This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft File: k2wlHaPujjr0MZWo-Amao8bOLHw.mft (raw, json) Hash identifier: Fw0trJDHFdwtFLgtBQXZbLHi+700cyVu5mGM753v+vA= Subject key identifier: DF:BD:99:8A:46:39:24:73:CB:76:8E:EF:34:10:A3:9C:87:F2:97:B3 Authority key identifier: 93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C Certificate issuer: /CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c Certificate serial: 019AF12D7F5CE1F4F9431FDDAF384F447120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft Manifest number: 2D Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: k2wlHaPujjr0MZWo-Amao8bOLHw.crl (hash: Rlfz2i2RjQWACLWnmLYFfcu7NH2EpBCjgGqv/N6hUoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7f:5c:e1:f4:f9:43:1f:dd:af:38:4f:44:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=dfbd998a46392473cb768eef3410a39c87f297b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:08:4d:51:a6:66:7c:1b:bf:17:5d:07:ed: 63:68:4b:e3:07:dd:73:43:01:37:8a:4d:ba:f4:9a: 23:5a:17:bd:ef:17:b1:ff:d9:38:9e:5c:22:27:98: e1:be:33:e5:47:fd:87:0c:2c:d5:a1:fb:ed:1d:c8: bb:a0:16:92:29:c2:36:e3:2a:f7:c7:73:bf:e3:86: e0:98:a7:79:6c:da:e1:cf:1a:7b:9b:5a:fa:76:7d: 7e:e5:50:6e:41:0c:37:71:ea:73:36:18:d9:6d:43: 84:45:b0:c3:a5:d9:ae:0a:fc:30:bd:62:65:a7:90: b3:45:54:20:06:e6:cf:1e:0d:05:ca:11:3b:59:fc: 2f:36:65:56:3e:6f:09:41:f0:69:fb:d5:03:3e:de: 41:16:8e:19:68:ae:3d:a6:ec:8f:ed:96:28:af:e1: 8d:72:be:9e:21:b1:73:b7:e3:0f:56:2e:76:02:4c: 83:81:b5:ec:55:d9:a1:7e:ea:d9:21:e0:ca:da:1b: 76:6a:82:4e:97:d7:df:ab:61:a2:24:da:46:7a:e3: 2a:e2:80:12:ce:73:18:3c:d6:e9:ee:d1:54:eb:d3: 2b:14:5b:54:53:6d:fc:d4:4c:42:ad:bd:9a:4e:f6: df:8f:4f:7f:45:42:7f:fd:be:0f:7e:55:2e:ce:0e: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BD:99:8A:46:39:24:73:CB:76:8E:EF:34:10:A3:9C:87:F2:97:B3 X509v3 Authority Key Identifier: keyid:93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6e:9b:83:a6:55:13:27:ba:eb:9d:de:3e:e0:74:8a:c4:ab: 3b:4a:dc:68:09:35:d9:f5:5d:ca:66:a0:7e:4a:3b:c8:40:2e: 4b:74:5b:3e:be:12:d1:52:b3:c2:ad:94:5c:0b:de:5c:14:33: 1a:2b:5c:43:65:32:8d:7d:1b:10:89:45:c0:fc:32:82:08:84: 85:8d:ca:17:ac:ad:80:5f:cc:ab:81:6e:48:0d:46:51:89:a5: 12:92:6d:f3:c8:a0:ba:55:5b:7d:ac:b3:3e:af:45:0a:40:57: 1b:ab:4e:3a:b6:a1:b2:7d:e6:5b:7c:60:35:95:4a:e0:68:95: 9b:ae:84:59:7d:46:44:19:83:22:a7:85:31:99:b7:e1:b1:be: 2f:62:06:03:ea:30:b3:14:c2:7a:5b:5d:aa:c6:21:7f:eb:3f: bd:ca:7d:e7:f0:91:c0:cc:4a:17:ec:05:f4:52:5d:bd:b6:74: 78:18:ab:8d:71:f1:fe:40:e8:1d:9a:3e:59:39:c6:47:5d:af: 94:32:f8:c2:e1:2d:fb:01:7f:c7:23:29:0d:05:8b:7f:16:46: 4c:a2:bb:b2:48:e9:ea:e0:d8:be:19:f9:a4:2c:f3:d5:dc:2e: 08:3f:19:7b:71:38:bb:16:4c:1c:63:da:5a:59:ad:c3:70:7f: 0f:c4:8f:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX9c4fT5Qx/drzhPRHEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNmMyNTFkYTNlZThlM2FmNDMxOTVhOGY4MDk5YWEzYzZj ZTJjN2MwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD EyhkZmJkOTk4YTQ2MzkyNDczY2I3NjhlZWYzNDEwYTM5Yzg3ZjI5N2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ0ITVGmZnwbvxddB+1jaEvjB91z QwE3ik269JojWhe97xex/9k4nlwiJ5jhvjPlR/2HDCzVofvtHci7oBaSKcI24yr3 x3O/44bgmKd5bNrhzxp7m1r6dn1+5VBuQQw3cepzNhjZbUOERbDDpdmuCvwwvWJl p5CzRVQgBubPHg0FyhE7WfwvNmVWPm8JQfBp+9UDPt5BFo4ZaK49puyP7ZYor+GN cr6eIbFzt+MPVi52AkyDgbXsVdmhfurZIeDK2ht2aoJOl9ffq2GiJNpGeuMq4oAS znMYPNbp7tFU69MrFFtUU2381ExCrb2aTvbfj09/RUJ//b4PflUuzg4o5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+9mYpGOSRzy3aO7zQQo5yH8pezMB8GA1UdIwQY MBaAFJNsJR2j7o469DGVqPgJmqPGzix8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJ3bEhhUHVqanIwTVpXby1BbWFvOGJPTEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wZjFlZDktMDlhMS00ZTE0LTliMTct OGJjMzdhNjRlNmM3LzEvazJ3bEhhUHVqanIwTVpXby1BbWFvOGJPTEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wZjFlZDktMDlhMS00ZTE0LTliMTctOGJjMzdhNjRlNmM3 LzEvazJ3bEhhUHVqanIwTVpXby1BbWFvOGJPTEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK26bg6ZV Eye6653ePuB0isSrO0rcaAk12fVdymagfko7yEAuS3RbPr4S0VKzwq2UXAveXBQz GitcQ2UyjX0bEIlFwPwyggiEhY3KF6ytgF/Mq4FuSA1GUYmlEpJt88igulVbfayz Pq9FCkBXG6tOOrahsn3mW3xgNZVK4GiVm66EWX1GRBmDIqeFMZm34bG+L2IGA+ow sxTCeltdqsYhf+s/vcp95/CRwMxKF+wF9FJdvbZ0eBirjXHx/kDoHZo+WTnGR12v lDL4wuEt+wF/xyMpDQWLfxZGTKK7skjp6uDYvhn5pCzz1dwuCD8Ze3E4uxZMHGPa Wlmtw3B/D8SPKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:04 2025 by rpki-client