This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json) Hash identifier: mJZTlJMhMwdqZXjDvGuUN7ujsVZR4mMgnYOnR6uR7Uc= Subject key identifier: 4F:1C:FD:A3:F9:97:23:F3:83:7F:ED:64:18:0C:E5:84:94:4C:5E:E3 Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Certificate serial: 019B3AC6E51A5F3BD7029AF7A6EE60DB597C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft Manifest number: 0EF6 Signing time: Sat 20 Dec 2025 08:01:11 +0000 Manifest this update: Sat 20 Dec 2025 08:01:11 +0000 Manifest next update: Sun 21 Dec 2025 08:01:11 +0000 Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=) 2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=) 3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: DLxP5tdeHH17Gm8USOWaj/YFnexoA5N6x4lv48tRhNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:e5:1a:5f:3b:d7:02:9a:f7:a6:ee:60:db:59:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Validity Not Before: Dec 20 08:01:11 2025 GMT Not After : Dec 21 08:01:11 2025 GMT Subject: CN=4f1cfda3f99723f3837fed64180ce584944c5ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:c4:a0:5b:da:2f:3b:1b:71:a1:6a:c7:0c: 6f:a0:df:ab:75:83:39:d8:68:89:ba:4f:88:98:fe: 93:e1:40:39:ed:29:02:74:fb:b3:87:cd:fe:76:c8: d7:88:be:77:2f:32:79:dc:4c:0b:cb:6f:f0:bb:75: 01:b7:60:8e:c3:27:c2:f9:da:b4:11:42:48:fd:3a: a5:37:74:cb:97:ae:1e:e2:9b:84:7e:db:2d:f8:4f: 7e:13:2b:56:08:5b:7f:a8:55:90:58:b7:6f:51:c0: dc:b2:f5:59:0f:3d:6f:0b:6d:0b:ef:14:f2:d3:05: bd:e5:e2:da:2b:e9:57:2f:d0:30:57:47:7d:12:58: dc:5c:04:a2:c5:d6:ff:4f:62:e1:50:78:bd:42:8f: 99:78:6b:f5:8c:e5:01:97:72:b8:a5:f0:5d:55:38: d1:e9:d1:9a:a5:40:ef:b2:8c:fa:1b:00:16:86:65: 11:4c:4e:3b:29:c0:d8:71:dd:c2:b7:88:1b:f9:c7: dd:ee:25:d5:8e:ed:32:f2:6e:93:50:ea:38:a6:db: 4c:aa:9e:e8:2d:03:72:9b:04:3b:11:44:81:07:bf: c0:c0:04:84:89:fe:88:bf:33:e6:99:33:ce:f9:85: 63:f9:b5:0c:89:b5:56:fd:8e:8a:03:84:0f:c1:04: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:FD:A3:F9:97:23:F3:83:7F:ED:64:18:0C:E5:84:94:4C:5E:E3 X509v3 Authority Key Identifier: keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8d:e0:13:8a:20:3b:9b:70:c0:da:db:0f:9d:10:ab:8f:92: 87:35:a4:32:68:3c:7d:02:37:fd:6d:28:11:f3:99:22:99:c5: 71:11:c7:85:94:10:26:15:7a:24:ce:0e:16:01:31:b5:cc:b7: d1:3d:10:80:14:40:a8:0f:d2:67:8a:d1:35:71:6c:fd:1c:2f: 16:73:16:32:63:5c:4a:64:24:c1:35:b6:a5:b2:8c:36:a6:a0: bd:13:31:b0:07:79:48:cf:84:74:4c:d3:b2:e7:6f:7e:51:90: f9:e1:d0:03:e2:a5:84:bd:f4:d3:12:19:19:a5:f6:df:2a:88: 14:5a:48:48:ff:27:fb:bb:33:e8:84:b7:24:2b:7a:9d:f2:49: 30:71:3b:99:2c:42:41:9c:16:01:a7:2a:b4:26:d9:09:92:f4: b4:5b:de:fa:d7:c2:0f:2d:2a:7f:1e:6f:f8:16:d2:27:40:7a: 87:51:fc:36:07:aa:a1:84:62:38:c2:8f:2d:0e:3a:6e:20:04: 48:90:7b:9c:82:43:1d:e6:be:c3:65:9e:aa:34:73:79:bb:0d: 0e:88:ac:40:fd:fa:65:f9:2e:a2:3c:81:d5:b0:f5:91:d8:21: 2a:4a:ff:8d:8b:43:8e:d2:cb:e0:bf:50:ad:9c:c8:db:41:86: 6c:d4:b4:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xuUaXzvXApr3pu5g21l8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi MjBmYTYwHhcNMjUxMjIwMDgwMTExWhcNMjUxMjIxMDgwMTExWjAzMTEwLwYDVQQD Eyg0ZjFjZmRhM2Y5OTcyM2YzODM3ZmVkNjQxODBjZTU4NDk0NGM1ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1LEoFvaLzsbcaFqxwxvoN+rdYM5 2GiJuk+ImP6T4UA57SkCdPuzh83+dsjXiL53LzJ53EwLy2/wu3UBt2COwyfC+dq0 EUJI/TqlN3TLl64e4puEftst+E9+EytWCFt/qFWQWLdvUcDcsvVZDz1vC20L7xTy 0wW95eLaK+lXL9AwV0d9EljcXASixdb/T2LhUHi9Qo+ZeGv1jOUBl3K4pfBdVTjR 6dGapUDvsoz6GwAWhmURTE47KcDYcd3Ct4gb+cfd7iXVju0y8m6TUOo4pttMqp7o LQNymwQ7EUSBB7/AwASEif6IvzPmmTPO+YVj+bUMibVW/Y6KA4QPwQR1DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8c/aP5lyPzg3/tZBgM5YSUTF7jMB8GA1UdIwQY MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI3gE4og O5twwNrbD50Qq4+ShzWkMmg8fQI3/W0oEfOZIpnFcRHHhZQQJhV6JM4OFgExtcy3 0T0QgBRAqA/SZ4rRNXFs/RwvFnMWMmNcSmQkwTW2pbKMNqagvRMxsAd5SM+EdEzT sudvflGQ+eHQA+KlhL300xIZGaX23yqIFFpISP8n+7sz6IS3JCt6nfJJMHE7mSxC QZwWAacqtCbZCZL0tFve+tfCDy0qfx5v+BbSJ0B6h1H8NgeqoYRiOMKPLQ46biAE SJB7nIJDHea+w2WeqjRzebsNDoisQP36ZfkuojyB1bD1kdghKkr/jYtDjtLL4L9Q rZzI20GGbNS00g== -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:28 2025 by rpki-client