This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft File: k2wlHaPujjr0MZWo-Amao8bOLHw.mft (raw, json) Hash identifier: 4G8OZCLxSrw2EP4mMklo7m/eXb+ZvVSuebmtzq1d3pQ= Subject key identifier: 12:EB:4A:1C:37:F3:FD:DE:08:75:5C:5B:7D:F1:1D:41:65:8E:E7:3D Authority key identifier: 93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C Certificate issuer: /CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c Certificate serial: 019B5975A342D526EE1A1207CD988B9EFEB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft Manifest number: 63 Signing time: Fri 26 Dec 2025 07:00:40 +0000 Manifest this update: Fri 26 Dec 2025 07:00:40 +0000 Manifest next update: Sat 27 Dec 2025 07:00:40 +0000 Files and hashes: 1: k2wlHaPujjr0MZWo-Amao8bOLHw.crl (hash: D1mlZy4UPEpcF5XELTiqPy7ayJfp2ZwfGyoF5TyqDz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:a3:42:d5:26:ee:1a:12:07:cd:98:8b:9e:fe:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=936c251da3ee8e3af43195a8f8099aa3c6ce2c7c Validity Not Before: Dec 26 07:00:40 2025 GMT Not After : Dec 27 07:00:40 2025 GMT Subject: CN=12eb4a1c37f3fdde08755c5b7df11d41658ee73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:35:cb:7d:f6:47:78:75:3c:7d:6a:8a:c0:63: 7d:9f:86:be:eb:f5:9c:ab:1e:48:e9:2c:9d:40:70: 6d:27:bc:dd:c1:98:18:0c:b5:06:31:d1:ad:bc:d9: b6:11:4c:e9:ea:4c:21:40:6a:5c:7e:aa:e6:4d:39: 2e:fc:5e:72:ee:c5:81:ef:93:40:3c:7a:9a:5a:50: f8:23:0e:08:d8:9b:58:7d:04:48:fa:4d:55:b5:3a: 59:e7:f8:e1:89:6b:9a:4c:21:c8:76:a6:22:cf:33: d8:85:62:39:c2:12:3f:bc:90:47:78:9c:aa:5b:78: 3d:6a:a1:97:53:cb:e0:64:cb:62:9c:df:5e:90:a1: 14:96:68:64:39:bc:f9:0e:c2:f7:45:66:d7:b8:e3: 73:b3:48:f0:93:82:63:8b:17:31:a8:5d:4d:f6:35: 51:8c:ee:a5:b5:86:fd:b3:cf:9a:43:30:e5:2a:f1: 0a:82:46:72:a1:62:84:bf:97:ed:73:28:c5:01:bb: 1a:50:e8:af:a9:c9:c4:f5:bb:d5:80:4d:8e:aa:2d: bd:b6:30:a0:31:dd:6c:ad:08:48:2b:77:46:c6:19: c1:bb:7e:b8:35:8e:37:84:45:87:29:16:8b:01:94: 48:fa:92:f5:e8:cc:3e:ee:97:d9:13:c7:fc:50:0d: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EB:4A:1C:37:F3:FD:DE:08:75:5C:5B:7D:F1:1D:41:65:8E:E7:3D X509v3 Authority Key Identifier: keyid:93:6C:25:1D:A3:EE:8E:3A:F4:31:95:A8:F8:09:9A:A3:C6:CE:2C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2wlHaPujjr0MZWo-Amao8bOLHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0f1ed9-09a1-4e14-9b17-8bc37a64e6c7/1/k2wlHaPujjr0MZWo-Amao8bOLHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:57:15:4b:2d:ea:f9:01:b1:15:50:2f:c3:92:87:4c:4f:c9: