This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json) Hash identifier: XuSYKsPxTAauyHN1fx62RUPWZF83MA2K+4zzEpH+gRQ= Subject key identifier: 89:67:15:B8:CF:9C:64:25:B3:12:0A:D7:EF:29:C1:2D:2B:F7:7B:9D Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16 Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616 Certificate serial: 019AF16466AEABA63EC5D85FD6E494F4E867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa (hash: 0DuH9ZfW8f/p2+Moq7rG/7mXkezlodPdLgpnaG/Lc0I=) 2: UFOKhaK0v1gPCCQKJ0nfF2TPj8Q.roa (hash: gXk89omIH5bBJ5a1OXq1J0BsTh4qVLHTS/I1WBLRmYU=) 3: ZrKS833-z3Eio1cEs6mC2u69XvI.roa (hash: z4A6aCJBnlDjwJixWl3FAWoiLh9JN5kfRWL7hdBFHkM=) 4: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: 8xcWf5FbxYlfNH7omONcGfRwqE0Xr+SzLfOpzaf4uxs=) 5: x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa (hash: VX9BMxwn8E44ljUNBHA9sm5zOwxMI5hsQlaAlIe0HNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:66:ae:ab:a6:3e:c5:d8:5f:d6:e4:94:f4:e8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616 Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=896715b8cf9c6425b3120ad7ef29c12d2bf77b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:28:36:fc:e3:4c:eb:c2:0b:16:8f:57:13: 9c:9d:11:08:c1:ac:be:b6:8a:61:a8:c0:6f:b8:60: 40:56:20:83:a1:98:f7:23:39:57:ce:8f:da:bb:f5: 19:2d:26:25:6c:6a:e1:8a:3a:67:63:b5:d9:2d:3d: 85:a2:5e:8d:58:c3:6d:0c:a9:ef:ee:97:03:6e:4e: 83:03:60:d4:fd:f5:36:37:cc:91:1b:23:4e:cb:52: fc:fe:70:d9:52:16:12:37:96:2d:08:bc:2b:64:65: a6:dd:34:44:91:e0:17:6c:a7:dc:a1:97:03:43:bf: 64:c0:bd:6b:c1:8a:d0:64:7b:8b:9f:62:20:8e:7e: 39:fe:7b:ca:a5:47:94:e3:df:33:dd:2c:c5:d3:e0: 24:4b:86:81:31:33:89:27:76:94:5b:06:e3:4d:47: 97:7b:32:8d:0b:43:f3:4e:ae:0a:17:8a:82:77:57: f5:52:d9:04:22:b3:56:e2:73:1c:a0:b3:54:c4:af: 29:3c:a0:28:e8:03:35:d2:23:bf:8c:7d:27:9f:e6: 91:f5:9d:1a:2b:44:56:02:e8:76:ab:d6:d7:eb:f3: 49:a0:01:b6:db:0b:a3:d0:0b:70:42:13:85:25:bf: 29:0d:69:2d:05:40:b5:78:68:26:e7:19:06:bd:fb: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:67:15:B8:CF:9C:64:25:B3:12:0A:D7:EF:29:C1:2D:2B:F7:7B:9D X509v3 Authority Key Identifier: keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ae:31:41:80:d1:a4:68:a3:5f:18:89:22:ad:6a:93:f1:08: c0:b3:1c:f2:bc:d5:c1:04:b2:a9:45:90:26:ab:11:fa:3e:a3: 75:d9:f4:99:7b:7d:0e:0a:e5:36:88:e0:59:b3:58:3e:70:85: 6d:74:9c:07:82:f4:49:8b:b4:a4:ce:63:c5:ba:75:4e:aa:eb: 5a:c4:13:35:37:3c:31:f7:58:ec:e4:cd:9d:66:6c:3d:d0:8a: a5:36:43:2b:93:80:50:19:87:b8:2b:53:15:c2:35:08:da:51: 63:df:75:e0:f6:13:fb:a1:da:80:60:51:d4:38:c7:4f:e8:39: 63:20:20:9a:f1:88:91:ed:6c:53:6c:9e:9a:04:fc:f8:15:3a: 4f:ef:7a:47:da:60:af:6b:4b:04:81:a4:25:e8:a3:05:10:4f: 2d:94:93:c7:f1:6c:61:92:8b:6b:57:b7:a1:46:d8:c6:17:85: f4:2d:ab:75:41:37:ed:34:ef:5e:bb:7a:a7:10:ab:c2:90:25: 24:90:b5:97:f2:5e:f5:72:e2:64:be:90:0a:d8:79:4a:6c:fb: e1:a1:f0:7d:e3:59:96:e6:94:9a:68:0d:a5:ed:0c:63:81:52: f0:cd:7f:bb:16:1d:4d:f5:5a:f4:ba:b7:2e:83:6a:ab:62:5d: cf:1d:52:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGauq6Y+xdhf1uSU9OhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNzJiNjBmNWZiNDkzMDAxNmNlYjg2MGNjMTc0YTUzMTM1 ZjE2MTYwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD Eyg4OTY3MTViOGNmOWM2NDI1YjMxMjBhZDdlZjI5YzEyZDJiZjc3YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlooNvzjTOvCCxaPVxOcnREIway+ tophqMBvuGBAViCDoZj3IzlXzo/au/UZLSYlbGrhijpnY7XZLT2Fol6NWMNtDKnv 7pcDbk6DA2DU/fU2N8yRGyNOy1L8/nDZUhYSN5YtCLwrZGWm3TREkeAXbKfcoZcD Q79kwL1rwYrQZHuLn2Igjn45/nvKpUeU498z3SzF0+AkS4aBMTOJJ3aUWwbjTUeX ezKNC0PzTq4KF4qCd1f1UtkEIrNW4nMcoLNUxK8pPKAo6AM10iO/jH0nn+aR9Z0a K0RWAuh2q9bX6/NJoAG22wuj0AtwQhOFJb8pDWktBUC1eGgm5xkGvfvAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlnFbjPnGQlsxIK1+8pwS0r93udMB8GA1UdIwQY MBaAFIpytg9ftJMAFs64YMwXSlMTXxYWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQt ZTA4NTA1YzkxMDY2LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MWZlODktMDhkNi00NGY4LWI3NTQtZTA4NTA1YzkxMDY2 LzEvaW5LMkQxLTBrd0FXenJoZ3pCZEtVeE5mRmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtK4xQYDR pGijXxiJIq1qk/EIwLMc8rzVwQSyqUWQJqsR+j6jddn0mXt9DgrlNojgWbNYPnCF bXScB4L0SYu0pM5jxbp1TqrrWsQTNTc8MfdY7OTNnWZsPdCKpTZDK5OAUBmHuCtT FcI1CNpRY9914PYT+6HagGBR1DjHT+g5YyAgmvGIke1sU2yemgT8+BU6T+96R9pg r2tLBIGkJeijBRBPLZSTx/FsYZKLa1e3oUbYxheF9C2rdUE37TTvXrt6pxCrwpAl JJC1l/Je9XLiZL6QCth5Smz74aHwfeNZluaUmmgNpe0MY4FS8M1/uxYdTfVa9Lq3 LoNqq2Jdzx1S1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:46 2025 by rpki-client