This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json) Hash identifier: SpXRTzb1p5khk6fnuZfR3u1bFe2eG0c9ylH99cdBHA8= Subject key identifier: EA:75:54:F3:9C:92:12:24:42:04:DD:F7:F2:30:2A:1D:CE:B1:CB:A4 Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc Certificate serial: 019B55994DE05D6F10FE3DE0CFA02450F28D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft Manifest number: 1012 Signing time: Thu 25 Dec 2025 13:01:08 +0000 Manifest this update: Thu 25 Dec 2025 13:01:08 +0000 Manifest next update: Fri 26 Dec 2025 13:01:08 +0000 Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: mZ5NARm55fTDiJGZltH98jlws0iV2KyT4BmXytTCy2c=) 2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:99:4d:e0:5d:6f:10:fe:3d:e0:cf:a0:24:50:f2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc Validity Not Before: Dec 25 13:01:08 2025 GMT Not After : Dec 26 13:01:08 2025 GMT Subject: CN=ea7554f39c9212244204ddf7f2302a1dceb1cba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:50:31:9b:e6:e2:76:46:97:98:d1:a5:ad: 32:7c:1c:26:99:de:2c:9b:16:84:a9:7d:06:1b:1c: 16:7c:0e:c0:a3:c5:3a:4e:85:00:bc:0b:79:2d:66: 2f:59:91:83:57:1a:b0:ab:34:77:70:d5:20:ad:ec: 91:c5:64:3e:c5:f9:84:10:8e:a6:76:de:bf:75:58: 1a:65:e7:99:da:e7:dc:e1:0a:f8:6a:95:c2:9d:d5: c4:9f:c1:3e:54:f0:db:ff:9a:7d:70:fe:fd:22:bf: 53:c0:9d:1a:ab:e9:ae:b0:30:f9:44:8a:2d:fa:7b: 1c:81:fb:2b:98:a9:34:11:70:3e:01:7a:d8:d3:d0: 61:c0:e9:89:9b:13:64:41:79:bc:19:1a:66:66:92: 10:f0:d0:f5:21:b3:8e:92:c8:a2:4b:c5:14:45:af: d6:97:b5:20:d7:41:9a:ff:f8:f6:4b:fb:63:24:49: c2:c4:0f:ed:d9:fe:64:2e:ae:79:2d:f3:e4:3b:59: a1:5f:fb:8b:57:01:84:6b:b3:45:8b:2a:1d:b0:0e: 51:39:a2:51:6e:7b:a6:3d:0b:52:9f:a6:91:1d:9e: 3f:f8:73:8a:50:66:ae:52:38:25:51:8e:4c:d5:d8: c2:1f:90:06:81:f2:d4:2a:8b:a5:a0:fe:29:97:bb: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:54:F3:9C:92:12:24:42:04:DD:F7:F2:30:2A:1D:CE:B1:CB:A4 X509v3 Authority Key Identifier: keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:2c:51:5c:02:a9:90:b8:ca:35:4a:4e:b1:c4:0f:60:55: 9c:4a:f0:b5:f3:2d:77:5b:c7:4d:2a:b6:01:3a:aa:b2:4d:7f: 7a:d2:b4:1e:bc:d3:c7:f7:d4:9f:10:b2:fa:36:cd:b7:c6:d8: 12:d9:4c:72:38:9b:02:e4:d9:e0:25:a1:e5:2c:d6:ea:95:f9: 1d:d0:2f:2a:95:7e:37:af:9c:83:de:85:cf:0a:31:02:f7:b3: bd:c3:bb:99:59:35:94:23:81:e5:e6:7e:d3:a0:8e:e1:73:48: ec:67:14:55:4a:24:88:eb:9c:da:aa:8f:58:b7:07:d9:a0:7f: 26:25:68:a6:c0:8c:a9:7c:d9:4b:c0:6b:40:6a:b0:48:90:eb: e8:71:1e:5e:78:69:c8:93:e2:7a:2a:9a:b4:05:13:9d:3f:ea: 40:f0:9c:0b:27:a5:00:85:44:07:09:a4:e6:0c:e2:ec:a0:43: 3c:68:49:8d:c4:42:6e:58:08:76:92:aa:e5:c0:f3:d5:03:fd: e6:d9:a9:11:5e:72:7c:74:41:91:6b:c5:3a:59:ee:bb:1a:6e: 28:5a:f4:a5:bf:7e:18:60:70:bb:82:70:e0:62:4f:43:5d:9f: c1:9f:3e:19:f8:45:d8:e1:16:eb:94:f5:ec:d4:91:9f:56:60: b8:0d:ec:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmU3gXW8Q/j3gz6AkUPKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj ZWYzYmMwHhcNMjUxMjI1MTMwMTA4WhcNMjUxMjI2MTMwMTA4WjAzMTEwLwYDVQQD EyhlYTc1NTRmMzljOTIxMjI0NDIwNGRkZjdmMjMwMmExZGNlYjFjYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyRQMZvm4nZGl5jRpa0yfBwmmd4s mxaEqX0GGxwWfA7Ao8U6ToUAvAt5LWYvWZGDVxqwqzR3cNUgreyRxWQ+xfmEEI6m dt6/dVgaZeeZ2ufc4Qr4apXCndXEn8E+VPDb/5p9cP79Ir9TwJ0aq+musDD5RIot +nscgfsrmKk0EXA+AXrY09BhwOmJmxNkQXm8GRpmZpIQ8ND1IbOOksiiS8UURa/W l7Ug10Ga//j2S/tjJEnCxA/t2f5kLq55LfPkO1mhX/uLVwGEa7NFiyodsA5ROaJR bnumPQtSn6aRHZ4/+HOKUGauUjglUY5M1djCH5AGgfLUKouloP4pl7tkRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp1VPOckhIkQgTd9/IwKh3OscukMB8GA1UdIwQY MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0 LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni0sUVwC qZC4yjVKTrHED2BVnErwtfMtd1vHTSq2ATqqsk1/etK0HrzTx/fUnxCy+jbNt8bY EtlMcjibAuTZ4CWh5SzW6pX5HdAvKpV+N6+cg96FzwoxAvezvcO7mVk1lCOB5eZ+ 06CO4XNI7GcUVUokiOuc2qqPWLcH2aB/JiVopsCMqXzZS8BrQGqwSJDr6HEeXnhp yJPieiqatAUTnT/qQPCcCyelAIVEBwmk5gzi7KBDPGhJjcRCblgIdpKq5cDz1QP9 5tmpEV5yfHRBkWvFOlnuuxpuKFr0pb9+GGBwu4Jw4GJPQ12fwZ8+GfhF2OEW65T1 7NSRn1ZguA3s2Q== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:24 2025 by rpki-client