This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json) Hash identifier: C8elgZXeBfMFuV30Wv5lJ6f49qGaY21Vuhur+fYYuFU= Subject key identifier: D8:F0:F7:AB:A6:E7:9A:35:51:6A:5D:59:D1:43:A9:5F:CF:49:A4:36 Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20 Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820 Certificate serial: 019B54BD5AC9983ED941F4EBE62AF07E86A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft Manifest number: 0D63 Signing time: Thu 25 Dec 2025 09:00:54 +0000 Manifest this update: Thu 25 Dec 2025 09:00:54 +0000 Manifest next update: Fri 26 Dec 2025 09:00:54 +0000 Files and hashes: 1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: LbWy+WYt0CBV/nRugRLe8eJtrtf5iM8v7Kpg0jIDDe8=) 2: nyss7FejNtDGTUXRBz8EpK-bUtQ.roa (hash: 1YbJTbv2jhWedSFo8tfV4w9Efzyk/as9DY0FQwn+kas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:5a:c9:98:3e:d9:41:f4:eb:e6:2a:f0:7e:86:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820 Validity Not Before: Dec 25 09:00:54 2025 GMT Not After : Dec 26 09:00:54 2025 GMT Subject: CN=d8f0f7aba6e79a35516a5d59d143a95fcf49a436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:88:a8:94:37:36:be:c8:5f:34:4e:47:d7: 7e:6c:c3:fc:43:1d:21:d4:3f:04:1d:20:2f:38:7c: ae:05:d1:42:fb:4b:4b:74:87:ad:10:23:86:2f:63: 2a:df:8e:e5:7c:34:d2:f5:fb:6c:55:24:62:f5:29: 45:bf:b1:70:59:96:b0:29:ad:98:7d:ac:ed:71:40: af:44:62:71:ee:e4:c0:63:56:9a:a4:32:02:41:f5: 03:98:ff:09:ca:ed:55:21:e9:2e:96:7f:83:72:1e: 7d:07:5d:6e:5f:33:15:46:b3:a9:e3:1e:63:94:4e: 28:a2:c9:c8:35:6b:2f:3e:f1:ef:b3:ea:de:e1:bd: fa:13:94:2d:a7:92:a0:3b:c7:9e:eb:51:bd:0b:46: 63:33:f6:bb:c9:9a:bb:0e:56:72:51:a5:eb:1e:50: c7:46:05:a0:ee:63:7b:d8:cc:78:eb:f9:bf:5a:00: 43:6b:7c:1f:ed:64:6a:7f:4a:ee:52:76:37:d3:2d: da:cb:c9:34:3c:9c:ad:fc:db:0d:77:41:33:7b:74: 52:2f:fe:b0:21:03:2e:3a:7b:71:07:57:07:e6:b4: 4f:b3:62:ff:d8:cd:78:01:8b:83:39:b5:44:bc:71: 39:0d:d4:ba:9d:4d:94:ae:ba:7e:fb:c9:e1:67:16: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F0:F7:AB:A6:E7:9A:35:51:6A:5D:59:D1:43:A9:5F:CF:49:A4:36 X509v3 Authority Key Identifier: keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d1:d2:50:22:51:9b:94:a1:be:96:4c:f7:3f:f3:28:76:0d: e8:62:a9:ec:c1:fa:25:3f:0e:e9:9e:f4:67:37:95:c3:7e:87: 9e:f7:81:cf:be:7a:87:5f:18:a1:fa:3e:14:b1:31:ad:33:e4: 64:3e:5b:db:dd:9d:ed:f7:56:da:c8:7d:5b:94:aa:2c:0e:2e: 4e:a5:ac:07:22:d8:c2:fd:9c:62:ba:83:3f:8a:b0:e1:d1:7b: b2:f7:71:6c:b4:ae:38:7e:40:d2:27:86:bb:0b:23:7e:55:39: 4c:64:9b:36:2d:6b:18:cf:c6:7f:99:51:c3:d9:e8:2c:92:69: 8f:35:9e:3c:d7:61:06:be:6d:aa:d1:3e:68:49:ce:15:2c:c1: 8a:8a:92:ed:68:57:8f:4d:64:24:0a:01:6c:1b:14:3b:2b:f5: ba:54:fb:d7:6c:c6:8c:da:4f:ce:ec:3c:20:cb:cd:f9:19:50: eb:ce:57:a1:07:9a:d7:15:23:6f:cc:f4:e0:d0:59:17:cf:72: fc:44:06:90:83:d1:da:65:ff:ab:67:4e:52:51:0c:c0:f1:ce: ff:f7:ae:4a:5d:2a:6c:9a:c2:ef:57:bf:e5:07:3b:9c:ef:11: 86:e4:29:64:97:f5:13:59:1e:24:33:5a:a1:20:13:04:de:93: 57:5e:c9:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvVrJmD7ZQfTr5irwfoaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmY4N2Y1MmUzN2I3NjZlY2JmNGIzZjljYjI2NTU4ZGQz MDg4MjAwHhcNMjUxMjI1MDkwMDU0WhcNMjUxMjI2MDkwMDU0WjAzMTEwLwYDVQQD EyhkOGYwZjdhYmE2ZTc5YTM1NTE2YTVkNTlkMTQzYTk1ZmNmNDlhNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/yIqJQ3Nr7IXzROR9d+bMP8Qx0h 1D8EHSAvOHyuBdFC+0tLdIetECOGL2Mq347lfDTS9ftsVSRi9SlFv7FwWZawKa2Y faztcUCvRGJx7uTAY1aapDICQfUDmP8Jyu1VIekuln+Dch59B11uXzMVRrOp4x5j lE4oosnINWsvPvHvs+re4b36E5Qtp5KgO8ee61G9C0ZjM/a7yZq7DlZyUaXrHlDH RgWg7mN72Mx46/m/WgBDa3wf7WRqf0ruUnY30y3ay8k0PJyt/NsNd0Eze3RSL/6w IQMuOntxB1cH5rRPs2L/2M14AYuDObVEvHE5DdS6nU2Urrp++8nhZxbJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjw96um55o1UWpdWdFDqV/PSaQ2MB8GA1UdIwQY MBaAFNn/h/UuN7dm7L9LP5yyZVjdMIggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmYtSDlTNDN0MmJzdjBzX25MSmxXTjB3aUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lMmFhZDgtZTIxMi00ODI4LWE1ZmMt MWU3MzAwY2NkYTM2LzEvMmYtSDlTNDN0MmJzdjBzX25MSmxXTjB3aUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lMmFhZDgtZTIxMi00ODI4LWE1ZmMtMWU3MzAwY2NkYTM2 LzEvMmYtSDlTNDN0MmJzdjBzX25MSmxXTjB3aUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNHSUCJR m5ShvpZM9z/zKHYN6GKp7MH6JT8O6Z70ZzeVw36HnveBz756h18Yofo+FLExrTPk ZD5b292d7fdW2sh9W5SqLA4uTqWsByLYwv2cYrqDP4qw4dF7svdxbLSuOH5A0ieG uwsjflU5TGSbNi1rGM/Gf5lRw9noLJJpjzWePNdhBr5tqtE+aEnOFSzBioqS7WhX j01kJAoBbBsUOyv1ulT712zGjNpPzuw8IMvN+RlQ685XoQea1xUjb8z04NBZF89y /EQGkIPR2mX/q2dOUlEMwPHO//euSl0qbJrC71e/5Qc7nO8RhuQpZJf1E1keJDNa oSATBN6TV17Jmg== -----END CERTIFICATE-----Generated at Thu Dec 25 11:14:46 2025 by rpki-client