This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json) Hash identifier: sGccldqzkIe4ZACoJspSCs6/ptOyQVy9A7YXs44HfKg= Subject key identifier: 6D:3A:07:1D:F4:34:A1:1A:C6:1A:6E:4B:30:25:3B:6A:0A:EE:81:26 Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019B3A5875C92DE5F2D58A9DA1F8FEE7B39C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft Manifest number: 03F6 Signing time: Sat 20 Dec 2025 06:00:34 +0000 Manifest this update: Sat 20 Dec 2025 06:00:34 +0000 Manifest next update: Sun 21 Dec 2025 06:00:34 +0000 Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: 8I8ARbHyhLKHICa0soSu3HZOJn19OBnGiWBchTBNLBM=) 2: IKiKBtqV8aj5bEB_07uOzUdtWLk.roa (hash: bQ7k6i8N3tX0GvUq5MJyPUTOMxjiiyFXgrbUPEnTVIc=) 3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=) 4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:75:c9:2d:e5:f2:d5:8a:9d:a1:f8:fe:e7:b3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Dec 20 06:00:34 2025 GMT Not After : Dec 21 06:00:34 2025 GMT Subject: CN=6d3a071df434a11ac61a6e4b30253b6a0aee8126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:cf:a9:c0:c0:9f:ed:c6:41:9b:01:5d:e1: 1a:68:d8:71:17:d3:c5:4c:02:f9:60:16:88:6c:36: 60:62:3a:c3:df:a8:7b:e4:85:6d:c8:3d:76:e2:f9: 08:b1:65:12:9b:02:d2:42:1d:a7:b9:ec:3c:06:49: 63:54:85:e7:a1:3f:ba:0e:d3:28:b1:d1:06:fe:3b: da:b7:b8:2d:ab:df:06:6f:8b:9b:17:ee:c3:61:ea: 51:2c:7b:43:ef:33:f6:93:c7:69:ce:80:45:3c:9a: 64:13:7e:0a:5b:ec:a7:d8:d0:ba:f3:67:4f:b5:ae: b4:37:c5:5f:64:11:25:5c:a1:63:42:8e:2d:e1:7c: 2b:ec:1d:49:1f:5a:5c:cc:ab:03:77:17:bd:04:ce: a6:1c:2f:b5:15:9b:be:3f:31:c4:4f:b9:f5:53:dc: e1:a2:4d:d1:ac:ba:93:ea:a8:7f:6b:9f:1d:4d:f9: 1a:67:73:82:75:39:41:4a:94:38:16:80:ec:98:29: 73:e9:66:e7:03:92:c3:24:68:eb:d2:85:2f:3e:b5: 40:f3:b7:65:c9:27:41:a7:4d:65:16:6c:28:d6:61: ea:7e:13:99:6c:59:df:74:d7:ce:5c:38:87:08:67: 6f:4d:25:c7:8a:17:5f:5d:43:94:22:88:cc:70:3e: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3A:07:1D:F4:34:A1:1A:C6:1A:6E:4B:30:25:3B:6A:0A:EE:81:26 X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:70:1d:66:f3:8c:8b:f5:54:ca:6a:1e:1b:f1:d3:38:d3:cb: be:20:21:64:14:90:96:93:1b:30:85:a4:e9:36:b7:48:f1:bd: 68:29:85:aa:07:9c:85:58:ff:af:9c:74:64:1a:42:16:04:bb: 9a:e0:f5:c1:1e:37:d4:68:ce:60:d9:ff:c0:92:e3:d1:20:15: 6d:4e:f0:9a:e9:b9:74:f8:fd:29:d1:e2:9d:7f:de:27:8e:11: 40:ff:e5:ab:fd:2b:23:2b:6c:5c:5f:74:08:2e:7a:2b:94:7c: c7:2d:28:e4:b7:24:7c:ae:5f:aa:be:75:36:73:a4:de:aa:17: b5:68:70:0b:73:f7:ed:f7:c3:80:77:45:99:af:c6:43:b5:80: 98:5d:30:07:5e:13:36:89:4f:df:55:60:c2:b3:86:5e:82:08: 07:fe:b0:3e:7a:b6:55:52:46:d8:79:80:a3:b4:69:86:c9:8f: a2:8e:8d:46:77:6e:7f:8a:2c:61:51:3a:a7:dd:3b:95:0c:b8: 5f:d6:cf:09:ea:e2:ee:35:11:a9:a4:cc:5d:d7:56:6b:12:6e: 73:da:d0:37:98:b5:09:5e:e2:c9:70:d5:49:2c:73:6c:d8:ea: 72:61:0a:f2:40:20:a4:8e:00:a4:d1:cd:ab:7d:3b:59:31:5e: c7:b4:bb:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHXJLeXy1Yqdofj+57OcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjUxMjIwMDYwMDM0WhcNMjUxMjIxMDYwMDM0WjAzMTEwLwYDVQQD Eyg2ZDNhMDcxZGY0MzRhMTFhYzYxYTZlNGIzMDI1M2I2YTBhZWU4MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR3PqcDAn+3GQZsBXeEaaNhxF9PF TAL5YBaIbDZgYjrD36h75IVtyD124vkIsWUSmwLSQh2nuew8BkljVIXnoT+6DtMo sdEG/jvat7gtq98Gb4ubF+7DYepRLHtD7zP2k8dpzoBFPJpkE34KW+yn2NC682dP ta60N8VfZBElXKFjQo4t4Xwr7B1JH1pczKsDdxe9BM6mHC+1FZu+PzHET7n1U9zh ok3RrLqT6qh/a58dTfkaZ3OCdTlBSpQ4FoDsmClz6WbnA5LDJGjr0oUvPrVA87dl ySdBp01lFmwo1mHqfhOZbFnfdNfOXDiHCGdvTSXHihdfXUOUIojMcD5EnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG06Bx30NKEaxhpuSzAlO2oK7oEmMB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHAdZvOM i/VUymoeG/HTONPLviAhZBSQlpMbMIWk6Ta3SPG9aCmFqgechVj/r5x0ZBpCFgS7 muD1wR431GjOYNn/wJLj0SAVbU7wmum5dPj9KdHinX/eJ44RQP/lq/0rIytsXF90 CC56K5R8xy0o5LckfK5fqr51NnOk3qoXtWhwC3P37ffDgHdFma/GQ7WAmF0wB14T NolP31VgwrOGXoIIB/6wPnq2VVJG2HmAo7RphsmPoo6NRnduf4osYVE6p907lQy4 X9bPCeri7jURqaTMXddWaxJuc9rQN5i1CV7iyXDVSSxzbNjqcmEK8kAgpI4ApNHN q307WTFex7S7gA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:02:21 2025 by rpki-client