220D60B14C03C5FC394A756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft Manifest number: 0FBD Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=) 2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: ef+VJOMP1JbK6nia1h0LkrWX6CLN5d2jrZMPXGEFyo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4d:31:f2:20:d6:0b:14:c0:3c:5f:c3:94:a7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061 Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=66ca8a0d27d7eb1a2a92cd58428a1492588931a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:d4:f1:26:57:49:e4:52:44:bc:2d:78:73: 6d:c9:ec:11:9f:64:65:31:90:35:76:92:03:05:a1: f2:63:f7:8b:85:79:56:4a:cd:b2:7a:22:0b:09:3c: 19:23:83:29:ca:6b:ef:27:8e:e0:79:08:7e:1d:ae: 72:b7:6d:64:7a:76:0b:19:11:7e:3f:5c:31:53:d3: 29:76:3e:a4:c9:d8:85:82:b7:46:52:8b:23:21:8a: 48:c5:ad:9f:2b:e4:f7:6f:ce:af:93:5a:57:06:86: 5a:88:91:3c:f0:51:35:f8:d1:f5:fc:7f:c6:a0:d8: 58:46:e2:65:33:43:f9:f7:9d:c4:f2:cc:b7:8d:e7: f9:f3:f1:d9:ab:2a:09:f4:c0:f1:b8:b2:5c:21:13: 0b:0a:62:a7:30:81:b0:b9:85:1f:65:60:7a:2c:41: 2a:f0:ae:cc:30:07:2f:1a:cb:1c:34:79:31:c4:7a: 74:28:fa:00:a8:6a:ca:1b:13:12:ef:36:52:db:39: 4e:14:11:f5:c0:6f:b6:df:c5:ea:08:17:ee:0f:4e: 7f:84:6b:4e:26:78:3f:03:50:dd:a9:0f:9e:e4:3c: 67:f3:3f:e0:71:c9:13:fa:bf:18:ec:f6:22:14:46: 24:9f:8f:19:a3:0a:a4:0d:1a:b4:4c:51:46:e5:58: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CA:8A:0D:27:D7:EB:1A:2A:92:CD:58:42:8A:14:92:58:89:31:A8 X509v3 Authority Key Identifier: keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4a:ac:d0:42:9a:fa:8a:f7:6d:26:88:b6:8c:0d:22:53:6d: 86:4f:46:ad:ce:10:93:c8:1c:93:a8:8c:a9:39:cf:2c:24:c9: 81:d0:da:6b:55:78:c1:dd:32:db:8d:4f:98:48:e8:c4:bf:73: cc:1d:bd:62:fa:50:b6:95:d0:3a:b7:90:7e:5f:02:0d:9f:b4: 65:0b:f6:cc:f9:5e:67:97:8d:30:0e:15:39:31:57:97:31:2a: 1d:e4:cd:c4:c3:07:fa:e3:f2:b0:0e:2a:03:2d:e7:4f:7e:ec: 8a:a5:9b:c6:23:0a:43:68:08:54:03:5e:ee:7a:8e:f7:ae:1a: 73:73:72:bc:15:4c:f7:3a:38:99:79:18:7b:28:b3:fe:bd:12: 49:aa:0f:35:bb:58:24:6a:16:9e:6b:ff:5e:eb:9a:4a:8a:6e: 8c:8e:19:21:c8:fa:6f:41:87:0e:8f:61:c6:9d:45:68:af:61: 85:9a:a3:a1:07:27:a2:6a:94:69:7f:ad:a0:04:29:f9:58:2a: 53:3f:fd:10:ca:6d:30:5d:6e:fd:dd:28:e5:14:1e:92:7b:b5: 96:a6:ea:65:b0:20:4b:71:6b:ae:88:e1:ff:21:2d:55:14:5a: 48:43:87:f0:af:bf:da:43:e3:d1:fa:6e:3b:dd:55:59:1a:a6: b3:7b:54:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nE0x8iDWCxTAPF/DlKdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNmNiMzM2YzFiZWI3MWQ0ZmJiYWFlMjQzYjIzMzUyYzYy NzAwNjEwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD Eyg2NmNhOGEwZDI3ZDdlYjFhMmE5MmNkNTg0MjhhMTQ5MjU4ODkzMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7XU8SZXSeRSRLwteHNtyewRn2Rl MZA1dpIDBaHyY/eLhXlWSs2yeiILCTwZI4MpymvvJ47geQh+Ha5yt21kenYLGRF+ P1wxU9Mpdj6kydiFgrdGUosjIYpIxa2fK+T3b86vk1pXBoZaiJE88FE1+NH1/H/G oNhYRuJlM0P5953E8sy3jef58/HZqyoJ9MDxuLJcIRMLCmKnMIGwuYUfZWB6LEEq 8K7MMAcvGsscNHkxxHp0KPoAqGrKGxMS7zZS2zlOFBH1wG+238XqCBfuD05/hGtO Jng/A1DdqQ+e5Dxn8z/gcckT+r8Y7PYiFEYkn48ZowqkDRq0TFFG5Vjb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbKig0n1+saKpLNWEKKFJJYiTGoMB8GA1UdIwQY MBaAFJNsszbBvrcdT7uq4kOyM1LGJwBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUt NTlkNjBiZmYyMDVmLzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUtNTlkNjBiZmYyMDVm LzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEqs0EKa +or3bSaItowNIlNthk9Grc4Qk8gck6iMqTnPLCTJgdDaa1V4wd0y241PmEjoxL9z zB29YvpQtpXQOreQfl8CDZ+0ZQv2zPleZ5eNMA4VOTFXlzEqHeTNxMMH+uPysA4q Ay3nT37siqWbxiMKQ2gIVANe7nqO964ac3NyvBVM9zo4mXkYeyiz/r0SSaoPNbtY JGoWnmv/XuuaSopujI4ZIcj6b0GHDo9hxp1FaK9hhZqjoQcnomqUaX+toAQp+Vgq Uz/9EMptMF1u/d0o5RQeknu1lqbqZbAgS3Frrojh/yEtVRRaSEOH8K+/2kPj0fpu O91VWRqms3tUqw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:46:21 2025 by rpki-client