This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json) Hash identifier: PzMGTDlj9OtrgiKrgQUfY7ocTVh+/Q9WKooFdquEFt0= Subject key identifier: 3E:05:42:0F:CE:AB:71:AA:CD:29:64:DA:7F:76:B2:39:0F:5A:77:16 Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f Certificate serial: 019AF12D7F594A702E38EB5F00A06AA37340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft Manifest number: 087A Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: h7yBqn91DNIXMdt3bGWaZuu5rG24+Bru7fDiV4lzaEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7f:59:4a:70:2e:38:eb:5f:00:a0:6a:a3:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=3e05420fceab71aacd2964da7f76b2390f5a7716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:9f:2b:24:61:e5:3c:a2:1c:a2:20:b8:e5: 4a:64:b6:03:bc:8f:fa:f9:38:53:c5:63:18:af:56: e7:20:00:8e:56:6b:e0:56:5c:7d:3d:c1:00:27:2f: a0:ed:1a:65:9e:32:a6:ab:56:3b:4b:00:0e:fe:82: be:88:cb:c0:e4:cb:0f:b0:e7:b4:17:c3:18:ea:46: be:32:11:46:04:87:f3:67:2c:c3:97:bb:e7:7e:d5: e0:13:ca:d6:39:b5:5f:5c:ac:35:32:69:0c:ef:ee: 15:43:9a:09:5e:59:eb:11:cd:74:f9:76:f2:4d:a8: 0b:19:5e:40:0d:4a:bb:a0:ca:58:fd:99:1b:97:65: df:28:92:a4:3e:69:03:c5:16:70:4c:2e:a9:64:b4: 73:a0:e7:36:e4:68:57:5f:eb:bc:97:32:f6:db:4d: 54:87:ae:13:dd:7f:0c:02:bc:1b:11:bb:cd:f8:29: bb:a6:fa:2d:7e:a1:3f:31:f4:98:c1:30:f3:ad:04: f5:34:38:41:e7:7e:da:81:b8:b9:d0:43:70:0f:89: 28:57:a6:cb:fc:d1:73:b3:37:70:13:4f:7d:b7:5f: c7:7d:1d:2f:f9:fb:01:6a:a8:f1:5f:07:aa:fb:b1: 99:f8:4b:17:3f:6a:14:ef:82:dd:3f:9c:76:84:f8: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:42:0F:CE:AB:71:AA:CD:29:64:DA:7F:76:B2:39:0F:5A:77:16 X509v3 Authority Key Identifier: keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:26:0a:10:fa:84:31:4c:a7:03:fd:da:71:14:82:45:24:dc: df:e9:20:5f:0c:1d:d8:e8:cc:71:32:21:df:cf:e3:a4:08:15: aa:43:40:83:fa:dc:62:74:f5:a5:10:e2:71:08:5c:02:6d:5f: 4e:13:b2:66:06:31:86:98:17:47:a5:c1:25:91:c9:39:03:d5: 0f:b7:f7:55:b6:07:40:0b:a5:b7:67:33:c9:a5:40:da:4e:a1: c8:62:bc:d9:fd:88:06:09:81:3b:9c:a2:f2:3d:ac:b1:61:c5: 9e:b9:e2:e0:34:95:0a:09:b4:df:fe:2a:70:21:c7:74:77:3a: cf:06:f1:87:ad:b8:5b:78:3a:06:f6:bb:2e:9c:97:de:ef:a4: a2:6c:92:e9:fb:6f:fe:64:eb:56:47:76:40:4b:62:02:e2:3a: 58:c0:55:ab:c8:ff:05:d4:a3:d1:1f:37:48:81:d2:e8:81:da: 8e:a1:0f:cc:f0:ce:3c:af:e8:e9:38:65:8b:f3:d5:04:2e:28: 22:ab:ee:f6:cb:b0:ea:38:d8:13:10:9b:71:4c:6e:72:bc:bc: e9:5b:c9:ab:f2:77:9e:55:ec:70:6f:a9:b5:35:d1:37:65:1f: 2d:b8:3b:d8:0a:45:85:47:ac:3f:40:65:8b:f3:14:ac:15:0a: e2:73:97:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX9ZSnAuOOtfAKBqo3NAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNTdiMGRiMDAxNmZlNjI1MDk1ZGYwYzZlNTdmZTA3ZjFj ZjI4OWYwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD EygzZTA1NDIwZmNlYWI3MWFhY2QyOTY0ZGE3Zjc2YjIzOTBmNWE3NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfmfKyRh5TyiHKIguOVKZLYDvI/6 +ThTxWMYr1bnIACOVmvgVlx9PcEAJy+g7RplnjKmq1Y7SwAO/oK+iMvA5MsPsOe0 F8MY6ka+MhFGBIfzZyzDl7vnftXgE8rWObVfXKw1MmkM7+4VQ5oJXlnrEc10+Xby TagLGV5ADUq7oMpY/Zkbl2XfKJKkPmkDxRZwTC6pZLRzoOc25GhXX+u8lzL2201U h64T3X8MArwbEbvN+Cm7pvotfqE/MfSYwTDzrQT1NDhB537agbi50ENwD4koV6bL /NFzszdwE099t1/HfR0v+fsBaqjxXweq+7GZ+EsXP2oU74LdP5x2hPijiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4FQg/Oq3GqzSlk2n92sjkPWncWMB8GA1UdIwQY MBaAFCtXsNsAFv5iUJXfDG5X/gfxzyifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzFldzJ3QVdfbUpRbGQ4TWJsZi1CX0hQS0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjc0NmUtY2FjOC00NWQzLWEyNTgt ZjQ0ZjM1YjdhOTVkLzEvSzFldzJ3QVdfbUpRbGQ4TWJsZi1CX0hQS0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMjc0NmUtY2FjOC00NWQzLWEyNTgtZjQ0ZjM1YjdhOTVk LzEvSzFldzJ3QVdfbUpRbGQ4TWJsZi1CX0hQS0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiYKEPqE MUynA/3acRSCRSTc3+kgXwwd2OjMcTIh38/jpAgVqkNAg/rcYnT1pRDicQhcAm1f ThOyZgYxhpgXR6XBJZHJOQPVD7f3VbYHQAult2czyaVA2k6hyGK82f2IBgmBO5yi 8j2ssWHFnrni4DSVCgm03/4qcCHHdHc6zwbxh624W3g6Bva7LpyX3u+komyS6ftv /mTrVkd2QEtiAuI6WMBVq8j/BdSj0R83SIHS6IHajqEPzPDOPK/o6Thli/PVBC4o Iqvu9suw6jjYExCbcUxucry86VvJq/J3nlXscG+ptTXRN2UfLbg72ApFhUesP0Bl i/MUrBUK4nOXkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:18 2025 by rpki-client