This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json) Hash identifier: f2A6k/gU27Kobfgre+DuZYd7mMvrbUcsBSpAITAki2c= Subject key identifier: 0D:0C:B9:6C:87:90:2C:39:E0:0E:58:26:56:DE:31:C5:E2:BD:75:76 Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39 Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39 Certificate serial: 019B3C7DD3FF74B5A210BE2A943C35D522C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft Manifest number: 0CEE Signing time: Sat 20 Dec 2025 16:00:37 +0000 Manifest this update: Sat 20 Dec 2025 16:00:37 +0000 Manifest next update: Sun 21 Dec 2025 16:00:37 +0000 Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: mOMbE5siPl/WuXeEjgYARTDjE2FxfvObROicozuUxnw=) 2: pEoCff1DtYoEMHzC9EANzQRBsC8.roa (hash: +m2VMtZgdFPS2/0zJPg1ZLBtRhUd6KXSgxAw6jiEMMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:d3:ff:74:b5:a2:10:be:2a:94:3c:35:d5:22:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39 Validity Not Before: Dec 20 16:00:37 2025 GMT Not After : Dec 21 16:00:37 2025 GMT Subject: CN=0d0cb96c87902c39e00e582656de31c5e2bd7576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:92:01:b1:79:11:24:b7:a2:fe:5e:ab:3f: fc:08:28:19:0e:08:f1:65:ed:a6:2b:87:54:cb:aa: 22:25:73:e7:e2:52:09:4f:95:dc:8b:a2:4e:c2:e9: 8a:f3:bc:eb:be:29:14:f0:05:b1:b5:62:15:10:10: 9b:42:8f:eb:f7:24:c0:cd:92:53:42:8a:4e:83:47: 31:5f:a5:66:4f:c7:a2:b3:d7:52:58:30:13:b4:14: 83:b6:a5:bc:51:69:06:a7:01:fb:b0:c5:7a:9b:91: 4b:26:2a:cb:79:6d:71:d7:90:2a:bc:d0:79:23:34: ed:81:48:60:3b:aa:9e:68:32:ea:ad:37:b0:b7:ed: c3:d3:57:e5:f8:8b:ed:5e:f5:5f:e0:dc:20:b9:c9: 97:54:d4:a2:c5:00:e0:9b:f4:12:c3:f7:c2:04:e5: 3c:5e:ae:cf:d1:84:43:d8:a1:30:2a:87:2f:b4:0f: d7:33:83:41:9e:9a:ba:2a:07:8d:e8:bb:01:f2:3e: 44:58:af:93:1f:29:87:8d:88:87:4c:da:a6:23:c9: 92:18:79:d6:40:e7:48:00:5c:58:b6:f6:52:ae:82: f2:e6:20:d7:1f:7e:5c:bc:af:08:eb:85:f3:67:c3: 8a:a0:19:7b:c1:bb:2f:64:54:b8:a4:a3:0e:99:ae: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0C:B9:6C:87:90:2C:39:E0:0E:58:26:56:DE:31:C5:E2:BD:75:76 X509v3 Authority Key Identifier: keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:37:87:ea:60:80:e8:f9:03:62:3c:bd:a2:ce:df:97:d3:df: e2:0d:5b:af:9c:e4:99:b1:69:cc:c7:3d:1f:b5:93:58:38:99: b5:d3:a6:d0:59:bb:6d:3a:02:66:92:e5:27:d2:f1:7c:ba:77: 69:dc:94:92:f3:5d:ff:11:cc:8d:2c:03:89:9a:f6:21:7b:4c: d1:4e:84:50:ba:06:6f:9c:00:81:3d:f1:53:1e:88:f7:64:58: 63:cc:06:3a:db:ee:ac:be:a6:98:ba:dc:08:9b:10:5e:36:65: 32:b2:44:a6:99:4b:ce:44:4f:25:82:8e:c5:41:31:47:46:be: 1c:6c:f8:24:9b:0b:c7:93:69:95:0c:7d:40:53:8c:1e:a7:45: d1:c9:29:7b:f1:f4:9d:a8:4d:bf:0c:50:ae:89:08:8f:b6:43: c7:35:77:77:49:d7:04:21:ce:5f:41:b0:44:4f:bc:48:b2:03: ca:32:5f:fc:2c:bb:18:0c:6e:40:8b:2c:c0:70:d1:b2:2a:a6: 16:69:25:00:5e:b6:8c:61:46:53:21:41:6b:35:64:28:6b:35: 27:2a:7e:2c:fa:ee:75:9a:0e:b4:1a:76:cf:df:18:5a:a7:f7: d4:bf:25:41:10:39:ee:bb:08:6a:e8:0b:89:68:29:1a:d0:4e: 29:0e:0c:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fdP/dLWiEL4qlDw11SLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OWI0NGUyYzA1N2YwMWE5OTI2MWY5NGJiZjZkYTFiZjE4 NjVmMzkwHhcNMjUxMjIwMTYwMDM3WhcNMjUxMjIxMTYwMDM3WjAzMTEwLwYDVQQD EygwZDBjYjk2Yzg3OTAyYzM5ZTAwZTU4MjY1NmRlMzFjNWUyYmQ3NTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjOSAbF5ESS3ov5eqz/8CCgZDgjx Ze2mK4dUy6oiJXPn4lIJT5Xci6JOwumK87zrvikU8AWxtWIVEBCbQo/r9yTAzZJT QopOg0cxX6VmT8eis9dSWDATtBSDtqW8UWkGpwH7sMV6m5FLJirLeW1x15AqvNB5 IzTtgUhgO6qeaDLqrTewt+3D01fl+IvtXvVf4NwgucmXVNSixQDgm/QSw/fCBOU8 Xq7P0YRD2KEwKocvtA/XM4NBnpq6KgeN6LsB8j5EWK+THymHjYiHTNqmI8mSGHnW QOdIAFxYtvZSroLy5iDXH35cvK8I64XzZ8OKoBl7wbsvZFS4pKMOma4t9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0MuWyHkCw54A5YJlbeMcXivXV2MB8GA1UdIwQY MBaAFNibROLAV/AamSYflLv22hvxhl85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wMGE3MWUtZGVmOC00YTRmLWE0OTkt YjYwZmJiMTRjMTlkLzEvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8wMGE3MWUtZGVmOC00YTRmLWE0OTktYjYwZmJiMTRjMTlk LzEvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTeH6mCA 6PkDYjy9os7fl9Pf4g1br5zkmbFpzMc9H7WTWDiZtdOm0Fm7bToCZpLlJ9LxfLp3 adyUkvNd/xHMjSwDiZr2IXtM0U6EULoGb5wAgT3xUx6I92RYY8wGOtvurL6mmLrc CJsQXjZlMrJEpplLzkRPJYKOxUExR0a+HGz4JJsLx5NplQx9QFOMHqdF0ckpe/H0 nahNvwxQrokIj7ZDxzV3d0nXBCHOX0GwRE+8SLIDyjJf/Cy7GAxuQIsswHDRsiqm FmklAF62jGFGUyFBazVkKGs1Jyp+LPrudZoOtBp2z98YWqf31L8lQRA57rsIaugL iWgpGtBOKQ4MVg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:37 2025 by rpki-client