This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json) Hash identifier: SA5l1U9eM42ioMkAizjzPcN3uFxWB8C0Yq8tEjzy9Kg= Subject key identifier: C2:AD:3A:8F:D6:A7:E2:30:3E:A4:10:AC:CD:13:A5:0D:AC:7D:08:60 Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e Certificate serial: 019B624202BB8C735631F9485BA009396F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft Manifest number: 106E Signing time: Sun 28 Dec 2025 00:00:51 +0000 Manifest this update: Sun 28 Dec 2025 00:00:51 +0000 Manifest next update: Mon 29 Dec 2025 00:00:51 +0000 Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: DcroL/xegTVIynzy8C9WfmUwYJ1KDQ9LYEZAG7tZ6uM=) 2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:02:bb:8c:73:56:31:f9:48:5b:a0:09:39:6f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e Validity Not Before: Dec 28 00:00:51 2025 GMT Not After : Dec 29 00:00:51 2025 GMT Subject: CN=c2ad3a8fd6a7e2303ea410accd13a50dac7d0860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:3e:40:ee:3c:f2:c4:a6:9c:d1:5a:71:7e: c1:73:84:7e:bc:54:17:81:bd:11:90:df:2e:df:4d: 91:aa:2f:8f:9c:06:ad:f9:d2:85:5c:ff:ec:c8:ff: 5b:a3:68:37:d4:7b:32:f7:90:f4:a5:97:5b:78:4f: 77:d9:97:ec:d8:31:96:04:fe:fb:d0:ce:57:83:0d: 5c:3e:32:20:45:e2:b7:e5:17:f7:3e:43:d3:85:6e: 55:99:f9:96:6e:e9:8d:bf:99:56:30:78:15:e9:07: 48:02:7f:f3:d4:46:55:8a:24:d3:b4:f3:cc:7b:ac: ca:64:ea:66:7c:47:5f:1d:78:38:6b:d7:f9:8d:6e: 02:d7:0f:3d:fc:d7:e2:99:57:b4:80:c4:d1:4d:38: 84:a7:ca:46:0f:1e:c5:61:0b:4a:a3:70:49:0e:67: 33:80:f9:93:49:fb:b1:3c:ca:35:97:f4:0f:0f:98: 16:40:42:14:ed:42:85:3f:df:f4:f4:ee:fc:f6:38: 35:6a:26:10:d9:d2:fb:52:03:20:82:dc:10:f9:6e: 3e:ce:d4:23:fc:e5:35:9e:49:81:b6:1a:2d:08:9f: 66:92:c5:3e:0a:4b:86:02:08:8e:9d:a6:10:c8:53: 27:f4:20:2e:ed:55:6e:3c:ab:10:90:33:3d:b3:93: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AD:3A:8F:D6:A7:E2:30:3E:A4:10:AC:CD:13:A5:0D:AC:7D:08:60 X509v3 Authority Key Identifier: keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9a:a6:78:70:1d:4a:fe:43:9d:59:92:2f:ca:fd:a3:94:1f: de:e9:8a:49:d5:5c:ed:ea:3a:68:d2:68:e2:10:61:2f:71:9a: 42:57:0f:5d:cc:6a:bc:8f:76:55:00:4e:d6:93:99:e2:8c:04: 94:91:29:62:2f:6d:23:16:30:02:d0:2d:66:64:5c:5d:d7:64: d2:8f:d6:ed:1f:df:e9:7a:53:d7:e6:6f:9b:46:4b:2f:65:df: 87:b5:49:98:43:8e:cf:d8:9e:1c:d1:f8:3c:4f:e5:c1:ce:fd: ed:b4:2e:be:1e:68:78:30:97:00:6a:3d:49:c4:54:a4:c7:f8: 78:de:7a:e5:2c:e1:24:9b:c4:b9:db:78:a8:95:68:1f:e8:08: d8:d3:78:5a:28:60:ee:ef:73:4b:63:a6:d5:74:f2:c7:51:a2: d1:34:53:bf:ae:9e:cf:75:c7:db:74:72:58:a8:0d:35:51:e9: 44:01:0b:62:13:aa:80:78:11:ee:1b:e1:d3:6f:53:cd:9f:09: de:13:4d:fc:74:8e:67:7f:0c:7f:b2:ff:c7:4a:94:6e:c0:ed: 01:f0:99:55:97:ac:9a:86:e6:2e:2b:7e:b3:19:93:bd:3a:e5: 7a:50:56:1d:43:77:76:e2:ae:00:f5:3d:18:5d:6e:0e:61:75: d5:ae:d3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQgK7jHNWMflIW6AJOW90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4 NzA3NmUwHhcNMjUxMjI4MDAwMDUxWhcNMjUxMjI5MDAwMDUxWjAzMTEwLwYDVQQD EyhjMmFkM2E4ZmQ2YTdlMjMwM2VhNDEwYWNjZDEzYTUwZGFjN2QwODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyo+QO488sSmnNFacX7Bc4R+vFQX gb0RkN8u302Rqi+PnAat+dKFXP/syP9bo2g31Hsy95D0pZdbeE932Zfs2DGWBP77 0M5Xgw1cPjIgReK35Rf3PkPThW5VmfmWbumNv5lWMHgV6QdIAn/z1EZViiTTtPPM e6zKZOpmfEdfHXg4a9f5jW4C1w89/NfimVe0gMTRTTiEp8pGDx7FYQtKo3BJDmcz gPmTSfuxPMo1l/QPD5gWQEIU7UKFP9/09O789jg1aiYQ2dL7UgMggtwQ+W4+ztQj /OU1nkmBthotCJ9mksU+CkuGAgiOnaYQyFMn9CAu7VVuPKsQkDM9s5O2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKtOo/Wp+IwPqQQrM0TpQ2sfQhgMB8GA1UdIwQY MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3 LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJqmeHAd Sv5DnVmSL8r9o5Qf3umKSdVc7eo6aNJo4hBhL3GaQlcPXcxqvI92VQBO1pOZ4owE lJEpYi9tIxYwAtAtZmRcXddk0o/W7R/f6XpT1+Zvm0ZLL2Xfh7VJmEOOz9ieHNH4 PE/lwc797bQuvh5oeDCXAGo9ScRUpMf4eN565SzhJJvEudt4qJVoH+gI2NN4Wihg 7u9zS2Om1XTyx1Gi0TRTv66ez3XH23RyWKgNNVHpRAELYhOqgHgR7hvh029TzZ8J 3hNN/HSOZ38Mf7L/x0qUbsDtAfCZVZesmobmLit+sxmTvTrlelBWHUN3duKuAPU9 GF1uDmF11a7TLg== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:15 2025 by rpki-client