This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json) Hash identifier: 6kThdlO42uQrYOz2Qo/aI6+PbIyM9NkXBhYkkAL6Rfc= Subject key identifier: AC:78:06:15:61:99:84:B3:23:C1:D0:20:0C:91:E0:BB:E6:4F:A1:47 Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63 Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563 Certificate serial: 019B3CB555E183D714584E6FB969A73FB82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 17:01:15 +0000 Manifest this update: Sat 20 Dec 2025 17:01:15 +0000 Manifest next update: Sun 21 Dec 2025 17:01:15 +0000 Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: TQsaE4J0+2pcGQOqIKdqXN/L1vt84vbtHF9wQLT04Fk=) 2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:55:e1:83:d7:14:58:4e:6f:b9:69:a7:3f:b8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563 Validity Not Before: Dec 20 17:01:15 2025 GMT Not After : Dec 21 17:01:15 2025 GMT Subject: CN=ac780615619984b323c1d0200c91e0bbe64fa147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:14:cf:0f:e1:f2:90:41:f3:23:a1:09:20: ca:87:16:a7:e4:4d:86:2f:6f:ec:0f:d5:ec:3b:2c: 6e:66:11:b2:60:4b:75:db:9f:18:c5:37:48:cc:34: a0:b8:9b:5b:eb:33:bb:cc:37:eb:5b:2c:70:41:f7: 59:2e:6d:aa:4a:06:4b:ac:2d:d9:c0:1e:6d:95:74: 3e:c0:14:65:39:b5:46:2f:4d:25:39:47:f6:83:87: 6e:a4:d6:8f:18:ea:c3:55:44:bd:0d:23:2a:4e:52: 05:83:8d:f8:aa:8e:17:9c:36:3d:95:e4:35:87:29: a7:25:c7:24:dd:eb:d3:b3:60:c5:7f:4f:2a:4f:64: 1a:da:66:b6:53:ca:96:a2:27:0d:ca:c0:23:53:56: 53:b0:9d:ca:0e:e6:d4:6e:14:74:e8:24:21:1d:17: 28:84:2c:5f:a7:0d:47:4b:e3:08:11:22:69:f8:7d: 55:bf:e6:28:7b:c9:9b:71:00:8c:40:6d:48:bb:f1: 0b:8a:8f:7e:b5:de:84:bc:4d:08:ae:c0:dc:e8:61: dd:8d:25:d2:d0:ea:4c:e0:6c:af:82:f9:00:b5:7f: 06:7b:5b:95:97:3f:61:84:d1:b2:4e:94:69:24:f8: cf:3f:fb:f4:79:05:d2:9c:89:1a:49:c9:3e:5c:1e: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:78:06:15:61:99:84:B3:23:C1:D0:20:0C:91:E0:BB:E6:4F:A1:47 X509v3 Authority Key Identifier: keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:23:ef:b2:69:31:a3:03:be:a5:67:52:07:b9:79:b7:a5:c7: 1a:fc:db:a4:69:d0:f5:f5:a8:91:cc:f4:8b:42:8b:b6:14:35: b5:67:c5:e2:38:c1:b9:7d:2f:98:02:7f:aa:e0:08:ce:be:e1: 47:9f:4b:53:01:c1:d5:24:fc:48:bc:34:d6:8a:5a:04:8b:c7: 5b:7c:0c:ac:f5:45:a9:9c:96:d1:03:cc:6e:88:8a:93:0d:44: ae:1d:d0:fb:56:ff:70:3f:74:d4:7f:0a:b2:24:28:74:53:d5: a2:16:5f:1a:30:36:f3:20:7a:43:ee:cb:b5:ef:b7:eb:71:f5: 0e:a9:cf:7f:8b:34:df:bc:24:bd:49:08:c9:87:6a:35:85:29: f0:f7:42:15:f5:88:c8:c7:23:1e:a0:77:07:08:67:90:c8:95: 96:c3:26:d2:e7:2e:e8:70:3b:d3:b8:74:0f:ae:1a:44:8f:38: 2b:9d:d7:d7:69:35:13:b3:aa:30:31:3a:2a:a4:87:57:a4:75: b1:f1:5c:66:0a:72:3b:25:f5:07:89:09:6a:62:2a:96:2f:2a: 6a:d6:67:4a:3e:8a:78:91:de:7e:3c:75:2e:09:03:82:22:44: 01:19:3f:5d:92:f8:f5:ce:c5:52:06:c5:53:a9:ce:d2:64:dc: de:d7:ac:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVXhg9cUWE5vuWmnP7gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWVhOTU4N2U1ZWE0ZTk2M2FkN2FlN2YxMjU3NjFjMGUy OTI1NjMwHhcNMjUxMjIwMTcwMTE1WhcNMjUxMjIxMTcwMTE1WjAzMTEwLwYDVQQD EyhhYzc4MDYxNTYxOTk4NGIzMjNjMWQwMjAwYzkxZTBiYmU2NGZhMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/IUzw/h8pBB8yOhCSDKhxan5E2G L2/sD9XsOyxuZhGyYEt1258YxTdIzDSguJtb6zO7zDfrWyxwQfdZLm2qSgZLrC3Z wB5tlXQ+wBRlObVGL00lOUf2g4dupNaPGOrDVUS9DSMqTlIFg434qo4XnDY9leQ1 hymnJcck3evTs2DFf08qT2Qa2ma2U8qWoicNysAjU1ZTsJ3KDubUbhR06CQhHRco hCxfpw1HS+MIESJp+H1Vv+Yoe8mbcQCMQG1Iu/ELio9+td6EvE0IrsDc6GHdjSXS 0OpM4GyvgvkAtX8Ge1uVlz9hhNGyTpRpJPjPP/v0eQXSnIkaSck+XB7CmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx4BhVhmYSzI8HQIAyR4LvmT6FHMB8GA1UdIwQY MBaAFNmeqVh+XqTpY6165/EldhwOKSVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUt MDdkZjAxNmM0MWI4LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUtMDdkZjAxNmM0MWI4 LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiPvsmkx owO+pWdSB7l5t6XHGvzbpGnQ9fWokcz0i0KLthQ1tWfF4jjBuX0vmAJ/quAIzr7h R59LUwHB1ST8SLw01opaBIvHW3wMrPVFqZyW0QPMboiKkw1Erh3Q+1b/cD901H8K siQodFPVohZfGjA28yB6Q+7Lte+363H1DqnPf4s037wkvUkIyYdqNYUp8PdCFfWI yMcjHqB3BwhnkMiVlsMm0ucu6HA707h0D64aRI84K53X12k1E7OqMDE6KqSHV6R1 sfFcZgpyOyX1B4kJamIqli8qatZnSj6KeJHefjx1LgkDgiJEARk/XZL49c7FUgbF U6nO0mTc3tesBA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:42 2025 by rpki-client