This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json) Hash identifier: bKvn/v3uNUAUHizagnLTisrK85kjmDI/2G2s8rpMCMo= Subject key identifier: 3A:91:6C:E3:D8:32:89:7B:49:4E:79:D4:D7:D1:9D:EB:6A:82:AA:14 Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Certificate serial: 019B51F33E253DE35D50A5E9E2972F277C0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft Manifest number: 120B Signing time: Wed 24 Dec 2025 20:00:54 +0000 Manifest this update: Wed 24 Dec 2025 20:00:54 +0000 Manifest next update: Thu 25 Dec 2025 20:00:54 +0000 Files and hashes: 1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=) 2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: /9TCHMJwwCs6AGEAWlwrQioZmUp3nHw6/sclOv/1ouA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:3e:25:3d:e3:5d:50:a5:e9:e2:97:2f:27:7c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Validity Not Before: Dec 24 20:00:54 2025 GMT Not After : Dec 25 20:00:54 2025 GMT Subject: CN=3a916ce3d832897b494e79d4d7d19deb6a82aa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:54:91:a2:03:bf:cc:55:97:c6:f5:b3:43: f4:c2:7d:69:88:1f:ae:47:b6:76:b0:d7:9e:c3:3c: ec:ec:06:b9:92:a7:05:46:26:da:09:7f:23:9f:23: 78:0f:5d:7d:9b:7a:54:a7:d5:17:22:90:27:90:c7: e6:0f:41:53:b8:fe:45:7c:7d:2d:ec:60:cc:4a:04: cb:a1:1d:df:a4:74:33:23:e1:d2:88:78:c8:b4:00: b1:84:ed:01:3a:fe:f5:9f:66:df:0b:cc:c8:b7:76: 1d:1b:50:15:c2:5e:34:db:57:03:b4:c6:db:2d:2b: 4b:52:2a:d9:0e:72:39:a7:86:0e:6d:1c:a9:03:ad: 7b:77:1d:6d:36:ae:8f:f9:e7:b9:25:0a:61:63:10: 2f:e9:1e:65:49:77:96:6a:d0:9c:7c:d7:a0:52:73: 6d:fa:e5:ed:d4:9c:4c:80:ae:ca:fd:78:ae:6b:fb: 10:f0:f0:78:d8:a5:fe:5e:2d:9b:38:e0:35:00:08: dc:e9:2f:cf:7f:5e:1f:ce:17:12:f2:aa:50:83:cd: 73:92:5a:de:54:50:26:1b:81:2f:dc:78:ae:5e:ce: fe:39:ed:01:73:a1:50:a8:2d:7c:7d:35:06:41:b5: 15:87:67:83:fe:7a:08:66:04:0e:52:c6:15:9e:51: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:91:6C:E3:D8:32:89:7B:49:4E:79:D4:D7:D1:9D:EB:6A:82:AA:14 X509v3 Authority Key Identifier: keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:72:10:76:47:47:d8:21:a2:81:ee:ae:83:03:e5:d9:b1:72: a6:de:d4:73:ba:4a:61:52:49:03:1f:ed:ea:00:b0:dc:d9:00: ef:fb:9c:0c:3e:cc:28:a4:bc:d3:e6:7a:5b:28:25:0d:b3:5a: 5f:84:ce:7c:01:f0:40:2a:71:b1:30:68:9b:bc:44:8a:66:91: b5:ed:fe:d9:7d:26:d8:41:9d:1e:80:64:e1:3b:4a:6f:5f:dd: d3:f1:b9:64:db:47:f7:d9:5e:dd:4d:d8:61:ad:59:f3:c5:1b: 15:73:9f:1f:0d:35:3a:e1:56:18:26:66:c1:47:e4:98:23:98: 6d:d9:df:ea:d1:8d:33:d2:a4:ce:77:a2:b6:af:6a:6d:1f:83: 70:94:b5:9e:db:7a:5c:11:b7:7b:9b:4f:13:31:8f:4d:cb:8d: 87:05:b8:37:f7:fd:1f:58:bd:09:16:28:d9:34:2d:f7:d2:0c: 1d:e3:b3:8e:de:de:a9:8b:a3:4c:bb:26:60:a9:b8:4d:2d:53: 72:fb:ff:56:d3:00:4d:c5:92:1a:60:5e:88:e7:e0:9c:c4:29: 82:08:a7:03:94:81:d2:df:f6:f1:09:58:10:b6:d0:2d:81:f3: a5:bc:d3:a5:8d:a7:63:12:20:10:5b:f6:b7:b9:bd:ba:29:88: d2:9f:02:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8z4lPeNdUKXp4pcvJ3wLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWJlZjVhMWEzMWVmNWNmYzAzNmI5YzJiNzBhNDJhYmQw NDAwN2UwHhcNMjUxMjI0MjAwMDU0WhcNMjUxMjI1MjAwMDU0WjAzMTEwLwYDVQQD EygzYTkxNmNlM2Q4MzI4OTdiNDk0ZTc5ZDRkN2QxOWRlYjZhODJhYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9FUkaIDv8xVl8b1s0P0wn1piB+u R7Z2sNeewzzs7Aa5kqcFRibaCX8jnyN4D119m3pUp9UXIpAnkMfmD0FTuP5FfH0t 7GDMSgTLoR3fpHQzI+HSiHjItACxhO0BOv71n2bfC8zIt3YdG1AVwl4021cDtMbb LStLUirZDnI5p4YObRypA617dx1tNq6P+ee5JQphYxAv6R5lSXeWatCcfNegUnNt +uXt1JxMgK7K/Xiua/sQ8PB42KX+Xi2bOOA1AAjc6S/Pf14fzhcS8qpQg81zklre VFAmG4Ev3HiuXs7+Oe0Bc6FQqC18fTUGQbUVh2eD/noIZgQOUsYVnlHYGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqRbOPYMol7SU551NfRnetqgqoUMB8GA1UdIwQY MBaAFNgb71oaMe9c/ANrnCtwpCq9BAB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQt OWNlZWJhOGJhMjRjLzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQtOWNlZWJhOGJhMjRj LzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnIQdkdH 2CGige6ugwPl2bFypt7Uc7pKYVJJAx/t6gCw3NkA7/ucDD7MKKS80+Z6WyglDbNa X4TOfAHwQCpxsTBom7xEimaRte3+2X0m2EGdHoBk4TtKb1/d0/G5ZNtH99le3U3Y Ya1Z88UbFXOfHw01OuFWGCZmwUfkmCOYbdnf6tGNM9Kkzneitq9qbR+DcJS1ntt6 XBG3e5tPEzGPTcuNhwW4N/f9H1i9CRYo2TQt99IMHeOzjt7eqYujTLsmYKm4TS1T cvv/VtMATcWSGmBeiOfgnMQpgginA5SB0t/28QlYELbQLYHzpbzTpY2nYxIgEFv2 t7m9uimI0p8CdA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:26:26 2025 by rpki-client