This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json) Hash identifier: QXpeR+UD1FlORb6NKx6Ex3xMScgtLwzt3I72rit82fQ= Subject key identifier: F6:D6:71:C5:A1:85:1A:D6:F2:BE:02:63:5B:05:20:9F:15:3D:7E:63 Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df Certificate serial: 019AF2401D9B064FB5AA1FD01A9C46B78568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft Manifest number: 0EFE Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=) 2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: DaTUcQAJQiRupOSXwliajN2gqTVyMVfoqG1V7xPus+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1d:9b:06:4f:b5:aa:1f:d0:1a:9c:46:b7:85:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=f6d671c5a1851ad6f2be02635b05209f153d7e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:5b:c2:d3:50:3a:f9:1e:04:00:39:f1:be: 41:9a:bb:e6:72:ab:79:85:77:63:ba:09:80:52:fb: 7b:c4:6b:99:1d:45:80:29:c1:fc:e9:fa:54:ab:e2: 37:64:34:16:b2:49:fb:87:9a:6a:06:aa:43:8f:b3: 38:cb:93:7e:48:f8:3b:37:22:da:24:d9:64:bd:6f: c5:0e:a2:60:ac:14:1b:42:a6:de:ba:04:b8:73:6a: 64:74:5c:0d:ab:4b:9c:14:41:a8:e4:ad:b4:89:36: 62:89:1b:cd:ee:63:6b:11:6d:f6:37:fe:f8:93:09: aa:fe:1f:70:33:77:bf:e1:e6:26:43:3e:81:6d:b2: e1:56:76:d8:18:a1:0b:35:66:2d:cf:42:ff:e7:2e: d0:9c:70:f2:96:f4:d7:32:7d:2f:1d:f3:ee:f3:d5: d6:09:bf:2d:5c:52:1f:33:f3:7e:b8:b6:c2:3d:07: 71:a2:16:c3:17:12:16:84:e9:cc:f9:0d:57:2b:13: 37:50:5e:3f:6a:4f:35:ee:06:59:5f:6a:8e:dc:77: ba:20:12:8a:68:4f:72:44:f2:25:b7:d7:40:58:fa: 39:91:d3:a5:6b:08:ae:7b:df:17:f9:56:b7:05:7a: bc:ba:48:8e:11:24:29:ab:99:9b:c6:eb:ea:ae:0a: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D6:71:C5:A1:85:1A:D6:F2:BE:02:63:5B:05:20:9F:15:3D:7E:63 X509v3 Authority Key Identifier: keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1b:4d:5c:f6:4c:98:a0:38:2b:fb:e9:3f:8f:71:73:0d:4d: b0:ac:bf:3e:03:28:76:9c:d5:30:37:2b:d8:8e:c6:14:ea:d0: 59:64:1a:83:69:9f:2e:5b:7f:40:37:a5:a5:7a:6f:75:d3:66: 8c:b6:b7:85:7b:0f:da:5e:26:4a:cb:1c:5a:fd:8a:37:c7:7f: da:b0:c7:c1:a3:20:e8:7e:d3:16:be:8e:b6:79:c5:b0:53:c9: 45:6f:63:f9:b8:e8:d6:2c:83:74:2a:c1:3f:cf:ab:51:af:48: 6f:1c:ca:db:55:00:fd:19:9a:12:5d:99:f7:6d:37:47:c2:d9: 8a:48:7a:b5:32:7c:f3:5d:a8:cd:2b:12:b9:07:fc:30:29:ac: b8:e7:b9:88:6b:fb:fe:a5:71:40:5c:c5:b7:af:4e:25:14:e7: bb:28:f3:30:c7:69:e8:5e:73:7e:88:3e:57:29:2e:45:33:9f: 13:18:96:ca:71:96:d0:8c:7c:8c:69:56:7e:e4:be:f6:08:8e: a5:48:b7:43:86:e0:d0:14:09:9c:31:52:cb:a9:2e:af:d0:3e: 48:26:57:ac:2f:b6:cf:9f:33:14:c3:4e:75:06:aa:1a:ed:b8: 3d:ae:98:0e:f6:8a:35:84:48:6d:28:7e:6f:d7:9e:7e:cb:f8: d4:f3:5d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB2bBk+1qh/QGpxGt4VoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjA4YTBjZGEwMTMzZjg3NmFiOWFkODNmYTM3YmNlZjYy ZGYyZGYwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD EyhmNmQ2NzFjNWExODUxYWQ2ZjJiZTAyNjM1YjA1MjA5ZjE1M2Q3ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryJbwtNQOvkeBAA58b5Bmrvmcqt5 hXdjugmAUvt7xGuZHUWAKcH86fpUq+I3ZDQWskn7h5pqBqpDj7M4y5N+SPg7NyLa JNlkvW/FDqJgrBQbQqbeugS4c2pkdFwNq0ucFEGo5K20iTZiiRvN7mNrEW32N/74 kwmq/h9wM3e/4eYmQz6BbbLhVnbYGKELNWYtz0L/5y7QnHDylvTXMn0vHfPu89XW Cb8tXFIfM/N+uLbCPQdxohbDFxIWhOnM+Q1XKxM3UF4/ak817gZZX2qO3He6IBKK aE9yRPIlt9dAWPo5kdOlawiue98X+Va3BXq8ukiOESQpq5mbxuvqrgqOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbWccWhhRrW8r4CY1sFIJ8VPX5jMB8GA1UdIwQY MBaAFJNgigzaATP4dqua2D+je872LfLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzIt N2Y4YmE5NmY1ZTQ5LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzItN2Y4YmE5NmY1ZTQ5 LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxtNXPZM mKA4K/vpP49xcw1NsKy/PgModpzVMDcr2I7GFOrQWWQag2mfLlt/QDelpXpvddNm jLa3hXsP2l4mSsscWv2KN8d/2rDHwaMg6H7TFr6OtnnFsFPJRW9j+bjo1iyDdCrB P8+rUa9IbxzK21UA/RmaEl2Z9203R8LZikh6tTJ8812ozSsSuQf8MCmsuOe5iGv7 /qVxQFzFt69OJRTnuyjzMMdp6F5zfog+VykuRTOfExiWynGW0Ix8jGlWfuS+9giO pUi3Q4bg0BQJnDFSy6kur9A+SCZXrC+2z58zFMNOdQaqGu24Pa6YDvaKNYRIbSh+ b9eefsv41PNdOA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:50 2025 by rpki-client