f2:7c:a6:56:4b:62:e2:f8:46:ba:77:2d:7a:e7:13:70:93:2d: e1:62:f1:7f:53:d0:51:39:b3:57:ec:f7:6d:0f:8c:aa:d3:2a: 21:bb:1a:82:a2:46:6f:fa:54:3c:11:89:1e:a1:8f:b9:ba:d8: 5b:bc:14:cb:a7:64:86:7b:62:3d:4b:7f:27:0e:50:c6:06:a6: fb:32:e6:87:63:0e:45:97:a6:89:4f:81:df:36:de:3e:44:dd: d4:c7:da:3e:30:eb:7d:f0:bb:a1:65:cf:10:65:19:de:0a:99: c8:ee:3e:88:c0:d2:19:5b:bc:83:5a:88:b5:09:7c:5d:8e:92: 03:7c:81:23:5f:93:63:e6:d4:69:db:bd:35:b7:9d:27:91:70: 71:2a:cb:0f:59:b8:ed:37:e3:c3:5a:e5:8c:93:6f:b4:7c:86: 8d:4a:c9:25:71:e1:13:aa:b7:88:e4:63:68:3e:15:07:79:ad: 12:5d:ce:7c:a3:fe:85:2d:39:5f:ba:35:ba:a3:b2:5d:4b:cd: 78:c7:40:1d:04:c4:99:94:e5:de:53:07:89:9d:18:52:b0:23: 8c:c6:8b:d4:d3:7f:00:d5:34:16:f7:63:42:a3:29:fe:34:13: 90:3a:f8:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdaNC1SbuGhIHzZiLnv6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNmMyNTFkYTNlZThlM2FmNDMxOTVhOGY4MDk5YWEzYzZj ZTJjN2MwHhcNMjUxMjI2MDcwMDQwWhcNMjUxMjI3MDcwMDQwWjAzMTEwLwYDVQQD EygxMmViNGExYzM3ZjNmZGRlMDg3NTVjNWI3ZGYxMWQ0MTY1OGVlNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DXLffZHeHU8fWqKwGN9n4a+6/Wc qx5I6SydQHBtJ7zdwZgYDLUGMdGtvNm2EUzp6kwhQGpcfqrmTTku/F5y7sWB75NA PHqaWlD4Iw4I2JtYfQRI+k1VtTpZ5/jhiWuaTCHIdqYizzPYhWI5whI/vJBHeJyq W3g9aqGXU8vgZMtinN9ekKEUlmhkObz5DsL3RWbXuONzs0jwk4JjixcxqF1N9jVR jO6ltYb9s8+aQzDlKvEKgkZyoWKEv5ftcyjFAbsaUOivqcnE9bvVgE2Oqi29tjCg Md1srQhIK3dGxhnBu364NY43hEWHKRaLAZRI+pL16Mw+7pfZE8f8UA2otwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLrShw38/3eCHVcW33xHUFljuc9MB8GA1UdIwQY MBaAFJNsJR2j7o469DGVqPgJmqPGzix8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJ3bEhhUHVqanIwTVpXby1BbWFvOGJPTEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wZjFlZDktMDlhMS00ZTE0LTliMTct OGJjMzdhNjRlNmM3LzEvazJ3bEhhUHVqanIwTVpXby1BbWFvOGJPTEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wZjFlZDktMDlhMS00ZTE0LTliMTctOGJjMzdhNjRlNmM3 LzEvazJ3bEhhUHVqanIwTVpXby1BbWFvOGJPTEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFcVSy3q +QGxFVAvw5KHTE/J8nymVkti4vhGuncteucTcJMt4WLxf1PQUTmzV+z3bQ+MqtMq IbsagqJGb/pUPBGJHqGPubrYW7wUy6dkhntiPUt/Jw5Qxgam+zLmh2MORZemiU+B 3zbePkTd1MfaPjDrffC7oWXPEGUZ3gqZyO4+iMDSGVu8g1qItQl8XY6SA3yBI1+T Y+bUadu9NbedJ5FwcSrLD1m47Tfjw1rljJNvtHyGjUrJJXHhE6q3iORjaD4VB3mt El3OfKP+hS05X7o1uqOyXUvNeMdAHQTEmZTl3lMHiZ0YUrAjjMaL1NN/ANU0Fvdj QqMp/jQTkDr4XQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:22 2025 by rpki-client