This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json) Hash identifier: FJPaM4rur1liAxLT9Sj/9D8zTB8+yqy4DhfHtKW72S0= Subject key identifier: 36:70:2B:2F:22:88:8F:34:A4:84:A1:38:3F:2A:9F:7A:A5:51:45:A9 Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Certificate serial: 019B45EEC74CCB138B413A4FD3DE0B2E363F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft Manifest number: 0EC5 Signing time: Mon 22 Dec 2025 12:00:34 +0000 Manifest this update: Mon 22 Dec 2025 12:00:34 +0000 Manifest next update: Tue 23 Dec 2025 12:00:34 +0000 Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: 1QP3Mhy8iT3wW7NeDUKUtjrL5VPeXQRaIrNvEGAQqCc=) 2: NJJQIAvEDlH4wZu4zaM1fPZpVGI.roa (hash: zmrVvshEoDYlY+afA5JOHL7lyVYdqt5pXq3EABMgUFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:ee:c7:4c:cb:13:8b:41:3a:4f:d3:de:0b:2e:36:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Validity Not Before: Dec 22 12:00:34 2025 GMT Not After : Dec 23 12:00:34 2025 GMT Subject: CN=36702b2f22888f34a484a1383f2a9f7aa55145a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:21:97:90:3f:9c:5f:c2:0d:08:eb:af:f9: b7:08:75:0f:c6:57:30:68:dd:e9:30:42:40:2b:ff: 8b:95:ae:f7:bf:63:79:6e:20:ac:1a:8c:8b:ef:65: 33:d0:57:1c:87:92:b1:71:b7:d8:7d:d6:d2:2c:35: b8:63:ff:6e:4e:2c:3e:9d:5b:69:55:d3:04:44:81: 31:0f:8b:80:91:88:14:48:72:46:96:63:0f:6e:5d: 58:f9:de:df:34:0b:84:d4:7b:91:ea:eb:f0:f7:7a: d1:c8:57:48:c3:f1:b8:47:c8:a0:3e:75:a4:9b:0c: cb:b6:32:ef:2b:73:08:a2:b8:32:b2:b5:d5:3f:04: a2:27:74:a9:d3:19:ab:4d:97:8a:f9:55:0d:46:af: 3b:ca:5a:1c:a6:1e:55:2f:70:6b:17:4b:de:cf:36: 76:e8:5b:db:36:8f:b9:ed:9b:68:d4:09:3b:66:34: d2:ef:73:f7:f6:27:ed:86:d9:1b:aa:24:95:49:a8: 54:dc:37:3b:2e:63:86:96:92:fb:0c:1f:39:5d:66: 86:b6:a9:53:41:d8:80:c3:80:c2:ec:26:10:8d:61: 6b:07:24:0b:0f:41:84:10:3e:f4:43:d3:0d:5f:9f: fd:c1:c7:2a:30:17:e2:50:22:a6:3b:0d:29:0a:fc: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:70:2B:2F:22:88:8F:34:A4:84:A1:38:3F:2A:9F:7A:A5:51:45:A9 X509v3 Authority Key Identifier: keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:33:c4:f4:80:0e:91:81:bb:19:18:74:f4:bd:93:e2:69:90: c9:84:b1:cb:8d:fd:6b:1b:bb:a5:10:ba:ec:33:92:cf:4f:44: 19:65:f5:b4:56:22:22:68:44:71:ba:50:2a:15:cf:82:1e:e2: b9:a3:98:cc:8c:d1:6b:f2:30:94:7f:b4:a8:e4:86:c0:9b:fc: 37:a3:c0:d8:b6:38:46:84:45:ee:b1:62:9f:0b:1e:4e:b5:96: 8f:6a:3c:e6:4b:b3:5c:f7:45:37:3b:8a:d3:fa:36:99:e1:74: 76:52:19:ec:2b:f3:f5:8a:70:f0:ca:bd:6c:b8:30:eb:dd:04: 41:4d:6c:19:f4:38:e5:f3:ce:bd:3d:7d:90:8d:8c:5e:0a:2e: c1:e4:40:b9:04:c0:48:f7:27:af:e7:ca:56:03:c8:f8:91:13: fc:4c:4f:e7:7f:13:93:44:03:e7:c4:0b:89:84:cb:65:f3:d7: 3d:80:9c:b3:6e:45:58:6d:13:c9:6b:1b:c9:a9:ef:00:c5:d0: 42:29:66:91:ac:40:0e:57:9c:c1:2c:93:0d:98:57:60:01:81: 22:f0:de:14:a2:d1:c5:bf:f1:30:4b:69:0c:e7:f9:de:d6:b3: 3c:e7:94:c2:ae:70:6e:6c:94:75:fd:77:49:13:da:9d:db:23: 3a:76:ee:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtF7sdMyxOLQTpP094LLjY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTQxM2ViMjlhNDNkMmU0NWZlY2RkODhlZTUzOTZjOTZi ZjFjYjUwHhcNMjUxMjIyMTIwMDM0WhcNMjUxMjIzMTIwMDM0WjAzMTEwLwYDVQQD EygzNjcwMmIyZjIyODg4ZjM0YTQ4NGExMzgzZjJhOWY3YWE1NTE0NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42ghl5A/nF/CDQjrr/m3CHUPxlcw aN3pMEJAK/+Lla73v2N5biCsGoyL72Uz0Fcch5KxcbfYfdbSLDW4Y/9uTiw+nVtp VdMERIExD4uAkYgUSHJGlmMPbl1Y+d7fNAuE1HuR6uvw93rRyFdIw/G4R8igPnWk mwzLtjLvK3MIorgysrXVPwSiJ3Sp0xmrTZeK+VUNRq87ylocph5VL3BrF0vezzZ2 6FvbNo+57Zto1Ak7ZjTS73P39ifthtkbqiSVSahU3Dc7LmOGlpL7DB85XWaGtqlT QdiAw4DC7CYQjWFrByQLD0GEED70Q9MNX5/9wccqMBfiUCKmOw0pCvwDkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZwKy8iiI80pIShOD8qn3qlUUWpMB8GA1UdIwQY MBaAFNlUE+sppD0uRf7N2I7lOWyWvxy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWIt YTgwNjE2M2VjMjk0LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWItYTgwNjE2M2VjMjk0 LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzPE9IAO kYG7GRh09L2T4mmQyYSxy439axu7pRC67DOSz09EGWX1tFYiImhEcbpQKhXPgh7i uaOYzIzRa/IwlH+0qOSGwJv8N6PA2LY4RoRF7rFinwseTrWWj2o85kuzXPdFNzuK 0/o2meF0dlIZ7Cvz9Ypw8Mq9bLgw690EQU1sGfQ45fPOvT19kI2MXgouweRAuQTA SPcnr+fKVgPI+JET/ExP538Tk0QD58QLiYTLZfPXPYCcs25FWG0TyWsbyanvAMXQ QilmkaxADlecwSyTDZhXYAGBIvDeFKLRxb/xMEtpDOf53tazPOeUwq5wbmyUdf13 SRPandsjOnbucQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:40:06 2025 by rpki-client