This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json) Hash identifier: 3cux5yo3W/3MXmBcUmWiXEaZKH1zNwUBURqlOSV0UC8= Subject key identifier: 9E:FB:16:C8:CA:DB:85:29:0D:CD:43:BB:D9:6F:F1:1F:BF:2C:55:AE Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Certificate serial: 019B3C7FB59098366D2985B093E335679A12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft Manifest number: 08E5 Signing time: Sat 20 Dec 2025 16:02:41 +0000 Manifest this update: Sat 20 Dec 2025 16:02:41 +0000 Manifest next update: Sun 21 Dec 2025 16:02:41 +0000 Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: TnDlZMzwnspsPu6p512o2ZHi4WMMp1MG9zF/R+RMEps=) 2: JwOlXzHs1rdGVXlkVOqZWuxz-yI.roa (hash: PGrtrfZNHqKpdplaHtlzlb/8zTI8cEQQrTdbVPKqLz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b5:90:98:36:6d:29:85:b0:93:e3:35:67:9a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664 Validity Not Before: Dec 20 16:02:41 2025 GMT Not After : Dec 21 16:02:41 2025 GMT Subject: CN=9efb16c8cadb85290dcd43bbd96ff11fbf2c55ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b9:e1:1d:e8:85:24:6f:2c:e4:51:52:c1:0b: 51:8d:d7:92:a2:61:eb:e8:3c:0b:45:ed:2f:40:98: cd:1d:2b:21:fc:22:c5:33:23:fc:0c:79:a6:1a:0d: 74:45:3a:57:81:3d:53:d7:bf:83:2e:2b:8c:a3:3d: df:df:f5:2e:6a:8c:70:aa:82:d9:d5:62:d4:22:23: fd:48:1d:62:1c:ce:e0:07:20:c0:17:20:95:89:3d: f3:d4:73:fe:a3:dd:0a:e8:d3:c6:38:1c:53:6d:4d: ba:98:fc:5d:1d:3f:6a:46:ba:b0:08:d3:be:81:cc: 8d:c5:f4:c4:40:07:67:22:b6:7b:50:da:d1:2f:1d: 43:9e:67:30:44:0d:93:b9:66:34:cc:e8:89:45:4f: a1:79:b7:28:3e:28:c2:e1:df:c6:6f:fb:12:1d:0c: cb:48:56:58:1a:14:34:c6:87:d8:98:de:f8:a6:db: f5:a6:78:87:8b:90:9a:80:89:83:8f:f4:a1:31:17: c9:f8:4d:f2:6e:34:de:46:23:91:a0:68:11:dc:9c: d2:ae:92:0d:28:ef:59:ac:6d:45:10:d5:b9:f0:9d: 92:99:11:8a:b6:0c:b9:42:4d:f4:71:c3:ee:2e:ea: eb:17:fa:ab:34:c1:2b:86:4e:c7:d7:08:80:62:75: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FB:16:C8:CA:DB:85:29:0D:CD:43:BB:D9:6F:F1:1F:BF:2C:55:AE X509v3 Authority Key Identifier: keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:72:ed:e9:4f:d6:fa:de:61:76:eb:2a:9c:c0:f3:50:71:51: dd:05:84:43:26:cf:27:d7:6c:f2:c5:a7:b9:13:4d:1c:91:03: 1c:59:4e:8b:6d:78:15:d0:17:43:ec:ca:2c:fa:7e:cb:d9:c0: 7e:50:c9:2a:0c:4b:c8:33:a7:1b:10:db:52:72:1b:6f:48:3b: 70:3c:ab:e5:ac:7d:85:63:1c:f5:ed:4a:bb:3d:28:f2:b7:e1: d3:c8:07:1b:26:0f:4e:db:24:57:b9:e5:d0:68:c7:0b:46:dd: 8e:7f:f3:f1:82:75:ae:12:d7:9d:ee:3a:b0:39:f4:80:43:b4: da:b7:07:b4:58:d1:88:71:80:c0:bb:7c:a9:88:01:2e:d0:10: fe:84:3f:4a:85:8a:57:06:a8:1c:41:2f:4d:fe:4d:c2:f7:dd: 8f:c6:b3:c2:e7:10:49:8c:7a:94:65:e9:95:d2:bc:7b:ec:5b: 37:76:34:6a:f3:29:d2:ba:ed:67:99:04:0c:72:0e:6e:53:c9: 74:e7:0b:08:1d:12:24:64:df:a1:e6:18:59:97:a1:34:03:59: 39:0d:df:34:5b:c4:18:a5:45:c8:26:00:b8:eb:0f:e7:bd:b8: 26:94:ad:98:4e:43:06:0a:9b:cc:9e:6d:52:23:2e:fb:33:7d: f3:2a:c5:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7WQmDZtKYWwk+M1Z5oSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmRjNDE5MjY0NWM4NDJhNGZhMmY4ODIzNGYyZTVhMTg0 Yzc2NjQwHhcNMjUxMjIwMTYwMjQxWhcNMjUxMjIxMTYwMjQxWjAzMTEwLwYDVQQD Eyg5ZWZiMTZjOGNhZGI4NTI5MGRjZDQzYmJkOTZmZjExZmJmMmM1NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67nhHeiFJG8s5FFSwQtRjdeSomHr 6DwLRe0vQJjNHSsh/CLFMyP8DHmmGg10RTpXgT1T17+DLiuMoz3f3/UuaoxwqoLZ 1WLUIiP9SB1iHM7gByDAFyCViT3z1HP+o90K6NPGOBxTbU26mPxdHT9qRrqwCNO+ gcyNxfTEQAdnIrZ7UNrRLx1DnmcwRA2TuWY0zOiJRU+hebcoPijC4d/Gb/sSHQzL SFZYGhQ0xofYmN74ptv1pniHi5CagImDj/ShMRfJ+E3ybjTeRiORoGgR3JzSrpIN KO9ZrG1FENW58J2SmRGKtgy5Qk30ccPuLurrF/qrNMErhk7H1wiAYnU1swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ77FsjK24UpDc1Du9lv8R+/LFWuMB8GA1UdIwQY MBaAFNptxBkmRchCpPoviCNPLloYTHZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUt ZWVmNzBhYWIwMzVlLzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yM2M1N2MtYjhhNy00OWE1LTljMDUtZWVmNzBhYWIwMzVl LzEvMm0zRUdTWkZ5RUtrLWktSUkwOHVXaGhNZG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz3Lt6U/W +t5hdusqnMDzUHFR3QWEQybPJ9ds8sWnuRNNHJEDHFlOi214FdAXQ+zKLPp+y9nA flDJKgxLyDOnGxDbUnIbb0g7cDyr5ax9hWMc9e1Kuz0o8rfh08gHGyYPTtskV7nl 0GjHC0bdjn/z8YJ1rhLXne46sDn0gEO02rcHtFjRiHGAwLt8qYgBLtAQ/oQ/SoWK VwaoHEEvTf5Nwvfdj8azwucQSYx6lGXpldK8e+xbN3Y0avMp0rrtZ5kEDHIOblPJ dOcLCB0SJGTfoeYYWZehNANZOQ3fNFvEGKVFyCYAuOsP5724JpStmE5DBgqbzJ5t UiMu+zN98yrFBA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:01 2025 by rpki-client