This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json) Hash identifier: nwl4DDFUZbITxMNmY7TBnCEP1OTkDebelOhLl9GcsJc= Subject key identifier: 38:0B:28:DF:5F:74:6F:5E:A1:37:2E:58:BB:0A:CA:27:00:8D:C8:16 Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b Certificate serial: 019AF46508B5D010C6A2639A6FB4B6D2DDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft Manifest number: 151E Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: 3IGB1krj8z+ZI/Bzr+L6v+WF2FXLSnEYgdMbZCfS0BY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:08:b5:d0:10:c6:a2:63:9a:6f:b4:b6:d2:dd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=380b28df5f746f5ea1372e58bb0aca27008dc816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:68:ac:89:83:0e:b7:ab:fa:5c:46:eb:d2: bb:af:22:d8:c9:c2:15:f7:b4:ea:20:e5:cf:d2:00: aa:18:31:54:bc:76:07:6d:e3:59:d8:69:ad:8c:6a: d1:12:c3:b3:91:05:a0:81:73:31:54:75:04:44:83: aa:4f:0b:72:40:43:82:a8:8c:85:f3:19:e4:07:73: 37:05:a7:a8:5c:40:ce:be:eb:96:21:5f:a7:75:d4: 78:e7:7b:6f:b9:38:d3:61:3b:40:0d:74:db:69:2f: 9f:61:e2:bb:e1:0c:71:38:4d:0e:3a:89:f6:72:13: ee:44:35:e0:06:50:20:b4:f0:25:05:bc:09:43:2d: 52:e5:1c:a2:65:a1:89:11:f8:7c:ba:4f:5a:2e:1b: 30:32:ab:8b:a9:80:43:36:7a:26:b0:30:f2:d0:f3: 8f:a8:32:b0:25:59:66:31:43:4f:01:0a:a9:6d:00: a0:e3:ea:ac:da:d5:d8:af:d2:bd:6b:1d:f5:5f:c8: 85:70:f2:67:4a:37:2a:ff:7a:6e:41:bc:c7:ea:a1: cb:6c:a8:3b:63:66:90:6f:b1:fa:0b:80:05:b0:bf: 64:d7:7d:d6:56:a7:aa:c3:c5:e6:ce:f2:09:82:c8: af:82:33:6e:90:42:55:33:89:7a:41:ec:7f:d3:70: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0B:28:DF:5F:74:6F:5E:A1:37:2E:58:BB:0A:CA:27:00:8D:C8:16 X509v3 Authority Key Identifier: keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e8:2c:0e:7f:f9:4a:70:50:5b:d9:4e:39:a5:b0:28:08:e5: 16:dd:13:fb:b3:3c:74:0b:e2:7a:fa:a4:ad:aa:a7:d6:28:13: 99:af:d1:26:8d:77:ee:5c:61:07:ee:ad:ed:79:f1:78:17:84: 9e:0c:99:be:41:13:4b:2f:42:62:d5:1d:9e:02:c1:29:2a:09: db:08:f2:4f:57:25:67:f9:e2:7c:65:6c:21:40:0d:21:7e:38: 81:34:40:74:a0:56:7f:96:50:7c:e6:5d:c5:78:05:50:2b:55: 90:85:25:a2:10:7e:5b:ad:68:8c:06:8b:e1:d7:7b:51:e7:b2: f0:d0:fe:04:0e:95:3c:29:18:28:33:01:17:cd:09:7f:63:b6: 5a:b6:5c:5a:6c:e9:f1:4a:de:ed:f2:31:64:fa:69:d4:99:69: b0:08:8e:97:30:98:d8:c2:a6:22:5a:59:9d:22:e8:28:46:83: 67:5d:d4:8a:53:14:dd:a5:21:cd:36:8a:12:04:53:8d:1d:f8: ed:5c:54:cb:49:3f:61:c3:09:93:69:92:37:8e:dc:98:36:85: 1a:4a:d1:e0:cc:8b:99:d5:1d:b7:7d:ea:65:ba:f7:b2:10:11: 41:eb:12:0f:28:1a:42:f1:c7:65:b5:ad:5a:37:48:73:2d:9c: 31:6c:c5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQi10BDGomOab7S20t3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjA1NTYwY2IxZjUzZDY5OGJhN2E3ODViMDJmMjQ4ZWEy YTJjN2IwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD EygzODBiMjhkZjVmNzQ2ZjVlYTEzNzJlNThiYjBhY2EyNzAwOGRjODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYlorImDDrer+lxG69K7ryLYycIV 97TqIOXP0gCqGDFUvHYHbeNZ2GmtjGrREsOzkQWggXMxVHUERIOqTwtyQEOCqIyF 8xnkB3M3BaeoXEDOvuuWIV+nddR453tvuTjTYTtADXTbaS+fYeK74QxxOE0OOon2 chPuRDXgBlAgtPAlBbwJQy1S5RyiZaGJEfh8uk9aLhswMquLqYBDNnomsDDy0POP qDKwJVlmMUNPAQqpbQCg4+qs2tXYr9K9ax31X8iFcPJnSjcq/3puQbzH6qHLbKg7 Y2aQb7H6C4AFsL9k133WVqeqw8XmzvIJgsivgjNukEJVM4l6Qex/03AVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgLKN9fdG9eoTcuWLsKyicAjcgWMB8GA1UdIwQY MBaAFJNgVWDLH1PWmLp6eFsC8kjqKix7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82OWQ2MDUtNmUxNi00OGY3LWIxNzEt ZDZlODMwMGZjMTk1LzEvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82OWQ2MDUtNmUxNi00OGY3LWIxNzEtZDZlODMwMGZjMTk1 LzEvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+gsDn/5 SnBQW9lOOaWwKAjlFt0T+7M8dAvievqkraqn1igTma/RJo137lxhB+6t7XnxeBeE ngyZvkETSy9CYtUdngLBKSoJ2wjyT1clZ/nifGVsIUANIX44gTRAdKBWf5ZQfOZd xXgFUCtVkIUlohB+W61ojAaL4dd7Ueey8ND+BA6VPCkYKDMBF80Jf2O2WrZcWmzp 8Ure7fIxZPpp1JlpsAiOlzCY2MKmIlpZnSLoKEaDZ13UilMU3aUhzTaKEgRTjR34 7VxUy0k/YcMJk2mSN47cmDaFGkrR4MyLmdUdt33qZbr3shARQesSDygaQvHHZbWt WjdIcy2cMWzF2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:01 2025 by rpki-client