This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json) Hash identifier: TsKzZMDxTrFFrzPNZ3+e15VNLoFAziqx2voRtqhdUsU= Subject key identifier: FF:A5:9E:FA:62:C2:88:27:AE:41:5A:9A:3D:22:B9:9D:34:56:B1:63 Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe Certificate serial: 019B3A21C226D10FFD8B7B1E70314F5F5FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft Manifest number: 14F2 Signing time: Sat 20 Dec 2025 05:00:49 +0000 Manifest this update: Sat 20 Dec 2025 05:00:49 +0000 Manifest next update: Sun 21 Dec 2025 05:00:49 +0000 Files and hashes: 1: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: IV5WzaCtWaDeVBBIpwxMLz+LiK65IlP7hEgds+6tcek=) 2: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=) 3: DTFwzq2g65Dq-1Vdc_lPETGChPI.roa (hash: vSxLCXuhhkqZVNd7lpT8hCgMyR9Cz5KGCKvVphrxEVI=) 4: LZoTpPM2VkILReCwMFeJVUb0VAo.roa (hash: ID8ZXpUjQ9jwywDgmAXCourXR8hKniMNfDnHcEORfgE=) 5: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=) 6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=) 7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=) 8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=) 9: yl2_YgC-tBVxL8RhU8L2adT98-I.roa (hash: AMuPFgWghyfaBGHNj/l+7jY+wwAmCTQqhQ3xsaE8j4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:c2:26:d1:0f:fd:8b:7b:1e:70:31:4f:5f:5f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe Validity Not Before: Dec 20 05:00:49 2025 GMT Not After : Dec 21 05:00:49 2025 GMT Subject: CN=ffa59efa62c28827ae415a9a3d22b99d3456b163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:9c:42:ad:ce:8e:f5:32:4b:89:20:be:b1: fa:3b:a1:e5:58:92:5d:47:fb:25:75:bb:0e:03:fd: db:12:16:75:b4:71:84:39:9a:f7:4c:27:6b:68:69: db:ae:c6:9f:5a:95:a3:68:bf:af:ee:8c:fa:4b:97: 3d:ab:9f:11:f0:8d:fc:47:ff:22:fc:63:c0:4a:a4: e1:b1:d0:d0:db:e4:64:55:16:5a:03:61:d9:83:7a: 5d:8f:c1:3a:eb:b9:bb:16:e8:fb:ce:23:0e:b4:a9: 13:95:0e:8a:1a:17:6b:5a:12:18:c8:d9:65:a0:02: 19:c7:10:b7:e5:bc:b3:da:0f:5f:f6:c6:8f:96:d4: 47:a7:21:4e:5b:5a:0c:c0:3c:8b:e6:55:69:40:e6: 37:9d:19:0d:9e:f9:cd:e2:a8:44:27:06:fc:fb:34: ab:84:c4:66:75:11:9d:7a:81:3d:80:bc:96:ba:6a: c6:5a:47:35:0e:a0:cb:eb:c9:6c:69:d5:77:03:22: 2a:85:f9:67:10:e7:fe:6b:84:ce:87:78:1b:2e:50: d6:5d:02:9c:09:a1:cf:9d:41:05:7b:45:58:fc:cf: 9c:ef:cd:71:7a:98:eb:1b:bc:3c:04:f2:37:02:0d: 9c:16:68:bf:00:1e:a2:eb:7b:e9:75:52:11:ae:13: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A5:9E:FA:62:C2:88:27:AE:41:5A:9A:3D:22:B9:9D:34:56:B1:63 X509v3 Authority Key Identifier: keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4f:82:f3:b5:20:aa:df:d1:e4:0a:1d:68:6c:1c:dc:7a:01: 35:dd:3e:f1:20:b3:bb:28:73:0b:44:af:5a:e6:03:28:f8:0d: bb:4c:21:17:cd:9a:6c:04:fa:e9:ba:03:d3:e3:df:5a:87:07: 5a:43:11:56:13:9f:1b:4e:c0:cc:fa:7a:bf:54:b0:13:02:54: 64:e8:09:8d:9d:07:0b:41:85:ed:23:45:de:73:1e:35:e8:11: cd:5f:4a:73:02:45:34:07:cb:ed:4a:8a:70:98:d1:a3:77:58: b1:8c:08:8d:49:f9:f5:fc:2f:78:09:a3:f9:82:6a:b5:3d:13: 1c:e2:dc:41:40:03:2f:d4:a7:d4:d3:1b:77:47:1d:2e:61:d3: 74:0f:a9:83:79:b3:b4:77:4a:0f:8d:3b:34:bc:50:58:57:6d: e5:d2:84:bd:75:47:5b:4f:5b:70:17:f1:3e:d0:6f:c3:69:e5: a7:94:bf:b9:ff:a8:f3:90:59:90:a4:89:d9:96:7a:8c:e2:0d: 4b:7e:45:ff:d3:75:c9:a2:10:c1:0d:62:7f:a7:6a:bb:80:ec: c3:9d:57:30:ad:e8:7f:c8:f3:d8:ec:41:e5:33:42:dc:81:c7: 67:e1:df:79:64:cd:81:a0:7c:3c:77:59:14:9a:f8:63:11:f9: 9c:0c:bf:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IcIm0Q/9i3secDFPX1/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx OGJhYmUwHhcNMjUxMjIwMDUwMDQ5WhcNMjUxMjIxMDUwMDQ5WjAzMTEwLwYDVQQD EyhmZmE1OWVmYTYyYzI4ODI3YWU0MTVhOWEzZDIyYjk5ZDM0NTZiMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRycQq3OjvUyS4kgvrH6O6HlWJJd R/sldbsOA/3bEhZ1tHGEOZr3TCdraGnbrsafWpWjaL+v7oz6S5c9q58R8I38R/8i /GPASqThsdDQ2+RkVRZaA2HZg3pdj8E667m7Fuj7ziMOtKkTlQ6KGhdrWhIYyNll oAIZxxC35byz2g9f9saPltRHpyFOW1oMwDyL5lVpQOY3nRkNnvnN4qhEJwb8+zSr hMRmdRGdeoE9gLyWumrGWkc1DqDL68lsadV3AyIqhflnEOf+a4TOh3gbLlDWXQKc CaHPnUEFe0VY/M+c781xepjrG7w8BPI3Ag2cFmi/AB6i63vpdVIRrhP6+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+lnvpiwognrkFamj0iuZ00VrFjMB8GA1UdIwQY MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU+C87Ug qt/R5AodaGwc3HoBNd0+8SCzuyhzC0SvWuYDKPgNu0whF82abAT66boD0+PfWocH WkMRVhOfG07AzPp6v1SwEwJUZOgJjZ0HC0GF7SNF3nMeNegRzV9KcwJFNAfL7UqK cJjRo3dYsYwIjUn59fwveAmj+YJqtT0THOLcQUADL9Sn1NMbd0cdLmHTdA+pg3mz tHdKD407NLxQWFdt5dKEvXVHW09bcBfxPtBvw2nlp5S/uf+o85BZkKSJ2ZZ6jOIN S35F/9N1yaIQwQ1if6dqu4Dsw51XMK3of8jz2OxB5TNC3IHHZ+HfeWTNgaB8PHdZ FJr4YxH5nAy/6A== -----END CERTIFICATE-----Generated at Sat Dec 20 08:45:38 2025 by rpki-client