This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json) Hash identifier: eSDTIbXNHcFckFnTESuAE4cW9koF89mobzZEzuIVWwo= Subject key identifier: 5A:B3:AA:23:14:F9:FC:21:43:AE:82:60:A5:90:1C:A0:DC:42:4F:8B Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Certificate serial: 019B50E0B22138F4A4E57D016D21298F8224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft Manifest number: 110C Signing time: Wed 24 Dec 2025 15:01:01 +0000 Manifest this update: Wed 24 Dec 2025 15:01:01 +0000 Manifest next update: Thu 25 Dec 2025 15:01:01 +0000 Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=) 2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: vXSHfAvr6yRnTTsC+JxgQgA7fiezOxs3vrC/WzN2QSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:b2:21:38:f4:a4:e5:7d:01:6d:21:29:8f:82:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Validity Not Before: Dec 24 15:01:01 2025 GMT Not After : Dec 25 15:01:01 2025 GMT Subject: CN=5ab3aa2314f9fc2143ae8260a5901ca0dc424f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:ff:9a:bc:f2:19:4e:b0:3f:e7:96:8a:23: db:4f:e0:17:80:0d:07:78:ce:e2:e3:a2:43:e4:9e: 60:97:14:54:54:ff:a8:e3:cf:dc:09:e1:28:9d:73: 6e:25:34:ff:f2:3d:8c:ee:8e:0e:5a:88:52:4a:21: f7:d3:db:ac:3f:0f:ec:20:c1:96:05:7c:ea:50:3e: da:d3:ce:97:a0:af:12:a1:98:2d:d7:ca:b5:a1:89: e0:55:3f:73:ed:d3:67:5b:b9:35:78:7e:98:d8:de: ff:a1:e6:ee:f7:ca:6a:91:ff:72:74:5a:54:2a:8e: 32:4e:e2:2b:21:4c:c3:00:90:e8:98:ab:7a:88:1b: 25:08:b6:c6:c2:ea:91:00:35:c6:06:e8:bb:e3:0f: 2c:d1:aa:72:cd:c3:f6:b2:07:4e:23:a6:7c:b1:ed: 22:cf:b2:d7:c7:06:1b:35:94:c6:17:ec:3f:af:a2: e1:3e:24:12:fe:52:0f:85:9b:d5:7e:d8:46:3d:92: 9b:71:0f:b1:b6:5f:e4:d5:a1:ce:33:37:74:cd:09: 84:9f:94:21:6b:01:4d:5c:cd:61:d3:cc:04:81:c0: 8d:1b:9d:00:24:de:8b:dc:da:5c:3f:eb:71:69:8c: aa:e2:49:d8:0c:4d:a6:e4:7c:16:59:de:4f:b3:82: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:AA:23:14:F9:FC:21:43:AE:82:60:A5:90:1C:A0:DC:42:4F:8B X509v3 Authority Key Identifier: keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:16:d9:6b:74:37:9e:ba:70:b2:ca:4d:e6:82:9a:57:71:4b: b6:83:a4:2b:1f:4a:64:72:e4:fa:77:4f:b0:ea:c3:53:10:95: e3:3c:4c:43:27:5d:46:b6:bb:9d:5c:61:69:68:0a:9d:57:b3: 33:8b:d5:0d:3a:01:99:df:a3:c0:f3:cb:6f:a9:2d:6d:df:ec: 20:31:3d:33:8b:d2:a0:0f:df:2c:36:a3:36:35:a9:bd:98:3b: 92:1d:b9:a7:69:c9:94:05:d5:b4:c3:08:4b:03:d8:00:56:be: 69:36:b6:58:95:fd:f5:70:75:f7:68:15:39:37:53:89:50:bb: 48:87:b5:4b:b0:d5:79:61:42:a0:34:ea:54:ed:b9:3b:2e:7f: 12:69:8b:fa:fa:b0:41:2e:9a:26:6e:b3:bc:36:a4:46:bd:41: 07:c5:f8:e1:ff:bf:da:29:1a:99:ba:8c:56:8f:48:4d:7e:9f: 77:66:10:e0:1d:b1:b2:87:0e:85:ce:49:34:59:7b:a5:7c:a8: 35:96:eb:7a:57:c8:02:d9:70:57:f3:93:44:fb:aa:e3:64:59: ca:83:f9:9b:7c:d4:01:01:f3:7d:e1:02:e5:79:54:22:f8:7e: 48:91:1c:10:85:af:19:c3:40:93:e4:94:d1:35:25:6f:f8:27: 0c:d5:a2:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4LIhOPSk5X0BbSEpj4IkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw YThlZTkwHhcNMjUxMjI0MTUwMTAxWhcNMjUxMjI1MTUwMTAxWjAzMTEwLwYDVQQD Eyg1YWIzYWEyMzE0ZjlmYzIxNDNhZTgyNjBhNTkwMWNhMGRjNDI0ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhP/mrzyGU6wP+eWiiPbT+AXgA0H eM7i46JD5J5glxRUVP+o48/cCeEonXNuJTT/8j2M7o4OWohSSiH309usPw/sIMGW BXzqUD7a086XoK8SoZgt18q1oYngVT9z7dNnW7k1eH6Y2N7/oebu98pqkf9ydFpU Ko4yTuIrIUzDAJDomKt6iBslCLbGwuqRADXGBui74w8s0apyzcP2sgdOI6Z8se0i z7LXxwYbNZTGF+w/r6LhPiQS/lIPhZvVfthGPZKbcQ+xtl/k1aHOMzd0zQmEn5Qh awFNXM1h08wEgcCNG50AJN6L3NpcP+txaYyq4knYDE2m5HwWWd5Ps4JEUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqzqiMU+fwhQ66CYKWQHKDcQk+LMB8GA1UdIwQY MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0 LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxbZa3Q3 nrpwsspN5oKaV3FLtoOkKx9KZHLk+ndPsOrDUxCV4zxMQyddRra7nVxhaWgKnVez M4vVDToBmd+jwPPLb6ktbd/sIDE9M4vSoA/fLDajNjWpvZg7kh25p2nJlAXVtMMI SwPYAFa+aTa2WJX99XB192gVOTdTiVC7SIe1S7DVeWFCoDTqVO25Oy5/EmmL+vqw QS6aJm6zvDakRr1BB8X44f+/2ikambqMVo9ITX6fd2YQ4B2xsocOhc5JNFl7pXyo NZbrelfIAtlwV/OTRPuq42RZyoP5m3zUAQHzfeEC5XlUIvh+SJEcEIWvGcNAk+SU 0TUlb/gnDNWiOg== -----END CERTIFICATE-----Generated at Wed Dec 24 18:10:01 2025 by rpki-client