This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft File: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft (raw, json) Hash identifier: Mw38P4waYmgw9Z6PY44kLIzYGvR33+2EYWF6vJHRngk= Subject key identifier: BE:5C:0B:CA:53:4C:C5:41:F3:24:AD:5F:40:25:02:BA:89:C4:B6:F1 Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D Certificate issuer: /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d Certificate serial: 019AF208A301E99B01FFB0C7EFD09D834BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft Manifest number: 0921 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: 72kD6ayiwmeGoKhRrPZ__Tt9XCE.roa (hash: NSNmGWvd47OdXbtIhhCClOKph/GtDH8ixZuXdVjE5+w=) 2: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl (hash: xO17zUX1lWzjJ9HSgatqFYHFaGvvxhDgW80M4WW2GdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a3:01:e9:9b:01:ff:b0:c7:ef:d0:9d:83:4b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=be5c0bca534cc541f324ad5f402502ba89c4b6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:5f:60:fa:79:b5:8c:3b:ed:49:02:8b:5a: 45:13:d9:2e:9a:13:89:0e:08:66:5a:2e:09:e4:b1: 02:8b:c2:a8:d3:f7:6f:70:91:85:64:fb:8e:13:85: 94:ef:56:8d:d1:a2:cb:67:58:1e:b7:7c:27:be:ac: d4:46:00:6f:d0:60:9c:34:20:b9:c0:10:25:43:32: d5:ed:9e:c6:47:5e:5d:e5:43:f0:d4:28:9d:0b:17: 68:72:4b:52:c3:3a:f4:6a:9f:1e:c2:b7:b0:73:4a: 83:45:c3:1b:2d:f7:19:a8:a3:85:d2:fd:c3:f1:48: ca:6e:03:e7:59:d3:20:c7:ed:fc:2c:d7:bc:ad:22: 0f:51:a1:6e:6b:86:f2:dd:b7:24:33:eb:95:0d:91: 2a:be:83:72:1c:2b:d0:5d:7f:04:5d:8d:cc:c2:62: bc:2b:51:ff:1a:34:62:eb:83:7d:a0:b4:e9:50:1e: 1b:8b:00:59:32:47:d9:3a:32:ac:bf:f8:f3:56:73: 33:ac:55:80:c0:e8:22:25:dc:88:f4:dd:97:86:9c: 46:b3:06:e2:d7:ad:40:e3:99:e4:51:8f:8b:17:d3: 6c:ec:d2:65:1b:9e:97:0c:52:4b:4b:3c:d6:15:8a: de:a9:6a:c0:25:a4:ea:33:05:2b:6d:c1:63:35:5a: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5C:0B:CA:53:4C:C5:41:F3:24:AD:5F:40:25:02:BA:89:C4:B6:F1 X509v3 Authority Key Identifier: keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:54:3b:48:dc:68:ca:71:05:9a:c6:74:e0:3a:c4:28:a0:04: 18:aa:61:41:a7:d5:c9:07:d8:de:6a:1c:83:bb:f1:67:7c:c9: 55:20:a3:db:4b:0b:19:d4:6d:2c:60:e2:d2:89:06:4e:25:13: 42:9a:7f:3b:08:bb:13:09:cb:68:8c:b9:81:40:df:5c:82:a7: 74:31:92:88:7d:06:d1:68:a2:5f:99:b1:6b:01:d9:16:38:92: cb:e7:7c:88:41:4d:d9:5a:b6:8d:8d:55:bd:8d:08:96:13:5d: 2b:34:dd:14:20:8a:73:b9:9f:4f:85:cf:74:60:55:ae:92:33: 63:c9:7e:e1:ca:b7:c1:8a:f3:17:2d:31:f4:41:1e:2d:ab:ec: 32:84:a3:be:d5:49:23:41:d1:22:fe:85:ae:6a:90:ff:9e:22: 81:b2:0c:b7:a3:50:7e:2e:5a:75:06:7e:e7:e0:a5:42:3b:ea: 04:fd:bc:5b:da:9c:4b:de:93:bd:52:1a:09:f8:cb:d2:fe:7c: c7:9a:be:e4:82:05:fd:66:ef:3c:a3:6a:ff:85:5f:96:7d:10: d8:66:df:a7:71:77:1c:57:04:4b:b7:53:df:5b:48:d5:a0:9f: 7b:b5:21:0a:b9:20:6a:44:5a:cc:fb:4b:4a:82:1d:6a:21:4c: 0f:9b:6d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKMB6ZsB/7DH79Cdg0vQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjU2ZmI1ODYwYzlkM2NmY2IzNTY1ODU0MGM3MjMwYTBi YTFlOGQwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EyhiZTVjMGJjYTUzNGNjNTQxZjMyNGFkNWY0MDI1MDJiYTg5YzRiNmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCNfYPp5tYw77UkCi1pFE9kumhOJ DghmWi4J5LECi8Ko0/dvcJGFZPuOE4WU71aN0aLLZ1get3wnvqzURgBv0GCcNCC5 wBAlQzLV7Z7GR15d5UPw1CidCxdocktSwzr0ap8ewrewc0qDRcMbLfcZqKOF0v3D 8UjKbgPnWdMgx+38LNe8rSIPUaFua4by3bckM+uVDZEqvoNyHCvQXX8EXY3MwmK8 K1H/GjRi64N9oLTpUB4biwBZMkfZOjKsv/jzVnMzrFWAwOgiJdyI9N2XhpxGswbi 161A45nkUY+LF9Ns7NJlG56XDFJLSzzWFYreqWrAJaTqMwUrbcFjNVqOFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5cC8pTTMVB8yStX0AlArqJxLbxMB8GA1UdIwQY MBaAFJNlb7WGDJ08/LNWWFQMcjCguh6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJWdnRZWU1uVHo4czFaWVZBeHlNS0M2SG8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85NzkxNGItZWI2Mi00NmQxLWE5ZDQt MDViZjgxYjQyOThiLzEvazJWdnRZWU1uVHo4czFaWVZBeHlNS0M2SG8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My85NzkxNGItZWI2Mi00NmQxLWE5ZDQtMDViZjgxYjQyOThi LzEvazJWdnRZWU1uVHo4czFaWVZBeHlNS0M2SG8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1Q7SNxo ynEFmsZ04DrEKKAEGKphQafVyQfY3mocg7vxZ3zJVSCj20sLGdRtLGDi0okGTiUT Qpp/Owi7EwnLaIy5gUDfXIKndDGSiH0G0WiiX5mxawHZFjiSy+d8iEFN2Vq2jY1V vY0IlhNdKzTdFCCKc7mfT4XPdGBVrpIzY8l+4cq3wYrzFy0x9EEeLavsMoSjvtVJ I0HRIv6FrmqQ/54igbIMt6NQfi5adQZ+5+ClQjvqBP28W9qcS96TvVIaCfjL0v58 x5q+5IIF/WbvPKNq/4Vfln0Q2Gbfp3F3HFcES7dT31tI1aCfe7UhCrkgakRazPtL SoIdaiFMD5tt1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:47:53 2025 by rpki-client