This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json) Hash identifier: TaoU+J5Ect5dEHbHn5AFyTG/PNHvO9I2m7Po4h46S14= Subject key identifier: FE:F7:35:60:20:A0:31:12:D3:AC:2C:C1:82:49:A1:EC:C5:62:8B:56 Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Certificate serial: 019B35D728F8ED0A51F7A5930DFD18A4F487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft Manifest number: 0B07 Signing time: Fri 19 Dec 2025 09:00:51 +0000 Manifest this update: Fri 19 Dec 2025 09:00:51 +0000 Manifest next update: Sat 20 Dec 2025 09:00:51 +0000 Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: GmV1t8u51BwjusLJsVsvppcL5Fp12W8lkOZLGtHIjRI=) 2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=) 3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=) 4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:28:f8:ed:0a:51:f7:a5:93:0d:fd:18:a4:f4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Validity Not Before: Dec 19 09:00:51 2025 GMT Not After : Dec 20 09:00:51 2025 GMT Subject: CN=fef7356020a03112d3ac2cc18249a1ecc5628b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fd:58:1c:31:17:c7:20:5d:c0:0f:52:60:95: f6:a9:7b:aa:ef:13:c3:38:ff:c5:c2:12:cf:b4:e3: da:d2:3d:6e:0f:9d:d1:61:00:27:2c:d5:bc:d7:22: ef:a9:3c:3e:6c:0c:12:2b:5e:16:08:e7:de:76:8e: 2b:35:e2:f9:b6:8b:a3:bf:79:77:7a:74:41:a8:d4: e8:77:08:eb:95:78:ad:9f:de:6a:6e:30:b5:ec:ea: 4b:06:5d:78:4c:68:69:4e:d3:38:53:15:d2:97:54: 90:d0:40:ac:70:b4:70:10:b1:8d:e1:4e:a3:1f:14: 00:0c:6c:30:8a:db:96:67:de:dd:b0:5b:c5:5a:ca: 11:0f:c6:c3:33:8e:f0:e5:e7:b6:47:98:2b:25:b5: d5:d8:d5:cc:bb:cd:d2:ce:46:8f:42:a4:50:0d:37: 18:ba:0f:4a:8d:1d:c3:4c:15:99:0c:31:c4:fc:1c: 35:5e:bf:54:70:95:6f:2b:07:ad:23:32:bf:98:75: 78:8b:79:64:00:6a:29:1c:b0:d2:ea:96:80:4b:a7: 68:19:9b:85:7e:a9:e5:29:08:e6:24:25:a6:51:05: 9e:4c:e2:04:7c:c9:fb:64:ec:c9:85:7a:0c:fe:9f: 2a:84:2d:c8:66:ce:c8:cd:dd:dd:e8:d2:dd:69:1b: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F7:35:60:20:A0:31:12:D3:AC:2C:C1:82:49:A1:EC:C5:62:8B:56 X509v3 Authority Key Identifier: keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:37:60:c3:55:57:64:3e:74:11:86:30:fa:9e:18:14:74:c7: f6:a4:a5:6d:dd:2d:ff:3e:f5:b8:9f:11:dc:74:f2:47:32:e7: 88:f9:a9:3b:d1:74:8a:c1:9e:00:38:6a:e2:5b:f8:cf:cd:11: 4f:c4:e6:9f:4b:75:88:7e:d6:a1:cf:e4:e8:f8:ef:c2:18:c5: f8:99:5d:43:b6:15:2c:91:0b:28:92:55:f8:ed:16:75:b1:2c: 34:bf:d6:97:34:0e:98:ad:4c:88:ee:b6:96:0c:0d:f7:f5:62: 75:8e:37:6a:c6:54:72:1b:2f:2c:a1:e7:80:f0:b3:49:1b:9e: f9:06:0a:8b:30:49:80:db:8a:4a:5e:e6:36:26:45:07:b7:ff: 19:bf:df:f6:17:4d:3b:5c:58:0a:0d:e6:dc:18:ec:3a:c5:69: 04:0b:26:d8:88:a1:00:e9:f9:98:d2:a2:ac:26:15:f6:cd:5d: 6b:39:84:84:40:78:7a:bd:6a:1d:9f:51:a1:9d:8f:98:86:88: 06:ad:99:97:01:3f:38:af:7c:0f:d5:71:2c:0f:ea:e7:96:19: ed:42:a0:6a:53:74:24:86:f3:88:e7:1f:79:69:51:50:b1:c2: f7:e7:46:56:15:0b:53:f5:0b:fd:28:03:4a:8e:d7:b4:59:c7: 84:da:53:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11yj47QpR96WTDf0YpPSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5 MWJlYjAwHhcNMjUxMjE5MDkwMDUxWhcNMjUxMjIwMDkwMDUxWjAzMTEwLwYDVQQD EyhmZWY3MzU2MDIwYTAzMTEyZDNhYzJjYzE4MjQ5YTFlY2M1NjI4YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P1YHDEXxyBdwA9SYJX2qXuq7xPD OP/FwhLPtOPa0j1uD53RYQAnLNW81yLvqTw+bAwSK14WCOfedo4rNeL5toujv3l3 enRBqNTodwjrlXitn95qbjC17OpLBl14TGhpTtM4UxXSl1SQ0ECscLRwELGN4U6j HxQADGwwituWZ97dsFvFWsoRD8bDM47w5ee2R5grJbXV2NXMu83SzkaPQqRQDTcY ug9KjR3DTBWZDDHE/Bw1Xr9UcJVvKwetIzK/mHV4i3lkAGopHLDS6paAS6doGZuF fqnlKQjmJCWmUQWeTOIEfMn7ZOzJhXoM/p8qhC3IZs7Izd3d6NLdaRvxFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP73NWAgoDES06wswYJJoezFYotWMB8GA1UdIwQY MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITdgw1VX ZD50EYYw+p4YFHTH9qSlbd0t/z71uJ8R3HTyRzLniPmpO9F0isGeADhq4lv4z80R T8Tmn0t1iH7Woc/k6PjvwhjF+JldQ7YVLJELKJJV+O0WdbEsNL/WlzQOmK1MiO62 lgwN9/VidY43asZUchsvLKHngPCzSRue+QYKizBJgNuKSl7mNiZFB7f/Gb/f9hdN O1xYCg3m3BjsOsVpBAsm2IihAOn5mNKirCYV9s1dazmEhEB4er1qHZ9RoZ2PmIaI Bq2ZlwE/OK98D9VxLA/q55YZ7UKgalN0JIbziOcfeWlRULHC9+dGVhULU/UL/SgD So7XtFnHhNpTbw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:56 2025 by rpki-client