This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json) Hash identifier: GK6BP/cRfr4UXQ8I06D/ZCe3MPmnolGNkdqtTvEH2is= Subject key identifier: 7D:07:89:B7:63:CA:27:ED:B8:C2:3A:E6:4A:75:FC:28:59:DE:18:6A Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8 Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8 Certificate serial: 019B3156162DAF2017BB34C5378C04E238D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft Manifest number: 13DA Signing time: Thu 18 Dec 2025 12:01:23 +0000 Manifest this update: Thu 18 Dec 2025 12:01:23 +0000 Manifest next update: Fri 19 Dec 2025 12:01:23 +0000 Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: Rrp1vQfOiB2RNoTIdJYMGfq8k7dgyeW7o8IZ4cmozfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:16:2d:af:20:17:bb:34:c5:37:8c:04:e2:38:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8 Validity Not Before: Dec 18 12:01:23 2025 GMT Not After : Dec 19 12:01:23 2025 GMT Subject: CN=7d0789b763ca27edb8c23ae64a75fc2859de186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:d6:ef:a3:5d:36:e5:cb:01:c2:76:29:ca: 8c:91:c0:ec:de:9f:05:89:3c:d7:93:16:60:10:dd: 3a:f9:97:25:41:03:0c:d9:ef:37:cd:54:ce:9c:93: 3c:54:6d:8e:44:b6:e2:5b:87:92:9f:54:96:7a:98: 53:e1:9e:54:be:8a:db:1a:d2:84:6c:1e:84:16:cf: a8:d4:19:67:85:96:8f:83:1c:d9:23:f8:6d:4c:8f: c3:06:81:a8:5a:d4:a9:44:78:e8:9a:ad:f4:cc:25: e4:d2:b5:e2:7c:f2:d1:d8:27:81:22:1f:5c:cf:53: 23:9c:a6:83:ab:79:5b:e7:09:b5:74:6c:ab:44:b5: 5b:10:d3:c5:81:b3:88:8f:7b:96:ba:46:79:9b:55: ab:8a:09:47:c7:05:54:d9:c3:d9:7e:0b:59:83:d1: 40:07:76:51:77:0d:40:34:fa:d6:a3:72:f7:d9:08: 76:e8:6d:87:09:4a:e4:72:3f:8a:62:87:77:19:ed: 9f:19:44:77:45:34:c8:f5:98:bc:4a:de:6d:4e:3e: 0b:95:80:17:3a:45:c9:d1:91:d8:3a:b7:70:d4:de: b7:38:c3:26:c0:92:63:73:f6:ad:a9:30:55:83:e5: 25:fa:85:38:ef:6f:0d:b9:a8:99:ec:2a:f3:6a:1b: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:07:89:B7:63:CA:27:ED:B8:C2:3A:E6:4A:75:FC:28:59:DE:18:6A X509v3 Authority Key Identifier: keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:72:be:ed:ec:93:2e:e0:e9:d3:a1:ee:17:fa:60:8f:32:ba: 54:54:60:64:76:d3:6c:20:25:1e:e3:eb:15:16:0c:c5:79:a1: 90:cb:19:f6:c4:19:78:1e:66:0c:2a:e8:ea:7a:cd:59:8a:c0: ae:3b:ec:ae:0c:46:00:19:fb:80:9e:77:d2:15:a1:f5:9b:32: ba:ec:aa:59:85:f1:32:90:6b:ba:85:b6:e5:40:51:8d:42:1b: 8c:f6:7d:ce:48:97:aa:88:b3:34:6f:50:d6:ba:0b:c6:7a:f2: 03:66:48:3f:a4:d1:67:a0:5f:bb:f4:eb:72:e6:d8:e0:91:eb: 3c:e1:89:5f:02:0b:65:17:01:6a:7b:31:d3:78:87:a6:3a:cc: ae:6b:d8:ee:f7:6b:6f:3f:2f:2c:54:55:37:5f:04:05:09:b5: fb:11:28:67:3d:12:ad:20:d7:bf:c0:e5:0f:10:82:01:44:87: 95:da:0c:50:a0:22:e1:4e:e0:35:5c:07:03:ed:8a:2c:a2:b1: 46:fe:7c:97:c6:38:f1:13:2d:f4:d5:90:b5:09:02:c3:8a:c1: 3e:66:03:2c:8e:5a:5e:7b:e3:4f:e6:f8:20:12:f6:15:02:29: 30:a5:3c:20:87:74:1f:c5:47:d0:7a:12:89:49:97:c0:46:dd: cd:b5:b6:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhYtryAXuzTFN4wE4jjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGFjMGIxMDY2ZDBkZWZjYjE2OTU2NDNkY2JhYTA3Mzk5 NzVjYTgwHhcNMjUxMjE4MTIwMTIzWhcNMjUxMjE5MTIwMTIzWjAzMTEwLwYDVQQD Eyg3ZDA3ODliNzYzY2EyN2VkYjhjMjNhZTY0YTc1ZmMyODU5ZGUxODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneXW76NdNuXLAcJ2KcqMkcDs3p8F iTzXkxZgEN06+ZclQQMM2e83zVTOnJM8VG2ORLbiW4eSn1SWephT4Z5UvorbGtKE bB6EFs+o1BlnhZaPgxzZI/htTI/DBoGoWtSpRHjomq30zCXk0rXifPLR2CeBIh9c z1MjnKaDq3lb5wm1dGyrRLVbENPFgbOIj3uWukZ5m1WriglHxwVU2cPZfgtZg9FA B3ZRdw1ANPrWo3L32Qh26G2HCUrkcj+KYod3Ge2fGUR3RTTI9Zi8St5tTj4LlYAX OkXJ0ZHYOrdw1N63OMMmwJJjc/atqTBVg+Ul+oU4728NuaiZ7CrzahsYQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0HibdjyiftuMI65kp1/ChZ3hhqMB8GA1UdIwQY MBaAFNmKwLEGbQ3vyxaVZD3Lqgc5l1yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgt ZTM1ZDJkNWYwMGY4LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgtZTM1ZDJkNWYwMGY4 LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXK+7eyT LuDp06HuF/pgjzK6VFRgZHbTbCAlHuPrFRYMxXmhkMsZ9sQZeB5mDCro6nrNWYrA rjvsrgxGABn7gJ530hWh9ZsyuuyqWYXxMpBruoW25UBRjUIbjPZ9zkiXqoizNG9Q 1roLxnryA2ZIP6TRZ6Bfu/TrcubY4JHrPOGJXwILZRcBansx03iHpjrMrmvY7vdr bz8vLFRVN18EBQm1+xEoZz0SrSDXv8DlDxCCAUSHldoMUKAi4U7gNVwHA+2KLKKx Rv58l8Y48RMt9NWQtQkCw4rBPmYDLI5aXnvjT+b4IBL2FQIpMKU8IId0H8VH0HoS iUmXwEbdzbW2iw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:39:33 2025 by rpki-client