This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json) Hash identifier: kIUjuf5bjmqPF9t/QqpuOUOIc2dEY5EFKddgDJUVkR0= Subject key identifier: 5F:8C:03:26:6E:63:C9:C1:A7:C9:7F:33:E4:F0:C9:A8:C3:36:23:2E Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e Certificate serial: 019B2D0CC41CD744A694954D7AFE76DF5A3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft Manifest number: 0F5F Signing time: Wed 17 Dec 2025 16:02:49 +0000 Manifest this update: Wed 17 Dec 2025 16:02:49 +0000 Manifest next update: Thu 18 Dec 2025 16:02:49 +0000 Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: T1pgVL/ehUsjLcNh/EW9xKMYgqcPG9o+/r6vomwb+GI=) 2: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (hash: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:c4:1c:d7:44:a6:94:95:4d:7a:fe:76:df:5a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e Validity Not Before: Dec 17 16:02:49 2025 GMT Not After : Dec 18 16:02:49 2025 GMT Subject: CN=5f8c03266e63c9c1a7c97f33e4f0c9a8c336232e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:ac:d5:ff:d8:ba:8b:ba:2c:ca:04:0d:a4: 7c:a0:79:36:b0:ee:a7:87:b7:d1:d9:13:50:80:12: d0:08:44:f0:f1:0d:03:e7:ae:8b:6c:96:5c:33:3c: 62:9c:56:23:dd:18:89:9e:b2:64:57:bf:8e:45:5c: b8:12:0e:53:78:cf:89:2b:36:96:e5:ef:13:ad:2d: e8:58:4f:97:40:1d:14:b4:c5:01:06:b1:67:d9:36: bf:fd:b6:4a:7e:c0:96:5f:41:39:e3:84:61:97:5a: 59:07:28:15:67:3d:e1:2e:36:ec:cf:15:38:a7:14: cb:2b:c8:81:db:7a:7c:98:92:1c:6d:25:30:b2:c0: ac:35:14:20:c8:72:56:e6:83:67:97:c9:2d:c7:c8: cc:0c:25:21:f8:d8:ca:21:b9:8c:2c:8f:24:75:15: b2:f7:dd:b7:52:08:3a:6f:2f:ad:2b:b6:bc:18:b0: 7e:16:0d:00:99:7b:96:f3:b6:23:05:85:f8:de:17: 9f:48:fd:34:9c:2d:cb:ab:9c:c2:d1:e2:05:57:62: c1:5e:33:f4:4e:b5:76:4a:6a:78:1f:a6:e3:b4:97: 7e:64:c7:75:76:1d:d4:f6:79:e4:24:ad:1e:07:90: 86:ef:8f:bd:28:4e:9f:de:69:85:87:08:34:2e:2e: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8C:03:26:6E:63:C9:C1:A7:C9:7F:33:E4:F0:C9:A8:C3:36:23:2E X509v3 Authority Key Identifier: keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:80:19:af:89:8a:de:e4:38:8e:85:42:a0:f9:c0:a9:24:dc: ec:2a:03:af:08:a4:8e:89:52:ea:06:cc:27:4d:08:6c:1f:c6: 79:11:01:93:df:59:1d:43:35:1a:38:72:14:ae:b4:7a:70:6b: 83:7d:10:73:00:5c:33:7d:0f:63:9e:e8:86:a3:41:74:5b:a0: 29:51:fa:06:ad:89:7b:b1:dc:3b:43:2e:a4:03:21:f1:8c:95: 07:67:83:e6:ce:52:de:89:eb:80:20:f9:1c:4a:f8:c7:f2:16: b4:9c:4e:4e:68:35:f0:98:66:15:57:0e:a0:60:c7:82:f2:0e: 49:33:f9:97:2a:01:f8:a9:3c:28:69:cc:75:52:e0:bb:20:2a: 55:a3:d3:5d:6f:46:bb:a5:ff:f4:5e:a7:8d:65:e9:fa:18:dc: 85:06:b5:92:a7:da:ed:24:3c:d9:d5:f7:28:9e:84:79:3d:7c: 06:94:e8:84:6c:54:5b:b5:49:6f:89:66:e8:e2:63:5b:d6:91: d5:2a:7c:96:73:4e:a6:c9:1a:e1:88:0d:9d:b9:75:66:59:ae: 62:f6:ad:57:bb:9f:3e:5e:24:2a:cd:f3:40:fa:7f:32:f7:cd: 57:83:78:4e:98:fa:53:20:20:5f:1d:e5:dd:63:12:e3:cd:7e: 71:96:03:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDMQc10SmlJVNev5231o6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmFkOTBiNjM2NDJiOGZhZGM5MDA3YWEzNTUyMzllZGZh ZjM1NGUwHhcNMjUxMjE3MTYwMjQ5WhcNMjUxMjE4MTYwMjQ5WjAzMTEwLwYDVQQD Eyg1ZjhjMDMyNjZlNjNjOWMxYTdjOTdmMzNlNGYwYzlhOGMzMzYyMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtWs1f/Yuou6LMoEDaR8oHk2sO6n h7fR2RNQgBLQCETw8Q0D566LbJZcMzxinFYj3RiJnrJkV7+ORVy4Eg5TeM+JKzaW 5e8TrS3oWE+XQB0UtMUBBrFn2Ta//bZKfsCWX0E544Rhl1pZBygVZz3hLjbszxU4 pxTLK8iB23p8mJIcbSUwssCsNRQgyHJW5oNnl8ktx8jMDCUh+NjKIbmMLI8kdRWy 9923Ugg6by+tK7a8GLB+Fg0AmXuW87YjBYX43hefSP00nC3Lq5zC0eIFV2LBXjP0 TrV2Smp4H6bjtJd+ZMd1dh3U9nnkJK0eB5CG74+9KE6f3mmFhwg0Li6TgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+MAyZuY8nBp8l/M+TwyajDNiMuMB8GA1UdIwQY MBaAFCtq2QtjZCuPrckAeqNVI57frzVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDkt YmM5YjQxM2I4ZWVkLzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDktYmM5YjQxM2I4ZWVk LzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloAZr4mK 3uQ4joVCoPnAqSTc7CoDrwikjolS6gbMJ00IbB/GeREBk99ZHUM1GjhyFK60enBr g30QcwBcM30PY57ohqNBdFugKVH6Bq2Je7HcO0MupAMh8YyVB2eD5s5S3onrgCD5 HEr4x/IWtJxOTmg18JhmFVcOoGDHgvIOSTP5lyoB+Kk8KGnMdVLguyAqVaPTXW9G u6X/9F6njWXp+hjchQa1kqfa7SQ82dX3KJ6EeT18BpTohGxUW7VJb4lm6OJjW9aR 1Sp8lnNOpska4YgNnbl1ZlmuYvatV7ufPl4kKs3zQPp/MvfNV4N4Tpj6UyAgXx3l 3WMS481+cZYDZw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:35:29 2025 by rpki-client