This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json) Hash identifier: yFfSHgtuV6runAh3zd9cSdCj1ywJYOHYgphAgXZDwrQ= Subject key identifier: 2E:9F:09:16:F5:80:71:B5:DE:82:37:AF:E4:DD:05:E0:F7:2E:DB:5D Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48 Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48 Certificate serial: 019B258825A900AD6B778B6F1C3E83E3E979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft Manifest number: 44 Signing time: Tue 16 Dec 2025 05:00:38 +0000 Manifest this update: Tue 16 Dec 2025 05:00:38 +0000 Manifest next update: Wed 17 Dec 2025 05:00:38 +0000 Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: Qg5lPkQi1qiunOkuA3mSiHC2Ahnl8GJIzUqTT5OITg4=) 2: hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa (hash: R04Z5dzTVpp/mJ118ZonHq/GgrG1tGSGF8iWqD8/YV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:25:a9:00:ad:6b:77:8b:6f:1c:3e:83:e3:e9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48 Validity Not Before: Dec 16 05:00:38 2025 GMT Not After : Dec 17 05:00:38 2025 GMT Subject: CN=2e9f0916f58071b5de8237afe4dd05e0f72edb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:07:ce:f3:f4:5b:f4:f5:3d:e5:5a:f6:b8: 56:88:88:5a:78:4f:d3:ef:a2:1f:cf:6c:cf:73:e5: a8:2c:6e:c5:20:39:82:46:8e:ae:1c:25:66:1c:a4: 28:b1:c8:8b:f6:33:7f:b3:2a:e3:c2:e3:73:c4:ee: 21:ff:b8:1d:09:6e:fa:4a:a1:0c:48:04:4f:4f:c9: 97:ad:4f:d3:ee:d5:99:0a:4b:66:f9:73:78:09:0d: 4c:b7:1d:e3:5e:4e:91:9b:db:54:d8:a7:17:fc:b9: e4:b3:cf:49:e0:94:49:25:20:64:fc:23:2e:04:78: f6:18:47:6e:22:d4:9e:ec:af:c7:c1:65:d5:26:2e: dd:83:55:30:79:62:00:90:52:8b:8f:57:25:32:72: cf:6d:f3:71:1f:24:7d:44:69:a2:09:5b:4b:89:b2: c9:c9:86:ff:1b:00:e9:da:f4:33:69:cf:75:fb:fc: 85:de:a5:88:9e:a5:d4:6f:83:3e:7e:9c:03:d9:1a: 41:94:15:30:10:73:d7:06:de:08:6f:8f:de:8c:64: f2:0e:2c:c3:44:b8:71:fd:0e:fc:6d:b3:c8:b3:fe: 62:3a:15:a4:12:b7:60:6d:e6:48:74:71:47:43:2c: 96:5b:40:e3:30:d1:8b:85:dc:d0:97:1d:eb:6a:e2: 57:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9F:09:16:F5:80:71:B5:DE:82:37:AF:E4:DD:05:E0:F7:2E:DB:5D X509v3 Authority Key Identifier: keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:03:e2:87:3e:5d:97:1f:1d:77:9b:27:3e:1f:4b:71:80:71: 4c:fd:d3:b4:bf:a5:df:a9:06:19:15:da:fd:81:ea:e5:da:b3: bc:cc:1c:48:86:a2:f8:89:a1:c9:c5:5d:c9:b1:a4:eb:be:b9: 4f:26:47:9b:00:2e:fd:e0:64:d0:4e:4f:1d:a1:75:5a:08:42: 6f:2e:96:69:93:fc:51:be:0d:4a:8b:66:13:3a:49:52:c2:bd: ec:6b:30:79:bc:4a:6b:c9:1b:10:da:8f:31:dd:ec:45:f1:46: b2:d2:46:01:2d:5c:d8:97:c8:34:96:66:b8:e7:3e:10:c1:e9: cc:6b:8c:59:66:32:30:b5:72:32:bd:8a:89:16:b8:c3:fd:ba: 90:6e:fc:4e:a4:07:1e:df:bf:d2:9a:b1:79:b6:b6:99:b2:3b: 4c:eb:2f:36:df:23:e9:70:8a:13:12:c2:b5:68:3a:bf:0d:ed: a3:4f:f1:1b:80:9e:8f:2d:03:67:c1:40:0f:85:a6:49:e1:45: fa:b3:60:a4:96:80:9d:79:63:81:cb:98:0d:96:c4:6f:ce:3d: d4:5c:1a:fe:a3:53:69:e4:b2:4e:41:6c:9a:30:6c:bf:fc:74: 3a:fa:cb:47:b8:3b:bb:14:77:1b:c9:6d:d9:d5:06:62:2d:f4: 95:37:7c:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliCWpAK1rd4tvHD6D4+l5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NTBiOTYwYWRlOTQ0OWYxZTgwODE0M2EzNzFjZTJlM2Ex ODdlNDgwHhcNMjUxMjE2MDUwMDM4WhcNMjUxMjE3MDUwMDM4WjAzMTEwLwYDVQQD EygyZTlmMDkxNmY1ODA3MWI1ZGU4MjM3YWZlNGRkMDVlMGY3MmVkYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QEHzvP0W/T1PeVa9rhWiIhaeE/T 76Ifz2zPc+WoLG7FIDmCRo6uHCVmHKQosciL9jN/syrjwuNzxO4h/7gdCW76SqEM SARPT8mXrU/T7tWZCktm+XN4CQ1Mtx3jXk6Rm9tU2KcX/Lnks89J4JRJJSBk/CMu BHj2GEduItSe7K/HwWXVJi7dg1UweWIAkFKLj1clMnLPbfNxHyR9RGmiCVtLibLJ yYb/GwDp2vQzac91+/yF3qWInqXUb4M+fpwD2RpBlBUwEHPXBt4Ib4/ejGTyDizD RLhx/Q78bbPIs/5iOhWkErdgbeZIdHFHQyyWW0DjMNGLhdzQlx3rauJXtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6fCRb1gHG13oI3r+TdBeD3LttdMB8GA1UdIwQY MBaAFNhQuWCt6USfHoCBQ6Nxzi46GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt MDE1MGM5NGY5NDBkLzEvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk LzEvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAPihz5d lx8dd5snPh9LcYBxTP3TtL+l36kGGRXa/YHq5dqzvMwcSIai+ImhycVdybGk6765 TyZHmwAu/eBk0E5PHaF1WghCby6WaZP8Ub4NSotmEzpJUsK97GswebxKa8kbENqP Md3sRfFGstJGAS1c2JfINJZmuOc+EMHpzGuMWWYyMLVyMr2KiRa4w/26kG78TqQH Ht+/0pqxeba2mbI7TOsvNt8j6XCKExLCtWg6vw3to0/xG4Cejy0DZ8FAD4WmSeFF +rNgpJaAnXljgcuYDZbEb8491Fwa/qNTaeSyTkFsmjBsv/x0OvrLR7g7uxR3G8lt 2dUGYi30lTd81g== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:29 2025 by rpki-client