This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json) Hash identifier: G6UkI8sgqpsIliw0sRBRpA6UOFDpMfj+DQ+2qsHaCdE= Subject key identifier: 96:53:69:9E:1C:69:1E:47:F1:37:99:1C:84:04:EB:48:B9:13:E4:53 Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5 Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5 Certificate serial: 019B51BD32AA05FF2031F2A1142CEC40FAF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft Manifest number: 0C31 Signing time: Wed 24 Dec 2025 19:01:52 +0000 Manifest this update: Wed 24 Dec 2025 19:01:52 +0000 Manifest next update: Thu 25 Dec 2025 19:01:52 +0000 Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: ZYBiyMIOQf0XbT9QA9TF3/qEIYzZzBm6Y8MhobWud48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:32:aa:05:ff:20:31:f2:a1:14:2c:ec:40:fa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5 Validity Not Before: Dec 24 19:01:52 2025 GMT Not After : Dec 25 19:01:52 2025 GMT Subject: CN=9653699e1c691e47f137991c8404eb48b913e453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:ed:fb:e3:c1:9f:ce:23:35:7b:f0:25:a5: d9:05:e9:ca:bf:34:9c:0b:6d:dc:46:92:2b:a9:f3: 2c:f8:c5:8c:6a:65:47:9e:fb:c4:9d:8c:c6:b3:ba: 84:ff:82:d5:f2:fb:e0:3e:07:5a:16:9f:50:70:7b: 5a:91:cd:04:45:d5:1a:82:06:03:40:34:98:41:b0: cb:a1:51:b6:56:a8:ac:23:75:64:a5:5c:4f:4a:8d: 91:19:00:db:a4:2a:39:e5:62:f4:75:6e:ee:24:a9: b2:de:5f:2a:86:6c:45:f8:c6:28:16:01:ae:fa:3f: 37:c5:11:35:32:83:6b:28:b2:f2:e2:a2:83:59:44: 24:1c:61:92:65:95:43:2f:f6:84:1a:15:ef:3e:e9: ea:f6:d4:5f:58:75:1f:71:a4:c1:c4:0d:96:ea:1d: bf:fd:df:8e:0f:d2:5a:cf:6f:61:5b:0f:b6:b7:a5: 43:c3:d1:a2:b9:10:9b:24:2c:6a:d9:49:93:8b:37: ff:b9:07:74:c8:47:d5:b3:fd:38:51:58:5c:fe:78: 65:e2:17:49:b0:ba:89:f1:23:72:47:2a:1b:86:97: 45:b6:93:b1:1b:16:fe:5d:6f:f5:36:8d:d7:9b:af: d0:60:c1:e5:e3:e6:21:bc:43:5c:f0:65:bf:67:b4: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:69:9E:1C:69:1E:47:F1:37:99:1C:84:04:EB:48:B9:13:E4:53 X509v3 Authority Key Identifier: keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f2:94:bf:78:75:3a:7e:de:4e:65:70:5b:ff:7b:0a:2d:2a: 92:c3:4b:cd:39:15:17:1f:57:ae:af:39:b8:fb:a0:fd:ce:87: e1:fe:46:cc:e4:e2:23:7e:a3:ad:3c:32:69:a5:94:f1:a6:8b: 3e:db:2a:6a:f2:a7:bf:bb:36:ef:27:ba:29:c6:7f:a8:69:e6: a0:1a:ab:dc:37:56:f5:b4:51:01:4c:02:7c:7f:e8:f6:13:0f: 6e:02:2f:6c:ad:a8:06:6b:67:34:2c:a9:ea:f7:ed:a5:8a:06: d4:96:fa:34:5f:cf:1f:23:60:fd:8d:fb:50:6f:52:46:0d:4a: 2d:d0:8a:80:4b:04:4a:75:45:d7:b7:7f:4e:ff:e4:f9:50:d8: 9e:41:7d:f7:e6:60:fe:ca:d0:cd:67:35:70:9f:58:77:c7:1d: 76:a5:fb:20:fe:26:a3:be:c2:72:42:25:50:f5:2d:10:0f:86: fa:65:3d:c0:0c:12:d1:07:30:45:e9:1d:ab:34:97:d9:d0:54: f3:ae:21:11:57:ba:34:2b:bb:8d:6b:ee:62:9a:f2:38:53:f4: 00:14:39:db:2e:83:cb:f1:de:cf:8a:b5:fc:48:e9:80:d8:27: 79:91:2a:33:ec:c3:8a:58:ec:8d:71:90:36:99:e9:b6:04:0b: 6c:b1:a2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvTKqBf8gMfKhFCzsQPrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmUwY2MzMTQzZjk5YzVlNTU4MzZhM2ZmNmMwYjY2ZmMy MGM0ZDUwHhcNMjUxMjI0MTkwMTUyWhcNMjUxMjI1MTkwMTUyWjAzMTEwLwYDVQQD Eyg5NjUzNjk5ZTFjNjkxZTQ3ZjEzNzk5MWM4NDA0ZWI0OGI5MTNlNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHHt++PBn84jNXvwJaXZBenKvzSc C23cRpIrqfMs+MWMamVHnvvEnYzGs7qE/4LV8vvgPgdaFp9QcHtakc0ERdUaggYD QDSYQbDLoVG2VqisI3VkpVxPSo2RGQDbpCo55WL0dW7uJKmy3l8qhmxF+MYoFgGu +j83xRE1MoNrKLLy4qKDWUQkHGGSZZVDL/aEGhXvPunq9tRfWHUfcaTBxA2W6h2/ /d+OD9Jaz29hWw+2t6VDw9GiuRCbJCxq2UmTizf/uQd0yEfVs/04UVhc/nhl4hdJ sLqJ8SNyRyobhpdFtpOxGxb+XW/1No3Xm6/QYMHl4+YhvENc8GW/Z7Qa8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZTaZ4caR5H8TeZHIQE60i5E+RTMB8GA1UdIwQY MBaAFNn+DMMUP5nF5Vg2o/9sC2b8IMTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAt MjYzMTk0OTZkN2RlLzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAtMjYzMTk0OTZkN2Rl LzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfKUv3h1 On7eTmVwW/97Ci0qksNLzTkVFx9Xrq85uPug/c6H4f5GzOTiI36jrTwyaaWU8aaL PtsqavKnv7s27ye6KcZ/qGnmoBqr3DdW9bRRAUwCfH/o9hMPbgIvbK2oBmtnNCyp 6vftpYoG1Jb6NF/PHyNg/Y37UG9SRg1KLdCKgEsESnVF17d/Tv/k+VDYnkF99+Zg /srQzWc1cJ9Yd8cddqX7IP4mo77CckIlUPUtEA+G+mU9wAwS0QcwRekdqzSX2dBU 864hEVe6NCu7jWvuYpryOFP0ABQ52y6Dy/Hez4q1/EjpgNgneZEqM+zDiljsjXGQ NpnptgQLbLGiPw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:58 2025 by rpki-client