This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json) Hash identifier: i0Pv0V/PqG95oLpk5XoVio+fIpKDTOZxDZV/H7vwwOk= Subject key identifier: 3E:EE:5F:B1:DA:9C:B6:B7:51:F6:09:FF:40:03:73:A9:7A:BE:C5:9B Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Certificate serial: 019B3C7EC70C38BC2616B610C9AEAD9A5D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft Manifest number: 161F Signing time: Sat 20 Dec 2025 16:01:39 +0000 Manifest this update: Sat 20 Dec 2025 16:01:39 +0000 Manifest next update: Sun 21 Dec 2025 16:01:39 +0000 Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: hWRLmbOEDWPOqyDBaAWuasQa5lHmR1zs48VLHJCF6OA=) 2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=) 3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=) 4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c7:0c:38:bc:26:16:b6:10:c9:ae:ad:9a:5d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Validity Not Before: Dec 20 16:01:39 2025 GMT Not After : Dec 21 16:01:39 2025 GMT Subject: CN=3eee5fb1da9cb6b751f609ff400373a97abec59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:cb:24:ea:1f:cb:43:bf:33:0b:5e:69:66: 1e:1c:a1:f6:28:40:7e:54:a5:25:0c:f6:05:74:7c: 1c:b3:68:c3:19:8c:3c:44:0a:f1:f8:aa:8a:8e:3e: 2e:19:8c:8f:fd:ee:33:c6:3e:07:63:e0:74:6e:79: db:54:4f:21:d8:75:07:48:32:49:b4:74:18:b6:de: 79:f1:69:fe:46:a8:85:78:7d:a5:e5:f6:2d:8d:89: d3:b7:6c:3c:76:50:bf:4e:5d:b7:03:f4:9c:11:b4: 28:dc:51:4a:4a:52:f7:f9:11:f0:52:53:89:b9:58: 8e:17:e2:f7:d9:46:a4:43:83:68:96:f2:0b:34:58: 04:f5:47:80:21:bd:b1:da:88:68:3e:05:c7:37:cf: c6:c1:72:7c:f2:6f:ee:b4:7e:00:61:10:68:b4:42: d5:9c:7b:74:8a:4c:98:c4:82:42:cf:99:11:30:5d: 61:ec:1b:dd:8a:f8:6e:fd:4a:19:00:a4:c9:a7:bd: 9e:22:db:15:59:eb:e3:db:f3:f1:6a:0d:29:f2:9d: dd:e2:5e:a1:0e:8b:ac:fb:d4:53:88:99:00:49:12: b1:a3:4f:34:93:a3:b2:bd:e5:a7:4c:bc:62:74:97: 8f:1a:b5:78:a5:f6:49:26:d3:3d:34:46:26:c6:32: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:5F:B1:DA:9C:B6:B7:51:F6:09:FF:40:03:73:A9:7A:BE:C5:9B X509v3 Authority Key Identifier: keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3f:a4:2e:d9:62:5d:52:34:68:0b:ae:9a:e1:dc:97:80:6b: bf:6e:d0:d0:09:04:da:38:00:98:21:93:a8:23:80:35:70:30: 13:58:bf:08:b9:0a:98:8a:21:be:f3:b0:ba:48:e5:da:de:03: d7:5b:47:1b:90:0f:4f:14:88:75:c9:ce:04:11:be:a0:bc:3e: 72:3a:ec:74:c4:29:e0:99:b3:b8:69:88:07:be:c5:59:81:69: cf:85:c5:3b:f8:54:5f:0a:38:e9:b8:ad:a0:95:02:d4:b8:56: 66:d1:6a:d1:cc:79:37:6d:df:12:72:ed:c9:b3:b8:ec:50:f0: ca:3a:74:fa:eb:c7:cc:7b:d4:a4:ef:31:7f:3e:0a:3f:86:37: df:fa:f3:c1:65:1f:52:bc:10:f2:72:3b:69:43:58:7d:25:6f: 58:0e:74:f0:27:45:eb:4f:05:fa:b9:72:5d:fe:a7:83:7a:9d: 16:d1:45:bc:a8:e7:9a:1f:d1:c2:ad:88:2c:88:52:7c:1e:8b: 99:33:a6:32:ba:b8:f9:3e:a0:e3:51:49:75:ef:27:3c:6e:87: 75:d5:e7:03:96:ce:1e:47:d4:77:e4:65:d7:d5:fd:fc:65:db: 6b:dd:c0:75:e3:85:d9:96:ea:88:df:5c:38:0e:de:c0:9f:d7: a4:a6:8b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fscMOLwmFrYQya6tml03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll YmVmMTMwHhcNMjUxMjIwMTYwMTM5WhcNMjUxMjIxMTYwMTM5WjAzMTEwLwYDVQQD EygzZWVlNWZiMWRhOWNiNmI3NTFmNjA5ZmY0MDAzNzNhOTdhYmVjNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod/LJOofy0O/MwteaWYeHKH2KEB+ VKUlDPYFdHwcs2jDGYw8RArx+KqKjj4uGYyP/e4zxj4HY+B0bnnbVE8h2HUHSDJJ tHQYtt558Wn+RqiFeH2l5fYtjYnTt2w8dlC/Tl23A/ScEbQo3FFKSlL3+RHwUlOJ uViOF+L32UakQ4NolvILNFgE9UeAIb2x2ohoPgXHN8/GwXJ88m/utH4AYRBotELV nHt0ikyYxIJCz5kRMF1h7Bvdivhu/UoZAKTJp72eItsVWevj2/Pxag0p8p3d4l6h Dous+9RTiJkASRKxo080k6OyveWnTLxidJePGrV4pfZJJtM9NEYmxjLLCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7uX7HanLa3UfYJ/0ADc6l6vsWbMB8GA1UdIwQY MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut ZGUyZGUxNWY5MGVkLzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjT+kLtli XVI0aAuumuHcl4Brv27Q0AkE2jgAmCGTqCOANXAwE1i/CLkKmIohvvOwukjl2t4D 11tHG5APTxSIdcnOBBG+oLw+cjrsdMQp4JmzuGmIB77FWYFpz4XFO/hUXwo46bit oJUC1LhWZtFq0cx5N23fEnLtybO47FDwyjp0+uvHzHvUpO8xfz4KP4Y33/rzwWUf UrwQ8nI7aUNYfSVvWA508CdF608F+rlyXf6ng3qdFtFFvKjnmh/Rwq2ILIhSfB6L mTOmMrq4+T6g41FJde8nPG6HddXnA5bOHkfUd+Rl19X9/GXba93AdeOF2ZbqiN9c OA7ewJ/XpKaL7A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:54 2025 by rpki-client