This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json) Hash identifier: VCmB2KJipLJooBNvLpYm8KeGp/5EIMMTwUe03eIrWOM= Subject key identifier: D2:0F:BA:BC:20:22:60:07:DA:E1:AF:6B:3D:CC:67:65:F1:3C:21:75 Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc Certificate serial: 019B266487C4517D5B15A79F15091C460380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft Manifest number: 50 Signing time: Tue 16 Dec 2025 09:01:21 +0000 Manifest this update: Tue 16 Dec 2025 09:01:21 +0000 Manifest next update: Wed 17 Dec 2025 09:01:21 +0000 Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: Lh+AvCsLORvrBe+TiPQiuNqAbCECVnO+zBquVSzI+uA=) 2: Sje7jsEY6Q5QZ-9f7bnaO9an76Y.asa (hash: O4SIoTXA4q+P1Mi3ahhyNTxM+UaORubTrEPP+a97Z0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:87:c4:51:7d:5b:15:a7:9f:15:09:1c:46:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc Validity Not Before: Dec 16 09:01:21 2025 GMT Not After : Dec 17 09:01:21 2025 GMT Subject: CN=d20fbabc20226007dae1af6b3dcc6765f13c2175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:18:ec:ba:f2:13:a1:27:1a:82:b8:0c:ba:91: 2a:34:90:e7:18:34:12:3f:30:4a:81:be:37:e5:25: 6e:86:b1:1a:53:2b:be:23:ca:ff:3a:70:18:a2:8e: a6:62:a1:95:a9:7b:80:ed:a3:f1:f8:76:c2:fa:ed: 2d:e6:98:e4:66:fd:86:c9:fa:af:b0:0f:e6:ea:58: 3e:5a:f8:f3:30:a7:e3:49:57:88:dc:1f:34:57:41: 02:dd:52:d3:12:44:02:21:15:ca:35:49:10:66:96: 7c:c2:80:1d:56:94:cd:85:87:fc:0f:76:10:f4:40: ae:86:f1:ab:a7:06:ba:c4:f0:50:ac:4a:97:ec:fb: b3:ac:bd:65:51:d8:3e:8e:64:dc:fe:3a:1e:c9:97: e7:ba:7e:b2:02:b7:ae:a3:57:a0:9e:8b:be:46:7e: 2a:ae:25:7f:41:58:ec:b2:b9:aa:ee:79:6e:60:57: 59:8b:3b:19:8f:93:d7:49:6d:90:75:65:03:48:51: 18:50:8c:23:06:1e:c0:e9:57:1a:cd:e5:20:05:d2: 5a:68:28:dd:3d:0d:4d:7c:e9:94:fa:e4:51:8d:8e: b2:aa:25:27:70:37:b4:e4:62:51:84:e1:d2:d4:35: 87:5f:2e:b8:59:bf:6e:dc:93:1b:95:98:0d:9a:79: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0F:BA:BC:20:22:60:07:DA:E1:AF:6B:3D:CC:67:65:F1:3C:21:75 X509v3 Authority Key Identifier: keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f8:92:66:93:a9:50:74:73:fb:aa:49:45:5d:66:a7:34:04: d2:4b:ab:c8:37:d2:9b:72:54:b9:3b:ef:09:59:27:d9:61:10: 12:79:f0:36:08:36:5e:a3:b0:0f:06:94:66:34:07:ad:c7:2d: 45:34:71:68:55:0f:fe:e9:86:dd:f5:6d:f4:39:b9:4f:e6:e1: b0:40:6f:c4:a6:c0:1c:08:b3:e0:02:da:c5:82:f8:57:42:3e: 40:51:b4:88:b6:77:24:85:de:ad:f0:ed:7c:07:a2:8d:40:af: 43:bb:43:1b:68:6e:b5:78:db:5c:d5:2c:11:2c:10:be:f3:c4: 4b:da:f2:b6:21:2e:94:4d:ea:4c:b6:a8:30:1b:00:f6:42:9c: 03:7c:0a:2f:73:a8:1e:c9:41:7a:46:9a:d2:88:a1:ab:e3:5d: 87:97:cb:9a:9d:53:a3:5f:02:65:cc:a7:54:73:4f:17:5a:53: d1:d8:c5:53:b7:0e:3d:b5:66:74:b4:cb:89:35:a7:80:2d:88: f1:2e:80:61:cb:a1:4c:0c:94:52:5a:55:a8:a4:16:9f:3e:be: 0d:d4:d0:c9:1d:6d:a6:3b:3e:0c:45:09:73:df:75:a5:31:d3: aa:0f:a7:4d:23:70:24:52:6f:f2:4f:9d:97:99:06:58:bf:17: e3:3c:0d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZIfEUX1bFaefFQkcRgOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhY2E4M2ViMWZhZjk3NzNkMzUwYzdkY2U2MTJjYTI4MTQ4 NGU3ZmMwHhcNMjUxMjE2MDkwMTIxWhcNMjUxMjE3MDkwMTIxWjAzMTEwLwYDVQQD EyhkMjBmYmFiYzIwMjI2MDA3ZGFlMWFmNmIzZGNjNjc2NWYxM2MyMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BjsuvIToScagrgMupEqNJDnGDQS PzBKgb435SVuhrEaUyu+I8r/OnAYoo6mYqGVqXuA7aPx+HbC+u0t5pjkZv2Gyfqv sA/m6lg+WvjzMKfjSVeI3B80V0EC3VLTEkQCIRXKNUkQZpZ8woAdVpTNhYf8D3YQ 9ECuhvGrpwa6xPBQrEqX7PuzrL1lUdg+jmTc/joeyZfnun6yAreuo1egnou+Rn4q riV/QVjssrmq7nluYFdZizsZj5PXSW2QdWUDSFEYUIwjBh7A6VcazeUgBdJaaCjd PQ1NfOmU+uRRjY6yqiUncDe05GJRhOHS1DWHXy64Wb9u3JMblZgNmnk5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIPurwgImAH2uGvaz3MZ2XxPCF1MB8GA1UdIwQY MBaAFNrKg+sfr5dz01DH3OYSyigUhOf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUt YjVlYjRjNmI3ZWE4LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUtYjVlYjRjNmI3ZWE4 LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfiSZpOp UHRz+6pJRV1mpzQE0kuryDfSm3JUuTvvCVkn2WEQEnnwNgg2XqOwDwaUZjQHrcct RTRxaFUP/umG3fVt9Dm5T+bhsEBvxKbAHAiz4ALaxYL4V0I+QFG0iLZ3JIXerfDt fAeijUCvQ7tDG2hutXjbXNUsESwQvvPES9rytiEulE3qTLaoMBsA9kKcA3wKL3Oo HslBekaa0oihq+Ndh5fLmp1To18CZcynVHNPF1pT0djFU7cOPbVmdLTLiTWngC2I 8S6AYcuhTAyUUlpVqKQWnz6+DdTQyR1tpjs+DEUJc991pTHTqg+nTSNwJFJv8k+d l5kGWL8X4zwNkg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:16:30 2025 by rpki-client