This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json) Hash identifier: EPREHkhnR2C/qYmliMaBzQMNG+YOjtNxXV6Qc2Lu4V0= Subject key identifier: 8D:11:00:95:12:52:79:45:49:21:FB:22:50:4C:16:4C:19:07:C9:6C Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42 Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42 Certificate serial: 019AF12E08E5DD8D2E448E9AE9569AD12DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft Manifest number: 0536 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=) 2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: ceyg7QclBdmm9DA7/QdP7PFFUfrqiTqMrxvsGG0EWtk=) 3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:08:e5:dd:8d:2e:44:8e:9a:e9:56:9a:d1:2d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=8d110095125279454921fb22504c164c1907c96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:19:5c:a2:c6:d4:02:8c:af:e0:27:a2:ed: dd:b6:f8:7e:a9:7c:0f:e8:f1:09:fb:e8:64:37:18: 66:30:af:0f:c7:33:ad:2d:e8:4b:e7:0b:98:e1:f1: 1b:c8:a1:5c:e3:da:8b:64:6c:d5:3e:9a:73:e7:f6: 30:55:d9:56:b8:56:28:4b:27:7b:17:90:51:03:92: fb:a7:75:b0:8b:09:11:fe:58:39:ad:ba:ac:db:6f: f1:c0:64:d6:d2:33:77:f6:70:a2:c9:ba:21:dc:81: 43:88:11:01:90:c6:91:63:8f:6c:f1:85:89:b3:f0: 7c:b1:89:b2:6c:a3:8f:b3:1d:04:53:12:55:2f:67: 8a:6c:e8:e2:ce:bf:c7:1d:b2:7f:a6:13:d3:53:1e: de:a0:20:40:80:b6:1b:1d:f0:a5:ae:a0:33:8d:10: 2e:9e:f3:8b:9a:4b:ce:71:3d:87:59:80:73:f8:12: fb:d0:fd:e7:75:ff:a8:d5:4f:89:f9:b3:84:89:7d: 4c:0c:71:84:7e:62:e2:06:87:55:a5:55:4b:16:89: d6:92:db:f2:b9:87:f1:fb:d0:e3:27:53:29:0a:58: a0:54:6e:d7:93:bb:c8:86:6a:e2:12:1b:e4:b3:33: e0:c9:9a:b2:89:7c:1d:98:42:75:b8:67:d4:71:7a: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:11:00:95:12:52:79:45:49:21:FB:22:50:4C:16:4C:19:07:C9:6C X509v3 Authority Key Identifier: keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6a:90:57:07:39:7a:f4:a8:58:3a:70:c5:2c:de:56:17:eb: f9:95:e5:65:07:72:bf:20:0a:9a:64:c9:bf:9a:30:a2:53:9a: 1f:d8:ad:cb:5f:08:51:04:fa:1f:34:a7:3c:56:8b:bb:72:85: 52:18:79:b2:e6:ea:e1:23:7a:d3:91:d9:65:3a:a8:3a:be:0b: b9:34:f9:4d:50:3c:97:a4:97:51:15:f1:7d:59:91:da:4f:4e: 60:42:3c:a1:1b:c3:d1:75:e7:62:9f:5d:1b:31:9b:4a:29:be: 71:50:08:e5:29:b8:59:6c:26:5e:b9:04:6f:8a:15:3d:6c:4e: 13:3f:40:35:fa:c2:3f:af:81:1e:f8:ad:d6:d3:78:cc:99:71: db:6f:e8:92:1b:02:94:9f:ef:f4:c2:32:3e:33:79:a2:c2:6b: 27:72:4b:87:bf:06:86:b8:b5:29:a9:1e:dd:48:df:c2:a6:fb: 33:df:b6:07:5c:0e:e8:b9:2c:7a:42:ca:0b:24:66:52:fb:70: 00:e4:d2:3b:3b:ad:cc:44:93:82:70:85:1d:e1:c2:22:a3:c8: 5b:b9:51:00:1a:cc:08:3b:47:98:e1:da:c5:e0:6c:7d:e5:dc: e3:49:b3:a3:b6:36:04:07:31:a8:66:04:91:4e:17:e5:f0:fb: 49:94:ee:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgjl3Y0uRI6a6Vaa0S2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjUyNzU1MjFkMjljYWY3MTc2ZWUyYzM5OGQ0MGExZWM0 NzljNDIwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD Eyg4ZDExMDA5NTEyNTI3OTQ1NDkyMWZiMjI1MDRjMTY0YzE5MDdjOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KMZXKLG1AKMr+Anou3dtvh+qXwP 6PEJ++hkNxhmMK8PxzOtLehL5wuY4fEbyKFc49qLZGzVPppz5/YwVdlWuFYoSyd7 F5BRA5L7p3WwiwkR/lg5rbqs22/xwGTW0jN39nCiyboh3IFDiBEBkMaRY49s8YWJ s/B8sYmybKOPsx0EUxJVL2eKbOjizr/HHbJ/phPTUx7eoCBAgLYbHfClrqAzjRAu nvOLmkvOcT2HWYBz+BL70P3ndf+o1U+J+bOEiX1MDHGEfmLiBodVpVVLFonWktvy uYfx+9DjJ1MpCligVG7Xk7vIhmriEhvkszPgyZqyiXwdmEJ1uGfUcXomfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0RAJUSUnlFSSH7IlBMFkwZB8lsMB8GA1UdIwQY MBaAFCtlJ1Uh0pyvcXbuLDmNQKHsR5xCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYt OWVhOWY1ZTIwM2EwLzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYtOWVhOWY1ZTIwM2Ew LzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGqQVwc5 evSoWDpwxSzeVhfr+ZXlZQdyvyAKmmTJv5owolOaH9ity18IUQT6HzSnPFaLu3KF Uhh5subq4SN605HZZTqoOr4LuTT5TVA8l6SXURXxfVmR2k9OYEI8oRvD0XXnYp9d GzGbSim+cVAI5Sm4WWwmXrkEb4oVPWxOEz9ANfrCP6+BHvit1tN4zJlx22/okhsC lJ/v9MIyPjN5osJrJ3JLh78Ghri1Kake3Ujfwqb7M9+2B1wO6LksekLKCyRmUvtw AOTSOzutzESTgnCFHeHCIqPIW7lRABrMCDtHmOHaxeBsfeXc40mzo7Y2BAcxqGYE kU4X5fD7SZTuwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:07 2025 by rpki-client