This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft File: 2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json) Hash identifier: Ehw35AAOpJfLCw48InLV2UNrt/Nut6d51WIw7Jn+WDE= Subject key identifier: 63:53:ED:C6:8E:9A:25:56:9D:FC:97:05:0E:31:B5:9A:B2:67:12:10 Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Certificate serial: 019B3C7EBD6451943B715CF78E54F984F649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft Manifest number: 1487 Signing time: Sat 20 Dec 2025 16:01:37 +0000 Manifest this update: Sat 20 Dec 2025 16:01:37 +0000 Manifest next update: Sun 21 Dec 2025 16:01:37 +0000 Files and hashes: 1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: xa9DpdCBjhvhDaFSY/To9D/nePYYDbypkPMAc6CdA04=) 2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=) 3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=) 4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=) 5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:bd:64:51:94:3b:71:5c:f7:8e:54:f9:84:f6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Validity Not Before: Dec 20 16:01:37 2025 GMT Not After : Dec 21 16:01:37 2025 GMT Subject: CN=6353edc68e9a25569dfc97050e31b59ab2671210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:93:aa:7f:30:85:41:8f:b8:3b:41:b9:38: c7:ab:3d:9c:ca:a4:38:78:c5:20:1f:e2:41:2a:ed: 16:aa:95:71:30:43:5b:55:fd:52:9d:3a:73:7f:f8: 7b:f4:f6:20:4e:fd:5b:eb:7b:fa:2c:80:f0:3a:74: 85:7f:3f:4d:89:5e:7d:e6:db:f5:3c:cd:94:a4:1a: 43:0d:14:cd:57:f2:5d:e0:71:91:d9:c9:8d:d9:3f: c2:dc:6e:4d:1f:0c:3f:39:61:c1:a7:c2:08:95:dd: 1c:94:bf:04:96:ab:59:af:88:b7:97:37:f5:0b:d0: dc:4e:dd:11:88:ef:52:82:93:3c:bc:d4:5c:cd:d4: ff:dc:07:60:00:36:83:58:30:59:53:2f:cf:20:14: ff:e0:d1:23:86:8c:50:05:8f:ba:5a:af:66:a3:a9: 56:f5:cb:54:5b:b6:3b:52:07:d4:74:6c:55:cd:02: 0a:6c:70:a6:2e:a9:97:a6:0d:1a:9c:27:75:6d:51: 8b:11:4b:0d:65:86:da:f7:d5:e2:a2:df:64:23:e1: 88:27:4f:ce:12:b7:11:4e:4d:05:9b:95:bf:b2:fb: be:10:2c:21:35:7e:cd:0c:f1:0d:15:31:3d:99:a4: 6d:e4:e7:05:2b:8f:99:15:79:13:ce:db:0f:4c:88: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:ED:C6:8E:9A:25:56:9D:FC:97:05:0E:31:B5:9A:B2:67:12:10 X509v3 Authority Key Identifier: keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cb:e4:0e:7c:b2:86:1d:63:df:54:40:cb:1f:9c:71:7b:bc: 5e:62:05:10:1c:53:9f:79:6f:eb:08:bf:4d:e3:70:d8:3b:b3: b3:b3:7b:ad:a0:0d:76:bf:d2:f3:cb:a5:2c:a8:b2:64:19:60: 34:80:0d:70:a0:dc:c5:2b:88:7a:5c:69:e4:1b:95:53:b2:98: 2b:8c:3a:e7:26:81:27:10:8f:8b:de:2f:47:a4:1c:ab:07:66: 79:e4:8f:76:68:fa:6b:0b:08:8b:50:41:dc:91:b6:cb:fc:7c: b1:b7:7f:df:88:3b:11:92:bb:d8:01:8c:67:e8:7c:d3:3b:5d: 4f:03:c8:ae:a2:43:42:bc:26:65:8c:ec:75:e6:5f:16:db:fd: 8c:0e:a3:76:62:6a:c4:a1:35:b4:03:93:c0:10:6c:39:22:23: 9c:72:72:2a:d2:39:19:24:a4:23:73:b6:5a:06:6c:8c:e7:91: 48:0e:06:6b:3c:b1:3e:cb:3d:7c:f6:f8:19:71:59:a6:5d:49: 1c:f8:ef:0b:44:c5:df:dd:1e:bc:ff:a1:7c:c8:2f:ce:02:fb: 44:b1:ab:73:d4:59:92:0e:64:a9:2f:a9:ca:94:2b:6e:55:6d: 40:17:9e:d8:75:9c:4e:6a:fd:89:5b:9d:96:e6:dd:1a:81:30: 7e:64:be:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fr1kUZQ7cVz3jlT5hPZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3 ZjRkNWEwHhcNMjUxMjIwMTYwMTM3WhcNMjUxMjIxMTYwMTM3WjAzMTEwLwYDVQQD Eyg2MzUzZWRjNjhlOWEyNTU2OWRmYzk3MDUwZTMxYjU5YWIyNjcxMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz16Tqn8whUGPuDtBuTjHqz2cyqQ4 eMUgH+JBKu0WqpVxMENbVf1SnTpzf/h79PYgTv1b63v6LIDwOnSFfz9NiV595tv1 PM2UpBpDDRTNV/Jd4HGR2cmN2T/C3G5NHww/OWHBp8IIld0clL8ElqtZr4i3lzf1 C9DcTt0RiO9SgpM8vNRczdT/3AdgADaDWDBZUy/PIBT/4NEjhoxQBY+6Wq9mo6lW 9ctUW7Y7UgfUdGxVzQIKbHCmLqmXpg0anCd1bVGLEUsNZYba99Xiot9kI+GIJ0/O ErcRTk0Fm5W/svu+ECwhNX7NDPENFTE9maRt5OcFK4+ZFXkTztsPTIjcGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNT7caOmiVWnfyXBQ4xtZqyZxIQMB8GA1UdIwQY MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8vkDnyy hh1j31RAyx+ccXu8XmIFEBxTn3lv6wi/TeNw2Duzs7N7raANdr/S88ulLKiyZBlg NIANcKDcxSuIelxp5BuVU7KYK4w65yaBJxCPi94vR6QcqwdmeeSPdmj6awsIi1BB 3JG2y/x8sbd/34g7EZK72AGMZ+h80ztdTwPIrqJDQrwmZYzsdeZfFtv9jA6jdmJq xKE1tAOTwBBsOSIjnHJyKtI5GSSkI3O2WgZsjOeRSA4GazyxPss9fPb4GXFZpl1J HPjvC0TF390evP+hfMgvzgL7RLGrc9RZkg5kqS+pypQrblVtQBee2HWcTmr9iVud lubdGoEwfmS++Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:13 2025 by rpki-client