This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json) Hash identifier: iai7+C0UpgEwkvn6T/vpsMyutz4eCMTfJY5qLnXgvCs= Subject key identifier: 39:80:28:23:DF:38:DD:31:4D:46:1B:0C:87:2E:6E:3B:73:47:54:54 Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Certificate serial: 019AF68A3890133ABD61B1E77AECB91DB8C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft Manifest number: 0269 Signing time: Sun 07 Dec 2025 02:00:44 +0000 Manifest this update: Sun 07 Dec 2025 02:00:44 +0000 Manifest next update: Mon 08 Dec 2025 02:00:44 +0000 Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: WJO3uJd+RO/60LdPtnDfyrcZU58Urhu019tgZDzQ7UU=) 2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:38:90:13:3a:bd:61:b1:e7:7a:ec:b9:1d:b8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Validity Not Before: Dec 7 02:00:44 2025 GMT Not After : Dec 8 02:00:44 2025 GMT Subject: CN=39802823df38dd314d461b0c872e6e3b73475454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:73:ce:fd:16:c7:65:4a:2a:52:71:a2:e2: 7e:02:56:7c:3e:6c:8a:3a:0b:14:ca:8e:72:51:dc: 90:fa:c3:21:87:84:51:27:ba:a0:8d:3e:17:ad:e0: 4b:51:b1:e4:6d:b0:cb:34:df:68:84:2a:32:de:2d: 28:d1:11:9e:8e:96:f9:25:81:b1:ef:2d:3a:3f:e5: 51:6e:6e:74:18:08:84:c6:b7:ba:b6:31:9d:0b:1e: f9:2f:83:85:23:12:55:07:a3:0d:c9:f5:04:47:82: a7:2a:ef:15:88:29:37:c0:cc:07:49:33:46:ca:bf: 82:ab:65:38:bf:92:bb:44:b2:09:ff:df:8c:87:93: 3f:36:64:76:4c:5e:67:c8:26:fc:3d:4a:4f:db:ac: 41:55:4a:de:c2:cf:a5:55:0c:69:83:a0:21:0e:b3: 10:0a:6b:a0:87:5c:9b:3c:d1:1e:7c:b4:97:49:b3: 3c:0b:ce:7d:b0:3f:cd:b6:9e:b4:d2:be:17:9f:77: 0a:17:f7:61:e4:76:8c:11:1d:c7:0f:79:9e:e8:0c: 87:d5:c6:1e:54:15:5e:6e:7e:a0:61:59:e9:b9:aa: 2c:f1:1a:a5:4e:0b:6c:e2:1e:cc:82:d4:49:ae:31: 15:45:fb:43:29:45:f9:9f:18:4e:b0:ee:bb:d5:68: 8d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:80:28:23:DF:38:DD:31:4D:46:1B:0C:87:2E:6E:3B:73:47:54:54 X509v3 Authority Key Identifier: keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:0c:f3:86:73:28:a3:4e:f2:79:b8:67:c9:49:89:3e:5a:d0: 85:75:7e:ad:93:ee:10:dd:ae:33:ca:d5:81:a0:96:61:6a:2e: 29:1b:1f:5e:ca:cc:e4:01:ad:07:d9:97:20:ea:ff:92:5e:1e: f0:08:91:4b:57:d7:d4:9d:28:41:30:de:97:70:1b:54:71:3c: 8f:bd:76:87:73:d4:23:37:a3:f9:a7:60:b3:5a:2f:f5:f5:48: 89:14:01:f0:d5:02:c5:1f:da:0d:d9:20:db:db:9d:aa:94:9c: d4:59:d1:0c:fa:de:45:ee:68:7a:bf:59:f4:61:0e:23:3b:d2: 11:4e:56:b8:75:14:15:da:7f:6f:89:a7:fb:0d:58:48:52:49: cc:fa:ef:47:51:51:c6:54:4e:a1:25:89:f2:63:d6:3c:e8:ff: 7a:fa:74:d7:86:11:80:87:c1:15:38:70:38:3a:e1:5e:27:af: 27:30:99:aa:6e:db:da:b2:26:08:0a:15:28:6c:1b:d2:43:da: 3e:37:9c:84:67:a9:00:b4:74:30:41:5d:c3:14:e3:ce:44:d8: 4d:e4:ec:eb:86:34:ab:b1:a9:6c:bf:65:92:89:f7:f9:cc:85: da:8f:46:90:26:84:b4:1a:ea:2c:66:27:0f:d5:69:03:69:b9: 0d:1f:57:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ijiQEzq9YbHneuy5HbjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNWMwNTUwMGM4NjVlOTI0YmRkZWIxYWVlN2IyZWI4Y2Jh OTI3YzkwHhcNMjUxMjA3MDIwMDQ0WhcNMjUxMjA4MDIwMDQ0WjAzMTEwLwYDVQQD EygzOTgwMjgyM2RmMzhkZDMxNGQ0NjFiMGM4NzJlNmUzYjczNDc1NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Rzzv0Wx2VKKlJxouJ+AlZ8PmyK OgsUyo5yUdyQ+sMhh4RRJ7qgjT4XreBLUbHkbbDLNN9ohCoy3i0o0RGejpb5JYGx 7y06P+VRbm50GAiExre6tjGdCx75L4OFIxJVB6MNyfUER4KnKu8ViCk3wMwHSTNG yr+Cq2U4v5K7RLIJ/9+Mh5M/NmR2TF5nyCb8PUpP26xBVUrews+lVQxpg6AhDrMQ Cmugh1ybPNEefLSXSbM8C859sD/Ntp600r4Xn3cKF/dh5HaMER3HD3me6AyH1cYe VBVebn6gYVnpuaos8RqlTgts4h7MgtRJrjEVRftDKUX5nxhOsO671WiN9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmAKCPfON0xTUYbDIcubjtzR1RUMB8GA1UdIwQY MBaAFCtcBVAMhl6SS93rGu57LrjLqSfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODkt NTk1ZDQyZDVjMjU0LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODktNTk1ZDQyZDVjMjU0 LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2QzzhnMo o07yebhnyUmJPlrQhXV+rZPuEN2uM8rVgaCWYWouKRsfXsrM5AGtB9mXIOr/kl4e 8AiRS1fX1J0oQTDel3AbVHE8j712h3PUIzej+adgs1ov9fVIiRQB8NUCxR/aDdkg 29udqpSc1FnRDPreRe5oer9Z9GEOIzvSEU5WuHUUFdp/b4mn+w1YSFJJzPrvR1FR xlROoSWJ8mPWPOj/evp014YRgIfBFThwODrhXievJzCZqm7b2rImCAoVKGwb0kPa PjechGepALR0MEFdwxTjzkTYTeTs64Y0q7GpbL9lkon3+cyF2o9GkCaEtBrqLGYn D9VpA2m5DR9X8g== -----END CERTIFICATE-----Generated at Sun Dec 7 07:49:51 2025 by rpki-client