This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json) Hash identifier: QHY/8P+g4nPINcV/TJR4olPlm82R1yBgysHPcKZCYfg= Subject key identifier: 15:34:F2:DE:15:F4:C2:83:61:6F:AD:F8:D4:BF:7F:F8:3A:4B:43:0D Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Certificate serial: 019B31FA78126CB5B4F802F6EAB25B54456F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft Manifest number: 10FC Signing time: Thu 18 Dec 2025 15:00:56 +0000 Manifest this update: Thu 18 Dec 2025 15:00:56 +0000 Manifest next update: Fri 19 Dec 2025 15:00:56 +0000 Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=) 2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: KQ1YPxs7xM9K4USbx73AzrwV5Ipp5INUqVCO67PCprs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:78:12:6c:b5:b4:f8:02:f6:ea:b2:5b:54:45:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Validity Not Before: Dec 18 15:00:56 2025 GMT Not After : Dec 19 15:00:56 2025 GMT Subject: CN=1534f2de15f4c283616fadf8d4bf7ff83a4b430d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:c5:5d:be:28:b2:2b:6e:a0:a3:74:8d:a7: 78:fe:ae:04:8e:89:8c:0a:91:85:84:4e:c9:ef:3d: 6d:a7:15:6e:84:17:2f:9f:80:87:a3:69:c3:47:79: 11:34:3c:9c:57:95:78:68:25:c1:84:5a:36:c3:81: 80:7f:0b:cf:22:72:27:3b:a0:16:d7:ee:64:ec:fe: f1:c6:4d:3d:12:20:2b:8e:f7:37:f9:71:02:27:d8: 00:59:27:c5:66:e5:3f:35:3b:df:78:20:43:64:02: 01:1b:cf:25:df:9e:fb:40:08:a7:2d:11:5d:52:20: de:2b:22:fb:d9:87:97:ee:58:7b:16:8f:c9:b2:ab: 01:20:22:f9:12:17:58:03:dd:03:86:2f:61:12:dc: 2d:a4:1a:6a:d1:94:2c:e2:ec:7e:33:bb:88:29:fb: 70:53:82:e5:7a:f4:d4:ac:e0:f9:9b:d0:e3:7e:d9: 5f:b2:90:e3:82:43:52:8d:9c:ba:c9:4f:1a:16:9c: 4a:62:f7:c9:6c:55:21:31:72:62:b8:ba:c9:26:83: b0:7d:45:f7:c9:24:b0:3f:db:58:d3:6c:0f:fe:4c: 43:d5:78:a1:17:c6:f4:ea:91:eb:86:4c:3f:21:08: b7:17:98:81:a6:ff:49:8d:28:63:03:75:b0:de:8f: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:34:F2:DE:15:F4:C2:83:61:6F:AD:F8:D4:BF:7F:F8:3A:4B:43:0D X509v3 Authority Key Identifier: keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5d:32:62:cc:ef:fb:3a:01:7e:cd:b5:a9:66:e2:9a:7b:f8: c3:c0:86:23:22:15:77:1a:fa:cc:d5:ca:a4:68:1b:66:98:85: 9e:71:42:67:c5:92:b1:4e:24:7b:d4:0f:a6:01:de:99:b1:d5: 53:32:f8:a9:82:29:d3:2d:e1:03:ee:8c:0b:ff:29:0b:f9:f6: cd:8f:0a:6b:57:31:59:94:dc:6f:dd:3b:32:bd:a5:37:8c:90: 70:02:0d:13:e9:51:c0:5f:8e:67:3f:5a:5d:12:ff:8a:ee:cd: bc:bf:d9:f5:70:05:5e:51:66:73:af:f9:03:1b:2d:ea:73:5d: 3b:a7:fe:5f:8b:ef:43:5e:5d:7c:22:ec:fb:65:ba:f1:8f:d9: 32:46:49:25:f3:4f:39:71:be:cd:df:08:02:a4:82:6f:6f:27: 71:b5:84:19:e1:43:be:7f:9c:57:e3:45:38:c0:74:84:83:9f: 14:6a:2a:2e:fd:eb:b0:38:fc:c1:21:d0:bd:dc:86:3a:80:9f: d2:3e:21:35:ea:d3:ad:89:45:54:11:30:b4:97:c1:d9:5d:91: 81:dd:18:33:fd:fc:86:5e:e1:cb:0f:57:15:2d:03:00:d4:8e: 8d:a5:fe:2d:4f:1a:e9:34:41:57:05:ab:03:55:4d:37:7c:6f: e3:ef:f0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+ngSbLW0+AL26rJbVEVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw YThlZTkwHhcNMjUxMjE4MTUwMDU2WhcNMjUxMjE5MTUwMDU2WjAzMTEwLwYDVQQD EygxNTM0ZjJkZTE1ZjRjMjgzNjE2ZmFkZjhkNGJmN2ZmODNhNGI0MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDDFXb4osituoKN0jad4/q4EjomM CpGFhE7J7z1tpxVuhBcvn4CHo2nDR3kRNDycV5V4aCXBhFo2w4GAfwvPInInO6AW 1+5k7P7xxk09EiArjvc3+XECJ9gAWSfFZuU/NTvfeCBDZAIBG88l3577QAinLRFd UiDeKyL72YeX7lh7Fo/JsqsBICL5EhdYA90Dhi9hEtwtpBpq0ZQs4ux+M7uIKftw U4LlevTUrOD5m9DjftlfspDjgkNSjZy6yU8aFpxKYvfJbFUhMXJiuLrJJoOwfUX3 ySSwP9tY02wP/kxD1XihF8b06pHrhkw/IQi3F5iBpv9JjShjA3Ww3o9g4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBU08t4V9MKDYW+t+NS/f/g6S0MNMB8GA1UdIwQY MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0 LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVV0yYszv +zoBfs21qWbimnv4w8CGIyIVdxr6zNXKpGgbZpiFnnFCZ8WSsU4ke9QPpgHembHV UzL4qYIp0y3hA+6MC/8pC/n2zY8Ka1cxWZTcb907Mr2lN4yQcAINE+lRwF+OZz9a XRL/iu7NvL/Z9XAFXlFmc6/5Axst6nNdO6f+X4vvQ15dfCLs+2W68Y/ZMkZJJfNP OXG+zd8IAqSCb28ncbWEGeFDvn+cV+NFOMB0hIOfFGoqLv3rsDj8wSHQvdyGOoCf 0j4hNerTrYlFVBEwtJfB2V2Rgd0YM/38hl7hyw9XFS0DANSOjaX+LU8a6TRBVwWr A1VNN3xv4+/wxA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:13:02 2025 by rpki-client