This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft File: K-BKLRVsHGjDUjj26DAauu8AvfE.mft (raw, json) Hash identifier: D3SHOSpQ6f/KxWOgSw17e2w/bYaTPJWlWGzkFavlsy8= Subject key identifier: 70:1B:66:DE:13:8A:0D:CA:A8:E3:D8:A2:39:D3:2E:40:B8:37:56:6B Authority key identifier: 2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1 Certificate issuer: /CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1 Certificate serial: 019AF19B54372A8F2CD04A22B443D396F794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft Manifest number: 1E Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: K-BKLRVsHGjDUjj26DAauu8AvfE.crl (hash: FAD79s3D5q4ZA8cM+U+2+ZxN7ASKDTQ6aaR/bxanP2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:54:37:2a:8f:2c:d0:4a:22:b4:43:d3:96:f7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=701b66de138a0dcaa8e3d8a239d32e40b837566b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:7e:0c:a9:9b:20:ab:c5:0e:b3:77:b6:62: 2c:5f:bc:07:6f:60:43:cb:3e:64:9c:61:f5:cd:cb: ec:3f:a1:91:b9:35:ca:4e:ec:00:d8:7e:d0:3d:a3: 4e:d7:75:63:5b:51:b1:11:42:e9:ae:c3:ed:82:ff: 9f:11:0b:21:fb:6b:cd:13:c3:94:ad:cc:7a:cf:d1: 41:e3:d4:78:88:79:eb:dc:b6:e6:b3:de:95:f3:7a: 89:af:25:9c:36:00:22:0a:eb:8e:89:87:29:21:f7: c7:1e:5e:37:61:f4:0c:7a:a3:0a:23:5f:55:f4:ce: 0f:ae:e7:ba:6a:f2:cb:4a:7b:e6:ca:76:3d:ab:06: 00:97:68:d7:2a:b3:d5:a0:d4:1f:6c:28:91:1f:5a: 9c:ad:5c:40:ab:fc:dc:a7:0b:79:4a:11:6b:e8:27: 8b:29:f5:de:90:ea:e2:51:46:c5:43:13:98:ab:8e: ec:cb:28:66:81:1a:fb:8b:48:b0:3d:c7:37:bf:b0: 2b:70:0b:31:92:9d:f0:7c:cd:0e:ca:f8:65:fd:6a: 1e:bd:e6:a1:2d:96:51:63:71:a0:28:87:d2:85:47: 3d:de:87:af:ef:51:cb:5a:33:e1:00:e7:fa:04:30: 39:08:b6:23:a4:b1:c8:b7:5f:99:fc:f2:18:20:64: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1B:66:DE:13:8A:0D:CA:A8:E3:D8:A2:39:D3:2E:40:B8:37:56:6B X509v3 Authority Key Identifier: keyid:2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:90:2e:fd:8d:72:91:00:27:d4:68:02:13:4f:e1:53:31:01: 46:ea:e1:b6:9f:46:46:3f:f9:89:4b:e5:82:79:48:c0:00:4c: e6:17:e4:cf:1c:f1:04:09:5c:cd:14:a7:51:9a:17:61:a5:71: 0b:8d:47:72:1c:34:c6:8f:79:39:2a:d7:0e:46:c4:98:ca:4b: be:0d:c8:2b:58:16:e4:6b:f4:20:28:39:1b:b2:30:bc:a9:67: 86:56:4c:ae:d4:63:4e:14:ea:1a:98:3b:7e:8e:b5:85:03:b1: e6:5e:ca:bd:5c:cd:3c:cd:64:60:16:6d:1e:7e:32:aa:c4:b4: 86:87:89:63:75:09:f7:fd:13:94:0b:f4:51:ae:36:a2:5c:9b: 68:dc:f9:4e:10:93:2b:e4:0c:ba:f2:b5:7c:8c:1d:b7:ce:fc: 9b:89:ed:24:fe:33:24:7e:e9:08:7c:bd:b2:ec:57:04:03:a6: 83:23:6c:9a:6c:d2:72:8e:78:c6:04:a0:c8:6f:09:27:a8:70: 46:ac:fd:a2:25:18:0d:4e:62:5a:d2:4e:45:df:0d:10:ed:24: ff:96:12:04:1d:8f:8b:31:11:16:f2:41:a2:25:37:22:7e:af: f2:5e:57:a8:f0:3b:33:ec:cc:6b:3d:e6:5d:d4:48:a5:0b:f3: 1a:dc:0a:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1Q3Ko8s0EoitEPTlveUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTA0YTJkMTU2YzFjNjhjMzUyMzhmNmU4MzAxYWJhZWYw MGJkZjEwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD Eyg3MDFiNjZkZTEzOGEwZGNhYThlM2Q4YTIzOWQzMmU0MGI4Mzc1NjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUx+DKmbIKvFDrN3tmIsX7wHb2BD yz5knGH1zcvsP6GRuTXKTuwA2H7QPaNO13VjW1GxEULprsPtgv+fEQsh+2vNE8OU rcx6z9FB49R4iHnr3Lbms96V83qJryWcNgAiCuuOiYcpIffHHl43YfQMeqMKI19V 9M4Prue6avLLSnvmynY9qwYAl2jXKrPVoNQfbCiRH1qcrVxAq/zcpwt5ShFr6CeL KfXekOriUUbFQxOYq47syyhmgRr7i0iwPcc3v7ArcAsxkp3wfM0Oyvhl/Woeveah LZZRY3GgKIfShUc93oev71HLWjPhAOf6BDA5CLYjpLHIt1+Z/PIYIGST7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAbZt4Tig3KqOPYojnTLkC4N1ZrMB8GA1UdIwQY MBaAFCvgSi0VbBxow1I49ugwGrrvAL3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgt MzIxODA1YzdlMjBmLzEvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgtMzIxODA1YzdlMjBm LzEvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZAu/Y1y kQAn1GgCE0/hUzEBRurhtp9GRj/5iUvlgnlIwABM5hfkzxzxBAlczRSnUZoXYaVx C41Hchw0xo95OSrXDkbEmMpLvg3IK1gW5Gv0ICg5G7IwvKlnhlZMrtRjThTqGpg7 fo61hQOx5l7KvVzNPM1kYBZtHn4yqsS0hoeJY3UJ9/0TlAv0Ua42olybaNz5ThCT K+QMuvK1fIwdt878m4ntJP4zJH7pCHy9suxXBAOmgyNsmmzSco54xgSgyG8JJ6hw Rqz9oiUYDU5iWtJORd8NEO0k/5YSBB2PizERFvJBoiU3In6v8l5XqPA7M+zMaz3m XdRIpQvzGtwKsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:29 2025 by rpki-client