This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json) Hash identifier: eyUbAEFpm1hUa0FKGf5Izmztp5mZDV3eOWI7VDGVQu8= Subject key identifier: 80:07:11:7A:01:B3:EF:FA:E8:B5:D4:6A:BB:E6:31:C0:00:1C:A3:33 Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42 Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42 Certificate serial: 019AE785C8A0B1DFE2BDB88ED11826C57257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft Manifest number: 0531 Signing time: Thu 04 Dec 2025 04:01:35 +0000 Manifest this update: Thu 04 Dec 2025 04:01:35 +0000 Manifest next update: Fri 05 Dec 2025 04:01:35 +0000 Files and hashes: 1: 0wC5w948UY0C8lbbbwjaNWUmaMs.roa (hash: 7dNowFY6Z9DYJQ/T5wMAdRS7JymKkI5jHGEm06y4wrQ=) 2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: iRGXh4xMdRuqbUOX7bASOxR4j3ZHo3AXiq70RtLBjIc=) 3: WxF3Ah-HqkWD46jEdLSf15By4dQ.roa (hash: F1Bbqnsw6e5tq9R3c7mdMkG3fp0o0nEA+3fMn0P6ii8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:85:c8:a0:b1:df:e2:bd:b8:8e:d1:18:26:c5:72:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42 Validity Not Before: Dec 4 04:01:35 2025 GMT Not After : Dec 5 04:01:35 2025 GMT Subject: CN=8007117a01b3effae8b5d46abbe631c0001ca333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:0b:99:bb:08:e4:b0:84:51:26:1c:71:34: 79:23:10:9f:e9:93:74:92:08:4c:f7:fd:13:5a:32: a9:e2:19:02:03:95:e1:c6:a2:d6:0c:4b:d3:31:4d: cd:25:fc:3e:0d:73:b7:59:8e:ee:0e:21:11:ae:7a: 0a:df:9d:0f:b9:88:55:6d:b8:1f:73:59:a9:95:ce: a7:86:88:fc:cb:67:b7:5b:43:60:d0:66:ad:49:7f: a2:da:4d:7a:c2:a8:ea:3b:6b:e2:05:45:35:e7:8c: 30:f8:78:be:e2:89:6e:9e:79:8d:0c:d5:5e:d3:f9: cc:61:0d:1f:ac:26:d3:33:cd:a3:19:bc:e1:13:af: 52:ff:df:d2:57:fe:85:ae:a1:45:1f:5c:67:40:62: b1:eb:c2:91:ac:fd:66:0d:9a:ab:f4:fc:5c:10:a9: d7:34:bd:b0:03:29:ab:f9:e1:1f:b8:cc:60:f1:6c: 0c:88:fd:76:32:09:30:95:a4:c9:d1:52:1b:34:15: fc:44:86:8b:41:ee:1b:f6:1b:46:66:eb:81:c9:d5: dd:97:b9:1d:31:9c:df:3e:4d:fe:df:02:f3:6b:fa: ac:cf:2f:b1:8f:c7:ee:b4:85:18:45:2b:64:b0:74: a3:28:66:08:44:ac:1d:32:74:c0:ac:29:02:42:77: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:07:11:7A:01:B3:EF:FA:E8:B5:D4:6A:BB:E6:31:C0:00:1C:A3:33 X509v3 Authority Key Identifier: keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7e:17:81:d4:80:85:79:21:0c:eb:10:34:ff:c7:c0:73:a1: db:75:6a:78:04:84:80:dd:4a:eb:a6:44:e6:34:ba:ef:ba:0f: f9:fa:3e:51:2b:f8:a6:be:57:cf:5b:ee:9d:3c:f6:d4:39:eb: 85:b4:c3:6f:af:ab:0b:2d:48:27:bd:d7:9c:1f:54:ba:cc:ee: 3a:48:5b:21:f5:a1:1b:79:75:73:eb:4d:77:e9:c8:d4:b6:65: d0:db:2b:79:77:d4:8b:61:6f:27:d8:5d:90:7d:26:b7:4f:cb: a1:8c:12:a5:0a:3b:fb:5e:e4:38:3d:da:72:83:ac:9d:f7:b3: a5:fd:3d:c2:07:78:da:75:1c:71:90:1a:50:64:8a:85:6d:62: 7b:d9:20:34:08:f8:b7:a8:f7:49:1a:fc:2e:61:a7:6f:46:ae: eb:fc:f3:b5:b8:7d:2f:f9:5f:3c:a6:b6:a9:bd:75:46:bf:d6: fd:bf:2c:d1:4c:ec:a8:bb:ec:7d:ab:4d:0d:71:cc:11:55:21: 3c:c8:16:52:32:74:d5:02:9e:35:30:65:c5:06:3a:68:71:e1: 2b:bc:b9:41:c0:cc:de:17:bf:3a:c6:50:94:00:ca:23:60:f3: fd:8d:de:e7:16:04:21:9b:2f:41:bb:37:87:c0:57:54:29:1d: 28:1d:36:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnhcigsd/ivbiO0RgmxXJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjUyNzU1MjFkMjljYWY3MTc2ZWUyYzM5OGQ0MGExZWM0 NzljNDIwHhcNMjUxMjA0MDQwMTM1WhcNMjUxMjA1MDQwMTM1WjAzMTEwLwYDVQQD Eyg4MDA3MTE3YTAxYjNlZmZhZThiNWQ0NmFiYmU2MzFjMDAwMWNhMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG8LmbsI5LCEUSYccTR5IxCf6ZN0 kghM9/0TWjKp4hkCA5XhxqLWDEvTMU3NJfw+DXO3WY7uDiERrnoK350PuYhVbbgf c1mplc6nhoj8y2e3W0Ng0GatSX+i2k16wqjqO2viBUU154ww+Hi+4olunnmNDNVe 0/nMYQ0frCbTM82jGbzhE69S/9/SV/6FrqFFH1xnQGKx68KRrP1mDZqr9PxcEKnX NL2wAymr+eEfuMxg8WwMiP12MgkwlaTJ0VIbNBX8RIaLQe4b9htGZuuBydXdl7kd MZzfPk3+3wLza/qszy+xj8futIUYRStksHSjKGYIRKwdMnTArCkCQndpIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAHEXoBs+/66LXUarvmMcAAHKMzMB8GA1UdIwQY MBaAFCtlJ1Uh0pyvcXbuLDmNQKHsR5xCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYt OWVhOWY1ZTIwM2EwLzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYtOWVhOWY1ZTIwM2Ew LzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI34XgdSA hXkhDOsQNP/HwHOh23VqeASEgN1K66ZE5jS677oP+fo+USv4pr5Xz1vunTz21Dnr hbTDb6+rCy1IJ73XnB9UuszuOkhbIfWhG3l1c+tNd+nI1LZl0NsreXfUi2FvJ9hd kH0mt0/LoYwSpQo7+17kOD3acoOsnfezpf09wgd42nUccZAaUGSKhW1ie9kgNAj4 t6j3SRr8LmGnb0au6/zztbh9L/lfPKa2qb11Rr/W/b8s0UzsqLvsfatNDXHMEVUh PMgWUjJ01QKeNTBlxQY6aHHhK7y5QcDM3he/OsZQlADKI2Dz/Y3e5xYEIZsvQbs3 h8BXVCkdKB02Pw== -----END CERTIFICATE-----Generated at Thu Dec 4 11:23:25 2025 by rpki-client