This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json) Hash identifier: WZsXd8ze6roa5Z8d5hm615Qp6TBiCd9iqa20EtIAEkE= Subject key identifier: 00:FE:20:CB:44:0B:49:39:15:A8:1F:CD:E6:14:15:56:EA:E3:B5:73 Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf Certificate serial: 019B34202843C9D2F2DC7A0462F34789C931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft Manifest number: 0A64 Signing time: Fri 19 Dec 2025 01:01:21 +0000 Manifest this update: Fri 19 Dec 2025 01:01:21 +0000 Manifest next update: Sat 20 Dec 2025 01:01:21 +0000 Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: yzWk5H5Z2rUvlKSdBwVI77duqZc8cbBYSOcAZIl1/aE=) 2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:28:43:c9:d2:f2:dc:7a:04:62:f3:47:89:c9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf Validity Not Before: Dec 19 01:01:21 2025 GMT Not After : Dec 20 01:01:21 2025 GMT Subject: CN=00fe20cb440b493915a81fcde6141556eae3b573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:e4:ae:65:96:8c:c6:73:58:23:06:22:bd: 82:16:01:f6:2f:0a:5d:9d:8a:88:dc:bd:4d:e8:dc: 47:7f:c4:64:ae:21:b9:1b:71:3b:4c:6d:ce:72:63: c2:3f:0f:41:6a:22:bb:98:08:8a:7e:38:23:a7:b1: a7:d2:49:14:8f:dc:b0:d0:cf:8f:bf:44:33:17:17: d6:7a:e4:5e:f5:60:17:8b:93:c0:b3:9a:aa:a7:9f: 73:7f:c2:f1:07:4c:5e:02:00:1b:b8:c8:ff:7f:be: 1a:91:d7:66:53:72:3f:68:79:77:bc:f8:b8:cf:1b: 28:f3:02:43:1d:b2:20:0c:59:d8:d1:88:75:23:8f: df:83:c7:35:3d:e6:58:00:de:de:8e:24:46:c1:95: 41:a7:b3:d9:99:a7:a0:23:68:a9:f8:5d:0f:9f:19: 8a:38:d8:c9:77:6a:ba:60:4b:8a:25:a2:70:32:dc: 45:0c:ad:bd:8b:8d:02:26:44:34:e0:b7:bc:6c:f7: e4:3a:31:ef:a7:46:72:55:12:e6:f9:f4:ea:6d:b4: d9:89:b2:08:0c:54:84:0b:46:b9:31:96:6c:d6:72: 90:04:bf:6b:05:53:5b:20:d4:ed:15:c2:1e:96:17: 4c:58:86:50:c6:f2:e2:99:7c:d5:8d:02:55:db:29: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:20:CB:44:0B:49:39:15:A8:1F:CD:E6:14:15:56:EA:E3:B5:73 X509v3 Authority Key Identifier: keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:60:ec:c7:f3:1c:45:aa:3b:c6:91:01:89:12:60:87:34:95: b9:20:65:34:67:41:8e:b1:ca:e2:64:e5:2d:40:ab:9f:38:0f: 25:68:91:13:6c:cd:f8:ba:00:29:27:39:12:f1:af:a5:2f:67: b0:c6:9b:c8:63:35:e2:85:3a:e2:fb:76:57:44:c3:d4:29:97: 9d:9e:13:4d:47:70:cf:3c:d8:7a:dc:5f:cc:90:73:8a:2c:af: 9f:f6:18:92:23:e0:35:a1:53:96:a8:85:9e:f8:f0:b4:e2:bc: 56:64:49:3f:93:cf:d3:e8:80:1d:d8:14:f8:f9:62:97:b7:4a: 13:0b:c1:a2:b8:ca:fa:85:42:60:fa:24:07:8a:50:81:e7:ce: 06:13:38:60:15:4d:28:71:8b:c7:40:42:e5:50:06:00:16:e3: e6:f8:ec:3c:dd:eb:42:61:c3:2f:09:52:f8:c2:51:15:1c:67: 99:23:e5:82:c0:8b:97:c5:af:6f:5a:1e:54:26:52:67:ec:47: ee:18:53:6e:86:2f:b9:ba:48:63:3a:cb:04:ab:9f:af:6d:84: a7:4f:c5:65:c5:84:a2:9a:b1:6e:95:d1:3d:ce:52:94:de:ee: 79:96:d8:a5:3b:82:63:ee:9c:fc:a5:69:ba:32:d0:41:c1:36: a3:2a:44:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IChDydLy3HoEYvNHickxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjE1YjU3ZDMzY2IyZjM0YzE3YzBlODEwM2JiMDUxZmY4 MDFlYmYwHhcNMjUxMjE5MDEwMTIxWhcNMjUxMjIwMDEwMTIxWjAzMTEwLwYDVQQD EygwMGZlMjBjYjQ0MGI0OTM5MTVhODFmY2RlNjE0MTU1NmVhZTNiNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG3krmWWjMZzWCMGIr2CFgH2Lwpd nYqI3L1N6NxHf8RkriG5G3E7TG3OcmPCPw9BaiK7mAiKfjgjp7Gn0kkUj9yw0M+P v0QzFxfWeuRe9WAXi5PAs5qqp59zf8LxB0xeAgAbuMj/f74akddmU3I/aHl3vPi4 zxso8wJDHbIgDFnY0Yh1I4/fg8c1PeZYAN7ejiRGwZVBp7PZmaegI2ip+F0PnxmK ONjJd2q6YEuKJaJwMtxFDK29i40CJkQ04Le8bPfkOjHvp0ZyVRLm+fTqbbTZibII DFSEC0a5MZZs1nKQBL9rBVNbINTtFcIelhdMWIZQxvLimXzVjQJV2ynG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD+IMtEC0k5FagfzeYUFVbq47VzMB8GA1UdIwQY MBaAFNghW1fTPLLzTBfA6BA7sFH/gB6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYt NjJkYzQ0N2ZlNDM4LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYtNjJkYzQ0N2ZlNDM4 LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGDsx/Mc Rao7xpEBiRJghzSVuSBlNGdBjrHK4mTlLUCrnzgPJWiRE2zN+LoAKSc5EvGvpS9n sMabyGM14oU64vt2V0TD1CmXnZ4TTUdwzzzYetxfzJBziiyvn/YYkiPgNaFTlqiF nvjwtOK8VmRJP5PP0+iAHdgU+Plil7dKEwvBorjK+oVCYPokB4pQgefOBhM4YBVN KHGLx0BC5VAGABbj5vjsPN3rQmHDLwlS+MJRFRxnmSPlgsCLl8Wvb1oeVCZSZ+xH 7hhTboYvubpIYzrLBKufr22Ep0/FZcWEopqxbpXRPc5SlN7ueZbYpTuCY+6c/KVp ujLQQcE2oypEiQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:25:29 2025 by rpki-client