This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json) Hash identifier: aoHPEQVmail7kOQPC5o6PfR4YjYGSBFUH4ESgRexPlg= Subject key identifier: 6D:EA:09:D8:38:8B:83:41:62:32:32:6E:27:79:D8:35:D4:C0:E4:42 Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b Certificate serial: 019B58D16ACA00A428CAB26604923043E3B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft Manifest number: 1552 Signing time: Fri 26 Dec 2025 04:01:17 +0000 Manifest this update: Fri 26 Dec 2025 04:01:17 +0000 Manifest next update: Sat 27 Dec 2025 04:01:17 +0000 Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: mAC6UjwaZpmGZwsJ1b7qR3gM6h7lr9qR5jrre0Z5b9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:6a:ca:00:a4:28:ca:b2:66:04:92:30:43:e3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b Validity Not Before: Dec 26 04:01:17 2025 GMT Not After : Dec 27 04:01:17 2025 GMT Subject: CN=6dea09d8388b83416232326e2779d835d4c0e442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:f0:3a:5e:3d:dd:f1:b9:65:9c:d9:d6:f7: 9d:0b:2e:b6:4f:ab:dc:aa:02:11:7e:e9:49:be:89: 4a:65:19:ea:47:d3:b9:76:9e:0f:e9:ca:d4:0c:45: 35:5c:09:32:d5:44:a0:79:62:02:82:1b:73:6c:80: b3:62:5d:0e:3c:4c:bf:bd:d3:bb:65:aa:e3:67:74: 1b:84:c4:37:d8:cc:9c:ba:a7:f4:61:cb:54:2c:97: 2d:cb:06:51:1c:ea:ed:d1:92:60:79:7b:49:03:47: 8f:48:df:45:ad:8a:a7:f3:28:98:07:72:a1:b4:07: 6b:59:ef:67:99:1b:c5:fe:79:6c:5e:d3:49:28:41: 9c:46:85:8a:6c:7f:66:c8:b4:ee:e9:0b:99:ca:96: 40:99:3e:2e:70:fc:65:8a:6c:2b:8b:18:f8:a7:25: 17:3c:90:49:25:20:0c:0e:8c:02:5b:a1:a6:ef:ab: a4:45:51:b1:a6:05:4f:2b:cb:d7:fc:42:81:ad:e1: 79:8d:15:45:38:60:4d:a6:9f:71:4e:b2:53:0f:c3: b6:60:63:08:2c:b2:d9:ed:dc:51:e1:42:cc:1d:5d: 90:aa:4c:43:86:9d:5f:50:d5:59:74:64:fb:d1:3c: 88:b1:cd:66:79:66:fe:42:3e:9e:a4:ec:ca:f7:cb: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EA:09:D8:38:8B:83:41:62:32:32:6E:27:79:D8:35:D4:C0:E4:42 X509v3 Authority Key Identifier: keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2f:5b:5c:c7:f4:e9:a9:8e:97:d4:8f:fd:7a:b8:06:8b:aa: 48:97:7d:0c:0e:c1:fd:b7:51:df:fd:ed:33:fb:d0:07:73:fb: 83:ee:a6:32:dc:c5:94:c0:93:1e:61:97:12:81:cc:5d:53:5a: 0e:20:12:82:14:e2:7b:de:c9:ad:4b:22:a2:de:d7:08:13:19: 81:54:d1:58:70:bb:7c:7c:7f:06:74:b4:b3:b0:43:9b:38:5b: 43:bd:8b:cb:42:f9:97:ce:e5:68:7e:45:ce:95:bf:87:8c:b1: 51:5b:0b:d4:dd:f7:c9:bb:41:c1:29:28:2b:9b:8d:78:99:0c: 97:48:8f:24:b5:7f:24:8e:9d:57:f5:28:c5:8a:7d:f1:61:b1: 6d:0f:a2:91:59:2d:91:42:58:05:81:f5:fd:e5:60:59:0a:a2: 02:1f:2d:1c:75:41:f3:a9:c8:7e:1f:2a:cb:4c:14:43:21:74: ca:a5:24:76:d0:6d:11:7c:fa:d5:bc:07:1e:37:c6:01:3a:c7: c0:08:57:0b:a9:04:3e:7f:f9:5e:6e:3b:aa:2a:66:3b:23:81: 80:ef:3e:70:7a:69:4f:4d:49:de:98:11:84:54:16:c5:3a:54: 05:09:01:7a:a2:ad:cc:1f:70:2b:05:78:5d:5e:c2:59:05:82: 51:a8:d3:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0WrKAKQoyrJmBJIwQ+OzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjA1NTYwY2IxZjUzZDY5OGJhN2E3ODViMDJmMjQ4ZWEy YTJjN2IwHhcNMjUxMjI2MDQwMTE3WhcNMjUxMjI3MDQwMTE3WjAzMTEwLwYDVQQD Eyg2ZGVhMDlkODM4OGI4MzQxNjIzMjMyNmUyNzc5ZDgzNWQ0YzBlNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoebwOl493fG5ZZzZ1vedCy62T6vc qgIRfulJvolKZRnqR9O5dp4P6crUDEU1XAky1USgeWICghtzbICzYl0OPEy/vdO7 ZarjZ3QbhMQ32Mycuqf0YctULJctywZRHOrt0ZJgeXtJA0ePSN9FrYqn8yiYB3Kh tAdrWe9nmRvF/nlsXtNJKEGcRoWKbH9myLTu6QuZypZAmT4ucPxlimwrixj4pyUX PJBJJSAMDowCW6Gm76ukRVGxpgVPK8vX/EKBreF5jRVFOGBNpp9xTrJTD8O2YGMI LLLZ7dxR4ULMHV2QqkxDhp1fUNVZdGT70TyIsc1meWb+Qj6epOzK98vUDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3qCdg4i4NBYjIybid52DXUwORCMB8GA1UdIwQY MBaAFJNgVWDLH1PWmLp6eFsC8kjqKix7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82OWQ2MDUtNmUxNi00OGY3LWIxNzEt ZDZlODMwMGZjMTk1LzEvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82OWQ2MDUtNmUxNi00OGY3LWIxNzEtZDZlODMwMGZjMTk1 LzEvazJCVllNc2ZVOWFZdW5wNFd3THlTT29xTEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPS9bXMf0 6amOl9SP/Xq4BouqSJd9DA7B/bdR3/3tM/vQB3P7g+6mMtzFlMCTHmGXEoHMXVNa DiASghTie97JrUsiot7XCBMZgVTRWHC7fHx/BnS0s7BDmzhbQ72Ly0L5l87laH5F zpW/h4yxUVsL1N33ybtBwSkoK5uNeJkMl0iPJLV/JI6dV/UoxYp98WGxbQ+ikVkt kUJYBYH1/eVgWQqiAh8tHHVB86nIfh8qy0wUQyF0yqUkdtBtEXz61bwHHjfGATrH wAhXC6kEPn/5Xm47qipmOyOBgO8+cHppT01J3pgRhFQWxTpUBQkBeqKtzB9wKwV4 XV7CWQWCUajT8g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:48 2025 by rpki-client