This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json) Hash identifier: h58Wsms1VGVCNfcP2Z1p9QuEzsCeJPq70w7BsfL3e8w= Subject key identifier: FD:3B:61:84:87:20:18:1C:73:CB:B9:26:F2:5D:CB:98:89:BE:7B:4C Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Certificate serial: 019B2B1DE23308A006FFA53450B2FF0B5BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft Manifest number: 16B2 Signing time: Wed 17 Dec 2025 07:02:17 +0000 Manifest this update: Wed 17 Dec 2025 07:02:17 +0000 Manifest next update: Thu 18 Dec 2025 07:02:17 +0000 Files and hashes: 1: 9dm3RFT9BYoMAAVpyE60LHFzSlc.roa (hash: uwrhQ0q4VpiHZaTRgjsMBaRGiUAzHgpiv2VyGMcmfoA=) 2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: YIlAcMHgbZGj3dkdi4XYZ3r4Lov3vVBpnwonHOt6TLw=) 3: ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa (hash: ephpJ4ipHMwrJD7Bz3rKfNSaDOgLcj3aX7bFbiCir/4=) 4: wUsbt-HTaTgAWsY_K2ZwhZempLg.roa (hash: OXuJmL2+egILFuJsJVzo1F0QRoATbyDTCvgbpKqhXMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:e2:33:08:a0:06:ff:a5:34:50:b2:ff:0b:5b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Validity Not Before: Dec 17 07:02:17 2025 GMT Not After : Dec 18 07:02:17 2025 GMT Subject: CN=fd3b61848720181c73cbb926f25dcb9889be7b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:72:32:74:08:f0:ba:49:85:ee:9f:b9:f5: 84:bf:54:b6:fd:45:db:2c:92:59:11:e0:42:0e:ed: df:91:60:b8:49:d4:31:e7:d9:00:af:43:39:7f:ee: e8:41:49:f7:3d:48:33:b1:6f:54:1a:3d:62:bb:8b: 0c:ae:44:d9:0f:2a:7c:5d:da:f5:32:67:bc:31:9c: 55:d6:d6:bf:8d:d3:d2:f0:df:9b:9f:a7:79:a4:ba: c2:e4:48:bc:79:7d:43:05:91:43:98:54:80:37:5d: fa:9a:79:cd:8c:b2:b1:52:c4:38:b9:f6:c2:22:f5: bc:03:14:b3:2d:f7:32:7d:4b:61:8b:93:e3:e2:a7: 19:ee:6e:ef:31:3d:32:2a:d2:4f:55:56:4f:c7:0e: 19:54:29:32:91:d5:49:df:b4:af:a8:5c:c6:43:49: 39:81:25:16:63:f0:12:bb:e2:34:ae:87:ce:db:c8: f2:a8:da:89:42:a7:7c:1a:19:c8:20:61:68:9e:8d: 06:b3:d6:eb:5c:7d:2b:3b:81:f0:bc:2b:6d:60:73: 11:b2:79:80:ef:1f:54:47:bb:bc:26:c5:af:dd:83: 81:12:a4:53:6e:61:b8:4e:b1:47:1f:0c:de:ac:3d: 70:f7:ea:a8:b3:4c:2f:e3:b7:a6:37:19:8d:53:b7: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3B:61:84:87:20:18:1C:73:CB:B9:26:F2:5D:CB:98:89:BE:7B:4C X509v3 Authority Key Identifier: keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e3:5c:0c:7d:12:8b:f9:13:eb:5a:bd:4a:ee:1e:e2:91:33: c4:df:cc:ba:24:60:af:eb:64:cc:32:05:af:b9:2a:1e:87:86: 09:e5:1c:cb:2a:d0:a8:3d:7b:76:9b:c6:5c:95:8c:37:d0:f5: 16:d8:23:0e:d4:52:6c:90:8d:26:2e:fb:73:ed:58:69:db:ac: 4f:90:5e:c3:6d:b1:d5:8a:8f:fe:87:ef:99:ef:e2:9e:28:6f: f5:69:68:b1:1c:8e:b9:ea:c0:46:23:5a:49:88:85:9d:bd:ac: 40:80:82:ce:d0:3d:6a:0e:14:a0:a2:a5:64:40:70:f8:6d:6a: b4:f2:01:73:bb:20:d6:53:36:ec:e0:be:8e:07:f5:4e:8d:e4: ab:52:d3:9c:ea:6f:35:3f:b4:ad:ea:f7:57:75:44:6e:3e:13: 40:8f:3e:ad:08:89:6e:eb:bb:38:42:ed:a6:a3:d4:61:26:f6: dc:a3:3f:0e:e4:66:12:27:68:c2:d1:c5:c8:90:c9:df:e7:c0: be:1f:ea:39:54:a9:25:3b:09:3c:96:32:e1:a0:7d:cc:35:fc: f5:7c:80:ac:04:2c:9a:89:83:39:b9:b3:d7:5f:b4:48:58:3c: a4:28:03:bf:1a:d6:2e:ff:aa:5d:48:4f:df:64:60:86:82:52: e5:62:cf:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHeIzCKAG/6U0ULL/C1vwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3 MDg0ZjkwHhcNMjUxMjE3MDcwMjE3WhcNMjUxMjE4MDcwMjE3WjAzMTEwLwYDVQQD EyhmZDNiNjE4NDg3MjAxODFjNzNjYmI5MjZmMjVkY2I5ODg5YmU3YjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNlyMnQI8LpJhe6fufWEv1S2/UXb LJJZEeBCDu3fkWC4SdQx59kAr0M5f+7oQUn3PUgzsW9UGj1iu4sMrkTZDyp8Xdr1 Mme8MZxV1ta/jdPS8N+bn6d5pLrC5Ei8eX1DBZFDmFSAN136mnnNjLKxUsQ4ufbC IvW8AxSzLfcyfUthi5Pj4qcZ7m7vMT0yKtJPVVZPxw4ZVCkykdVJ37SvqFzGQ0k5 gSUWY/ASu+I0rofO28jyqNqJQqd8GhnIIGFono0Gs9brXH0rO4HwvCttYHMRsnmA 7x9UR7u8JsWv3YOBEqRTbmG4TrFHHwzerD1w9+qos0wv47emNxmNU7dFiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP07YYSHIBgcc8u5JvJdy5iJvntMMB8GA1UdIwQY MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt ODhmN2I5MWI2ZTMyLzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuNcDH0S i/kT61q9Su4e4pEzxN/MuiRgr+tkzDIFr7kqHoeGCeUcyyrQqD17dpvGXJWMN9D1 FtgjDtRSbJCNJi77c+1YadusT5Bew22x1YqP/ofvme/inihv9WlosRyOuerARiNa SYiFnb2sQICCztA9ag4UoKKlZEBw+G1qtPIBc7sg1lM27OC+jgf1To3kq1LTnOpv NT+0rer3V3VEbj4TQI8+rQiJbuu7OELtpqPUYSb23KM/DuRmEidowtHFyJDJ3+fA vh/qOVSpJTsJPJYy4aB9zDX89XyArAQsmomDObmz11+0SFg8pCgDvxrWLv+qXUhP 32RghoJS5WLPXw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:32 2025 by rpki-client