This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: KNjhW1QLOaeGunCmXsPHHBD7WD5SIqVpRWEHjPktQDw= Subject key identifier: 3D:5B:16:C2:7C:CF:56:84:74:05:62:36:70:D2:02:3B:BE:9B:E5:DC Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B2F9EC3C99AFA0CE6075C7CAD47996B3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0636 Signing time: Thu 18 Dec 2025 04:01:32 +0000 Manifest this update: Thu 18 Dec 2025 04:01:32 +0000 Manifest next update: Fri 19 Dec 2025 04:01:32 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: 3c0doEc7mr/gdj+VI3W2yGMC8RmTuk3qlQK/o0qpQtM=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: 4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa (hash: 7KT8zX1ut3NI1KMa06d5NbNTRIbK0mONunluRgrTKdc=) 4: 56KKt4BpkIwEHMFmq2QXksA-2io.roa (hash: 54GcazY6u68JnZUu56e7FZCBJWXeMImZQ8ihkRRuFTc=) 5: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 6: EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa (hash: Ju4zKmRJh/EbFKeLrhI6L7JYjbJ+gosDVEmrn3gTxds=) 7: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 8: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 9: hfy8wKzZ1lOnw8rRIAp89k1HBQg.roa (hash: w/O4MPtS75N0zJ8yWXd9FMAgNBIXsYLEr12sXp5bZHk=) 10: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 11: lWNGZyoYxMMDcNyLWjAJGitLlFk.roa (hash: 6BoUCdn7LLlUMhRVmjkftBgzwA47YP9UtF03OcYu1VA=) 12: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 13: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 14: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 15: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 16: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:c3:c9:9a:fa:0c:e6:07:5c:7c:ad:47:99:6b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Dec 18 04:01:32 2025 GMT Not After : Dec 19 04:01:32 2025 GMT Subject: CN=3d5b16c27ccf56847405623670d2023bbe9be5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:02:5b:34:cc:90:09:2f:46:6a:4f:4d:62:60: cc:3f:4c:01:5f:c6:34:78:0b:19:e0:82:f2:54:5d: e8:f5:12:b8:41:6f:28:ba:35:1e:3f:79:fa:1b:22: e1:8a:58:f7:9a:90:6a:c9:30:84:72:54:7a:98:4f: 3e:98:ee:f9:0b:e4:13:bd:bf:44:3b:65:3d:4c:bf: 01:ed:2c:85:62:73:d1:98:a0:39:9f:06:7e:98:f1: 16:3b:36:3f:7c:d7:1f:36:d5:4a:fb:1a:6e:e7:08: 11:f0:37:c8:38:ae:7c:a0:f4:1a:f0:4a:6f:02:58: 73:1f:47:85:0c:4f:6c:73:85:bf:96:6c:ab:59:94: 21:4f:d7:dc:99:28:6f:b3:ec:47:80:b4:2b:0e:e3: 9b:4f:1b:10:66:f4:96:ba:cb:70:b3:dc:4f:9d:79: 24:7d:61:67:c9:ff:7b:73:de:eb:68:9d:6a:a9:99: 21:51:58:88:1f:65:5b:07:a5:50:9a:26:1d:46:09: ef:e0:63:ad:4d:b2:8d:34:f5:b5:10:39:81:40:b6: fa:96:73:cb:7c:e7:06:49:d9:dc:ed:e8:45:94:f2: 9b:cd:14:eb:ba:10:a5:42:1c:d1:4f:ad:3d:e7:61: ae:a4:0a:69:88:0d:2e:8a:99:03:82:d4:f1:52:f1: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5B:16:C2:7C:CF:56:84:74:05:62:36:70:D2:02:3B:BE:9B:E5:DC X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:20:66:0f:51:48:0b:57:97:39:09:d0:3f:f1:24:a9:fd:cd: ae:db:05:6c:b3:41:a2:db:47:38:46:0c:52:a5:12:18:65:9a: e5:b2:b7:d4:a8:d6:77:05:a0:4d:fe:66:b6:86:76:aa:dc:a8: 0c:5d:60:aa:db:ef:43:26:68:2c:d2:ae:e6:f1:78:70:c7:1c: 66:46:21:f0:05:a6:ca:3c:f4:2c:e8:09:38:93:ea:b7:39:6b: 76:e8:0b:aa:3e:57:12:aa:65:85:97:dc:47:d4:22:a8:5f:1a: 7e:f9:70:3d:8e:74:76:33:f8:fa:e7:9f:da:75:b9:8c:4c:f0: 9d:15:3a:7c:05:97:3c:ef:8f:f9:02:10:f8:cd:8b:ca:6e:35: 48:f3:89:72:4d:4e:0e:55:47:19:34:c3:c5:a7:2a:c2:97:03: 08:34:5e:8e:5d:ab:64:c1:d3:81:db:0a:8e:6c:74:58:3c:7a: 13:23:8d:13:60:c8:5a:80:03:66:39:b0:cd:62:75:d6:d6:a7: 75:cf:57:df:b3:72:c1:0e:51:66:8a:78:ea:0e:1c:93:17:5a: 14:89:d3:01:a2:12:67:23:f5:48:70:03:7b:02:1b:ae:2e:63: fd:93:7a:83:6a:84:c0:38:1f:da:48:59:77:8a:a4:90:ef:21: c3:15:18:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnsPJmvoM5gdcfK1HmWs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMjE4MDQwMTMyWhcNMjUxMjE5MDQwMTMyWjAzMTEwLwYDVQQD EygzZDViMTZjMjdjY2Y1Njg0NzQwNTYyMzY3MGQyMDIzYmJlOWJlNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AJbNMyQCS9Gak9NYmDMP0wBX8Y0 eAsZ4ILyVF3o9RK4QW8oujUeP3n6GyLhilj3mpBqyTCEclR6mE8+mO75C+QTvb9E O2U9TL8B7SyFYnPRmKA5nwZ+mPEWOzY/fNcfNtVK+xpu5wgR8DfIOK58oPQa8Epv AlhzH0eFDE9sc4W/lmyrWZQhT9fcmShvs+xHgLQrDuObTxsQZvSWustws9xPnXkk fWFnyf97c97raJ1qqZkhUViIH2VbB6VQmiYdRgnv4GOtTbKNNPW1EDmBQLb6lnPL fOcGSdnc7ehFlPKbzRTruhClQhzRT60952GupAppiA0uipkDgtTxUvGizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1bFsJ8z1aEdAViNnDSAju+m+XcMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSBmD1FI C1eXOQnQP/Ekqf3NrtsFbLNBottHOEYMUqUSGGWa5bK31KjWdwWgTf5mtoZ2qtyo DF1gqtvvQyZoLNKu5vF4cMccZkYh8AWmyjz0LOgJOJPqtzlrdugLqj5XEqplhZfc R9QiqF8afvlwPY50djP4+uef2nW5jEzwnRU6fAWXPO+P+QIQ+M2Lym41SPOJck1O DlVHGTTDxacqwpcDCDRejl2rZMHTgdsKjmx0WDx6EyONE2DIWoADZjmwzWJ11tan dc9X37NywQ5RZop46g4ckxdaFInTAaISZyP1SHADewIbri5j/ZN6g2qEwDgf2khZ d4qkkO8hwxUYog== -----END CERTIFICATE-----Generated at Thu Dec 18 11:12:58 2025 by rpki-client