This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json) Hash identifier: OZcNEP5xKM1iWPGqNkwPctHdBxeBW/uOquTjgBl43BY= Subject key identifier: 09:E1:F7:47:36:FE:A8:7B:EC:25:ED:66:C8:3D:17:F1:39:A7:09:49 Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4 Certificate serial: 019B41A4AC455F3C14CFE229E1DA83903E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft Manifest number: 0ECE Signing time: Sun 21 Dec 2025 16:01:09 +0000 Manifest this update: Sun 21 Dec 2025 16:01:09 +0000 Manifest next update: Mon 22 Dec 2025 16:01:09 +0000 Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: A6f2qbhsVa/1elVa20TiYVYGnVCD6czSOlChh801Y04=) 2: KtlV2YYAuDvLLDrwvVONKNyr5wE.roa (hash: X0ZKW+Jh+LXjVGRNpAiX4HmMGVTvfeCbPgs0XOICV8s=) 3: SRivJZ3NfmTceYbb0X0qedoYDkw.roa (hash: +54ZwqGRotzytN67kFR0epWImuzogdtQhuQ9BjiZR4M=) 4: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:ac:45:5f:3c:14:cf:e2:29:e1:da:83:90:3e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4 Validity Not Before: Dec 21 16:01:09 2025 GMT Not After : Dec 22 16:01:09 2025 GMT Subject: CN=09e1f74736fea87bec25ed66c83d17f139a70949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:e5:2c:47:99:8b:99:88:40:1f:d1:b1:5d: 7e:36:4b:c0:df:93:3a:3e:e9:9e:e6:37:47:38:94: 21:d6:b8:ce:30:65:94:1f:67:e8:c6:1c:8e:9c:4f: ef:45:02:78:35:71:07:26:8b:34:f0:85:64:a3:a6: 51:8a:29:5b:db:ed:32:30:e8:d9:97:16:ec:40:80: 51:37:26:e4:aa:78:8b:13:ab:eb:c3:9d:d9:12:26: 4a:48:32:9b:08:8d:1b:96:6b:4f:3c:23:d8:77:57: 58:30:a4:19:f1:0c:f5:a6:fd:b5:35:73:6b:01:b9: 0a:bd:7f:5d:45:eb:42:5d:de:d7:28:54:33:91:5c: 15:10:29:12:b3:bb:d7:85:ae:0b:41:e1:3b:3a:1b: d8:71:51:25:bd:96:06:ea:fb:2e:e0:d5:15:b3:85: 99:49:a1:93:01:c5:37:92:0b:97:c2:c3:f0:e3:e6: 94:10:53:e2:e9:02:08:65:d1:dd:ac:ac:9d:b8:96: 95:4b:67:08:ce:d3:84:36:48:65:18:18:15:75:76: 55:d8:1b:59:f6:45:17:60:60:d5:fe:bf:b2:4c:90: ba:1f:e7:70:4c:a2:00:0c:e2:6c:6d:e5:24:f7:63: e1:b3:67:88:d0:60:df:6b:e2:74:a9:c5:a5:52:23: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E1:F7:47:36:FE:A8:7B:EC:25:ED:66:C8:3D:17:F1:39:A7:09:49 X509v3 Authority Key Identifier: keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d7:14:98:0d:a7:48:0d:a2:3c:08:d9:4d:ec:15:7d:ae:d8: 96:09:66:ea:62:7e:eb:e7:89:cf:85:b2:c7:11:22:4e:95:7f: 07:d1:57:94:16:cc:63:4e:49:ac:32:cf:8e:22:98:84:59:32: fc:1e:85:92:c0:20:2e:f4:86:b5:5d:27:03:88:85:87:68:68: ff:19:0d:bf:95:0a:8b:00:70:2a:18:0e:cf:59:a4:41:f7:a6: 3a:00:49:bb:0c:9e:d6:f9:b3:08:d0:c7:6b:44:9d:ca:ff:21: fc:16:0b:22:f2:f5:32:7c:f0:c0:a4:b9:dc:c5:c8:09:ff:dd: 14:a5:ec:72:f1:a5:1f:b9:c1:53:bc:55:33:d7:c8:1a:b3:e5: 95:86:4b:e6:ba:1c:67:91:6f:61:42:55:35:fc:ff:03:30:b8: 3e:48:d8:52:45:ac:35:89:43:0f:53:9e:d5:19:82:03:4a:5f: ca:e3:a4:0f:43:d8:1d:13:38:49:53:fc:54:ae:a5:1b:33:14: 0b:bf:02:5d:57:e0:ce:9b:7a:4a:0c:4f:6d:5c:45:d4:31:3b: 46:81:a7:82:ce:fc:fb:e7:62:80:83:6e:c9:d3:3a:86:d3:9f: 1a:90:1b:d8:c2:c8:ad:ee:78:af:23:59:5c:88:6a:ee:01:21: 03:df:d1:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpKxFXzwUz+Ip4dqDkD4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw MGM5YTQwHhcNMjUxMjIxMTYwMTA5WhcNMjUxMjIyMTYwMTA5WjAzMTEwLwYDVQQD EygwOWUxZjc0NzM2ZmVhODdiZWMyNWVkNjZjODNkMTdmMTM5YTcwOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3flLEeZi5mIQB/RsV1+NkvA35M6 Pume5jdHOJQh1rjOMGWUH2foxhyOnE/vRQJ4NXEHJos08IVko6ZRiilb2+0yMOjZ lxbsQIBRNybkqniLE6vrw53ZEiZKSDKbCI0blmtPPCPYd1dYMKQZ8Qz1pv21NXNr AbkKvX9dRetCXd7XKFQzkVwVECkSs7vXha4LQeE7OhvYcVElvZYG6vsu4NUVs4WZ SaGTAcU3kguXwsPw4+aUEFPi6QIIZdHdrKyduJaVS2cIztOENkhlGBgVdXZV2BtZ 9kUXYGDV/r+yTJC6H+dwTKIADOJsbeUk92Phs2eI0GDfa+J0qcWlUiNrzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnh90c2/qh77CXtZsg9F/E5pwlJMB8GA1UdIwQY MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0 LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNcUmA2n SA2iPAjZTewVfa7Ylglm6mJ+6+eJz4WyxxEiTpV/B9FXlBbMY05JrDLPjiKYhFky /B6FksAgLvSGtV0nA4iFh2ho/xkNv5UKiwBwKhgOz1mkQfemOgBJuwye1vmzCNDH a0Sdyv8h/BYLIvL1MnzwwKS53MXICf/dFKXscvGlH7nBU7xVM9fIGrPllYZL5roc Z5FvYUJVNfz/AzC4PkjYUkWsNYlDD1Oe1RmCA0pfyuOkD0PYHRM4SVP8VK6lGzMU C78CXVfgzpt6SgxPbVxF1DE7RoGngs78++digINuydM6htOfGpAb2MLIre54ryNZ XIhq7gEhA9/RLw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:26:54 2025 by rpki-client