This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json) Hash identifier: OZaJuA0gRGGy+rWFk4bjTyuN3rtoKwOP67p068YlyU0= Subject key identifier: CF:16:91:D2:AB:46:EE:FD:85:6C:46:86:63:55:33:42:0A:72:CF:33 Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Certificate serial: 019B0DB73BD1E9F7BD6B2D9A8016777C209F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft Manifest number: 0275 Signing time: Thu 11 Dec 2025 14:01:10 +0000 Manifest this update: Thu 11 Dec 2025 14:01:10 +0000 Manifest next update: Fri 12 Dec 2025 14:01:10 +0000 Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: ZXZS76jfHpCNxdBnQGSQSZFdYZaiob9WFZ5NkKJdi5U=) 2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:3b:d1:e9:f7:bd:6b:2d:9a:80:16:77:7c:20:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9 Validity Not Before: Dec 11 14:01:10 2025 GMT Not After : Dec 12 14:01:10 2025 GMT Subject: CN=cf1691d2ab46eefd856c4686635533420a72cf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:35:79:f4:90:f9:ca:7c:58:d0:d2:4f:cb: 4d:11:39:d7:12:52:53:75:f4:85:2c:e1:34:01:54: 6d:26:59:60:50:25:a9:1d:78:1b:24:10:33:8c:77: 4b:d8:7b:56:83:81:97:2b:7b:3b:1c:16:b0:5c:82: e9:82:54:68:dd:60:d7:d1:07:b3:18:3d:c5:6c:47: a7:90:f3:d8:75:de:4a:1f:4e:56:2a:c0:91:98:bd: aa:54:51:19:75:2e:3c:e0:50:b7:1b:d3:dd:45:14: cc:4f:41:2f:6e:94:8c:bb:f8:c5:ca:47:03:6c:1e: 4c:85:6f:67:df:b8:e4:54:cc:69:5d:09:5c:16:f0: 30:29:1c:2c:d8:df:ce:8a:1d:be:69:2f:9f:0d:ea: 29:dd:66:c1:c5:b5:81:55:5c:37:73:7d:32:19:f2: 75:9d:41:38:d7:47:f9:7d:3f:3a:ee:93:a6:d6:db: f7:85:b7:7b:8a:8b:f5:3b:07:d7:54:5a:f3:37:92: 62:4c:19:35:f2:15:fc:7f:58:6c:83:76:c3:4f:01: be:9d:f8:52:44:b1:54:f4:c8:eb:cc:43:95:e5:18: 3e:90:1b:f5:fb:a1:b7:a8:14:f6:6f:c5:0c:19:4d: a6:2a:dc:c3:7a:ee:97:b4:a8:f1:2d:a8:cb:86:bb: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:91:D2:AB:46:EE:FD:85:6C:46:86:63:55:33:42:0A:72:CF:33 X509v3 Authority Key Identifier: keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5d:a3:21:c6:58:96:a6:51:95:ff:2e:0b:c7:aa:7f:2d:d2: e7:d8:79:ba:48:64:6d:e1:e7:b3:2b:08:a4:10:84:c7:72:09: 53:92:6f:93:5c:f1:3f:4c:f8:10:db:91:9a:4d:42:18:41:8c: 80:3a:9e:42:12:15:d3:fb:fb:fc:6f:a3:29:1d:17:93:78:31: f8:49:19:da:ce:c3:62:03:ca:92:7e:15:81:53:df:ff:7d:f0: 8e:5a:1f:1c:10:00:7c:b0:b7:b1:11:e7:98:bf:e3:ad:be:21: 9d:b1:9e:52:fd:a0:a1:3a:82:08:3e:30:88:b4:e5:16:7f:11: 6c:d7:b7:c7:74:93:2d:76:f6:f4:4d:c8:2a:da:8e:18:c9:06: 0b:e8:23:fa:a8:20:13:43:df:50:06:ba:25:3f:8f:d4:6d:01: 07:71:94:a1:62:23:60:3f:f9:31:3a:63:6e:cd:20:0d:a2:db: 92:b3:83:67:61:0f:af:b3:fe:df:1a:bd:25:d9:2d:33:68:30: 21:3e:cc:18:84:28:24:ca:b3:96:c0:e2:49:d7:a3:fd:a0:f7: c4:0c:87:e4:25:91:0f:b2:1c:da:ff:a0:53:62:ca:0e:74:96: 2a:b3:07:53:75:0c:21:41:3e:9a:44:48:05:80:d8:0a:b7:db: e8:ae:a7:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtzvR6fe9ay2agBZ3fCCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNWMwNTUwMGM4NjVlOTI0YmRkZWIxYWVlN2IyZWI4Y2Jh OTI3YzkwHhcNMjUxMjExMTQwMTEwWhcNMjUxMjEyMTQwMTEwWjAzMTEwLwYDVQQD EyhjZjE2OTFkMmFiNDZlZWZkODU2YzQ2ODY2MzU1MzM0MjBhNzJjZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKQ1efSQ+cp8WNDST8tNETnXElJT dfSFLOE0AVRtJllgUCWpHXgbJBAzjHdL2HtWg4GXK3s7HBawXILpglRo3WDX0Qez GD3FbEenkPPYdd5KH05WKsCRmL2qVFEZdS484FC3G9PdRRTMT0EvbpSMu/jFykcD bB5MhW9n37jkVMxpXQlcFvAwKRws2N/Oih2+aS+fDeop3WbBxbWBVVw3c30yGfJ1 nUE410f5fT867pOm1tv3hbd7iov1OwfXVFrzN5JiTBk18hX8f1hsg3bDTwG+nfhS RLFU9MjrzEOV5Rg+kBv1+6G3qBT2b8UMGU2mKtzDeu6XtKjxLajLhrszUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8WkdKrRu79hWxGhmNVM0IKcs8zMB8GA1UdIwQY MBaAFCtcBVAMhl6SS93rGu57LrjLqSfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODkt NTk1ZDQyZDVjMjU0LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yN2ZkNWUtN2Q1ZS00ODk4LTg2ODktNTk1ZDQyZDVjMjU0 LzEvSzF3RlVBeUdYcEpMM2VzYTduc3V1TXVwSjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdF2jIcZY lqZRlf8uC8eqfy3S59h5ukhkbeHnsysIpBCEx3IJU5Jvk1zxP0z4ENuRmk1CGEGM gDqeQhIV0/v7/G+jKR0Xk3gx+EkZ2s7DYgPKkn4VgVPf/33wjlofHBAAfLC3sRHn mL/jrb4hnbGeUv2goTqCCD4wiLTlFn8RbNe3x3STLXb29E3IKtqOGMkGC+gj+qgg E0PfUAa6JT+P1G0BB3GUoWIjYD/5MTpjbs0gDaLbkrODZ2EPr7P+3xq9JdktM2gw IT7MGIQoJMqzlsDiSdej/aD3xAyH5CWRD7Ic2v+gU2LKDnSWKrMHU3UMIUE+mkRI BYDYCrfb6K6nEA== -----END CERTIFICATE-----Generated at Thu Dec 11 20:35:53 2025 by rpki-client