This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json) Hash identifier: JZ9x8ximg6UHR7YerbPnCBUTb+PvpFndasFleb4hUBY= Subject key identifier: 6D:41:EE:CA:07:03:C1:1B:92:90:18:23:7A:D0:C8:E1:99:A9:82:70 Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Certificate serial: 019B75FF68F3DF51A5D04C05A8FCD4F8B342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft Manifest number: 0325 Signing time: Wed 31 Dec 2025 20:00:31 +0000 Manifest this update: Wed 31 Dec 2025 20:00:31 +0000 Manifest next update: Thu 01 Jan 2026 20:00:31 +0000 Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: 7uxee+7lcO1VkZWdmGWVeUAW0FNtvUQlOV14lMcF1Go=) 2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:ff:68:f3:df:51:a5:d0:4c:05:a8:fc:d4:f8:b3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Validity Not Before: Dec 31 20:00:31 2025 GMT Not After : Jan 1 20:00:31 2026 GMT Subject: CN=6d41eeca0703c11b929018237ad0c8e199a98270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:c0:4e:7d:0b:cf:8f:c5:9b:5f:44:03:9e: ec:fd:60:9b:db:e1:5f:45:46:89:38:86:70:ee:42: 30:ad:62:9c:5a:5f:af:81:5b:76:fc:de:54:bd:5a: 61:e2:c6:d9:e5:9a:55:a6:76:05:d6:7e:33:a2:b6: bc:57:e8:d1:e8:c5:25:ac:3e:eb:bc:49:44:64:05: 26:98:f9:63:c7:d7:8e:d2:84:68:98:40:b4:7a:23: 08:18:77:16:da:25:57:0c:1a:bd:d9:a8:a7:18:32: 53:12:af:a8:bf:13:7a:9e:43:94:0f:9e:7e:71:ea: f6:3d:b1:c4:70:b5:8e:8f:10:6a:29:33:6b:8b:ab: ca:18:c7:5a:90:5e:f7:fd:63:25:e7:e7:bd:bd:a7: e5:b1:df:fc:c2:0f:d4:87:44:df:12:f9:33:d7:e4: be:d5:ff:35:ec:ff:9a:ce:1d:ff:47:73:82:b4:e0: d9:f9:26:db:b8:64:2f:9a:61:a0:3a:73:cd:a1:f9: 36:8c:c9:33:65:55:07:a1:ac:70:15:d2:11:4d:bf: cf:72:70:e7:f5:60:e4:70:84:3c:33:88:2a:32:e5: c3:9a:bc:e7:5e:9d:11:1c:3c:fb:d0:91:47:1f:f5: ce:fb:ef:f7:09:d5:17:0e:97:ad:07:01:74:c6:66: dd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:41:EE:CA:07:03:C1:1B:92:90:18:23:7A:D0:C8:E1:99:A9:82:70 X509v3 Authority Key Identifier: keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:63:c0:3b:f9:f0:e3:95:ee:ed:38:0f:5c:73:7f:98:ef:6b: 4b:96:85:bb:60:b5:fe:57:80:34:39:0f:77:64:82:42:ae:c1: 5b:38:b2:92:8a:be:91:00:62:c3:cd:25:42:a3:12:c6:64:6a: de:d3:29:e7:18:db:7b:28:9d:d9:48:48:49:fc:02:45:11:8f: ed:e0:1b:b2:18:8c:d9:f2:92:0c:f6:4b:65:a1:6a:60:92:ff: e8:69:42:5a:a5:08:ef:32:da:4d:cc:72:bc:1e:f9:23:24:e5: 23:29:c8:25:f2:26:bb:90:e2:4f:ef:ba:6d:2a:fc:b5:cb:7e: 5c:da:4d:9c:d0:35:43:b1:8b:f8:79:8d:92:95:4d:1c:e6:1c: f9:6e:a9:fa:c0:41:f4:cc:54:7e:67:36:74:ff:e9:58:f5:fa: 05:d1:90:03:14:d6:42:86:45:c9:79:c1:48:8b:39:63:13:8b: 4b:ba:63:95:df:a2:2a:ed:e1:db:3f:aa:93:aa:2d:3b:73:f2: a2:ea:59:35:c9:ee:12:01:82:5d:ca:28:80:7e:c9:19:c9:ef: 85:b8:79:9e:b4:9e:29:56:ca:c5:5c:a5:19:bd:87:cd:d0:68: ee:b2:38:83:12:a0:ba:7c:dc:b5:f1:28:e1:fc:02:b0:93:f1: 4c:20:01:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1/2jz31Gl0EwFqPzU+LNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGM0ZThhMGVhMjk3ZDY3YjQzMWFhYzQzOGExYzIwNjc1 ZWY4NjcwHhcNMjUxMjMxMjAwMDMxWhcNMjYwMTAxMjAwMDMxWjAzMTEwLwYDVQQD Eyg2ZDQxZWVjYTA3MDNjMTFiOTI5MDE4MjM3YWQwYzhlMTk5YTk4MjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjPATn0Lz4/Fm19EA57s/WCb2+Ff RUaJOIZw7kIwrWKcWl+vgVt2/N5UvVph4sbZ5ZpVpnYF1n4zora8V+jR6MUlrD7r vElEZAUmmPljx9eO0oRomEC0eiMIGHcW2iVXDBq92ainGDJTEq+ovxN6nkOUD55+ cer2PbHEcLWOjxBqKTNri6vKGMdakF73/WMl5+e9vaflsd/8wg/Uh0TfEvkz1+S+ 1f817P+azh3/R3OCtODZ+SbbuGQvmmGgOnPNofk2jMkzZVUHoaxwFdIRTb/PcnDn 9WDkcIQ8M4gqMuXDmrznXp0RHDz70JFHH/XO++/3CdUXDpetBwF0xmbdwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1B7soHA8EbkpAYI3rQyOGZqYJwMB8GA1UdIwQY MBaAFNmMTooOopfWe0MarEOKHCBnXvhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYt YmEwNmU3NGRiOTFjLzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYtYmEwNmU3NGRiOTFj LzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGPAO/nw 45Xu7TgPXHN/mO9rS5aFu2C1/leANDkPd2SCQq7BWziykoq+kQBiw80lQqMSxmRq 3tMp5xjbeyid2UhISfwCRRGP7eAbshiM2fKSDPZLZaFqYJL/6GlCWqUI7zLaTcxy vB75IyTlIynIJfImu5DiT++6bSr8tct+XNpNnNA1Q7GL+HmNkpVNHOYc+W6p+sBB 9MxUfmc2dP/pWPX6BdGQAxTWQoZFyXnBSIs5YxOLS7pjld+iKu3h2z+qk6otO3Py oupZNcnuEgGCXcoogH7JGcnvhbh5nrSeKVbKxVylGb2HzdBo7rI4gxKgunzctfEo 4fwCsJPxTCABsw== -----END CERTIFICATE-----Generated at Wed Dec 31 21:46:21 2025 by rpki-client