This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json) Hash identifier: xcJtxK9Ji2XVWeejCglI49FzAP0o7I5vryjWDVu6kB4= Subject key identifier: 81:32:47:9B:5E:3D:CA:A6:13:4C:50:E2:22:DB:B9:D5:F0:6A:42:52 Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed Certificate serial: 019B49953D88148D5BC8A34198B3A710347C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft Manifest number: 0221 Signing time: Tue 23 Dec 2025 05:01:15 +0000 Manifest this update: Tue 23 Dec 2025 05:01:15 +0000 Manifest next update: Wed 24 Dec 2025 05:01:15 +0000 Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: 9kadkfOGcrmMSMV4SFsjLNOwUvsVEY1a5LdFuUO4+fY=) 2: HyAFlnKRYn8v4ck7CUrvJ74oqJw.roa (hash: Cz97E2NkgnmgiZA3PdXbnScz0dyzdjSpjkDb9HLlBcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:3d:88:14:8d:5b:c8:a3:41:98:b3:a7:10:34:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed Validity Not Before: Dec 23 05:01:15 2025 GMT Not After : Dec 24 05:01:15 2025 GMT Subject: CN=8132479b5e3dcaa6134c50e222dbb9d5f06a4252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:b7:f8:2a:ae:36:8d:33:0e:a7:18:05:95: 46:85:8d:03:0c:c6:65:f4:fb:95:82:24:c0:90:44: 7e:ed:00:70:52:4c:2b:f6:fc:78:a9:02:64:b9:4b: 2e:27:c2:8b:3c:28:96:01:de:c3:f5:b7:e1:59:d1: e3:7c:16:f5:cc:64:5b:34:57:a1:f3:98:e8:53:33: 6c:d5:1d:af:54:0d:c0:20:d9:e0:0d:ae:ea:4c:39: 95:eb:18:c4:15:64:84:bf:67:ce:c9:e7:ee:9e:a1: 43:a4:ff:2b:64:fc:4a:3a:e3:c8:01:d7:84:69:28: 7f:01:4c:ea:0a:89:2e:03:33:66:b9:c4:37:81:7b: f7:ec:82:2f:a4:e9:4f:93:32:0d:e1:12:ae:31:6c: 7f:09:4c:6a:79:a7:2f:a4:13:e4:ca:c2:0b:86:e0: d3:1d:a3:a3:9e:8f:e3:c2:ef:dc:07:b8:60:01:56: e6:58:3e:a9:61:bd:79:96:82:d5:d8:68:0c:e6:2f: 90:e3:93:6f:bb:87:b3:c6:06:ea:ba:e0:19:65:e4: 00:83:2a:f9:97:8b:c2:62:4f:e8:6d:9f:66:eb:f0: 73:4f:dd:88:f0:2e:95:8c:c0:8e:7d:18:ca:0d:d6: 53:31:fb:59:66:b0:4f:13:da:8b:5a:c0:c8:c5:df: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:32:47:9B:5E:3D:CA:A6:13:4C:50:E2:22:DB:B9:D5:F0:6A:42:52 X509v3 Authority Key Identifier: keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6e:89:2f:35:84:30:c0:60:7e:26:0a:79:a3:08:d1:d4:15: f1:d6:e2:af:bc:53:4d:bd:c0:2e:93:1c:13:ae:6d:7e:51:0e: d9:15:91:60:b5:48:da:b2:2c:14:f9:c4:a6:8a:4c:54:e5:9d: 3c:99:f2:3c:a7:1c:cf:22:c7:90:ff:11:0d:7b:17:f1:15:33: 9a:41:b9:3c:6e:0f:cc:f5:71:1f:ce:e0:8b:be:6f:e8:2a:7d: 98:23:ac:7c:eb:0e:ba:cb:bf:00:66:de:42:f9:65:9e:e9:bd: cc:f2:0a:a6:46:3a:75:f8:ec:a2:23:f8:8a:f0:64:cf:8a:2f: 4e:5f:7b:95:ab:42:b2:da:38:24:56:b5:f4:9c:67:45:fd:f1: 59:32:c9:bc:eb:5b:40:1a:03:10:e3:7e:34:32:3e:cc:c4:eb: 2b:2e:09:6b:02:83:a8:b6:44:10:6a:93:6f:f2:0e:5d:98:81: 46:a5:4a:ac:85:ba:1c:38:0f:e6:a3:6f:9c:8f:21:d0:60:4b: a0:b8:c1:26:f0:94:b6:f1:5c:09:26:e6:32:16:cd:da:4b:e0: 95:4d:30:11:37:68:33:a2:24:60:8e:a6:82:96:5a:6d:18:30: ee:70:18:ab:ec:86:7c:a2:a4:93:a5:d6:63:2e:e7:d3:8a:58: 1e:11:13:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlT2IFI1byKNBmLOnEDR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzdmYTEwMGQ2Y2QyODhlNTQ0YzdjYjRjN2Q0ZDE4ODc5 MDc5ZWQwHhcNMjUxMjIzMDUwMTE1WhcNMjUxMjI0MDUwMTE1WjAzMTEwLwYDVQQD Eyg4MTMyNDc5YjVlM2RjYWE2MTM0YzUwZTIyMmRiYjlkNWYwNmE0MjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmi3+CquNo0zDqcYBZVGhY0DDMZl 9PuVgiTAkER+7QBwUkwr9vx4qQJkuUsuJ8KLPCiWAd7D9bfhWdHjfBb1zGRbNFeh 85joUzNs1R2vVA3AINngDa7qTDmV6xjEFWSEv2fOyefunqFDpP8rZPxKOuPIAdeE aSh/AUzqCokuAzNmucQ3gXv37IIvpOlPkzIN4RKuMWx/CUxqeacvpBPkysILhuDT HaOjno/jwu/cB7hgAVbmWD6pYb15loLV2GgM5i+Q45Nvu4ezxgbquuAZZeQAgyr5 l4vCYk/obZ9m6/BzT92I8C6VjMCOfRjKDdZTMftZZrBPE9qLWsDIxd/6bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEyR5tePcqmE0xQ4iLbudXwakJSMB8GA1UdIwQY MBaAFNp3+hANbNKI5UTHy0x9TRiHkHntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQt ZGY4NzJmYjI2OWNmLzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQtZGY4NzJmYjI2OWNm LzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqW6JLzWE MMBgfiYKeaMI0dQV8dbir7xTTb3ALpMcE65tflEO2RWRYLVI2rIsFPnEpopMVOWd PJnyPKcczyLHkP8RDXsX8RUzmkG5PG4PzPVxH87gi75v6Cp9mCOsfOsOusu/AGbe Qvllnum9zPIKpkY6dfjsoiP4ivBkz4ovTl97latCsto4JFa19JxnRf3xWTLJvOtb QBoDEON+NDI+zMTrKy4JawKDqLZEEGqTb/IOXZiBRqVKrIW6HDgP5qNvnI8h0GBL oLjBJvCUtvFcCSbmMhbN2kvglU0wETdoM6IkYI6mgpZabRgw7nAYq+yGfKKkk6XW Yy7n04pYHhETWg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:19:34 2025 by rpki-client