This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.mft (raw, json) Hash identifier: T9gINzMTcnY8NwZYU6mfSfRGVmtzLSycB3e61aUAmZk= Subject key identifier: 3C:51:94:B2:91:05:A4:E5:50:C5:87:A3:00:EA:44:2F:B6:EB:E7:DD Authority key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C Certificate issuer: /CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Certificate serial: 019B3C7DFA8CD53E994E1A9A49AEDB7F17F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft Manifest number: 3D Signing time: Sat 20 Dec 2025 16:00:47 +0000 Manifest this update: Sat 20 Dec 2025 16:00:47 +0000 Manifest next update: Sun 21 Dec 2025 16:00:47 +0000 Files and hashes: 1: 2RFVkMpva1RAxuJTQ82EAYaOOhw.crl (hash: 3RwgqoxzQJCQeu0WXkaYWQ8MZwvV0IMZxJoN6Z3B9tU=) 2: nXJHcqoIsxI3drmHw3AQC7elZ7E.roa (hash: ryIugqab9wVDLPyjvx2CM1nlUVNf6KLlapmc6lrRPd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:fa:8c:d5:3e:99:4e:1a:9a:49:ae:db:7f:17:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Validity Not Before: Dec 20 16:00:47 2025 GMT Not After : Dec 21 16:00:47 2025 GMT Subject: CN=3c5194b29105a4e550c587a300ea442fb6ebe7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:b9:06:53:43:a4:5e:b9:a5:c4:32:73:f8: 3c:3e:41:bd:62:95:88:b0:81:60:24:34:b7:0d:75: a3:32:ec:30:de:ea:4d:9d:85:95:89:2d:2b:90:9e: b7:91:ea:24:39:1c:df:fa:c8:89:1f:f4:29:e7:84: 23:d3:79:5a:c1:18:f3:4a:1b:fd:99:b5:59:6d:e5: c6:08:c9:73:cb:6d:5c:af:4e:52:c3:a8:5d:63:ae: a1:38:c9:66:16:3f:31:ec:63:09:81:e8:d9:3b:bd: 20:76:be:13:d3:84:be:e8:d9:66:ce:a1:90:b5:46: d5:a8:bb:bf:42:a8:00:84:38:c6:10:91:fe:61:76: 45:ef:28:9d:fe:45:7a:2e:8b:bb:9c:42:86:54:40: da:2a:5e:f9:96:39:ad:ea:79:c1:29:f8:b0:bc:62: d0:98:dc:50:7e:33:cf:37:85:35:90:42:66:14:5f: 8a:f4:77:6b:85:1f:45:91:d4:d2:a0:84:84:d2:1f: 92:76:6b:df:17:04:dd:20:32:00:8a:b0:68:f1:7a: cd:06:ae:49:ef:4e:e9:3e:81:f5:69:9e:42:36:b9: 56:6c:47:f2:c5:7f:86:c8:80:3e:98:62:a8:96:7b: 01:1e:f0:15:85:32:e2:55:67:a4:53:e1:b9:88:1b: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:51:94:B2:91:05:A4:E5:50:C5:87:A3:00:EA:44:2F:B6:EB:E7:DD X509v3 Authority Key Identifier: keyid:D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d7:86:cf:8e:90:d8:42:c5:61:ef:d0:83:36:13:82:2b:84: 34:e3:ce:ef:6f:23:89:c2:aa:8a:c8:3e:5a:23:68:03:8c:bf: a1:3f:bf:da:fd:67:a7:38:57:1f:17:60:6c:52:e9:3d:2a:43: 79:b8:4c:f9:65:c6:92:cd:33:c5:3e:b4:94:30:b0:7f:e7:b6: 4c:7b:8b:8c:c3:24:f2:77:d9:34:0d:6b:6a:03:bc:5f:cd:6b: a1:68:ea:ce:c3:37:3e:50:3d:db:a6:b6:26:37:70:eb:63:41: ca:35:f1:a7:2d:a9:ee:73:e3:31:5b:dd:59:53:e4:ef:c1:c5: 7c:b8:0a:f7:37:fc:d5:b6:13:89:66:04:3e:e1:10:57:af:bc: 12:20:76:92:a4:1c:41:37:75:96:a3:e0:0a:5a:d1:04:28:b3: c8:e0:b6:70:94:cb:5c:2d:22:16:e3:64:cf:73:60:6c:f9:e1: ea:e0:6e:b4:4c:1e:14:ea:5a:dc:c1:2c:2a:29:72:67:b7:c5: d2:40:8d:72:05:42:6b:f6:88:0e:32:c0:f6:81:4b:fe:9a:89: 58:4f:8b:06:33:87:fc:ac:4b:1a:50:9b:23:92:ea:02:40:aa: bd:08:56:80:bd:3e:6c:8e:05:4f:31:ba:08:4d:77:2f:49:cd: f1:3a:ff:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffqM1T6ZThqaSa7bfxfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTE1NTkwY2E2ZjZiNTQ0MGM2ZTI1MzQzY2Q4NDAxODY4 ZTNhMWMwHhcNMjUxMjIwMTYwMDQ3WhcNMjUxMjIxMTYwMDQ3WjAzMTEwLwYDVQQD EygzYzUxOTRiMjkxMDVhNGU1NTBjNTg3YTMwMGVhNDQyZmI2ZWJlN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAm5BlNDpF65pcQyc/g8PkG9YpWI sIFgJDS3DXWjMuww3upNnYWViS0rkJ63keokORzf+siJH/Qp54Qj03lawRjzShv9 mbVZbeXGCMlzy21cr05Sw6hdY66hOMlmFj8x7GMJgejZO70gdr4T04S+6NlmzqGQ tUbVqLu/QqgAhDjGEJH+YXZF7yid/kV6Lou7nEKGVEDaKl75ljmt6nnBKfiwvGLQ mNxQfjPPN4U1kEJmFF+K9HdrhR9FkdTSoISE0h+SdmvfFwTdIDIAirBo8XrNBq5J 707pPoH1aZ5CNrlWbEfyxX+GyIA+mGKolnsBHvAVhTLiVWekU+G5iBvbNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxRlLKRBaTlUMWHowDqRC+26+fdMB8GA1UdIwQY MBaAFNkRVZDKb2tUQMbiU0PNhAGGjjocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUt M2ZmYTM5YjRkYzBiLzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNDU1MjAtZDljYy00NWYyLTg2NDUtM2ZmYTM5YjRkYzBi LzEvMlJGVmtNcHZhMVJBeHVKVFE4MkVBWWFPT2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNeGz46Q 2ELFYe/QgzYTgiuENOPO728jicKqisg+WiNoA4y/oT+/2v1npzhXHxdgbFLpPSpD ebhM+WXGks0zxT60lDCwf+e2THuLjMMk8nfZNA1ragO8X81roWjqzsM3PlA926a2 Jjdw62NByjXxpy2p7nPjMVvdWVPk78HFfLgK9zf81bYTiWYEPuEQV6+8EiB2kqQc QTd1lqPgClrRBCizyOC2cJTLXC0iFuNkz3NgbPnh6uButEweFOpa3MEsKilyZ7fF 0kCNcgVCa/aIDjLA9oFL/pqJWE+LBjOH/KxLGlCbI5LqAkCqvQhWgL0+bI4FTzG6 CE13L0nN8Tr/1w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:35:52 2025 by rpki-client