This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json) Hash identifier: vCNSZR6y48/Zp/1xCAvPx6yuGDlUpj7sQu2Kjabzui4= Subject key identifier: BB:12:F6:91:E6:FB:8C:99:C5:75:2E:4D:3F:18:A4:7D:48:A8:6A:3D Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c Certificate serial: 019B6A69BC3FB618C698140FF9FC317D8BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft Manifest number: 0EE6 Signing time: Mon 29 Dec 2025 14:01:12 +0000 Manifest this update: Mon 29 Dec 2025 14:01:12 +0000 Manifest next update: Tue 30 Dec 2025 14:01:12 +0000 Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: CBeihvyYOJiD+BcCQaDqmIXyq4tvo9gvzZWDZslJJLY=) 2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:bc:3f:b6:18:c6:98:14:0f:f9:fc:31:7d:8b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c Validity Not Before: Dec 29 14:01:12 2025 GMT Not After : Dec 30 14:01:12 2025 GMT Subject: CN=bb12f691e6fb8c99c5752e4d3f18a47d48a86a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:ce:b2:40:c4:ab:4e:59:2d:83:c8:01:b0: d2:a7:7e:f0:a5:2a:85:79:89:91:62:4b:77:34:79: 3b:ce:61:a9:98:0a:07:eb:9d:16:f5:e4:8a:7b:95: 42:33:cb:42:c0:3e:22:8e:6e:72:14:a0:3a:1c:89: 31:89:bf:f7:88:33:c2:fd:93:03:7a:fb:93:ee:b9: 5a:5b:ba:c8:81:39:bf:4a:62:0d:2c:ed:3f:b3:57: 5d:49:a5:3e:52:eb:f0:5d:92:b5:eb:0b:4c:aa:84: 92:b7:3d:d3:2f:5f:92:9c:7c:6b:1b:3c:9d:ad:28: 1d:a7:eb:37:43:65:e4:b0:24:6b:3f:08:49:ed:28: bc:0d:95:84:03:ac:7b:61:e2:3e:96:a9:fe:09:a6: c9:8e:20:ca:02:c1:0d:bb:45:1d:04:51:48:0a:a7: cc:20:a5:98:6f:c6:d7:3b:82:1e:d1:ce:1d:81:bb: 78:23:38:9a:c3:61:6c:dd:88:39:d1:b9:72:12:0e: db:74:ba:92:86:9c:c0:5c:41:00:55:05:0c:ed:24: fc:2e:2e:9f:74:08:39:f8:8d:82:e0:c0:0f:e7:b6: b9:77:ca:11:e4:3a:ad:ae:4e:6f:34:17:65:5e:94: b0:ae:6c:39:a1:16:1c:ff:02:55:32:d1:37:79:d4: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:12:F6:91:E6:FB:8C:99:C5:75:2E:4D:3F:18:A4:7D:48:A8:6A:3D X509v3 Authority Key Identifier: keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a9:55:1b:a1:23:af:bc:59:aa:a3:5f:da:c8:17:fa:ed:64: b8:93:f8:0e:59:0d:19:7e:57:1b:95:01:30:66:9d:14:fc:54: 02:25:d9:19:55:98:e3:1c:5c:24:a9:92:26:28:54:d4:d9:4e: 5b:07:04:c9:96:5e:4f:ae:00:3b:4a:3b:49:fc:a9:87:62:71: fe:27:a6:9d:95:ff:33:da:a5:43:8e:18:0f:2e:ff:f0:93:2f: b9:b9:43:f5:ee:01:16:47:9e:ff:34:90:74:b0:b9:7c:bf:64: 02:c7:1d:a4:ee:6a:ad:d6:f2:88:3f:80:8f:19:fd:23:83:5b: 2b:ff:04:0d:9d:7f:28:0e:76:9d:fc:a6:14:ba:25:1c:c6:a3: 41:b9:6b:a1:3a:8d:a4:c9:4f:8c:f8:f6:b5:29:83:45:bb:59: c7:d3:03:34:5e:4c:6d:af:de:44:ee:11:ee:40:13:a9:5c:ed: 5c:3e:a2:55:f2:46:fb:16:5a:77:2c:00:8b:3d:e8:2a:90:0f: 9d:3d:61:07:00:32:bb:5d:86:fc:9d:f1:a2:23:76:c8:4e:eb: 5f:e7:62:ec:0b:a0:fd:08:3e:13:bd:4b:e8:93:4c:d7:a0:70: a3:cd:4b:75:35:01:20:83:2e:ab:04:e7:10:ea:f5:18:1c:3d: 1e:b0:0a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqabw/thjGmBQP+fwxfYuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWM3OTYyNDMzYzJmZTBiZjYyYjhjMzg4MzkyOTk1Zjk0 MmIxNGMwHhcNMjUxMjI5MTQwMTEyWhcNMjUxMjMwMTQwMTEyWjAzMTEwLwYDVQQD EyhiYjEyZjY5MWU2ZmI4Yzk5YzU3NTJlNGQzZjE4YTQ3ZDQ4YTg2YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hrOskDEq05ZLYPIAbDSp37wpSqF eYmRYkt3NHk7zmGpmAoH650W9eSKe5VCM8tCwD4ijm5yFKA6HIkxib/3iDPC/ZMD evuT7rlaW7rIgTm/SmINLO0/s1ddSaU+UuvwXZK16wtMqoSStz3TL1+SnHxrGzyd rSgdp+s3Q2XksCRrPwhJ7Si8DZWEA6x7YeI+lqn+CabJjiDKAsENu0UdBFFICqfM IKWYb8bXO4Ie0c4dgbt4Iziaw2Fs3Yg50blyEg7bdLqShpzAXEEAVQUM7ST8Li6f dAg5+I2C4MAP57a5d8oR5Dqtrk5vNBdlXpSwrmw5oRYc/wJVMtE3edTB0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsS9pHm+4yZxXUuTT8YpH1IqGo9MB8GA1UdIwQY MBaAFNgceWJDPC/gv2K4w4g5KZX5QrFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2Et M2QzNDRjOWMyNmI2LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2EtM2QzNDRjOWMyNmI2 LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKlVG6Ej r7xZqqNf2sgX+u1kuJP4DlkNGX5XG5UBMGadFPxUAiXZGVWY4xxcJKmSJihU1NlO WwcEyZZeT64AO0o7Sfyph2Jx/iemnZX/M9qlQ44YDy7/8JMvublD9e4BFkee/zSQ dLC5fL9kAscdpO5qrdbyiD+Ajxn9I4NbK/8EDZ1/KA52nfymFLolHMajQblroTqN pMlPjPj2tSmDRbtZx9MDNF5Mba/eRO4R7kATqVztXD6iVfJG+xZadywAiz3oKpAP nT1hBwAyu12G/J3xoiN2yE7rX+di7Aug/Qg+E71L6JNM16Bwo81LdTUBIIMuqwTn EOr1GBw9HrAK4A== -----END CERTIFICATE-----Generated at Tue Dec 30 00:21:22 2025 by rpki-client