This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json) Hash identifier: WVT3AHa0SeGEVlfB84IfzwABfRJuqR0Fgq1e8Yfqtqg= Subject key identifier: BE:0A:50:46:57:86:F1:09:18:3F:E9:18:6B:97:C5:66:E3:1B:43:56 Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce Certificate serial: 019B1CF2E9BBB5ED2ED96BF5B2A1B3630071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft Manifest number: 0F44 Signing time: Sun 14 Dec 2025 13:00:40 +0000 Manifest this update: Sun 14 Dec 2025 13:00:40 +0000 Manifest next update: Mon 15 Dec 2025 13:00:40 +0000 Files and hashes: 1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=) 2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: 7eEczxc1C+dXujeCE8wLcPSljDNnCr9XoOfZbX+JzKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f2:e9:bb:b5:ed:2e:d9:6b:f5:b2:a1:b3:63:00:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce Validity Not Before: Dec 14 13:00:40 2025 GMT Not After : Dec 15 13:00:40 2025 GMT Subject: CN=be0a50465786f109183fe9186b97c566e31b4356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:3b:16:02:04:d2:e3:38:6b:5e:40:f9:81: 17:9e:70:d7:dd:47:76:bb:6b:28:c0:db:7a:31:28: 86:d1:b5:d7:4a:c4:25:da:3d:6b:62:08:f7:d4:73: 70:87:50:08:ba:fe:a7:b2:ed:d8:1e:19:93:b6:cd: 62:cc:bd:21:13:f9:1e:a7:b8:3a:d9:e4:09:7e:84: 5c:b8:bb:5c:af:6f:72:f5:25:e4:e0:7b:50:18:29: 66:72:cb:ec:89:d8:54:ce:cc:52:8d:dc:7e:a9:1d: e7:50:1e:40:fc:f4:bb:57:c4:49:12:22:7a:06:13: d6:ae:2f:ab:05:c3:ed:e8:07:af:00:c0:7f:58:e3: fe:0d:e1:a0:eb:9c:71:46:b6:72:80:be:f4:ac:ee: a6:57:e2:e7:f6:bf:00:ad:0d:02:62:61:ac:cb:73: 61:a8:32:6b:01:46:e7:3d:94:62:ab:5a:77:0e:ee: 4f:08:5e:d3:b8:05:1b:ae:e6:66:83:cb:65:4c:d7: 8d:f4:f9:20:b6:2d:0c:8d:e2:20:70:6a:30:2d:d2: 23:db:88:1f:70:a2:95:d3:20:71:6d:19:97:94:bb: da:e9:07:03:0e:6e:f7:45:58:09:85:02:1a:82:12: ac:be:4f:32:1d:5d:61:15:47:5d:f2:34:27:0b:05: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0A:50:46:57:86:F1:09:18:3F:E9:18:6B:97:C5:66:E3:1B:43:56 X509v3 Authority Key Identifier: keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6e:1e:61:1f:ea:05:88:78:23:73:3e:f0:dd:db:73:47:bd: 7e:98:ac:72:94:c7:dc:a6:ef:fa:2a:99:4b:03:4f:4b:28:2f: 67:db:23:d7:32:87:04:0a:86:09:86:65:26:e4:c2:a0:a1:79: 98:7a:ae:81:9f:b0:f5:3b:5f:30:d5:f7:26:0f:25:5a:52:c7: 29:67:1f:be:8f:85:3f:d9:07:8f:e0:f4:23:fb:74:19:91:13: 8b:04:62:61:55:4f:44:71:e4:0d:7b:4d:e7:1c:88:4f:05:66: 68:e4:cf:85:19:72:18:ea:84:f0:83:48:ec:98:02:43:9d:9b: 42:77:73:b7:a2:34:36:04:7c:b1:f3:f0:c4:f1:12:01:90:14: 3f:71:a0:47:8b:e0:04:34:f0:11:f9:bf:ed:14:40:e3:46:0a: 4b:0f:b9:a4:30:5f:ab:97:52:03:d6:99:84:77:d3:3d:d9:cc: 5e:f9:dc:04:79:fd:fc:a8:33:41:9a:d9:05:03:c6:bd:4c:0b: 8f:24:cf:2e:1b:8e:d0:03:b5:f5:c9:61:00:8d:0e:07:3f:79: 0f:91:31:63:63:e9:2f:89:34:9c:68:2e:7c:55:52:63:05:69: 8e:6a:9d:be:2e:12:84:06:a7:14:8d:ac:2b:d5:0c:c7:fc:97: 7c:79:fb:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8um7te0u2Wv1sqGzYwBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNjc4ZjE0ZjhiMjI4OGQ0OTU1N2NhNmZiMWJkZjQ3OTM5 MjdkY2UwHhcNMjUxMjE0MTMwMDQwWhcNMjUxMjE1MTMwMDQwWjAzMTEwLwYDVQQD EyhiZTBhNTA0NjU3ODZmMTA5MTgzZmU5MTg2Yjk3YzU2NmUzMWI0MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaw7FgIE0uM4a15A+YEXnnDX3Ud2 u2sowNt6MSiG0bXXSsQl2j1rYgj31HNwh1AIuv6nsu3YHhmTts1izL0hE/kep7g6 2eQJfoRcuLtcr29y9SXk4HtQGClmcsvsidhUzsxSjdx+qR3nUB5A/PS7V8RJEiJ6 BhPWri+rBcPt6AevAMB/WOP+DeGg65xxRrZygL70rO6mV+Ln9r8ArQ0CYmGsy3Nh qDJrAUbnPZRiq1p3Du5PCF7TuAUbruZmg8tlTNeN9Pkgti0MjeIgcGowLdIj24gf cKKV0yBxbRmXlLva6QcDDm73RVgJhQIaghKsvk8yHV1hFUdd8jQnCwVt/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4KUEZXhvEJGD/pGGuXxWbjG0NWMB8GA1UdIwQY MBaAFCtnjxT4siiNSVV8pvsb30eTkn3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEt ZjFjYzg3M2MyZTI3LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEtZjFjYzg3M2MyZTI3 LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApW4eYR/q BYh4I3M+8N3bc0e9fpiscpTH3Kbv+iqZSwNPSygvZ9sj1zKHBAqGCYZlJuTCoKF5 mHqugZ+w9TtfMNX3Jg8lWlLHKWcfvo+FP9kHj+D0I/t0GZETiwRiYVVPRHHkDXtN 5xyITwVmaOTPhRlyGOqE8INI7JgCQ52bQndzt6I0NgR8sfPwxPESAZAUP3GgR4vg BDTwEfm/7RRA40YKSw+5pDBfq5dSA9aZhHfTPdnMXvncBHn9/KgzQZrZBQPGvUwL jyTPLhuO0AO19clhAI0OBz95D5ExY2PpL4k0nGgufFVSYwVpjmqdvi4ShAanFI2s K9UMx/yXfHn7sA== -----END CERTIFICATE-----Generated at Sun Dec 14 15:15:13 2025 by rpki-client