This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json) Hash identifier: Ce0DS5fVXlExP3MzE8pgMBCTWd0PK3uIuYJbRvvzN30= Subject key identifier: 94:BE:42:26:EF:5B:B3:17:85:C1:57:94:4C:E1:F4:76:6E:33:B1:F8 Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64 Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064 Certificate serial: 019B3B34EA92EB32F97FFDD9E51B02C7AB81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft Manifest number: 06DF Signing time: Sat 20 Dec 2025 10:01:22 +0000 Manifest this update: Sat 20 Dec 2025 10:01:22 +0000 Manifest next update: Sun 21 Dec 2025 10:01:22 +0000 Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: mX4wdqiJypcWLX2olD0dgnOwXKaU63EZ1hmcQx0+hZg=) 2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=) 3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:ea:92:eb:32:f9:7f:fd:d9:e5:1b:02:c7:ab:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064 Validity Not Before: Dec 20 10:01:22 2025 GMT Not After : Dec 21 10:01:22 2025 GMT Subject: CN=94be4226ef5bb31785c157944ce1f4766e33b1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:91:34:c4:a6:b1:80:b0:a1:65:f8:e2:5a: 7c:22:c9:cd:55:26:4d:ff:59:fc:b5:0d:26:39:5c: 16:a3:c8:dc:52:d8:1d:79:df:77:7f:c8:7a:99:6e: 0a:5a:cf:dc:9b:13:fb:7d:a0:4f:7d:97:47:79:c6: 85:47:42:ad:2c:90:49:51:46:7f:50:02:27:bf:3b: 0d:2f:82:8e:56:5f:08:17:a0:f7:2c:6c:fe:23:ab: c7:d5:f7:12:98:2f:31:14:01:c5:60:a9:58:f1:8e: ea:02:f5:f2:96:e1:07:e8:ce:66:cf:61:88:4e:cc: 7a:0a:5b:95:fd:11:06:55:88:bd:4f:00:35:ef:45: fa:1b:a0:c0:3f:80:6c:42:cb:2f:3c:44:1b:16:0d: c1:63:fd:41:4b:91:3c:82:f3:6a:c6:31:50:4c:b8: 70:e6:53:96:66:c8:7b:65:25:fc:c5:72:5c:2c:46: 4c:fc:31:a2:45:e8:7a:5f:90:ae:2d:5a:50:7c:44: a5:ee:cb:d9:d0:fb:97:2d:3d:ce:21:8d:52:97:14: dd:ab:ca:8f:3c:42:d2:03:c8:13:02:20:8b:9d:b0: 40:1d:64:14:45:e2:55:04:57:06:c0:00:a2:25:77: 36:76:c2:60:a7:93:ec:51:61:e9:c4:f7:7a:e6:84: a5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BE:42:26:EF:5B:B3:17:85:C1:57:94:4C:E1:F4:76:6E:33:B1:F8 X509v3 Authority Key Identifier: keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:43:0c:92:7d:69:f8:2c:ed:98:a8:06:d1:e9:3f:00:f6:95: f7:24:8b:0b:eb:68:cf:c7:7c:d6:46:f4:0a:9e:d0:16:b2:d9: 6a:26:e0:4d:7d:cc:66:60:b5:d0:3e:06:10:c5:19:4a:39:c1: cc:51:8e:ba:74:91:d5:71:62:d8:3c:b1:4f:5e:0d:28:85:3f: c4:8e:8d:5f:f5:eb:34:fa:e7:3b:57:84:d1:d2:49:f9:dd:b3: 19:39:a0:aa:4d:60:89:24:30:98:32:60:54:e1:1f:f2:1b:d0: 2e:f6:48:cf:8c:b6:78:7f:74:fb:2b:2c:85:2c:ce:7f:56:e3: ad:f4:b7:de:c2:67:e0:a0:36:a9:67:3c:01:7d:65:61:7e:f1: b0:83:40:62:f2:6e:6e:7e:ea:90:d3:cb:22:ee:a5:ce:5a:fe: 06:b7:cc:46:f6:86:5f:94:da:69:a7:32:37:79:83:d4:11:8f: 96:3c:e2:76:49:3a:92:1c:22:69:83:04:7b:01:91:40:e2:a3: c7:e8:bc:e3:74:f1:c6:35:3d:da:6b:67:3d:4f:d3:1c:d7:bd: 15:30:6d:e8:92:94:ca:54:83:70:98:98:03:22:10:65:3e:b9: 16:2a:0d:a3:75:0d:db:be:0a:09:90:96:c9:3e:12:11:d3:e9: 05:41:23:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NOqS6zL5f/3Z5RsCx6uBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMzBmMmZmZjRmZTEwYjFhNzljMTI3YTZhNGFkODJjYTUz MjYwNjQwHhcNMjUxMjIwMTAwMTIyWhcNMjUxMjIxMTAwMTIyWjAzMTEwLwYDVQQD Eyg5NGJlNDIyNmVmNWJiMzE3ODVjMTU3OTQ0Y2UxZjQ3NjZlMzNiMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kSRNMSmsYCwoWX44lp8IsnNVSZN /1n8tQ0mOVwWo8jcUtgded93f8h6mW4KWs/cmxP7faBPfZdHecaFR0KtLJBJUUZ/ UAInvzsNL4KOVl8IF6D3LGz+I6vH1fcSmC8xFAHFYKlY8Y7qAvXyluEH6M5mz2GI Tsx6CluV/REGVYi9TwA170X6G6DAP4BsQssvPEQbFg3BY/1BS5E8gvNqxjFQTLhw 5lOWZsh7ZSX8xXJcLEZM/DGiReh6X5CuLVpQfESl7svZ0PuXLT3OIY1SlxTdq8qP PELSA8gTAiCLnbBAHWQUReJVBFcGwACiJXc2dsJgp5PsUWHpxPd65oSlPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS+QibvW7MXhcFXlEzh9HZuM7H4MB8GA1UdIwQY MBaAFNsw8v/0/hCxp5wSempK2CylMmBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYt OTM3ZTI1MjNkNmY3LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYtOTM3ZTI1MjNkNmY3 LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0MMkn1p +CztmKgG0ek/APaV9ySLC+toz8d81kb0Cp7QFrLZaibgTX3MZmC10D4GEMUZSjnB zFGOunSR1XFi2DyxT14NKIU/xI6NX/XrNPrnO1eE0dJJ+d2zGTmgqk1giSQwmDJg VOEf8hvQLvZIz4y2eH90+ysshSzOf1bjrfS33sJn4KA2qWc8AX1lYX7xsINAYvJu bn7qkNPLIu6lzlr+BrfMRvaGX5TaaacyN3mD1BGPljzidkk6khwiaYMEewGRQOKj x+i843TxxjU92mtnPU/THNe9FTBt6JKUylSDcJiYAyIQZT65FioNo3UN274KCZCW yT4SEdPpBUEjqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:07:04 2025 by rpki-client