This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json) Hash identifier: r1QB7Lx5Iat3EAW5NHWmeMN+V6FJTeqaMEpwEXQSrjM= Subject key identifier: 97:2B:27:CE:E7:B6:D1:A8:65:0C:BD:16:3C:01:F0:DC:51:01:DC:11 Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af Certificate serial: 019AF12ECDD84A9A821CB46F8AD5439C6A85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: caqwdp11zAlgJSTzUZ4WFAkCa6b5u2v3ZixK+WjRMpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cd:d8:4a:9a:82:1c:b4:6f:8a:d5:43:9c:6a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=972b27cee7b6d1a8650cbd163c01f0dc5101dc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:97:64:08:8d:42:1d:95:3c:ad:19:77:34: 70:3e:9f:68:a8:dc:6d:3f:38:4c:f6:84:78:40:9b: 27:53:55:7d:6f:55:db:2e:83:4b:73:82:5b:a3:48: 79:04:94:db:29:2e:86:c6:32:60:22:4c:ec:14:32: 0d:e6:63:34:05:e2:02:4e:9f:26:d3:55:c6:00:34: a9:7b:fa:98:be:a1:61:3f:6f:a1:e1:ca:30:24:ea: c4:17:e4:41:87:52:f1:31:57:48:ff:1c:3f:d9:14: ad:0c:b3:d9:4d:6d:5a:c1:08:4c:89:86:11:14:a9: ec:b0:9a:32:1f:80:8e:0f:e7:33:e5:2e:ff:cc:65: 0e:ef:13:88:8b:eb:da:21:92:fa:64:ee:64:66:38: ab:5c:49:d0:0f:e7:93:bd:12:c0:b3:e6:b7:4c:4f: 5c:3a:2d:58:5a:ea:ad:9b:d9:2e:f6:12:af:8a:7c: 94:39:81:e5:e2:04:ac:03:57:dc:bf:cb:43:ec:7f: 1e:2a:0f:5c:46:38:73:33:e1:86:5f:4d:88:31:aa: 1d:23:f5:fb:40:47:fe:40:b3:9f:75:19:47:5f:24: 5f:29:cb:58:9e:62:cb:20:fb:b0:bd:7b:09:12:3c: 3e:a9:80:c4:e7:a1:a2:13:4d:62:61:01:c4:00:65: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2B:27:CE:E7:B6:D1:A8:65:0C:BD:16:3C:01:F0:DC:51:01:DC:11 X509v3 Authority Key Identifier: keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:64:fd:3d:8f:91:f6:0b:9c:6a:fd:0d:0a:12:27:01:60:b4: 9d:79:91:3f:9d:ec:06:de:38:f4:cd:2f:c7:16:f5:37:4f:bb: 75:6d:a8:a2:dc:fa:9e:27:0a:1f:13:73:b9:42:28:4e:88:95: b1:4e:17:d7:3b:5f:d6:22:50:04:cd:14:ce:9a:55:98:17:25: af:61:ca:5b:cb:7c:9d:15:60:c0:a4:38:2a:5c:c8:43:4d:b8: 65:0d:ab:18:cf:d7:a2:2f:65:a0:f2:fc:9f:46:b5:73:1a:67: 9c:1e:61:59:e0:9c:ae:d1:38:d1:65:bb:9e:3d:f3:a2:df:6c: 3b:c2:d0:4a:f4:7a:d9:20:7e:a6:74:7a:38:36:6a:63:7c:21: 72:b3:f2:9d:84:ea:a3:60:39:78:fa:df:48:5a:bc:b2:8b:46: fa:d7:5d:95:d2:a3:9d:6d:00:74:d8:83:99:76:7e:dc:44:22: 9d:cd:e0:99:a4:1a:08:a4:94:9b:99:a9:21:98:f3:93:4c:af: 0c:0c:ec:f8:b5:ee:bb:d9:bb:2d:1f:77:5c:5e:4d:e1:9b:3b: ed:15:24:83:ce:a5:ae:2c:35:f9:f4:3a:6f:4e:d2:ce:8e:3f: bd:23:dc:b5:ff:19:94:43:f5:b8:da:d6:1c:d4:e4:0b:34:d1: 43:2c:91:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLs3YSpqCHLRvitVDnGqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTAxM2EzNmU2MWJlYzQwYTEyYTBlNDFjNDhmMTkxODYz MDcxYWYwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD Eyg5NzJiMjdjZWU3YjZkMWE4NjUwY2JkMTYzYzAxZjBkYzUxMDFkYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP+XZAiNQh2VPK0ZdzRwPp9oqNxt PzhM9oR4QJsnU1V9b1XbLoNLc4Jbo0h5BJTbKS6GxjJgIkzsFDIN5mM0BeICTp8m 01XGADSpe/qYvqFhP2+h4cowJOrEF+RBh1LxMVdI/xw/2RStDLPZTW1awQhMiYYR FKnssJoyH4COD+cz5S7/zGUO7xOIi+vaIZL6ZO5kZjirXEnQD+eTvRLAs+a3TE9c Oi1YWuqtm9ku9hKvinyUOYHl4gSsA1fcv8tD7H8eKg9cRjhzM+GGX02IMaodI/X7 QEf+QLOfdRlHXyRfKctYnmLLIPuwvXsJEjw+qYDE56GiE01iYQHEAGV9OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcrJ87nttGoZQy9FjwB8NxRAdwRMB8GA1UdIwQY MBaAFCtQE6NuYb7EChKg5BxI8ZGGMHGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUt ZjQzMmU5ZDhjNGQ3LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xNmFkOGYtMWYxMy00NjlhLWE3ZjUtZjQzMmU5ZDhjNGQ3 LzEvSzFBVG8yNWh2c1FLRXFEa0hFanhrWVl3Y2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2T9PY+R 9gucav0NChInAWC0nXmRP53sBt449M0vxxb1N0+7dW2ootz6nicKHxNzuUIoToiV sU4X1ztf1iJQBM0UzppVmBclr2HKW8t8nRVgwKQ4KlzIQ024ZQ2rGM/Xoi9loPL8 n0a1cxpnnB5hWeCcrtE40WW7nj3zot9sO8LQSvR62SB+pnR6ODZqY3whcrPynYTq o2A5ePrfSFq8sotG+tddldKjnW0AdNiDmXZ+3EQinc3gmaQaCKSUm5mpIZjzk0yv DAzs+LXuu9m7LR93XF5N4Zs77RUkg86lriw1+fQ6b07Szo4/vSPctf8ZlEP1uNrW HNTkCzTRQyyRGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:39 2025 by rpki-client