This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json) Hash identifier: 71uYQydR3FCOoa148zHc4ZmDwpd9Lx6Mxqc7oQ0GB+k= Subject key identifier: DE:38:FE:3F:1B:31:F6:D9:4C:BD:56:C3:CE:14:E6:AA:CE:74:DB:BB Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Certificate serial: 019B38A2BF6475061F512E9B9594867C57C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft Manifest number: 0E31 Signing time: Fri 19 Dec 2025 22:02:28 +0000 Manifest this update: Fri 19 Dec 2025 22:02:28 +0000 Manifest next update: Sat 20 Dec 2025 22:02:28 +0000 Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: oa+K86lmcgFgvlLHDoyJaBc/JWCTFjohejKcM31CUBw=) 2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:bf:64:75:06:1f:51:2e:9b:95:94:86:7c:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Validity Not Before: Dec 19 22:02:28 2025 GMT Not After : Dec 20 22:02:28 2025 GMT Subject: CN=de38fe3f1b31f6d94cbd56c3ce14e6aace74dbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:f9:05:2c:ed:27:2f:a9:2d:2f:e2:dc:60: 39:22:15:f6:00:31:86:55:e3:41:7d:f5:d4:bd:21: c0:ba:52:fb:3b:7b:bf:26:94:44:af:e1:a9:58:4a: 0d:55:96:9b:ff:f5:35:90:3e:1e:ed:20:f5:83:56: 91:93:5f:9a:0f:bc:6b:ef:ec:23:ca:aa:62:45:9c: b0:b9:b6:7e:ca:e6:a2:57:75:91:33:f4:f4:ed:0c: 83:64:66:99:94:f9:0f:a9:86:af:54:bb:58:08:75: 13:24:2c:a4:73:37:63:a3:09:20:60:1c:9b:47:c2: 57:e0:1c:f3:7c:25:a6:2a:65:24:8e:2b:4d:6e:97: 02:78:4d:ea:4b:7c:aa:4d:1d:aa:3e:48:6d:26:80: bc:5f:0f:fa:56:0f:b2:06:53:e8:3c:6a:e4:2b:00: 75:74:c5:94:13:4e:60:ca:5e:97:46:d2:2a:ef:ed: b1:6f:6e:ff:de:d7:ac:d0:55:f4:2c:95:c6:69:5a: 50:5f:98:a3:af:42:c9:ac:fd:25:63:63:dc:ef:92: fa:91:3a:89:b5:cb:5b:22:30:20:31:41:d5:e6:cc: c5:00:e5:71:a3:5f:2e:31:1f:11:41:59:de:d3:65: 3f:c3:ac:e2:30:20:03:5b:c5:64:65:41:55:34:a7: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:FE:3F:1B:31:F6:D9:4C:BD:56:C3:CE:14:E6:AA:CE:74:DB:BB X509v3 Authority Key Identifier: keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9e:d0:d0:5c:5a:b9:07:53:7e:d0:47:38:48:d2:92:68:20: 2c:a0:b4:74:45:38:9d:a5:2a:f3:a7:33:90:5b:e7:10:0a:fa: 23:7a:5f:8c:22:d9:a6:18:64:c2:ea:38:12:aa:17:c0:7d:78: 24:db:4b:34:f7:9e:06:d2:c9:95:66:78:75:f6:cf:08:e7:51: c4:22:9f:e3:87:96:16:7f:dd:3f:2f:c6:c7:71:48:4a:69:7e: 19:7d:f6:c6:89:c9:e5:2e:64:e1:05:84:36:e1:07:79:72:85: 90:be:18:44:d5:bc:8b:c0:af:ed:e6:2d:e6:b0:6d:ce:a5:37: eb:6c:84:b3:c3:b2:41:44:15:c2:ec:07:f7:35:c3:3d:6e:d5: 3a:ef:bf:08:ef:23:98:47:0b:bc:bb:ae:60:e6:ae:c2:44:ab: c8:6c:7a:04:b4:87:43:d9:a2:88:7e:9a:3e:d1:9d:6a:0e:2c: 4f:a3:cf:f5:89:47:a9:49:49:1a:ee:b0:d6:0f:70:27:4c:f6: 31:61:a2:7a:88:78:8e:30:a4:ef:2c:05:1b:f2:9c:d0:c6:f9: 35:e5:5a:ba:19:49:83:29:34:07:b1:be:bd:33:f8:35:56:e9: 22:56:92:7f:73:5e:19:e8:a8:d1:59:a9:c2:2b:af:41:0f:e2: 9b:35:2a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4or9kdQYfUS6blZSGfFfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl ZWNkOWEwHhcNMjUxMjE5MjIwMjI4WhcNMjUxMjIwMjIwMjI4WjAzMTEwLwYDVQQD EyhkZTM4ZmUzZjFiMzFmNmQ5NGNiZDU2YzNjZTE0ZTZhYWNlNzRkYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql75BSztJy+pLS/i3GA5IhX2ADGG VeNBffXUvSHAulL7O3u/JpREr+GpWEoNVZab//U1kD4e7SD1g1aRk1+aD7xr7+wj yqpiRZywubZ+yuaiV3WRM/T07QyDZGaZlPkPqYavVLtYCHUTJCykczdjowkgYByb R8JX4BzzfCWmKmUkjitNbpcCeE3qS3yqTR2qPkhtJoC8Xw/6Vg+yBlPoPGrkKwB1 dMWUE05gyl6XRtIq7+2xb27/3tes0FX0LJXGaVpQX5ijr0LJrP0lY2Pc75L6kTqJ tctbIjAgMUHV5szFAOVxo18uMR8RQVne02U/w6ziMCADW8VkZUFVNKc23wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN44/j8bMfbZTL1Ww84U5qrOdNu7MB8GA1UdIwQY MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp7Q0Fxa uQdTftBHOEjSkmggLKC0dEU4naUq86czkFvnEAr6I3pfjCLZphhkwuo4EqoXwH14 JNtLNPeeBtLJlWZ4dfbPCOdRxCKf44eWFn/dPy/Gx3FISml+GX32xonJ5S5k4QWE NuEHeXKFkL4YRNW8i8Cv7eYt5rBtzqU362yEs8OyQUQVwuwH9zXDPW7VOu+/CO8j mEcLvLuuYOauwkSryGx6BLSHQ9miiH6aPtGdag4sT6PP9YlHqUlJGu6w1g9wJ0z2 MWGieoh4jjCk7ywFG/Kc0Mb5NeVauhlJgyk0B7G+vTP4NVbpIlaSf3NeGeio0Vmp wiuvQQ/imzUqOQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:41:36 2025 by rpki-client