This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json) Hash identifier: 1dnhCZxGSiIfTwTT8Wuw7UPFkyEiTJCp2mReIJgF3xI= Subject key identifier: A4:F2:67:BF:35:62:C0:5F:E7:A9:6B:CD:A9:7B:DD:09:29:A3:A0:41 Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Certificate serial: 019B3DC76F2C8243BF49B2ABA4E2C02B09D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft Manifest number: 0994 Signing time: Sat 20 Dec 2025 22:00:38 +0000 Manifest this update: Sat 20 Dec 2025 22:00:38 +0000 Manifest next update: Sun 21 Dec 2025 22:00:38 +0000 Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: P95K5X2HoXDIfXfxAALUX+gelKtViBBVir6s72ZHNWg=) 2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:6f:2c:82:43:bf:49:b2:ab:a4:e2:c0:2b:09:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Validity Not Before: Dec 20 22:00:38 2025 GMT Not After : Dec 21 22:00:38 2025 GMT Subject: CN=a4f267bf3562c05fe7a96bcda97bdd0929a3a041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:0f:7a:e5:13:b6:80:ff:6e:3d:3a:dc:18: 75:57:81:61:97:85:66:c8:6f:69:83:bb:ed:6c:e6: aa:7c:a3:2f:93:81:11:40:ea:f4:a0:a9:f2:7c:a5: 29:82:e9:a0:04:59:c0:aa:63:b6:51:4b:58:34:b8: 99:2b:8e:c0:cc:81:f7:7e:69:84:c6:16:46:b4:f4: 76:4d:42:c6:b2:ee:0e:ae:be:d6:97:00:60:40:30: ee:5b:0d:7c:37:88:ec:4d:f8:d3:2e:64:84:f4:82: a0:ac:c2:ec:28:ed:87:a6:a9:36:de:53:24:94:fe: 56:44:7f:17:2e:28:c4:4f:8a:a8:1d:12:d6:ea:a1: c6:b6:be:cf:e5:10:f7:ae:44:43:c0:1e:fa:1c:66: d9:27:29:4d:81:7f:99:94:98:af:63:a6:da:a9:03: 14:8c:01:ea:89:6f:2f:1b:7e:82:9a:62:8f:c3:b1: d7:74:48:56:31:a5:5d:ef:82:d5:40:00:35:7e:aa: 99:00:dd:dc:07:d0:f1:4c:29:7d:b1:22:71:ba:cf: be:43:55:91:47:18:81:bb:5e:65:5c:fa:67:72:4c: 2f:c5:c8:fd:0d:31:a5:40:41:aa:9b:c2:63:c6:a1: 66:b4:e2:c2:bb:7f:71:cd:49:49:1a:bd:70:5c:32: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F2:67:BF:35:62:C0:5F:E7:A9:6B:CD:A9:7B:DD:09:29:A3:A0:41 X509v3 Authority Key Identifier: keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:08:47:1f:1a:cc:46:9a:0d:50:64:20:8c:11:1a:3c:fd:70: ee:9c:69:c7:4f:42:df:3d:be:54:17:82:52:be:6d:cd:9f:8a: 6e:bb:aa:fe:51:f5:f3:c8:fb:b5:ab:9e:74:fa:db:18:46:81: 67:b3:12:1c:c2:70:f0:a3:f6:30:ea:39:01:39:45:2c:c0:ce: 48:34:48:ee:75:61:5f:90:90:37:81:67:2b:f4:08:3f:bb:e4: 87:6d:4b:2e:07:bc:79:49:16:78:7f:65:9d:36:1e:a1:78:ba: 5c:9d:02:61:59:c0:18:64:57:12:d6:ba:1e:07:d8:a7:ac:d1: 92:47:13:45:29:da:67:40:9d:b7:17:83:04:b4:16:89:d0:d9: c4:8e:89:4f:09:2c:2a:aa:6c:55:ed:5d:25:a2:6d:db:2e:a8: 09:6b:0e:db:75:d4:86:19:a3:c8:b5:29:46:45:83:96:90:ef: c6:77:fe:35:11:11:41:7a:3d:60:26:e0:50:54:34:de:3d:71: fd:46:70:fb:c9:7f:09:73:50:5c:f4:aa:d1:b3:26:25:50:6e: 0a:60:aa:93:1e:9e:d4:50:b0:ec:85:e2:cc:d3:0b:d2:0f:85: 33:1f:3c:0f:32:c4:c4:16:ca:0c:85:f3:3e:d8:c6:e9:1a:8b: 6d:4e:16:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x28sgkO/SbKrpOLAKwnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4 ZmRmY2IwHhcNMjUxMjIwMjIwMDM4WhcNMjUxMjIxMjIwMDM4WjAzMTEwLwYDVQQD EyhhNGYyNjdiZjM1NjJjMDVmZTdhOTZiY2RhOTdiZGQwOTI5YTNhMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA050PeuUTtoD/bj063Bh1V4Fhl4Vm yG9pg7vtbOaqfKMvk4ERQOr0oKnyfKUpgumgBFnAqmO2UUtYNLiZK47AzIH3fmmE xhZGtPR2TULGsu4Orr7WlwBgQDDuWw18N4jsTfjTLmSE9IKgrMLsKO2Hpqk23lMk lP5WRH8XLijET4qoHRLW6qHGtr7P5RD3rkRDwB76HGbZJylNgX+ZlJivY6baqQMU jAHqiW8vG36CmmKPw7HXdEhWMaVd74LVQAA1fqqZAN3cB9DxTCl9sSJxus++Q1WR RxiBu15lXPpnckwvxcj9DTGlQEGqm8JjxqFmtOLCu39xzUlJGr1wXDJXvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTyZ781YsBf56lrzal73Qkpo6BBMB8GA1UdIwQY MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQhHHxrM RpoNUGQgjBEaPP1w7pxpx09C3z2+VBeCUr5tzZ+Kbruq/lH188j7tauedPrbGEaB Z7MSHMJw8KP2MOo5ATlFLMDOSDRI7nVhX5CQN4FnK/QIP7vkh21LLge8eUkWeH9l nTYeoXi6XJ0CYVnAGGRXEta6HgfYp6zRkkcTRSnaZ0CdtxeDBLQWidDZxI6JTwks KqpsVe1dJaJt2y6oCWsO23XUhhmjyLUpRkWDlpDvxnf+NRERQXo9YCbgUFQ03j1x /UZw+8l/CXNQXPSq0bMmJVBuCmCqkx6e1FCw7IXizNML0g+FMx88DzLExBbKDIXz PtjG6RqLbU4WAw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:37 2025 by rpki-client