This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json) Hash identifier: XvWp86xzMkrYWxoxwV64msz5ZdLw5oMtW8ex3rPslx8= Subject key identifier: EF:72:0D:60:C2:BE:47:DD:6D:7B:B2:17:97:B6:43:92:9B:DF:31:D2 Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4 Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4 Certificate serial: 019AF1D1FAF5CAD9C1A0874BBB96E71771B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: zFTCIOavoSUAJRnRnoNaMwnMUSgTknAKERXIiBqGBhg=) 2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fa:f5:ca:d9:c1:a0:87:4b:bb:96:e7:17:71:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=ef720d60c2be47dd6d7bb21797b643929bdf31d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:09:fb:c0:7a:4b:19:5d:d7:52:d5:23:73: f9:b4:7b:20:a9:2f:00:43:1b:ea:39:13:8f:19:f6: 16:15:1c:e0:21:80:df:4b:30:07:f1:4e:fc:f8:29: 91:92:5b:fc:ff:70:28:e8:97:7f:af:2e:c4:0d:ef: a4:a9:8e:18:98:70:2d:07:8b:0f:ec:de:f8:d5:bc: 06:86:c6:bb:20:0f:ab:8e:1b:2d:f8:fe:6d:60:ce: c9:a4:d8:17:3c:78:0d:4a:52:95:46:c4:a8:f6:f9: fa:1e:55:a1:44:97:6a:23:99:34:41:8f:37:55:62: 3e:c3:2a:4a:0e:40:f6:c7:75:06:33:4a:b2:8e:8c: 68:eb:bb:57:7d:5e:39:bc:2a:19:02:51:e4:bd:e2: 63:b1:c9:b7:52:2c:07:c5:01:52:e7:f7:d6:a7:78: fc:ad:af:2d:0d:9f:b8:43:38:79:1f:b9:62:61:f6: aa:d5:b3:03:cd:01:02:3d:3a:92:b4:d8:e3:20:1a: 07:c2:ae:9b:ca:f6:fd:c8:d8:16:1b:13:34:d3:da: f5:c4:18:26:03:06:2c:4c:e4:2e:55:f9:68:95:fc: f7:c1:d6:65:a5:b1:1e:cd:26:8d:33:83:bf:c5:60: 9b:de:1b:63:79:f5:63:ae:5a:c7:a6:9b:fa:1c:95: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:72:0D:60:C2:BE:47:DD:6D:7B:B2:17:97:B6:43:92:9B:DF:31:D2 X509v3 Authority Key Identifier: keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:73:b4:ab:65:d5:21:08:34:02:e4:aa:21:31:2a:85:f6:4c: 53:c0:4c:28:a2:1f:a9:4b:56:28:6e:d2:08:19:76:76:c6:5f: 6f:c8:75:12:6d:59:cf:ef:21:ec:75:ce:71:67:3c:00:b0:65: 02:63:98:bd:ff:e9:d8:cf:78:92:d7:70:ca:61:e9:93:ae:6b: 65:cb:dd:81:44:a1:b3:73:07:17:a8:29:3b:89:f5:b2:cc:aa: 7f:31:1b:ba:91:00:92:03:7b:a2:0e:27:00:5e:26:cb:3a:93: f4:be:b5:d6:c7:d0:57:09:44:ad:b9:1f:4b:51:86:c3:d6:be: 7d:b6:08:d3:89:24:c2:1b:38:d0:22:d3:0a:f8:33:e0:d9:44: 45:22:55:c8:4c:9c:00:b7:49:c4:d0:2c:f0:1a:2c:2b:ba:e8: 6a:ca:cb:07:b4:c8:a3:f1:ba:f4:f4:ee:b5:17:c7:4e:30:66: ef:7c:63:be:e7:2f:67:c6:f8:fa:aa:b9:2a:46:f3:e1:32:27: 7b:a4:f3:e3:41:73:e1:30:56:6f:c6:02:4a:fc:06:cd:84:91: a9:d3:95:b4:b1:3f:f0:77:de:9b:2c:cc:ed:76:8d:9b:f8:c1: 72:00:58:b2:af:32:2c:e2:21:66:23:a0:f1:60:77:ae:c4:22: 7f:77:98:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fr1ytnBoIdLu5bnF3GyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjljOTJiYzA5YmY2YjhkYTY1MzNkZDdhN2IwYjFhNTdl NjVlYTQwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhlZjcyMGQ2MGMyYmU0N2RkNmQ3YmIyMTc5N2I2NDM5MjliZGYzMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DsJ+8B6Sxld11LVI3P5tHsgqS8A QxvqOROPGfYWFRzgIYDfSzAH8U78+CmRklv8/3Ao6Jd/ry7EDe+kqY4YmHAtB4sP 7N741bwGhsa7IA+rjhst+P5tYM7JpNgXPHgNSlKVRsSo9vn6HlWhRJdqI5k0QY83 VWI+wypKDkD2x3UGM0qyjoxo67tXfV45vCoZAlHkveJjscm3UiwHxQFS5/fWp3j8 ra8tDZ+4Qzh5H7liYfaq1bMDzQECPTqStNjjIBoHwq6byvb9yNgWGxM009r1xBgm AwYsTOQuVflolfz3wdZlpbEezSaNM4O/xWCb3htjefVjrlrHppv6HJVipwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9yDWDCvkfdbXuyF5e2Q5Kb3zHSMB8GA1UdIwQY MBaAFCtpySvAm/a42mUz3Xp7CxpX5l6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2Et MDg0YWFiYTBmNTg4LzEvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2EtMDg0YWFiYTBmNTg4 LzEvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHO0q2XV IQg0AuSqITEqhfZMU8BMKKIfqUtWKG7SCBl2dsZfb8h1Em1Zz+8h7HXOcWc8ALBl AmOYvf/p2M94ktdwymHpk65rZcvdgUShs3MHF6gpO4n1ssyqfzEbupEAkgN7og4n AF4myzqT9L611sfQVwlErbkfS1GGw9a+fbYI04kkwhs40CLTCvgz4NlERSJVyEyc ALdJxNAs8BosK7roasrLB7TIo/G69PTutRfHTjBm73xjvucvZ8b4+qq5Kkbz4TIn e6Tz40Fz4TBWb8YCSvwGzYSRqdOVtLE/8HfemyzM7XaNm/jBcgBYsq8yLOIhZiOg 8WB3rsQif3eYhw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:02 2025 by rpki-client