This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json) Hash identifier: leJt37ECWGghehhXRGkgqB8d93CJd4GDe8ohS02fqQI= Subject key identifier: 1F:DF:A6:E0:68:4E:47:85:82:56:12:15:3F:71:C3:BF:7F:0C:E2:BE Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Certificate serial: 019B2F30726FF271081EEBE8E92ACA3563DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft Manifest number: 0D5A Signing time: Thu 18 Dec 2025 02:01:02 +0000 Manifest this update: Thu 18 Dec 2025 02:01:02 +0000 Manifest next update: Fri 19 Dec 2025 02:01:02 +0000 Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: 9Z7jnbhl9jsyyVHkpyNaV7Flz2YwaYJ8wenJ/OJKnS0=) 2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=) 3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:72:6f:f2:71:08:1e:eb:e8:e9:2a:ca:35:63:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Validity Not Before: Dec 18 02:01:02 2025 GMT Not After : Dec 19 02:01:02 2025 GMT Subject: CN=1fdfa6e0684e4785825612153f71c3bf7f0ce2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:14:6b:3a:a7:b6:2e:fb:5f:03:1b:74:e6:99: 23:f4:39:53:71:51:c7:60:e7:3c:68:48:f4:95:c5: cf:fb:9f:12:4f:be:84:24:0a:f5:98:1f:51:e9:5f: d3:ec:ef:ef:64:c0:ff:03:02:7b:2f:0c:b8:0e:9c: 28:f4:c1:b0:08:e9:97:08:2b:81:06:1e:c5:45:e3: 66:23:39:ea:d9:bf:e9:f7:46:f4:37:d5:de:3e:90: b2:2a:75:0e:00:4e:e4:8d:cd:21:8f:16:13:67:eb: 8c:86:ce:0b:65:7e:04:53:e3:ca:49:20:a3:d6:f9: 85:00:84:b1:89:58:ef:bd:53:38:f6:71:44:b3:10: 52:ee:c7:15:4a:37:29:67:a2:16:27:a0:59:b8:2b: 77:76:72:78:5e:d1:b9:b3:ea:15:f8:f4:3e:52:84: b5:29:38:c0:c6:0f:d7:d3:2b:77:14:71:52:fc:b3: 73:be:25:21:5e:f0:87:ea:9d:7d:54:94:cc:cb:dd: c6:13:4f:12:e3:75:a3:a0:07:43:d7:cb:cb:d2:30: d5:e1:dd:86:4b:46:35:33:5f:25:7b:f4:48:79:4b: 62:7d:c8:a1:55:07:41:ff:76:c4:01:aa:93:5a:32: 74:f5:cd:51:12:b2:8d:ea:3f:cc:f9:2a:aa:03:52: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:A6:E0:68:4E:47:85:82:56:12:15:3F:71:C3:BF:7F:0C:E2:BE X509v3 Authority Key Identifier: keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:20:4e:0a:93:55:f7:be:66:a2:b6:6e:c1:ad:0a:64:4f:79: c4:21:05:c3:5f:2f:a3:bb:bb:36:20:55:f3:ca:2e:7f:a9:a3: 50:58:22:39:aa:ba:24:d3:46:9d:b1:94:e0:a7:44:2e:2b:75: b6:90:65:78:43:c2:57:91:6c:02:0b:27:ce:da:14:ca:d7:d9: 6f:55:d0:e2:e9:75:1f:55:9b:df:7b:22:06:36:64:32:e5:44: 73:ee:67:a4:e8:ce:b5:0d:96:fb:df:ec:4f:f3:49:ce:4f:00: 57:f0:4e:ff:10:6c:95:bf:ec:05:e2:c6:d2:b8:cd:68:47:ce: 04:0c:75:54:50:97:4f:8f:ab:74:f5:d4:e3:21:8b:d3:07:5f: 0f:fe:5f:c9:cc:d8:ed:97:fb:ea:00:d2:08:43:c8:92:b7:d8: ca:29:dd:71:f7:00:5c:93:20:b1:e6:97:b9:82:bd:b6:1e:bf: 5d:02:1a:8f:dd:fb:75:40:23:90:67:eb:66:f7:ff:67:81:3b: 76:bd:eb:9b:80:64:2a:4b:2d:a2:d2:02:eb:f9:1d:38:ad:54: 2d:80:25:45:b1:9f:11:c4:ec:4e:67:58:ef:eb:5d:e7:23:c6: cb:6a:2f:8b:5e:3d:2f:79:9f:de:88:c2:9d:ab:0c:3d:c7:d3: eb:09:4a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMHJv8nEIHuvo6SrKNWPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzYzM2ExNGNhYzdjN2EwOTIyZmZkOTgwZGU1ZjI3OGEz YmUyNjcwHhcNMjUxMjE4MDIwMTAyWhcNMjUxMjE5MDIwMTAyWjAzMTEwLwYDVQQD EygxZmRmYTZlMDY4NGU0Nzg1ODI1NjEyMTUzZjcxYzNiZjdmMGNlMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hRrOqe2LvtfAxt05pkj9DlTcVHH YOc8aEj0lcXP+58ST76EJAr1mB9R6V/T7O/vZMD/AwJ7Lwy4Dpwo9MGwCOmXCCuB Bh7FReNmIznq2b/p90b0N9XePpCyKnUOAE7kjc0hjxYTZ+uMhs4LZX4EU+PKSSCj 1vmFAISxiVjvvVM49nFEsxBS7scVSjcpZ6IWJ6BZuCt3dnJ4XtG5s+oV+PQ+UoS1 KTjAxg/X0yt3FHFS/LNzviUhXvCH6p19VJTMy93GE08S43WjoAdD18vL0jDV4d2G S0Y1M18le/RIeUtifcihVQdB/3bEAaqTWjJ09c1RErKN6j/M+SqqA1KYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/fpuBoTkeFglYSFT9xw79/DOK+MB8GA1UdIwQY MBaAFNrGM6FMrHx6CSL/2YDeXyeKO+JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt MjQ1MTVhMTRjNDU2LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2 LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiBOCpNV 975morZuwa0KZE95xCEFw18vo7u7NiBV88ouf6mjUFgiOaq6JNNGnbGU4KdELit1 tpBleEPCV5FsAgsnztoUytfZb1XQ4ul1H1Wb33siBjZkMuVEc+5npOjOtQ2W+9/s T/NJzk8AV/BO/xBslb/sBeLG0rjNaEfOBAx1VFCXT4+rdPXU4yGL0wdfD/5fyczY 7Zf76gDSCEPIkrfYyindcfcAXJMgseaXuYK9th6/XQIaj937dUAjkGfrZvf/Z4E7 dr3rm4BkKkstotIC6/kdOK1ULYAlRbGfEcTsTmdY7+td5yPGy2ovi149L3mf3ojC nasMPcfT6wlKzw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:15:08 2025 by rpki-client