This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json) Hash identifier: 8JLAU2nOCK7ekj7BGORCV9xIN7sBMYei5mxw1RQm7+4= Subject key identifier: 9E:0A:88:FF:E4:E2:2F:0C:16:60:7A:CF:DF:41:81:52:3A:67:56:9D Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77 Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977 Certificate serial: 019B2F9EA9B087B25B2EC0478147812677BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 04:01:25 +0000 Manifest this update: Thu 18 Dec 2025 04:01:25 +0000 Manifest next update: Fri 19 Dec 2025 04:01:25 +0000 Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: oKV0+kvbdg3eCkZ0rI+T8h1Ihkk6Secb8Pcogajbw/4=) 2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:a9:b0:87:b2:5b:2e:c0:47:81:47:81:26:77:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977 Validity Not Before: Dec 18 04:01:25 2025 GMT Not After : Dec 19 04:01:25 2025 GMT Subject: CN=9e0a88ffe4e22f0c16607acfdf4181523a67569d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:8d:d0:d0:67:31:8d:62:f8:b5:4f:e2:86: 4f:0c:9e:fe:f1:e0:47:f0:05:b3:ab:97:7c:41:e6: e8:18:1b:d6:c2:1c:cb:52:fe:0d:bd:4f:96:fa:bd: b2:f5:66:18:ef:89:38:95:04:7a:0d:1b:99:1f:17: 34:cd:77:cd:78:32:03:da:d2:bf:54:e5:dd:6a:fe: 7d:f6:b0:d5:0a:b8:2b:20:a9:9e:92:4f:c3:92:6c: 96:b8:f8:cd:7c:c5:c8:11:16:a2:ed:4c:fb:69:bd: 66:65:4d:4a:74:da:e0:10:78:94:d9:a5:bb:51:f3: c1:90:84:cf:09:10:ac:24:b6:01:90:60:c0:a3:79: 7e:a3:4b:31:b0:c7:3b:b5:c1:56:12:54:31:95:07: ee:a6:2c:cd:8c:3f:18:27:6d:dd:59:62:d7:5f:23: fa:ad:a5:1c:1a:5c:cd:0c:dd:b4:17:c5:62:40:15: 5e:3b:35:9e:9f:66:5f:d3:df:dc:a4:29:fb:e3:21: c7:01:57:4a:d9:4e:51:ac:fb:57:a9:f7:24:84:7f: e5:b4:bf:9b:2d:e5:5b:85:bb:e9:ef:7d:9e:5e:5b: 4a:d0:bb:34:30:01:c9:85:ee:87:b3:a5:41:db:8a: 5e:29:57:b9:53:ce:73:8f:7b:02:83:52:ba:0f:f0: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0A:88:FF:E4:E2:2F:0C:16:60:7A:CF:DF:41:81:52:3A:67:56:9D X509v3 Authority Key Identifier: keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d1:6d:4b:f5:5f:21:d8:70:a6:f1:e9:67:66:67:01:e1:54: a1:91:85:80:3d:58:d1:d3:b9:da:d2:da:7f:54:ca:d7:66:a7: d2:23:8e:62:87:f4:7c:ad:53:27:f2:9b:45:c6:0f:cb:cc:53: 1c:73:44:48:56:2e:bb:7a:0d:6e:cf:0e:ef:5f:98:a8:bb:49: 95:d6:c3:64:5c:6c:72:0e:7e:3d:d3:48:11:71:86:7d:91:25: 6e:f5:14:9c:20:7f:3d:10:12:fc:cf:33:a8:12:35:32:78:7c: 02:e9:79:3c:05:a0:f6:fc:3b:33:ba:a7:23:41:71:8b:53:70: e0:89:33:fb:ed:1e:cc:db:32:42:da:ad:6a:b6:5a:53:48:10: 74:eb:ef:ca:ab:e7:0f:85:55:da:27:ea:fc:8d:fd:62:b7:8e: 23:cd:39:89:05:e4:4c:15:44:77:f5:88:82:63:03:6a:be:99: 32:e1:70:66:ac:a5:53:66:8f:6a:b4:48:ff:90:75:15:ad:b5: 50:30:48:3d:d7:8e:3c:75:36:66:1b:97:81:9b:f5:dd:90:cc: 37:e6:ea:d8:e7:04:58:d0:5c:a2:30:0f:6b:90:13:0c:dc:4a: fd:95:7c:ab:53:e6:1a:b9:df:34:7e:77:8d:ba:ec:4d:9c:4a: 6e:a5:64:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnqmwh7JbLsBHgUeBJne/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDYwNjQxODY0OTBkOGNlYTIzNDdmZjdhM2E4MjQ5MmQx Zjc5NzcwHhcNMjUxMjE4MDQwMTI1WhcNMjUxMjE5MDQwMTI1WjAzMTEwLwYDVQQD Eyg5ZTBhODhmZmU0ZTIyZjBjMTY2MDdhY2ZkZjQxODE1MjNhNjc1NjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoqN0NBnMY1i+LVP4oZPDJ7+8eBH 8AWzq5d8QeboGBvWwhzLUv4NvU+W+r2y9WYY74k4lQR6DRuZHxc0zXfNeDID2tK/ VOXdav599rDVCrgrIKmekk/DkmyWuPjNfMXIERai7Uz7ab1mZU1KdNrgEHiU2aW7 UfPBkITPCRCsJLYBkGDAo3l+o0sxsMc7tcFWElQxlQfupizNjD8YJ23dWWLXXyP6 raUcGlzNDN20F8ViQBVeOzWen2Zf09/cpCn74yHHAVdK2U5RrPtXqfckhH/ltL+b LeVbhbvp732eXltK0Ls0MAHJhe6Hs6VB24peKVe5U85zj3sCg1K6D/DyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4KiP/k4i8MFmB6z99BgVI6Z1adMB8GA1UdIwQY MBaAFNjWBkGGSQ2M6iNH/3o6gkktH3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTIt NTYwODVjOWU1MjJlLzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83YWJkZWYtOTFhYi00NmZiLTgyZTItNTYwODVjOWU1MjJl LzEvMk5ZR1FZWkpEWXpxSTBmX2VqcUNTUzBmZVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9FtS/Vf IdhwpvHpZ2ZnAeFUoZGFgD1Y0dO52tLaf1TK12an0iOOYof0fK1TJ/KbRcYPy8xT HHNESFYuu3oNbs8O71+YqLtJldbDZFxscg5+PdNIEXGGfZElbvUUnCB/PRAS/M8z qBI1Mnh8Aul5PAWg9vw7M7qnI0Fxi1Nw4Ikz++0ezNsyQtqtarZaU0gQdOvvyqvn D4VV2ifq/I39YreOI805iQXkTBVEd/WIgmMDar6ZMuFwZqylU2aParRI/5B1Fa21 UDBIPdeOPHU2ZhuXgZv13ZDMN+bq2OcEWNBcojAPa5ATDNxK/ZV8q1PmGrnfNH53 jbrsTZxKbqVkxg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:21 2025 by rpki-client