This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json) Hash identifier: YsA4G5tZ2u+28A0BWH9NEPRJnHFs/ERRrZD8eLNexIs= Subject key identifier: C8:F1:88:53:5C:4A:B1:F2:66:15:8E:C0:A9:1D:F2:63:6B:43:77:A9 Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Certificate serial: 019AF23F7C63386D6F7F45C49E8147F35C0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft Manifest number: 0331 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: O82ULozXMMR58fZOOt5gJBIjqVNBA7naDBjl44BkxCs=) 2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7c:63:38:6d:6f:7f:45:c4:9e:81:47:f3:5c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=c8f188535c4ab1f266158ec0a91df2636b4377a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:9d:55:64:22:72:9d:17:8b:4a:6d:01:c4: db:19:fd:04:60:ee:31:ac:55:ad:34:fd:8f:f6:92: 9f:77:4a:49:78:f9:f3:21:8a:62:d6:e0:3b:41:48: 0e:7d:7b:cb:e7:93:65:a0:c3:11:4b:fd:69:13:0b: 7a:f9:cc:97:ec:aa:08:ec:7b:7f:7e:9b:d3:20:f7: 63:98:85:76:1b:71:0c:0b:97:b4:6e:e5:e6:0f:c3: 88:84:1d:5f:d7:48:c2:39:79:87:2f:a2:ae:f1:df: ca:cf:57:21:04:e0:ee:66:50:f4:65:51:46:9a:96: 9a:19:05:ee:12:49:33:d8:4d:1c:f3:25:2e:23:95: de:be:7c:c8:df:d1:ff:df:23:73:82:e8:f2:5a:87: 7f:73:0d:d4:a8:25:fd:de:b1:bb:10:aa:cc:80:0a: fc:b3:c3:36:9e:97:c5:2f:6e:13:ca:29:41:df:19: fd:66:e1:1a:d2:a1:73:d2:53:ce:35:ab:aa:e0:b6: 4d:ec:f0:40:27:ad:b7:f3:f2:46:ff:15:5c:c7:b9: 3c:66:95:9e:48:47:1e:94:a0:e6:0e:42:76:40:7e: cb:39:4a:bd:f8:4c:70:dc:b9:6f:94:f3:8d:3f:88: 90:f9:de:90:23:90:7e:98:70:9e:7a:4f:82:0b:8d: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F1:88:53:5C:4A:B1:F2:66:15:8E:C0:A9:1D:F2:63:6B:43:77:A9 X509v3 Authority Key Identifier: keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ad:d1:98:90:4a:7f:3f:98:c2:f0:d0:b6:83:65:4e:84:5e: 24:7c:5f:cd:2f:93:23:32:e0:96:6a:b4:21:b9:2b:92:51:50: e4:ae:12:95:a1:64:40:98:03:23:5d:3f:88:b9:e2:92:03:e1: e9:d0:4f:16:c6:47:d8:ba:74:fd:67:7c:c9:71:54:8f:6f:02: 3d:62:ef:bb:e7:be:86:f4:c0:6a:9c:50:f8:ac:b1:94:a5:dd: fb:97:1a:8c:cc:ec:45:fd:28:84:b1:c1:9d:ec:c9:06:2a:d9: 5e:f3:4d:fe:4e:de:fc:b9:f6:fb:08:34:9d:d6:c5:ba:de:59: 03:2b:2d:e0:ba:59:64:af:1d:c9:47:ed:67:17:26:33:17:73: 82:cf:bf:af:a4:de:5d:23:05:76:ee:0f:2b:1b:40:8f:19:eb: f5:de:e7:1b:46:da:f4:bb:f0:40:25:42:0f:79:a0:88:5f:01: 65:6c:06:34:7c:e6:c9:32:c7:19:a1:2b:67:91:32:a1:00:a6: 62:da:1a:d7:7d:55:ac:c7:c9:d5:3f:b7:79:45:a7:5b:9c:ae: 46:a1:8e:33:f7:b7:9e:17:76:19:5e:76:2f:17:fe:b1:e3:d1: a3:4c:f3:90:a4:76:44:e5:41:e9:6f:07:b5:71:dc:8f:c7:fd: df:08:3c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3xjOG1vf0XEnoFH81wNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj NzkwYzkwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD EyhjOGYxODg1MzVjNGFiMWYyNjYxNThlYzBhOTFkZjI2MzZiNDM3N2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5SdVWQicp0Xi0ptAcTbGf0EYO4x rFWtNP2P9pKfd0pJePnzIYpi1uA7QUgOfXvL55NloMMRS/1pEwt6+cyX7KoI7Ht/ fpvTIPdjmIV2G3EMC5e0buXmD8OIhB1f10jCOXmHL6Ku8d/Kz1chBODuZlD0ZVFG mpaaGQXuEkkz2E0c8yUuI5XevnzI39H/3yNzgujyWod/cw3UqCX93rG7EKrMgAr8 s8M2npfFL24TyilB3xn9ZuEa0qFz0lPONauq4LZN7PBAJ6238/JG/xVcx7k8ZpWe SEcelKDmDkJ2QH7LOUq9+Exw3LlvlPONP4iQ+d6QI5B+mHCeek+CC40oAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjxiFNcSrHyZhWOwKkd8mNrQ3epMB8GA1UdIwQY MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQa3RmJBK fz+YwvDQtoNlToReJHxfzS+TIzLglmq0IbkrklFQ5K4SlaFkQJgDI10/iLnikgPh 6dBPFsZH2Lp0/Wd8yXFUj28CPWLvu+e+hvTAapxQ+KyxlKXd+5cajMzsRf0ohLHB nezJBirZXvNN/k7e/Ln2+wg0ndbFut5ZAyst4LpZZK8dyUftZxcmMxdzgs+/r6Te XSMFdu4PKxtAjxnr9d7nG0ba9LvwQCVCD3mgiF8BZWwGNHzmyTLHGaErZ5EyoQCm Ytoa131VrMfJ1T+3eUWnW5yuRqGOM/e3nhd2GV52Lxf+sePRo0zzkKR2ROVB6W8H tXHcj8f93wg8aA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:17 2025 by rpki-client