This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft File: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json) Hash identifier: fYQd6U9q4QEzCyaFjYU2ymK9qLNqZJm8rOf9TIY5LQI= Subject key identifier: 3B:BF:C2:4E:81:C8:71:91:15:BF:90:D3:28:74:A5:AC:F2:B4:EC:71 Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64 Certificate issuer: /CN=d99becd088794b11daf34c7f54e59f6939fe9864 Certificate serial: 019B52CF13D32D1BC4CB388C20E00CC6C6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft Manifest number: 04B1 Signing time: Thu 25 Dec 2025 00:01:01 +0000 Manifest this update: Thu 25 Dec 2025 00:01:01 +0000 Manifest next update: Fri 26 Dec 2025 00:01:01 +0000 Files and hashes: 1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: p1KsSt7AkkMQi4cjmpRT4uRO2Rx8DLrRFQawxVyncl8=) 2: P6mLuYTWcn0KuLmD43cJ982GF44.roa (hash: lthkyf0qk/Tj3D6L/66lHDSOVo0evf5q6TD/uKiHGiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:13:d3:2d:1b:c4:cb:38:8c:20:e0:0c:c6:c6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864 Validity Not Before: Dec 25 00:01:01 2025 GMT Not After : Dec 26 00:01:01 2025 GMT Subject: CN=3bbfc24e81c8719115bf90d32874a5acf2b4ec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d8:ab:6b:6e:c1:23:14:4d:4c:7b:e5:57:ff: 58:24:78:5b:56:d1:71:c3:df:b9:ff:5e:37:f4:ca: d6:32:ba:b6:d0:61:b8:30:42:51:90:d4:14:3c:ca: 5b:e7:95:d7:fb:de:46:7a:96:d5:d2:d7:05:37:1d: de:48:d9:70:4f:00:67:ed:a7:45:01:fb:9d:65:35: ef:82:05:d8:a0:60:af:a5:5d:97:6d:c1:ac:a4:66: c1:d2:a2:13:16:18:a5:c5:01:0f:dc:5d:7f:8c:f0: a7:bb:e4:19:7a:53:80:dd:4d:7b:41:7a:3b:43:b9: e0:f6:fe:ce:59:05:1e:e7:50:0a:63:a5:e7:02:b7: 77:5a:34:f4:30:5b:24:d1:8d:85:6e:32:8a:0d:fb: 6c:50:e6:d7:b0:e5:01:f3:c9:48:10:1a:1b:f8:9f: 37:35:41:2a:e9:2a:4f:97:4b:00:e2:b9:c8:ab:83: b5:07:24:74:92:f4:9b:79:18:b3:b9:ec:fd:cf:e5: 69:b9:11:63:9a:63:38:24:33:8c:f5:6f:79:1a:61: cd:51:2c:52:b3:b0:03:a1:97:e1:36:c1:e9:6f:40: 45:28:f3:dd:75:5b:b1:64:be:26:d9:a1:38:0e:38: b9:4c:ab:de:8b:c7:09:b1:3b:68:28:43:99:7d:2f: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BF:C2:4E:81:C8:71:91:15:BF:90:D3:28:74:A5:AC:F2:B4:EC:71 X509v3 Authority Key Identifier: keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fc:80:b1:27:4b:4a:03:8b:a6:a5:87:46:50:05:8c:70:bd: c9:5a:29:2c:c3:df:d2:ee:ea:a2:c0:65:9a:0b:f4:c1:22:79: c1:e0:d6:47:83:94:00:e2:7c:35:66:c4:64:07:6d:19:18:f1: 0c:93:6f:60:02:c1:39:cb:d3:2d:da:30:03:e7:bd:b5:be:38: 67:0f:b4:bb:34:36:69:db:2e:0b:34:16:c2:b6:a6:05:fb:ee: 2a:ca:ce:bc:2e:b8:0e:a4:a3:92:29:57:25:37:a2:94:c9:73: 98:72:5c:04:1f:86:aa:9d:45:14:42:cc:75:ea:ff:06:89:85: da:e2:98:26:61:ef:a1:8d:41:7f:08:04:b6:b6:fe:b4:12:28: 93:b5:a3:ac:24:e3:9c:f1:40:90:9c:44:3c:c8:49:71:38:a8: 96:6f:85:14:3e:95:23:54:0b:e4:47:79:00:11:7c:0d:36:89: 00:d8:35:13:33:10:e3:cc:34:75:0e:95:72:e8:2d:a3:33:ce: 14:69:e8:71:fb:f6:0b:a0:c3:d2:74:05:92:c7:60:62:87:20: 3f:ae:16:d0:d1:84:b9:d4:14:bd:54:c9:2f:81:87:e4:c9:c6: 35:eb:06:01:dd:f1:12:b2:24:43:74:81:f2:cf:89:0d:2f:a0: d8:47:5a:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzxPTLRvEyziMIOAMxsasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWJlY2QwODg3OTRiMTFkYWYzNGM3ZjU0ZTU5ZjY5Mzlm ZTk4NjQwHhcNMjUxMjI1MDAwMTAxWhcNMjUxMjI2MDAwMTAxWjAzMTEwLwYDVQQD EygzYmJmYzI0ZTgxYzg3MTkxMTViZjkwZDMyODc0YTVhY2YyYjRlYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltira27BIxRNTHvlV/9YJHhbVtFx w9+5/1439MrWMrq20GG4MEJRkNQUPMpb55XX+95GepbV0tcFNx3eSNlwTwBn7adF AfudZTXvggXYoGCvpV2XbcGspGbB0qITFhilxQEP3F1/jPCnu+QZelOA3U17QXo7 Q7ng9v7OWQUe51AKY6XnArd3WjT0MFsk0Y2FbjKKDftsUObXsOUB88lIEBob+J83 NUEq6SpPl0sA4rnIq4O1ByR0kvSbeRizuez9z+VpuRFjmmM4JDOM9W95GmHNUSxS s7ADoZfhNsHpb0BFKPPddVuxZL4m2aE4Dji5TKvei8cJsTtoKEOZfS9AJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu/wk6ByHGRFb+Q0yh0pazytOxxMB8GA1UdIwQY MBaAFNmb7NCIeUsR2vNMf1Tln2k5/phkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2It MjQyYjU4MTQwZTM3LzEvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2ItMjQyYjU4MTQwZTM3 LzEvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPyAsSdL SgOLpqWHRlAFjHC9yVopLMPf0u7qosBlmgv0wSJ5weDWR4OUAOJ8NWbEZAdtGRjx DJNvYALBOcvTLdowA+e9tb44Zw+0uzQ2adsuCzQWwramBfvuKsrOvC64DqSjkilX JTeilMlzmHJcBB+Gqp1FFELMder/BomF2uKYJmHvoY1BfwgEtrb+tBIok7WjrCTj nPFAkJxEPMhJcTiolm+FFD6VI1QL5Ed5ABF8DTaJANg1EzMQ48w0dQ6VcugtozPO FGnocfv2C6DD0nQFksdgYocgP64W0NGEudQUvVTJL4GH5MnGNesGAd3xErIkQ3SB 8s+JDS+g2Eda/g== -----END CERTIFICATE-----Generated at Thu Dec 25 09:07:01 2025 by rpki-client