This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json) Hash identifier: evQ85kXprZLjCvh8HcZS0xXi/XY4R1dY/Xqu4zJ6OMI= Subject key identifier: EA:85:09:6A:CA:2B:5F:9D:25:88:1D:05:E3:0C:22:88:E2:4D:93:19 Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df Certificate serial: 019AC0094C425C8CDC006F8420DE5605B20C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft Manifest number: 0EE4 Signing time: Wed 26 Nov 2025 12:00:26 +0000 Manifest this update: Wed 26 Nov 2025 12:00:26 +0000 Manifest next update: Thu 27 Nov 2025 12:00:26 +0000 Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=) 2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: IT160gyc8Y/GwZjnUpMRmxENzeB4lQR55GV4e55SRdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 08:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:09:4c:42:5c:8c:dc:00:6f:84:20:de:56:05:b2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df Validity Not Before: Nov 26 12:00:26 2025 GMT Not After : Nov 27 12:00:26 2025 GMT Subject: CN=ea85096aca2b5f9d25881d05e30c2288e24d9319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:88:be:ad:08:d2:9a:fa:1e:f3:47:a8:e8: bc:70:b0:5b:66:c0:b8:cd:c1:a2:40:55:fb:9d:e2: 29:b7:91:cd:38:50:b8:d0:bc:22:5c:a5:1a:9a:b3: c8:2e:d6:29:5d:90:7b:71:e1:84:c2:91:92:f9:71: 4b:7c:f7:d5:d4:9c:62:23:cd:2f:7a:b1:61:87:75: ea:8f:be:fa:ff:91:d5:6e:c7:e8:1c:f7:21:cb:5e: c6:be:24:64:f3:47:b1:3b:66:f2:95:bf:00:4a:d5: bb:87:8c:35:e9:33:71:09:bc:0b:ec:74:ee:73:55: 0c:1c:81:a8:e2:fb:65:91:f0:cf:bf:20:32:f9:02: 72:c2:f2:94:9e:9d:76:62:10:21:b7:38:71:4f:ad: 8b:58:29:26:79:e6:49:7e:50:91:5b:dc:35:d0:4d: 8a:1b:14:12:b3:f7:ab:98:76:05:9d:18:ba:6b:6c: 2e:1f:22:df:fb:83:3f:dd:d4:72:f2:89:89:72:2d: ab:3d:54:de:29:c4:db:91:79:f5:12:4b:2e:27:58: d3:23:af:2e:ae:1f:2f:a8:55:a8:8d:74:d2:e8:5d: cd:fa:ea:a7:d0:6e:b6:a8:86:86:65:6f:cb:3e:1a: e5:ff:07:15:83:f8:3a:89:6f:30:d3:e6:86:48:23: 36:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:09:6A:CA:2B:5F:9D:25:88:1D:05:E3:0C:22:88:E2:4D:93:19 X509v3 Authority Key Identifier: keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8d:d7:9f:ab:6c:08:52:9a:29:92:9a:61:a0:e1:30:31:9d: 3c:f0:7d:19:68:a6:c0:90:ae:22:5e:29:b6:3b:fc:ec:1a:d9: d0:4d:b5:ef:5f:9a:d2:e9:33:f1:c5:3a:dd:3d:20:d6:ab:e4: d0:30:ec:16:97:d6:ce:3d:02:9d:b3:18:53:ba:2f:ac:0a:a3: b2:5d:2c:5d:80:95:6f:97:eb:e8:42:11:1f:4f:d9:b6:b0:a8: 7e:55:43:43:6d:54:d9:8a:cb:62:4d:76:a4:4e:f7:dc:04:19: 73:b3:3e:90:88:8e:93:79:51:68:24:98:8b:d5:24:e4:06:0d: 19:aa:ca:8d:1b:b9:be:a4:93:51:e8:6e:c7:92:3d:03:a4:dc: 70:bf:15:5b:b8:82:a4:56:6c:be:6c:54:b2:d4:b7:40:ea:7f: 8e:8d:a6:76:b8:a2:e1:ec:fc:cb:fe:ca:26:7f:4c:c8:22:d7: 51:95:e7:dd:3b:e0:ca:79:c4:f6:09:3d:98:52:ea:dc:33:bb: ea:45:02:4b:fe:90:c1:3f:2c:2c:42:a3:cf:e9:d8:1c:c9:4f: 9a:46:c0:68:d8:68:b0:3f:af:4e:22:3d:81:67:a5:05:bb:d9: e5:c9:82:5f:7a:c6:19:2d:10:ae:92:fd:c1:0c:10:35:8c:d1: c7:50:c3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrACUxCXIzcAG+EIN5WBbIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjA4YTBjZGEwMTMzZjg3NmFiOWFkODNmYTM3YmNlZjYy ZGYyZGYwHhcNMjUxMTI2MTIwMDI2WhcNMjUxMTI3MTIwMDI2WjAzMTEwLwYDVQQD EyhlYTg1MDk2YWNhMmI1ZjlkMjU4ODFkMDVlMzBjMjI4OGUyNGQ5MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLOIvq0I0pr6HvNHqOi8cLBbZsC4 zcGiQFX7neIpt5HNOFC40LwiXKUamrPILtYpXZB7ceGEwpGS+XFLfPfV1JxiI80v erFhh3Xqj776/5HVbsfoHPchy17GviRk80exO2bylb8AStW7h4w16TNxCbwL7HTu c1UMHIGo4vtlkfDPvyAy+QJywvKUnp12YhAhtzhxT62LWCkmeeZJflCRW9w10E2K GxQSs/ermHYFnRi6a2wuHyLf+4M/3dRy8omJci2rPVTeKcTbkXn1EksuJ1jTI68u rh8vqFWojXTS6F3N+uqn0G62qIaGZW/LPhrl/wcVg/g6iW8w0+aGSCM2GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqFCWrKK1+dJYgdBeMMIojiTZMZMB8GA1UdIwQY MBaAFJNgigzaATP4dqua2D+je872LfLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzIt N2Y4YmE5NmY1ZTQ5LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzItN2Y4YmE5NmY1ZTQ5 LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMY3Xn6ts CFKaKZKaYaDhMDGdPPB9GWimwJCuIl4ptjv87BrZ0E2171+a0ukz8cU63T0g1qvk 0DDsFpfWzj0CnbMYU7ovrAqjsl0sXYCVb5fr6EIRH0/ZtrCoflVDQ21U2YrLYk12 pE733AQZc7M+kIiOk3lRaCSYi9Uk5AYNGarKjRu5vqSTUehux5I9A6TccL8VW7iC pFZsvmxUstS3QOp/jo2mdrii4ez8y/7KJn9MyCLXUZXn3TvgynnE9gk9mFLq3DO7 6kUCS/6QwT8sLEKjz+nYHMlPmkbAaNhosD+vTiI9gWelBbvZ5cmCX3rGGS0QrpL9 wQwQNYzRx1DDHg== -----END CERTIFICATE-----Generated at Wed Nov 26 14:27:25 2025 by rpki-client