This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json) Hash identifier: jS5g8hGsUIpz3VwBLpvDpk3WexDIPPxSuUMTYVOxVM4= Subject key identifier: BB:B1:A2:62:07:9A:E0:0D:95:61:6D:28:79:5A:FA:0B:E5:E5:78:F4 Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773 Certificate serial: 019B3EDB02CF6AC913DB5E1121D616F91663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft Manifest number: 0824 Signing time: Sun 21 Dec 2025 03:01:39 +0000 Manifest this update: Sun 21 Dec 2025 03:01:39 +0000 Manifest next update: Mon 22 Dec 2025 03:01:39 +0000 Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: KOwlsNysUVkyvN9n/d8BL9kgf2nKfDLWi4KWraSKT38=) 2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:02:cf:6a:c9:13:db:5e:11:21:d6:16:f9:16:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773 Validity Not Before: Dec 21 03:01:39 2025 GMT Not After : Dec 22 03:01:39 2025 GMT Subject: CN=bbb1a262079ae00d95616d28795afa0be5e578f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:83:fc:4e:75:20:ba:d8:31:fe:6e:8f:75: 0b:12:d6:a1:34:f1:63:3b:66:a6:8e:ca:ab:bf:b6: 79:b2:35:a0:ab:1f:b0:a2:ad:db:d3:c6:bf:81:0a: 49:08:fc:26:d0:63:17:28:78:ed:15:e4:96:7f:db: aa:4a:25:8d:fd:9d:e2:98:a1:b7:15:bd:af:fb:b4: c7:fc:4c:b7:5e:25:33:d3:ba:25:25:70:2f:a9:06: 7c:49:6b:c8:9d:c1:e6:bc:c2:2f:f0:5f:8a:8e:33: 02:91:7d:c6:b2:8c:1c:16:82:b6:27:a1:70:e8:48: cc:78:bc:de:22:4f:23:9d:20:04:a1:d4:13:82:7f: 99:5f:eb:7f:d3:a6:ec:89:16:0c:a8:f9:02:75:2d: 98:90:a3:d0:36:97:78:3d:ac:2d:70:bd:7e:cc:f8: 8c:9a:8a:22:c4:de:2b:50:37:3b:7d:fc:80:7a:52: 0f:68:98:6a:49:08:6c:67:87:e3:67:6e:34:71:67: 49:9b:7a:3f:8a:ea:82:ba:83:6a:37:51:62:44:d5: 06:7a:db:0b:25:02:9b:06:06:fe:ec:12:08:22:37: b0:f6:42:60:fa:12:b4:5f:42:7c:8f:0c:3b:6c:94: bd:f7:33:63:ce:ab:f5:9a:77:15:b5:e3:5d:c8:54: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B1:A2:62:07:9A:E0:0D:95:61:6D:28:79:5A:FA:0B:E5:E5:78:F4 X509v3 Authority Key Identifier: keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:40:46:15:09:97:99:35:5c:d3:f6:2a:3e:f4:62:47:84:57: 4f:ac:e2:51:8d:74:3c:3a:4b:8c:95:ce:5a:c4:f0:5d:56:75: dd:e2:63:a1:4d:1a:51:41:2d:02:41:66:1c:e8:2a:9c:0f:8a: 6c:7d:0d:e3:03:69:40:40:4b:3c:60:17:2e:12:04:73:31:dd: 21:f4:53:57:d1:0e:4a:7d:16:ae:be:05:0f:4a:2f:18:ea:40: cf:7e:01:d1:6e:8a:be:c2:5f:a2:f2:de:a3:5c:8f:25:6e:bc: 9f:13:ee:5d:2c:95:91:cf:bb:b7:18:84:3f:c2:da:5b:11:9e: b5:33:00:f0:bf:79:8e:65:97:41:b8:8a:24:47:33:6c:95:ff: 0b:0d:36:34:6e:b1:27:97:ce:56:98:60:e7:35:1a:8a:2d:df: 6d:ac:41:04:2b:c6:30:bf:ea:e0:57:f3:93:7e:6f:92:de:87: 0f:05:32:04:00:26:26:96:0c:06:0b:d0:3a:11:fa:a6:63:a8: ff:0a:f7:3c:86:3d:cf:46:7c:47:d0:eb:70:cf:0f:4f:43:f6: 3f:cf:71:7a:c2:10:af:e5:25:34:9d:0f:0f:c3:ca:0f:59:9b: e9:81:b9:e3:60:fb:71:de:1c:17:54:e1:73:68:5f:bf:cf:08: c6:89:9e:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2wLPaskT214RIdYW+RZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0 Mzk3NzMwHhcNMjUxMjIxMDMwMTM5WhcNMjUxMjIyMDMwMTM5WjAzMTEwLwYDVQQD EyhiYmIxYTI2MjA3OWFlMDBkOTU2MTZkMjg3OTVhZmEwYmU1ZTU3OGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8yD/E51ILrYMf5uj3ULEtahNPFj O2amjsqrv7Z5sjWgqx+woq3b08a/gQpJCPwm0GMXKHjtFeSWf9uqSiWN/Z3imKG3 Fb2v+7TH/Ey3XiUz07olJXAvqQZ8SWvIncHmvMIv8F+KjjMCkX3GsowcFoK2J6Fw 6EjMeLzeIk8jnSAEodQTgn+ZX+t/06bsiRYMqPkCdS2YkKPQNpd4PawtcL1+zPiM mooixN4rUDc7ffyAelIPaJhqSQhsZ4fjZ240cWdJm3o/iuqCuoNqN1FiRNUGetsL JQKbBgb+7BIIIjew9kJg+hK0X0J8jww7bJS99zNjzqv1mncVteNdyFQx+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuxomIHmuANlWFtKHla+gvl5Xj0MB8GA1UdIwQY MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct OGI4NWIyOGZiYjc5LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5 LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEBGFQmX mTVc0/YqPvRiR4RXT6ziUY10PDpLjJXOWsTwXVZ13eJjoU0aUUEtAkFmHOgqnA+K bH0N4wNpQEBLPGAXLhIEczHdIfRTV9EOSn0Wrr4FD0ovGOpAz34B0W6KvsJfovLe o1yPJW68nxPuXSyVkc+7txiEP8LaWxGetTMA8L95jmWXQbiKJEczbJX/Cw02NG6x J5fOVphg5zUaii3fbaxBBCvGML/q4Ffzk35vkt6HDwUyBAAmJpYMBgvQOhH6pmOo /wr3PIY9z0Z8R9DrcM8PT0P2P89xesIQr+UlNJ0PD8PKD1mb6YG542D7cd4cF1Th c2hfv88Ixometg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:20 2025 by rpki-client