This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json) Hash identifier: CL8gXD8gYaLzdc9jRtXCiNj4SZiDfV25skgdolm8iq0= Subject key identifier: 4C:93:D8:C2:7E:9F:79:2A:07:DB:65:0E:98:41:EE:DA:4B:04:EB:8F Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7 Certificate serial: 019B405B19671605F73F66EB4D4DF3929C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft Manifest number: 1127 Signing time: Sun 21 Dec 2025 10:01:10 +0000 Manifest this update: Sun 21 Dec 2025 10:01:10 +0000 Manifest next update: Mon 22 Dec 2025 10:01:10 +0000 Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: +pFtHQSxPtujhf6CVF6B16sW5oFb9rde4H1j1ZlmPbE=) 2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:19:67:16:05:f7:3f:66:eb:4d:4d:f3:92:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7 Validity Not Before: Dec 21 10:01:10 2025 GMT Not After : Dec 22 10:01:10 2025 GMT Subject: CN=4c93d8c27e9f792a07db650e9841eeda4b04eb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:da:28:b0:d0:44:0e:48:fb:de:7b:51:b8: 67:fb:e3:43:c1:35:e1:68:60:e0:a0:1b:c3:d7:b6: 2f:d0:36:dc:2c:60:dc:c0:1c:ab:57:c6:69:89:61: f6:68:0d:9d:5f:5e:7b:d5:18:d3:42:5e:b0:01:28: 58:3a:39:bc:07:b1:8e:98:6b:31:ee:85:f9:c7:fb: 86:99:bc:70:6e:b4:5a:6c:f4:3d:66:97:9e:ab:29: 41:53:b2:9b:c1:7b:8f:9c:04:02:0b:c3:cb:a3:6e: 55:53:50:9b:0e:9c:a8:55:4e:02:7f:8e:46:2f:4b: 9f:77:f6:aa:b7:63:36:af:0e:93:80:eb:e6:27:98: d5:4d:fd:ef:77:6b:0c:a6:bf:d0:1a:34:61:99:21: 58:03:82:21:a6:91:97:a2:c3:51:5d:b4:db:af:49: d5:a5:16:ec:11:a1:77:19:1b:91:fe:ab:58:86:10: 09:2c:95:ce:60:ae:ec:53:e6:90:16:6d:14:97:92: 2a:e0:42:fd:d1:81:f2:c9:67:b2:4b:be:51:b5:f0: e9:5b:a0:98:1f:17:58:d2:df:aa:5f:d0:f5:4f:66: 2f:f8:a7:f2:8a:43:53:90:29:07:35:3e:77:ba:88: fd:09:84:2f:85:d3:c7:55:62:2e:e6:52:7b:7d:e3: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:93:D8:C2:7E:9F:79:2A:07:DB:65:0E:98:41:EE:DA:4B:04:EB:8F X509v3 Authority Key Identifier: keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:14:c1:dd:01:6b:4e:19:c8:9e:da:aa:7c:3b:22:a6:69:80: 3e:c1:09:95:84:1c:f3:b2:4d:7f:bf:5e:7d:95:50:02:89:59: 65:95:9c:74:7f:46:99:9c:a9:ac:74:7e:16:56:13:df:0f:34: 87:14:78:e6:38:b1:28:fe:00:c9:ef:71:66:86:ed:21:4d:8a: 6d:4c:52:ca:76:96:8b:42:ba:db:04:f7:8f:32:04:74:af:a6: 27:d5:dd:92:79:9a:58:df:2c:38:34:3a:cf:b9:f0:ea:f8:77: f3:99:30:0a:04:73:25:55:5d:8b:7b:b2:3e:d6:fd:4a:27:e6: 4e:53:ea:4b:80:f2:fd:fe:e2:67:4a:44:0a:66:72:15:c3:a8: 79:bb:2e:f5:12:d2:00:14:71:1a:e5:16:b2:8d:ea:be:a9:64: 6c:5d:1b:cc:79:66:55:35:34:08:b1:5d:03:0c:c2:5f:0d:3e: d8:dd:ce:be:41:d5:94:85:ef:13:11:2a:40:a4:4b:98:87:2d: a1:c4:26:30:53:7d:de:f7:f5:ba:be:11:f4:12:d7:f6:ae:a5: 0c:6a:01:39:34:00:3a:45:3f:5f:d5:41:19:79:74:39:d7:e3: 72:ac:c3:63:8b:ff:bd:10:80:9b:30:2c:06:a5:96:c3:be:65: f9:9f:6d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxlnFgX3P2brTU3zkpwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWU1YTRjOWYzMDQ5ODY4MGU0ZDdiNTlkZGIwOGY4MmJj NmY0YzcwHhcNMjUxMjIxMTAwMTEwWhcNMjUxMjIyMTAwMTEwWjAzMTEwLwYDVQQD Eyg0YzkzZDhjMjdlOWY3OTJhMDdkYjY1MGU5ODQxZWVkYTRiMDRlYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6LaKLDQRA5I+957Ubhn++NDwTXh aGDgoBvD17Yv0DbcLGDcwByrV8ZpiWH2aA2dX1571RjTQl6wAShYOjm8B7GOmGsx 7oX5x/uGmbxwbrRabPQ9ZpeeqylBU7KbwXuPnAQCC8PLo25VU1CbDpyoVU4Cf45G L0ufd/aqt2M2rw6TgOvmJ5jVTf3vd2sMpr/QGjRhmSFYA4IhppGXosNRXbTbr0nV pRbsEaF3GRuR/qtYhhAJLJXOYK7sU+aQFm0Ul5Iq4EL90YHyyWeyS75RtfDpW6CY HxdY0t+qX9D1T2Yv+KfyikNTkCkHNT53uoj9CYQvhdPHVWIu5lJ7fePIkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyT2MJ+n3kqB9tlDphB7tpLBOuPMB8GA1UdIwQY MBaAFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMt N2RiOWRmYmM0YWU5LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMtN2RiOWRmYmM0YWU5 LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBTB3QFr ThnIntqqfDsipmmAPsEJlYQc87JNf79efZVQAolZZZWcdH9GmZyprHR+FlYT3w80 hxR45jixKP4Aye9xZobtIU2KbUxSynaWi0K62wT3jzIEdK+mJ9XdknmaWN8sODQ6 z7nw6vh385kwCgRzJVVdi3uyPtb9SifmTlPqS4Dy/f7iZ0pECmZyFcOoebsu9RLS ABRxGuUWso3qvqlkbF0bzHlmVTU0CLFdAwzCXw0+2N3OvkHVlIXvExEqQKRLmIct ocQmMFN93vf1ur4R9BLX9q6lDGoBOTQAOkU/X9VBGXl0OdfjcqzDY4v/vRCAmzAs BqWWw75l+Z9ttg== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:49 2025 by rpki-client