This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft File: K-BKLRVsHGjDUjj26DAauu8AvfE.mft (raw, json) Hash identifier: 8zziY58ALhDs/9w7LRUqaEOB1KaMB8pRny+lvzdhMz0= Subject key identifier: 13:D4:4A:A8:FE:DA:EA:D1:2A:9A:EC:7C:FB:2F:C3:51:34:AD:69:46 Authority key identifier: 2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1 Certificate issuer: /CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1 Certificate serial: 019B59E4021389F803828E2F2FAFB935B648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft Manifest number: 54 Signing time: Fri 26 Dec 2025 09:01:13 +0000 Manifest this update: Fri 26 Dec 2025 09:01:13 +0000 Manifest next update: Sat 27 Dec 2025 09:01:13 +0000 Files and hashes: 1: K-BKLRVsHGjDUjj26DAauu8AvfE.crl (hash: 1HlN1QMohINPI+VW/Uj8/PKNVs3e5HyvcEUJSheLqdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:02:13:89:f8:03:82:8e:2f:2f:af:b9:35:b6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1 Validity Not Before: Dec 26 09:01:13 2025 GMT Not After : Dec 27 09:01:13 2025 GMT Subject: CN=13d44aa8fedaead12a9aec7cfb2fc35134ad6946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:fb:88:f5:fc:7b:c3:6c:a8:80:d3:42:e2: 3f:17:a7:e0:ea:1b:1a:04:3f:c6:a9:1a:a9:05:98: b8:be:3b:ca:d2:6d:e0:7d:01:33:18:60:fc:18:59: 3b:3d:11:02:26:f0:60:df:9a:fd:1e:3a:b9:ae:5e: 0a:76:c5:5a:d1:29:c0:ed:e6:23:a4:7d:7c:9b:c1: 46:fa:e9:71:e8:5d:7c:65:d5:46:3f:67:33:14:ad: 5d:42:ad:39:37:05:92:5b:b6:ae:44:64:43:48:60: 2a:e5:2d:36:d6:a6:ac:ed:8e:6e:07:4b:e5:97:6b: e3:b2:67:6d:00:fc:b5:92:82:08:5a:76:b9:7e:40: 25:bd:02:ae:1a:08:a8:08:6d:4a:65:67:83:24:5c: 97:ee:82:32:92:8c:af:fd:db:ec:e5:7e:8f:91:96: 20:97:5d:44:df:4a:7d:15:6e:82:8d:b5:32:67:38: 73:1a:ab:e9:d6:a7:22:fd:7d:40:a0:6d:85:13:df: df:d4:ff:ec:18:cf:17:58:74:04:f5:c2:96:d0:7a: 66:6c:43:6a:8b:7f:37:f8:bd:0e:8c:db:df:8b:3d: 5b:04:dc:08:54:98:53:28:90:8f:91:e3:c1:fa:63: 41:b1:03:71:c1:6f:59:3e:75:4b:5e:94:08:13:fa: 05:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:4A:A8:FE:DA:EA:D1:2A:9A:EC:7C:FB:2F:C3:51:34:AD:69:46 X509v3 Authority Key Identifier: keyid:2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c3:a8:7d:b2:86:07:4a:bd:85:73:c0:c1:f3:07:7c:87:ce: fd:69:18:19:c9:54:17:0d:8b:e7:3e:27:80:b4:5f:a7:dc:b4: bc:e0:1c:84:df:dc:2e:99:45:e6:83:96:54:c8:d6:67:e7:3f: 7e:81:c0:33:0e:a4:b3:37:f3:e0:69:b4:bb:48:c6:01:45:e3: 1b:44:7a:89:e9:81:71:69:26:ce:22:f3:bb:09:23:06:7d:ca: 63:68:96:9a:f1:45:5f:59:73:05:b6:f1:27:2b:b1:47:ab:18: 92:9a:89:54:8e:9a:a9:14:b4:75:5f:db:4b:15:40:e7:84:32: 8d:c3:ee:c8:f6:83:fe:3f:68:31:81:f0:81:30:02:2a:68:a3: 66:f0:dc:ca:1f:47:01:ed:f5:6a:5f:4c:de:3f:4b:ae:f2:64: 7d:53:86:e0:ad:51:c4:c8:8b:8b:1d:e4:15:dd:08:ca:1b:ba: 1e:c2:ce:dd:ea:d5:7d:94:ae:db:42:d7:9d:c1:ba:3b:c1:15: b5:8d:b9:fe:46:5f:96:88:f4:9a:ad:08:81:be:96:19:23:63: 63:f3:99:f5:80:92:58:09:6f:52:6c:a9:d4:7f:4b:e1:84:97: 6f:40:c2:af:86:b8:24:5d:4f:6f:83:83:d2:89:70:6b:19:6b: bf:db:c2:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5AITifgDgo4vL6+5NbZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZTA0YTJkMTU2YzFjNjhjMzUyMzhmNmU4MzAxYWJhZWYw MGJkZjEwHhcNMjUxMjI2MDkwMTEzWhcNMjUxMjI3MDkwMTEzWjAzMTEwLwYDVQQD EygxM2Q0NGFhOGZlZGFlYWQxMmE5YWVjN2NmYjJmYzM1MTM0YWQ2OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgX7iPX8e8NsqIDTQuI/F6fg6hsa BD/GqRqpBZi4vjvK0m3gfQEzGGD8GFk7PRECJvBg35r9Hjq5rl4KdsVa0SnA7eYj pH18m8FG+ulx6F18ZdVGP2czFK1dQq05NwWSW7auRGRDSGAq5S021qas7Y5uB0vl l2vjsmdtAPy1koIIWna5fkAlvQKuGgioCG1KZWeDJFyX7oIykoyv/dvs5X6PkZYg l11E30p9FW6CjbUyZzhzGqvp1qci/X1AoG2FE9/f1P/sGM8XWHQE9cKW0HpmbENq i383+L0OjNvfiz1bBNwIVJhTKJCPkePB+mNBsQNxwW9ZPnVLXpQIE/oF0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPUSqj+2urRKprsfPsvw1E0rWlGMB8GA1UdIwQY MBaAFCvgSi0VbBxow1I49ugwGrrvAL3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgt MzIxODA1YzdlMjBmLzEvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgtMzIxODA1YzdlMjBm LzEvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosOofbKG B0q9hXPAwfMHfIfO/WkYGclUFw2L5z4ngLRfp9y0vOAchN/cLplF5oOWVMjWZ+c/ foHAMw6kszfz4Gm0u0jGAUXjG0R6iemBcWkmziLzuwkjBn3KY2iWmvFFX1lzBbbx JyuxR6sYkpqJVI6aqRS0dV/bSxVA54QyjcPuyPaD/j9oMYHwgTACKmijZvDcyh9H Ae31al9M3j9LrvJkfVOG4K1RxMiLix3kFd0Iyhu6HsLO3erVfZSu20LXncG6O8EV tY25/kZfloj0mq0Igb6WGSNjY/OZ9YCSWAlvUmyp1H9L4YSXb0DCr4a4JF1Pb4OD 0olwaxlrv9vCRw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:16 2025 by rpki-client