This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json) Hash identifier: r4ksh/j/93Ahwut3xS88VlSbf2MNgHPU7aniaGmwuNs= Subject key identifier: 09:8C:AA:62:D8:D6:AD:7E:B6:08:22:DB:55:88:74:1D:04:53:CB:A4 Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4 Certificate serial: 019B39EB81955F3A92CC10AED20E3CEE9589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft Manifest number: 0ECA Signing time: Sat 20 Dec 2025 04:01:33 +0000 Manifest this update: Sat 20 Dec 2025 04:01:33 +0000 Manifest next update: Sun 21 Dec 2025 04:01:33 +0000 Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: 7PvhDsODi29LtuHa/ulx/hb6wni+wtlQQVxSrwdZ1z8=) 2: KtlV2YYAuDvLLDrwvVONKNyr5wE.roa (hash: X0ZKW+Jh+LXjVGRNpAiX4HmMGVTvfeCbPgs0XOICV8s=) 3: SRivJZ3NfmTceYbb0X0qedoYDkw.roa (hash: +54ZwqGRotzytN67kFR0epWImuzogdtQhuQ9BjiZR4M=) 4: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:81:95:5f:3a:92:cc:10:ae:d2:0e:3c:ee:95:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4 Validity Not Before: Dec 20 04:01:33 2025 GMT Not After : Dec 21 04:01:33 2025 GMT Subject: CN=098caa62d8d6ad7eb60822db5588741d0453cba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:cc:19:40:34:92:4d:e0:f4:cd:fd:4f:32: 67:4a:82:00:f4:1d:55:98:22:41:9e:93:a9:9f:ce: e3:e7:e0:f3:05:a6:bd:aa:14:0d:ed:6c:c5:10:d1: f1:d9:d9:d7:2a:a9:ef:1c:53:b2:9b:34:0d:30:2c: 21:db:f4:5c:72:a2:75:04:44:7f:71:91:3e:e2:29: 1a:7f:10:cd:dc:09:2e:d9:68:6c:0a:68:95:8a:aa: 39:08:dd:e5:91:c7:17:78:37:f7:6a:fc:31:36:3e: e5:f2:98:78:33:6b:30:9a:61:99:b3:05:3f:f7:93: 34:e7:a6:87:b2:42:01:4f:59:84:12:2a:78:4e:4a: 0a:06:34:4e:1d:7a:2f:ce:40:fa:cb:05:bb:3c:73: 1f:8a:35:02:d8:d2:81:50:76:39:57:a3:02:75:93: 04:80:01:2d:95:f1:d8:4d:ef:08:a7:c3:39:86:ab: 61:74:27:2e:ef:3f:7f:84:f4:4a:3e:b1:68:7d:15: a9:fe:6d:39:ab:f3:e0:61:1a:73:34:f7:71:22:fd: 7b:13:e4:bd:be:63:40:ef:fd:0c:e6:f8:b5:ad:4e: 00:2f:ed:b9:f4:6d:74:e2:a2:54:9b:67:79:cd:ec: 76:81:2e:a6:65:62:15:a2:9a:20:b2:97:9b:40:2c: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:AA:62:D8:D6:AD:7E:B6:08:22:DB:55:88:74:1D:04:53:CB:A4 X509v3 Authority Key Identifier: keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a3:16:30:4a:2d:31:14:84:6a:91:d6:90:f8:43:dc:8d:98: e1:3a:a4:37:01:ab:a1:58:e0:91:29:df:c8:ff:93:7b:db:75: dc:d0:c2:28:a5:87:8f:aa:e3:da:d3:70:b4:53:f7:33:b5:55: 32:2b:8b:3d:7f:41:35:3b:aa:8e:8d:d2:4c:cf:27:57:52:7e: cb:d1:91:0e:3d:1e:2b:34:69:a3:36:84:c4:1e:9f:2d:d3:f5: 50:b9:23:f0:63:26:29:5d:9f:75:12:39:95:c3:79:03:64:e4: 76:a2:5e:21:28:08:cb:44:9c:56:52:83:0b:f4:0a:a0:6c:f2: fe:62:1d:b4:3b:37:ee:20:cc:07:ea:37:05:c5:20:69:7a:8c: 0b:e0:8d:a2:f8:a3:64:ee:fc:1f:82:30:16:58:82:0e:32:cf: 4e:3d:04:04:89:ca:40:ed:36:bb:e0:01:fc:98:fd:7a:7f:1c: 49:f3:39:51:65:d9:4d:b8:50:61:26:17:3c:4e:89:ee:90:74: 29:2e:22:83:cb:3e:b7:af:b3:76:6e:9e:f0:7c:f1:1a:28:9d: d1:a2:58:3f:7f:b0:32:f5:2d:0d:5d:2b:9b:53:2f:ad:d4:ec: ab:b6:a1:ec:95:c6:b4:cd:b8:5e:9c:b0:e3:10:ac:9c:02:cf: d0:c2:5c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs564GVXzqSzBCu0g487pWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw MGM5YTQwHhcNMjUxMjIwMDQwMTMzWhcNMjUxMjIxMDQwMTMzWjAzMTEwLwYDVQQD EygwOThjYWE2MmQ4ZDZhZDdlYjYwODIyZGI1NTg4NzQxZDA0NTNjYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJDMGUA0kk3g9M39TzJnSoIA9B1V mCJBnpOpn87j5+DzBaa9qhQN7WzFENHx2dnXKqnvHFOymzQNMCwh2/RccqJ1BER/ cZE+4ikafxDN3Aku2WhsCmiViqo5CN3lkccXeDf3avwxNj7l8ph4M2swmmGZswU/ 95M056aHskIBT1mEEip4TkoKBjROHXovzkD6ywW7PHMfijUC2NKBUHY5V6MCdZME gAEtlfHYTe8Ip8M5hqthdCcu7z9/hPRKPrFofRWp/m05q/PgYRpzNPdxIv17E+S9 vmNA7/0M5vi1rU4AL+259G104qJUm2d5zex2gS6mZWIVopogspebQCzTlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmMqmLY1q1+tggi21WIdB0EU8ukMB8GA1UdIwQY MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0 LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKMWMEot MRSEapHWkPhD3I2Y4TqkNwGroVjgkSnfyP+Te9t13NDCKKWHj6rj2tNwtFP3M7VV MiuLPX9BNTuqjo3STM8nV1J+y9GRDj0eKzRpozaExB6fLdP1ULkj8GMmKV2fdRI5 lcN5A2TkdqJeISgIy0ScVlKDC/QKoGzy/mIdtDs37iDMB+o3BcUgaXqMC+CNovij ZO78H4IwFliCDjLPTj0EBInKQO02u+AB/Jj9en8cSfM5UWXZTbhQYSYXPE6J7pB0 KS4ig8s+t6+zdm6e8HzxGiid0aJYP3+wMvUtDV0rm1MvrdTsq7ah7JXGtM24Xpyw 4xCsnALP0MJc/g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:04:16 2025 by rpki-client