This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json) Hash identifier: bo1IHt2kmev37ubpLxyQV6bWykmBKUV2q8+8w4xo/Jw= Subject key identifier: 53:C3:5B:5B:93:29:44:18:C5:38:A0:A2:E1:50:AA:08:05:FE:D4:2B Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc Certificate serial: 019B59E417BEEFDC1446C7BA0C18911DFEEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft Manifest number: 07CF Signing time: Fri 26 Dec 2025 09:01:18 +0000 Manifest this update: Fri 26 Dec 2025 09:01:18 +0000 Manifest next update: Sat 27 Dec 2025 09:01:18 +0000 Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: PHPuty4JDS0GRHZ6updDfZSRhtYxxrDvJXqS/RffpQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:17:be:ef:dc:14:46:c7:ba:0c:18:91:1d:fe:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc Validity Not Before: Dec 26 09:01:18 2025 GMT Not After : Dec 27 09:01:18 2025 GMT Subject: CN=53c35b5b93294418c538a0a2e150aa0805fed42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:f0:69:61:28:4e:da:e1:5d:14:7e:5c:99: f4:21:dc:b1:7e:39:55:8e:94:4f:d7:49:aa:7e:ef: 34:80:a5:36:15:d7:45:2c:b1:8f:1c:2e:2c:5f:bf: 74:2c:53:1c:8a:01:d4:03:e6:ec:0b:47:e1:d4:a4: 6d:44:3f:c7:7e:97:2a:95:ca:75:ca:6d:d9:85:40: ad:0c:ed:db:16:32:cb:a6:31:9a:9d:97:1a:12:e1: a7:2d:83:6e:b4:f6:2b:c4:e3:3a:be:20:72:2b:29: d7:3a:a5:bf:19:26:0e:d4:e3:51:52:da:cb:dc:66: bb:43:f8:95:41:5d:7b:39:e1:df:92:bd:52:0e:be: 6b:e1:46:6f:56:3c:51:2b:f0:2a:7f:e3:68:b6:16: 58:08:ca:5d:01:95:24:c1:0f:a2:db:50:ec:8c:16: 06:24:5a:71:4f:5d:28:b3:7a:c2:85:53:56:83:ed: fe:65:f8:6b:f2:19:62:b5:73:2e:4c:48:0f:09:13: 93:8f:05:83:52:25:96:d0:dc:a6:36:93:5d:2c:b8: 1f:b7:01:e0:20:19:da:16:87:47:ed:6d:8b:dd:b3: 77:05:07:a5:8c:fa:37:23:f4:5c:c9:00:84:69:92: 19:4c:90:5f:e9:ca:cf:65:11:84:67:bb:69:85:9a: 44:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:5B:5B:93:29:44:18:C5:38:A0:A2:E1:50:AA:08:05:FE:D4:2B X509v3 Authority Key Identifier: keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e3:06:c6:ee:e9:2d:42:70:68:d8:c4:96:7a:9c:06:29:19: ae:03:7d:bf:62:f7:7c:c4:0a:2b:87:5d:95:bf:fe:ef:25:74: 6b:e0:f7:be:6b:4b:34:5e:2d:23:f6:6c:46:f1:de:30:94:d3: 72:ad:9d:80:3c:cc:42:98:ce:92:a3:86:0e:49:38:d1:03:ec: a1:43:a5:80:7e:2a:de:19:7e:72:3f:a3:a1:7f:99:ac:70:41: 4e:f7:e9:ee:a5:b1:eb:84:62:59:6e:50:ee:62:91:94:0d:9a: 3a:f4:40:92:44:31:5c:99:99:db:40:02:f1:eb:2b:1b:02:97: 7c:62:6c:28:e8:e8:ef:26:22:b7:b3:b3:91:aa:12:55:39:84: ac:b5:03:05:3b:cf:cb:d1:2a:1b:ff:db:9f:c8:cc:c1:3f:d4: 73:6c:8c:22:88:0c:da:06:71:33:83:89:05:45:99:38:bc:fe: e4:47:10:38:12:a7:a9:a6:0d:45:ef:d1:2d:6b:20:e0:0a:b7: e4:66:00:86:09:2d:ec:a6:da:12:ff:ef:6a:52:43:d4:80:e1: c0:51:7f:8e:0b:4c:c9:f5:2d:8f:2f:5f:7a:be:aa:67:31:9a: ea:c0:86:77:52:6f:2e:af:fb:42:4a:91:15:42:a6:0e:d2:90: 3c:38:f2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Be+79wURse6DBiRHf7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjFlMmQ5MzI3NTZmMDFlM2M2YjczYWM4MjY4OTQ2MWQw ZjYxY2MwHhcNMjUxMjI2MDkwMTE4WhcNMjUxMjI3MDkwMTE4WjAzMTEwLwYDVQQD Eyg1M2MzNWI1YjkzMjk0NDE4YzUzOGEwYTJlMTUwYWEwODA1ZmVkNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP3waWEoTtrhXRR+XJn0IdyxfjlV jpRP10mqfu80gKU2FddFLLGPHC4sX790LFMcigHUA+bsC0fh1KRtRD/Hfpcqlcp1 ym3ZhUCtDO3bFjLLpjGanZcaEuGnLYNutPYrxOM6viByKynXOqW/GSYO1ONRUtrL 3Ga7Q/iVQV17OeHfkr1SDr5r4UZvVjxRK/Aqf+NothZYCMpdAZUkwQ+i21DsjBYG JFpxT10os3rChVNWg+3+Zfhr8hlitXMuTEgPCROTjwWDUiWW0NymNpNdLLgftwHg IBnaFodH7W2L3bN3BQeljPo3I/RcyQCEaZIZTJBf6crPZRGEZ7tphZpEyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPDW1uTKUQYxTigouFQqggF/tQrMB8GA1UdIwQY MBaAFCth4tkydW8B48a3OsgmiUYdD2HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTkt M2YyYmQwYWVmY2IwLzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDMzMTktMTYxNy00MmI5LWI0YTktM2YyYmQwYWVmY2Iw LzEvSzJIaTJUSjFid0hqeHJjNnlDYUpSaDBQWWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+MGxu7p LUJwaNjElnqcBikZrgN9v2L3fMQKK4ddlb/+7yV0a+D3vmtLNF4tI/ZsRvHeMJTT cq2dgDzMQpjOkqOGDkk40QPsoUOlgH4q3hl+cj+joX+ZrHBBTvfp7qWx64RiWW5Q 7mKRlA2aOvRAkkQxXJmZ20AC8esrGwKXfGJsKOjo7yYit7OzkaoSVTmErLUDBTvP y9EqG//bn8jMwT/Uc2yMIogM2gZxM4OJBUWZOLz+5EcQOBKnqaYNRe/RLWsg4Aq3 5GYAhgkt7KbaEv/valJD1IDhwFF/jgtMyfUtjy9fer6qZzGa6sCGd1JvLq/7QkqR FUKmDtKQPDjy1g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:01 2025 by rpki-client