This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json) Hash identifier: d8XR+21zQF42TI+m7H8cf+wTLMiNWVfNao1SkxAvib0= Subject key identifier: 74:54:43:F9:57:4D:56:1B:68:44:9F:1E:CD:B4:C3:BD:05:34:C3:E2 Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68 Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68 Certificate serial: 019B5D5360DD35F1FF230CECE44B9F4A6500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 01:01:43 +0000 Manifest this update: Sat 27 Dec 2025 01:01:43 +0000 Manifest next update: Sun 28 Dec 2025 01:01:43 +0000 Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: Gm4GGtjgALczwZZt49wDu9xE5x/RMTTdR3T0s5fYE5E=) 2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=) 3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:60:dd:35:f1:ff:23:0c:ec:e4:4b:9f:4a:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68 Validity Not Before: Dec 27 01:01:43 2025 GMT Not After : Dec 28 01:01:43 2025 GMT Subject: CN=745443f9574d561b68449f1ecdb4c3bd0534c3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:74:2a:40:8e:0f:d8:ed:f1:ce:f9:53:6c: 93:ef:d9:26:6d:88:9e:7b:bb:43:60:fa:e2:59:88: 1f:33:4d:6f:b4:53:7d:00:35:94:22:b0:0c:8c:7c: 4a:ee:50:c7:67:b5:b0:5e:4e:3b:50:e1:bb:c4:ef: 91:cc:c0:46:ef:9a:f1:d1:db:6a:91:17:c9:59:65: 9a:fd:22:89:19:a3:8e:0e:00:4c:e3:be:4e:3b:7a: 4c:b0:90:f0:6a:a1:10:01:25:93:22:ba:17:fa:b8: 7a:92:b4:ed:32:9c:58:1a:45:b6:cb:a8:37:9f:af: 22:49:11:79:c0:58:f6:f9:1b:47:b1:b3:68:01:c0: 09:3f:e2:40:75:3c:a6:98:95:3f:a0:5a:56:6c:b0: 1f:81:87:eb:91:d0:e0:b7:c3:55:b4:e9:b3:98:6a: 20:e6:93:d3:72:4b:8b:7d:ec:f7:c9:c5:0b:93:c0: 09:28:d7:8b:33:e1:2c:9e:17:c1:55:4b:de:49:1b: 59:83:0b:8a:6a:22:91:5b:fe:23:b6:cf:f4:b7:73: e9:cf:27:01:fa:1d:33:8c:39:42:db:49:77:f7:64: 93:27:05:42:ad:20:1c:f1:0d:e8:d7:25:a9:65:2c: 0a:cf:90:84:8a:4d:7d:40:5a:e9:8b:d3:1a:7c:7b: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:43:F9:57:4D:56:1B:68:44:9F:1E:CD:B4:C3:BD:05:34:C3:E2 X509v3 Authority Key Identifier: keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e3:e2:1d:11:12:a4:33:f8:2f:6f:e1:6d:d3:db:ab:87:cd: fe:c5:d8:f2:8d:23:47:54:ee:59:79:f0:fc:8d:cf:b8:57:1e: db:ea:12:cf:ce:bb:1a:37:10:1f:b9:c9:1e:61:b1:ef:cf:6a: 92:7a:6d:1a:44:34:8d:f2:cb:a2:03:2b:a4:bd:24:94:e8:7b: 22:8f:6d:00:24:a2:8a:fb:cc:d9:1b:78:d2:f9:de:54:87:e4: bd:48:65:9d:35:28:a6:6b:9f:49:11:6b:56:e6:ef:b1:17:3d: a4:72:e3:74:c3:fa:78:93:bb:d2:a3:7b:0f:cb:af:9d:17:75: de:2c:9e:bd:52:5a:da:3a:5b:29:f3:56:3e:25:14:d9:ee:18: a1:1d:f8:b3:9b:8f:cd:e1:9f:94:d9:00:0f:2e:0d:29:a2:8a: a3:ab:f1:bd:31:5f:49:32:e4:32:7a:5f:9f:8e:ed:2c:3c:f4: 87:25:cf:77:9f:0c:ee:9f:b5:31:a1:6a:2d:2d:7c:eb:40:62: 71:27:05:ef:bc:43:d3:ee:8b:9e:4b:40:7a:73:0a:81:d3:20: 82:76:0e:33:00:67:78:02:f7:b5:d5:d9:2a:6b:6b:7f:e1:44: a3:6e:80:42:2f:bf:8e:ad:7f:a0:26:c0:d5:fc:df:bc:8b:46: 01:da:e2:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU2DdNfH/Iwzs5EufSmUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj YjRmNjgwHhcNMjUxMjI3MDEwMTQzWhcNMjUxMjI4MDEwMTQzWjAzMTEwLwYDVQQD Eyg3NDU0NDNmOTU3NGQ1NjFiNjg0NDlmMWVjZGI0YzNiZDA1MzRjM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvR0KkCOD9jt8c75U2yT79kmbYie e7tDYPriWYgfM01vtFN9ADWUIrAMjHxK7lDHZ7WwXk47UOG7xO+RzMBG75rx0dtq kRfJWWWa/SKJGaOODgBM475OO3pMsJDwaqEQASWTIroX+rh6krTtMpxYGkW2y6g3 n68iSRF5wFj2+RtHsbNoAcAJP+JAdTymmJU/oFpWbLAfgYfrkdDgt8NVtOmzmGog 5pPTckuLfez3ycULk8AJKNeLM+EsnhfBVUveSRtZgwuKaiKRW/4jts/0t3PpzycB +h0zjDlC20l392STJwVCrSAc8Q3o1yWpZSwKz5CEik19QFrpi9MafHsTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRUQ/lXTVYbaESfHs20w70FNMPiMB8GA1UdIwQY MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+PiHRES pDP4L2/hbdPbq4fN/sXY8o0jR1TuWXnw/I3PuFce2+oSz867GjcQH7nJHmGx789q knptGkQ0jfLLogMrpL0klOh7Io9tACSiivvM2Rt40vneVIfkvUhlnTUopmufSRFr VubvsRc9pHLjdMP6eJO70qN7D8uvnRd13iyevVJa2jpbKfNWPiUU2e4YoR34s5uP zeGflNkADy4NKaKKo6vxvTFfSTLkMnpfn47tLDz0hyXPd58M7p+1MaFqLS1860Bi cScF77xD0+6LnktAenMKgdMggnYOMwBneAL3tdXZKmtrf+FEo26AQi+/jq1/oCbA 1fzfvItGAdri6A== -----END CERTIFICATE-----Generated at Sat Dec 27 09:43:05 2025 by rpki-client