This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json) Hash identifier: 9aGgH+5EoHXzBGj42/KAHm1mdzcLEeM9KC1weD35un0= Subject key identifier: B2:BF:8B:14:64:4A:B1:40:75:1C:86:A1:CE:CC:65:9F:4F:C2:6A:3C Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4 Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4 Certificate serial: 019B5D89C255919B2A70A51A865554DAEFAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft Manifest number: 09CD Signing time: Sat 27 Dec 2025 02:01:07 +0000 Manifest this update: Sat 27 Dec 2025 02:01:07 +0000 Manifest next update: Sun 28 Dec 2025 02:01:07 +0000 Files and hashes: 1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=) 2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: jzTP5FYHjuzo4ttRhO1vQ7vpmZ++s2IiVGdhO66jG+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:c2:55:91:9b:2a:70:a5:1a:86:55:54:da:ef:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4 Validity Not Before: Dec 27 02:01:07 2025 GMT Not After : Dec 28 02:01:07 2025 GMT Subject: CN=b2bf8b14644ab140751c86a1cecc659f4fc26a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:e9:e5:3b:aa:c0:9c:f4:ec:f6:c0:46:27: c7:09:c8:a2:b1:cc:8d:ec:63:bf:64:f9:57:3e:cd: 53:c3:73:1d:1f:6c:03:30:62:f7:8e:0f:81:6b:ee: ea:16:67:5c:66:83:3c:ec:06:63:a4:d3:7b:80:9f: 88:24:4b:56:85:c2:47:01:5d:48:e5:ac:ae:5a:3a: e5:bb:31:3c:54:74:85:6e:d0:62:32:d7:be:1e:a4: 22:78:49:33:5e:ed:71:ca:36:49:66:b2:fc:42:7d: b8:39:56:49:0d:f3:74:c7:2c:22:8b:97:b1:3b:87: fe:51:d4:05:f8:58:d8:33:fe:f4:0c:cd:6e:32:18: e1:27:38:77:53:86:b3:7b:14:a7:0f:d7:9d:e9:86: 60:46:9f:41:78:73:1c:84:23:93:2f:1e:ed:96:00: 48:92:da:fe:a7:3c:73:90:86:a4:56:32:e2:27:3e: a1:31:0f:dc:ef:22:9c:5a:8b:f7:6f:bf:52:d4:77: ea:43:c4:1f:bc:b8:3a:9f:2a:39:9a:06:33:7b:ec: 1f:7e:3f:ed:06:68:db:d9:ea:8d:ae:a2:7f:e9:c3: ee:d1:0f:2c:70:d0:ed:b0:6e:18:b2:c4:34:92:bd: 7c:cd:96:e1:42:2d:44:06:6a:26:3e:49:58:ba:79: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BF:8B:14:64:4A:B1:40:75:1C:86:A1:CE:CC:65:9F:4F:C2:6A:3C X509v3 Authority Key Identifier: keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3e:52:1c:11:fb:27:63:ed:d3:c8:ba:04:47:ca:c8:ee:d3: c6:fd:a2:3c:cb:9a:0f:f5:89:b4:9f:5e:9d:03:24:2f:13:4a: 09:32:0b:0e:9b:3e:04:a6:d1:05:95:02:3e:87:d0:55:ff:89: 9e:25:66:5e:2a:d0:37:e0:4e:34:12:51:ab:2b:b9:76:ec:4c: 1a:be:1f:e9:03:af:36:17:35:1e:06:c2:ce:b6:94:ea:c5:c4: 66:a3:e6:95:7f:9c:a5:a3:cd:98:f9:f2:3a:ca:ef:fd:72:b9: 75:37:26:2b:17:91:42:e3:b1:74:81:22:28:48:f0:83:a7:24: 04:26:14:db:34:a4:4e:68:89:52:df:f7:04:41:03:f6:15:d4: 3f:16:af:3f:4e:56:5e:3e:46:d2:7d:92:27:02:5b:2d:cf:52: 42:56:d7:9a:42:00:78:8f:91:6e:51:fc:4f:24:80:87:15:af: 30:62:c5:d1:ab:b7:91:e2:fb:58:c7:ed:01:4f:86:4a:40:c1: b6:34:ba:ea:c2:80:66:39:0b:c6:49:19:b5:6d:4d:79:e5:2b: e9:c0:02:7e:1c:33:61:70:0b:a2:02:4e:1f:9b:d8:b2:de:39: 13:19:55:f1:de:ed:fd:c2:ef:1e:e2:32:4e:96:da:8c:11:f7: 61:cd:10:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdicJVkZsqcKUahlVU2u+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MWQ4MzNkMzQ3ZTZjNmNhNjllYTBhOGFiMmE4M2Y0OTI2 N2FkZTQwHhcNMjUxMjI3MDIwMTA3WhcNMjUxMjI4MDIwMTA3WjAzMTEwLwYDVQQD EyhiMmJmOGIxNDY0NGFiMTQwNzUxYzg2YTFjZWNjNjU5ZjRmYzI2YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWTp5TuqwJz07PbARifHCciiscyN 7GO/ZPlXPs1Tw3MdH2wDMGL3jg+Ba+7qFmdcZoM87AZjpNN7gJ+IJEtWhcJHAV1I 5ayuWjrluzE8VHSFbtBiMte+HqQieEkzXu1xyjZJZrL8Qn24OVZJDfN0xywii5ex O4f+UdQF+FjYM/70DM1uMhjhJzh3U4azexSnD9ed6YZgRp9BeHMchCOTLx7tlgBI ktr+pzxzkIakVjLiJz6hMQ/c7yKcWov3b79S1HfqQ8QfvLg6nyo5mgYze+wffj/t Bmjb2eqNrqJ/6cPu0Q8scNDtsG4YssQ0kr18zZbhQi1EBmomPklYunlBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK/ixRkSrFAdRyGoc7MZZ9Pwmo8MB8GA1UdIwQY MBaAFKUdgz00fmxspp6gqKsqg/SSZ63kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUt NDc4MmI3YThlYTI5LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mZGEyMTYtZWNiYS00MmVlLWFhYjUtNDc4MmI3YThlYTI5 LzEvcFIyRFBUUi1iR3ltbnFDb3F5cUQ5SkpucmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz5SHBH7 J2Pt08i6BEfKyO7Txv2iPMuaD/WJtJ9enQMkLxNKCTILDps+BKbRBZUCPofQVf+J niVmXirQN+BONBJRqyu5duxMGr4f6QOvNhc1HgbCzraU6sXEZqPmlX+cpaPNmPny Osrv/XK5dTcmKxeRQuOxdIEiKEjwg6ckBCYU2zSkTmiJUt/3BEED9hXUPxavP05W Xj5G0n2SJwJbLc9SQlbXmkIAeI+RblH8TySAhxWvMGLF0au3keL7WMftAU+GSkDB tjS66sKAZjkLxkkZtW1NeeUr6cACfhwzYXALogJOH5vYst45ExlV8d7t/cLvHuIy TpbajBH3Yc0Qlg== -----END CERTIFICATE-----Generated at Sat Dec 27 03:53:50 2025 by rpki-client