This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json) Hash identifier: xDe9tzBV2Fc6W8y5rAK1IY1QC+myNrUEdCHfesjBSd8= Subject key identifier: 73:FA:3A:44:99:4B:D9:7B:BD:84:F3:24:35:14:6F:81:42:C9:E6:8D Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Certificate serial: 019B1EAA5819CD3878C649FCD15765D45E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft Manifest number: 0348 Signing time: Sun 14 Dec 2025 21:00:38 +0000 Manifest this update: Sun 14 Dec 2025 21:00:38 +0000 Manifest next update: Mon 15 Dec 2025 21:00:38 +0000 Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: wYta9DWBJI5cWNwumGOqtb2Jr54hHvXsL8a7EDnEb2s=) 2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:58:19:cd:38:78:c6:49:fc:d1:57:65:d4:5e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9 Validity Not Before: Dec 14 21:00:38 2025 GMT Not After : Dec 15 21:00:38 2025 GMT Subject: CN=73fa3a44994bd97bbd84f32435146f8142c9e68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:68:ae:50:70:bc:33:42:e8:e9:87:d5:27:e1: b9:ce:a7:cb:6e:06:2e:26:7e:42:26:d8:75:01:0e: 99:16:3d:e3:bd:e6:52:c8:f8:f1:ed:f6:9a:7c:ff: 94:c7:3a:ac:af:c2:c1:4b:66:68:b9:13:09:59:5d: ad:fe:64:6c:e9:80:a4:44:65:d6:05:72:3a:d0:78: a8:a2:44:b1:ef:3a:5f:ce:18:6e:b0:0f:51:01:94: 46:95:7d:9d:42:13:e3:ea:8a:e8:ea:6d:93:a0:7f: 5e:0e:ab:bb:3c:b8:5b:eb:da:22:73:5e:4b:d9:ea: 6e:20:d4:02:58:3c:a9:75:0b:f3:5b:e4:08:c7:99: 94:02:aa:66:f5:30:05:27:63:c6:05:ed:b6:f3:35: 35:32:9e:d0:54:6e:41:05:ea:64:1f:e9:78:c3:43: 53:2d:34:ec:41:88:26:b6:14:c5:9a:9b:6b:02:be: a9:fe:e3:d7:ec:08:5c:ae:dc:69:1c:d2:10:68:3a: 12:a6:b5:f5:30:3c:d8:ac:6e:46:1d:81:c4:7c:3c: 60:b9:18:05:68:73:1c:42:8f:45:2a:ae:95:a8:ee: aa:8a:1e:01:ea:20:c7:a0:4e:40:74:d4:71:f0:24: 15:4c:26:4e:73:51:68:fd:8e:07:dc:ad:5b:b5:52: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FA:3A:44:99:4B:D9:7B:BD:84:F3:24:35:14:6F:81:42:C9:E6:8D X509v3 Authority Key Identifier: keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:29:d8:4f:ac:51:a6:e5:18:19:35:98:aa:3e:64:ac:38:28: b5:a0:4d:aa:22:37:e6:eb:86:07:06:2b:6b:c7:d2:96:e9:2b: 01:ad:77:33:23:31:13:f7:3b:b7:bd:3f:92:83:73:32:0c:51: 02:46:69:9e:fe:4f:a8:38:94:20:93:54:62:ff:98:6f:e7:21: c2:b8:b8:87:cd:40:8d:71:21:e8:8a:7c:54:a6:8b:6d:0a:57: a6:da:a8:63:33:42:8c:b3:87:06:c6:b8:0f:74:4e:19:ad:84: de:96:0d:ec:81:e3:06:6d:88:b7:14:22:67:bb:d3:89:08:29: d6:fc:6a:b7:83:12:71:d3:47:de:3b:8b:80:f4:2f:37:3e:8f: ef:19:d1:bd:14:7d:cd:58:8b:3c:33:99:ab:9c:29:10:c9:64: a8:64:9b:5d:c6:85:7c:ca:5e:16:cb:f8:78:96:4c:5f:79:57: 6d:62:c4:89:60:ba:c6:7e:a0:fe:99:f4:88:7a:9c:e1:29:a0: 34:1f:c0:44:cc:50:b0:05:15:f2:2f:9b:8d:61:a4:47:1b:c7: 04:2b:24:bb:95:34:8e:b5:30:33:06:91:8f:56:7e:5f:e3:e7: ba:57:db:32:a4:6d:60:be:ec:c2:07:70:8d:43:28:23:07:cb: 46:3a:c2:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqlgZzTh4xkn80Vdl1F4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj NzkwYzkwHhcNMjUxMjE0MjEwMDM4WhcNMjUxMjE1MjEwMDM4WjAzMTEwLwYDVQQD Eyg3M2ZhM2E0NDk5NGJkOTdiYmQ4NGYzMjQzNTE0NmY4MTQyYzllNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GiuUHC8M0Lo6YfVJ+G5zqfLbgYu Jn5CJth1AQ6ZFj3jveZSyPjx7faafP+Uxzqsr8LBS2ZouRMJWV2t/mRs6YCkRGXW BXI60HiookSx7zpfzhhusA9RAZRGlX2dQhPj6oro6m2ToH9eDqu7PLhb69oic15L 2epuINQCWDypdQvzW+QIx5mUAqpm9TAFJ2PGBe228zU1Mp7QVG5BBepkH+l4w0NT LTTsQYgmthTFmptrAr6p/uPX7AhcrtxpHNIQaDoSprX1MDzYrG5GHYHEfDxguRgF aHMcQo9FKq6VqO6qih4B6iDHoE5AdNRx8CQVTCZOc1Fo/Y4H3K1btVKnAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP6OkSZS9l7vYTzJDUUb4FCyeaNMB8GA1UdIwQY MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCnYT6xR puUYGTWYqj5krDgotaBNqiI35uuGBwYra8fSlukrAa13MyMxE/c7t70/koNzMgxR AkZpnv5PqDiUIJNUYv+Yb+chwri4h81AjXEh6Ip8VKaLbQpXptqoYzNCjLOHBsa4 D3ROGa2E3pYN7IHjBm2ItxQiZ7vTiQgp1vxqt4MScdNH3juLgPQvNz6P7xnRvRR9 zViLPDOZq5wpEMlkqGSbXcaFfMpeFsv4eJZMX3lXbWLEiWC6xn6g/pn0iHqc4Smg NB/ARMxQsAUV8i+bjWGkRxvHBCsku5U0jrUwMwaRj1Z+X+PnulfbMqRtYL7swgdw jUMoIwfLRjrCNA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:15 2025 by rpki-client