This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json) Hash identifier: y5jwRwmOCvumJHESLkzlKYzwRWGiYUFWk5RimvmEuZI= Subject key identifier: F2:A9:EF:93:54:72:35:DC:9A:B4:70:FD:34:8F:A9:6B:AE:23:FF:92 Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50 Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550 Certificate serial: 019B2098AC9F441679F01608F76D9960DCCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 06:00:35 +0000 Manifest this update: Mon 15 Dec 2025 06:00:35 +0000 Manifest next update: Tue 16 Dec 2025 06:00:35 +0000 Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: DfCtWGs0ZQG8pWN4mLP2ESaVbbel5bTa2M50uEvWzdQ=) 2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:ac:9f:44:16:79:f0:16:08:f7:6d:99:60:dc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550 Validity Not Before: Dec 15 06:00:35 2025 GMT Not After : Dec 16 06:00:35 2025 GMT Subject: CN=f2a9ef93547235dc9ab470fd348fa96bae23ff92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:10:f0:d8:cf:9a:de:22:ba:3c:d8:64:46: a3:8d:81:a8:71:d7:b9:84:8c:76:bc:7a:91:99:b6: 2a:22:53:04:a7:0d:1e:02:aa:0d:f4:5d:00:8d:b9: 3a:a4:e4:64:d0:90:1e:64:6c:03:ac:d3:c0:0b:15: b2:24:4b:f0:0f:c5:77:8e:e8:8c:42:3e:e2:21:93: fc:90:67:18:d5:8e:29:ca:a3:28:95:d1:08:ba:5f: df:81:9e:43:3f:59:7f:4f:5b:40:f8:12:a1:87:7c: 8d:45:22:69:3f:9e:2b:8e:73:0d:b0:c0:f5:ae:bf: 25:bf:30:6a:45:c9:fa:75:8f:a1:25:e7:c5:11:a1: fe:4e:84:37:6b:1d:5e:b8:2b:38:dc:cd:6d:c6:de: b5:9f:41:ca:3c:c9:a5:5d:5b:b9:8a:0e:6f:be:bc: 2d:dc:b6:ac:70:99:cc:50:0c:29:ee:0c:8c:21:e9: 6f:b0:c8:3d:12:d2:23:13:b3:49:1e:2f:d5:5b:02: c9:d8:33:81:56:3e:23:ba:72:a1:35:cd:d7:87:ee: 4d:a2:7c:20:85:3a:bc:63:a5:99:b0:af:11:13:bf: e5:98:46:38:1b:91:67:17:97:00:54:8c:73:1a:ff: 16:60:b6:42:05:0e:ac:c3:cb:03:9e:2a:0d:e1:9d: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A9:EF:93:54:72:35:DC:9A:B4:70:FD:34:8F:A9:6B:AE:23:FF:92 X509v3 Authority Key Identifier: keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fe:96:35:f7:6a:d6:83:d5:d2:0d:71:eb:1e:ee:74:be:01: 26:68:2e:01:a9:14:3c:d8:64:19:63:9a:a3:a3:81:5f:f1:66: a9:18:4c:60:e3:ab:4f:0c:e7:50:c5:e6:3a:74:5a:32:a5:c2: b0:2f:d1:c8:67:ab:f1:3c:72:d1:76:b6:75:cf:90:20:69:0d: f0:5b:81:72:52:e3:71:23:be:aa:fe:da:92:da:48:fd:f6:21: a8:ed:a1:67:f4:2c:1c:73:23:70:a8:38:91:7d:96:98:23:cc: 1d:0b:0d:02:b8:b0:69:a8:18:50:53:0e:33:b0:af:46:cf:84: 33:7b:6c:94:e5:6a:59:71:ef:8e:97:f8:7b:59:4a:db:df:b5: 79:86:5a:bf:34:13:b9:98:16:e3:fd:5a:45:ab:94:41:95:da: 5f:15:c3:37:bc:5b:24:6d:d1:0a:3e:5e:bc:55:c1:94:ef:23: 32:0c:6d:12:5d:74:92:47:cf:76:e4:b5:4e:d2:ae:27:75:e8: 79:3e:c2:32:cc:71:fd:05:e3:bf:58:f5:1b:9e:89:9b:40:2d: 3b:d5:af:c7:8d:1a:9d:8b:6b:03:1b:b0:88:eb:0f:d9:34:f8: 29:92:f3:2f:c0:e2:42:ee:4c:82:4b:2a:75:d6:04:dc:62:44: 8d:f0:72:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmKyfRBZ58BYI922ZYNzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiY2VlNGQ5NTIzZjE1MjkxYzU3Njc1ZmQyNmRjOTUwYTdj ZDU1NTAwHhcNMjUxMjE1MDYwMDM1WhcNMjUxMjE2MDYwMDM1WjAzMTEwLwYDVQQD EyhmMmE5ZWY5MzU0NzIzNWRjOWFiNDcwZmQzNDhmYTk2YmFlMjNmZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7oQ8NjPmt4iujzYZEajjYGocde5 hIx2vHqRmbYqIlMEpw0eAqoN9F0Ajbk6pORk0JAeZGwDrNPACxWyJEvwD8V3juiM Qj7iIZP8kGcY1Y4pyqMoldEIul/fgZ5DP1l/T1tA+BKhh3yNRSJpP54rjnMNsMD1 rr8lvzBqRcn6dY+hJefFEaH+ToQ3ax1euCs43M1txt61n0HKPMmlXVu5ig5vvrwt 3LascJnMUAwp7gyMIelvsMg9EtIjE7NJHi/VWwLJ2DOBVj4junKhNc3Xh+5Nonwg hTq8Y6WZsK8RE7/lmEY4G5FnF5cAVIxzGv8WYLZCBQ6sw8sDnioN4Z046wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKp75NUcjXcmrRw/TSPqWuuI/+SMB8GA1UdIwQY MBaAFCvO5NlSPxUpHFdnX9JtyVCnzVVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzg3azJWSV9GU2tjVjJkZjBtM0pVS2ZOVlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84YmJjMjctMjA4OC00Y2M5LWI4ZDMt YTAzMTY5ZDY4YTE5LzEvSzg3azJWSV9GU2tjVjJkZjBtM0pVS2ZOVlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84YmJjMjctMjA4OC00Y2M5LWI4ZDMtYTAzMTY5ZDY4YTE5 LzEvSzg3azJWSV9GU2tjVjJkZjBtM0pVS2ZOVlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv6WNfdq 1oPV0g1x6x7udL4BJmguAakUPNhkGWOao6OBX/FmqRhMYOOrTwznUMXmOnRaMqXC sC/RyGer8Txy0Xa2dc+QIGkN8FuBclLjcSO+qv7aktpI/fYhqO2hZ/QsHHMjcKg4 kX2WmCPMHQsNAriwaagYUFMOM7CvRs+EM3tslOVqWXHvjpf4e1lK29+1eYZavzQT uZgW4/1aRauUQZXaXxXDN7xbJG3RCj5evFXBlO8jMgxtEl10kkfPduS1TtKuJ3Xo eT7CMsxx/QXjv1j1G56Jm0AtO9Wvx40anYtrAxuwiOsP2TT4KZLzL8DiQu5Mgksq ddYE3GJEjfByCA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:13:27 2025 by rpki-client