This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json) Hash identifier: IO1hh0+G7kilBWXVc7RbjOdaFNeM9ByqrrblcAzKcLY= Subject key identifier: AD:AD:3E:B8:85:87:56:83:B8:04:4D:C8:83:E2:90:D0:97:17:17:4E Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Certificate serial: 019B40917FA26B6E71D4FBD5F4E8CE9D030D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft Manifest number: 0BBA Signing time: Sun 21 Dec 2025 11:00:35 +0000 Manifest this update: Sun 21 Dec 2025 11:00:35 +0000 Manifest next update: Mon 22 Dec 2025 11:00:35 +0000 Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: tsiPPQSqN64POoxfFQgteq/kZpi9KvwKw9YrbYC40IE=) 2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=) 3: N_353yN0ZVbWs_anZKkB7VFDxu4.roa (hash: hMwRKapbkWsadMleA5KvqY1DK5C4Jjvpw+7CS/Z4ugY=) 4: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=) 5: szebc8-7Bd4DeQn1tSqrBS_dc4M.roa (hash: SIVCM9gif1wAhePpBb3dd2HLPRS90t/xDCg6lweK9EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:7f:a2:6b:6e:71:d4:fb:d5:f4:e8:ce:9d:03:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Validity Not Before: Dec 21 11:00:35 2025 GMT Not After : Dec 22 11:00:35 2025 GMT Subject: CN=adad3eb885875683b8044dc883e290d09717174e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:1c:6b:8e:02:30:e9:1c:7b:26:90:45:b1: 2c:8a:fe:45:b4:7a:e4:32:ad:9e:b1:27:1d:8b:c9: 5f:1a:bf:58:f5:d3:e2:6d:9b:22:2f:c7:e5:fd:96: 04:62:25:e8:e5:46:6a:ae:f0:59:3a:1f:07:a3:43: 8e:43:39:b5:65:e6:97:79:eb:92:3f:52:bf:09:cf: 5c:a3:b0:a0:7b:2a:e4:a9:ad:50:77:3c:22:a3:3b: 09:99:82:b9:0a:3c:c6:f6:1c:d6:2f:f2:c5:92:2e: 78:fd:ae:42:87:08:b8:55:79:09:c3:73:b7:52:38: 2b:e4:75:de:16:f2:cf:6a:a4:15:6f:87:8b:da:15: 09:4c:ac:77:00:94:98:60:b7:9d:d7:61:79:fd:29: 8f:f4:82:1a:fc:94:89:0b:d4:f1:db:96:ed:90:72: a0:b4:55:02:b4:32:bd:76:c0:f3:04:d6:1b:46:6c: da:d6:d4:79:71:70:7d:11:c5:c2:24:b6:65:95:f0: b1:5a:d0:ce:36:1b:65:da:3c:b0:72:3b:77:ab:ce: cd:26:d1:19:6d:29:be:e2:6c:59:ee:21:00:6f:e0: d7:38:5e:97:d0:9e:15:a9:52:30:f9:da:0e:e6:57: 5f:24:38:c3:c3:86:6f:9d:f5:43:a9:ae:7d:1c:e3: 8f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AD:3E:B8:85:87:56:83:B8:04:4D:C8:83:E2:90:D0:97:17:17:4E X509v3 Authority Key Identifier: keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:50:5d:d6:5d:84:dd:f7:f0:6c:e4:d2:1f:67:d5:f4:56:68: 0e:8d:45:02:61:f4:19:12:6a:93:d0:e2:7e:d6:89:7e:64:64: 8e:d1:a6:49:ef:c5:82:27:d3:32:f7:d2:a5:8b:ed:0b:c0:52: 43:93:dc:d7:ef:6a:57:5c:30:a5:54:3b:7e:90:d0:55:63:86: e6:f9:db:03:68:41:d1:c0:2d:be:67:01:f8:01:4e:62:7c:f6: 10:f5:5b:00:22:b6:f3:23:ad:ff:de:34:a0:fd:b4:95:ec:a2: 6c:8d:41:6a:0f:ee:e7:b3:4e:fa:6f:c9:97:47:bc:bf:b6:36: 89:4e:4e:c1:fb:ba:db:96:56:c6:aa:0e:ed:35:81:17:4f:86: fb:5f:2d:53:b0:73:c6:49:b9:eb:ee:a0:31:82:82:8c:a9:ea: 8c:44:f3:6d:b1:06:3e:27:02:a9:bc:9b:9c:32:2b:c1:ef:55: 90:ce:08:d4:fe:8d:69:e7:11:d4:3a:bd:e7:aa:f5:21:82:f0: f3:d7:8f:b0:a0:6e:0d:ff:ec:f1:53:ec:08:ae:32:07:1a:97: ad:83:4a:d0:bf:da:17:ea:02:44:6c:5f:9d:79:2d:04:1a:7d: 5c:ff:61:6b:c2:af:27:64:b4:82:54:a0:b9:7d:7d:73:50:1a: b1:53:aa:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkX+ia25x1PvV9OjOnQMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj ZTNmNmUwHhcNMjUxMjIxMTEwMDM1WhcNMjUxMjIyMTEwMDM1WjAzMTEwLwYDVQQD EyhhZGFkM2ViODg1ODc1NjgzYjgwNDRkYzg4M2UyOTBkMDk3MTcxNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri8ca44CMOkceyaQRbEsiv5FtHrk Mq2esScdi8lfGr9Y9dPibZsiL8fl/ZYEYiXo5UZqrvBZOh8Ho0OOQzm1ZeaXeeuS P1K/Cc9co7Cgeyrkqa1QdzwiozsJmYK5CjzG9hzWL/LFki54/a5Chwi4VXkJw3O3 Ujgr5HXeFvLPaqQVb4eL2hUJTKx3AJSYYLed12F5/SmP9IIa/JSJC9Tx25btkHKg tFUCtDK9dsDzBNYbRmza1tR5cXB9EcXCJLZllfCxWtDONhtl2jywcjt3q87NJtEZ bSm+4mxZ7iEAb+DXOF6X0J4VqVIw+doO5ldfJDjDw4ZvnfVDqa59HOOPHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2tPriFh1aDuARNyIPikNCXFxdOMB8GA1UdIwQY MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt MDVkNThmMGNiODhjLzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAylBd1l2E 3ffwbOTSH2fV9FZoDo1FAmH0GRJqk9DiftaJfmRkjtGmSe/FgifTMvfSpYvtC8BS Q5Pc1+9qV1wwpVQ7fpDQVWOG5vnbA2hB0cAtvmcB+AFOYnz2EPVbACK28yOt/940 oP20leyibI1Bag/u57NO+m/Jl0e8v7Y2iU5Owfu625ZWxqoO7TWBF0+G+18tU7Bz xkm56+6gMYKCjKnqjETzbbEGPicCqbybnDIrwe9VkM4I1P6NaecR1Dq956r1IYLw 89ePsKBuDf/s8VPsCK4yBxqXrYNK0L/aF+oCRGxfnXktBBp9XP9ha8KvJ2S0glSg uX19c1AasVOqVA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:33:37 2025 by rpki-client