This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json) Hash identifier: +2YEZByv0ch3xqVwPN5jwJoSdBYWShYJ/fMtqydoOQ8= Subject key identifier: 24:26:B7:C0:6C:5F:6D:81:36:7A:97:AF:43:33:06:37:97:65:CD:15 Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37 Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237 Certificate serial: 019B2A4146144AADBEA546EC1301C6CEB38E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft Manifest number: 02FE Signing time: Wed 17 Dec 2025 03:01:19 +0000 Manifest this update: Wed 17 Dec 2025 03:01:19 +0000 Manifest next update: Thu 18 Dec 2025 03:01:19 +0000 Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: U/5GtxITB8WAsYkeW1ki3AVpOQOYfxDM6sBffT1Bfo8=) 2: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (hash: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:41:46:14:4a:ad:be:a5:46:ec:13:01:c6:ce:b3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237 Validity Not Before: Dec 17 03:01:19 2025 GMT Not After : Dec 18 03:01:19 2025 GMT Subject: CN=2426b7c06c5f6d81367a97af433306379765cd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:b8:d6:c3:89:4b:ae:2e:fd:47:c2:f0:80: 75:f9:9a:32:42:ad:00:d9:1a:75:e5:38:6b:17:96: 76:c8:63:32:42:e2:21:79:6b:c3:0b:3b:d2:d6:aa: cb:3f:ad:8f:49:ad:3d:e7:00:4b:29:d8:0a:0b:34: 90:77:cd:91:44:a1:95:e8:39:2c:ed:eb:89:fc:97: 1f:a5:ce:29:0c:f2:69:e5:52:52:a8:d1:87:8d:8e: 70:38:df:98:d4:80:4b:ed:fd:7d:f6:8f:06:2c:4e: f3:0d:9b:67:b6:65:2e:fc:44:b1:02:99:bc:f8:43: a8:6b:e0:06:77:1c:3f:eb:61:25:4f:4c:01:6b:14: 43:4b:f9:d6:1b:58:37:67:2a:ff:c1:5c:58:95:c4: 01:8f:ee:c2:b1:53:27:01:6c:2b:ab:9a:d3:12:3b: 5c:22:b0:2a:8e:a1:90:a3:f8:42:d3:dc:27:b2:6a: 7d:ca:e4:62:0c:96:6f:a5:a2:9f:c4:4f:b0:74:8e: b4:df:16:8e:25:9c:4b:fc:87:3f:81:61:e9:06:5c: a7:85:09:73:36:cb:5f:8a:da:28:71:dd:47:12:0c: bc:23:27:e0:7d:60:c6:55:69:db:29:70:7b:76:9a: e1:ba:8e:25:80:35:09:c7:bc:a4:4f:6c:57:15:13: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:26:B7:C0:6C:5F:6D:81:36:7A:97:AF:43:33:06:37:97:65:CD:15 X509v3 Authority Key Identifier: keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:61:36:79:9c:15:fb:61:7c:62:d6:fe:b8:3f:e1:09:b3:68: 37:11:81:82:f4:c2:d4:f8:2d:b2:06:a1:8d:d7:38:b4:71:27: 2f:36:cb:82:f5:fc:b3:39:fc:5d:ce:93:78:ba:6e:55:31:a3: ce:56:93:2f:90:cc:97:6e:5b:b3:35:c0:e0:b7:22:b4:ec:98: 08:9b:58:b3:83:8e:fb:b8:84:1b:a7:1c:dd:c0:3c:f4:92:3b: 0f:ea:ea:33:02:d6:dc:27:0f:ff:00:a9:2f:51:ef:f1:84:26: e6:0f:a0:3a:16:cd:e7:d2:bb:9e:82:41:92:13:32:66:78:92: 11:29:e4:fe:a1:8e:db:00:18:e8:5b:44:a3:35:8e:a4:35:f2: c3:62:e0:c2:cd:b2:63:63:dc:20:f8:f2:0d:46:91:75:0e:0b: 96:0b:e0:cb:75:70:5f:34:f3:9e:bb:93:c4:2d:09:db:ae:7d: 4a:fe:e8:73:e3:2b:cb:a3:75:a3:d7:e2:0e:89:b2:3d:f6:45: eb:16:60:9a:f2:c1:27:54:ea:da:50:37:38:a1:f6:5a:af:8d: c0:35:da:e0:6e:3e:84:08:63:de:b2:d3:34:45:f5:1d:4c:86: 54:9e:5a:3d:d8:5c:2d:7d:aa:80:9e:c0:9e:4e:35:21:cd:6c: 0f:5e:d4:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqQUYUSq2+pUbsEwHGzrOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4M2VmNzE0Mjk5OGU0ZTY1NjYwNTNlMmM2M2E3MDgwOGM2 ZWEyMzcwHhcNMjUxMjE3MDMwMTE5WhcNMjUxMjE4MDMwMTE5WjAzMTEwLwYDVQQD EygyNDI2YjdjMDZjNWY2ZDgxMzY3YTk3YWY0MzMzMDYzNzk3NjVjZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ny41sOJS64u/UfC8IB1+ZoyQq0A 2Rp15ThrF5Z2yGMyQuIheWvDCzvS1qrLP62PSa095wBLKdgKCzSQd82RRKGV6Dks 7euJ/Jcfpc4pDPJp5VJSqNGHjY5wON+Y1IBL7f199o8GLE7zDZtntmUu/ESxApm8 +EOoa+AGdxw/62ElT0wBaxRDS/nWG1g3Zyr/wVxYlcQBj+7CsVMnAWwrq5rTEjtc IrAqjqGQo/hC09wnsmp9yuRiDJZvpaKfxE+wdI603xaOJZxL/Ic/gWHpBlynhQlz Nstfitoocd1HEgy8IyfgfWDGVWnbKXB7dprhuo4lgDUJx7ykT2xXFROeJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQmt8BsX22BNnqXr0MzBjeXZc0VMB8GA1UdIwQY MBaAFNg+9xQpmOTmVmBT4sY6cICMbqI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjIt N2Y3NWExYjEwZWMzLzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83ZmNiMzUtNDQwOC00MjE4LTk4NjItN2Y3NWExYjEwZWMz LzEvMkQ3M0ZDbVk1T1pXWUZQaXhqcHdnSXh1b2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2E2eZwV +2F8Ytb+uD/hCbNoNxGBgvTC1Pgtsgahjdc4tHEnLzbLgvX8szn8Xc6TeLpuVTGj zlaTL5DMl25bszXA4LcitOyYCJtYs4OO+7iEG6cc3cA89JI7D+rqMwLW3CcP/wCp L1Hv8YQm5g+gOhbN59K7noJBkhMyZniSESnk/qGO2wAY6FtEozWOpDXyw2Lgws2y Y2PcIPjyDUaRdQ4Llgvgy3VwXzTznruTxC0J2659Sv7oc+Mry6N1o9fiDomyPfZF 6xZgmvLBJ1Tq2lA3OKH2Wq+NwDXa4G4+hAhj3rLTNEX1HUyGVJ5aPdhcLX2qgJ7A nk41Ic1sD17U5Q== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:47 2025 by rpki-client