This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json) Hash identifier: TW1jsybBXnzQtlCuYOSYwJTJNvnXfNDvJ/XI5woQ8Vk= Subject key identifier: DF:B9:54:6B:8D:48:88:75:B6:99:D6:5B:B6:3C:F0:A2:F0:97:54:0F Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Certificate serial: 019B3CB544936EF5FF0A49CB1FEBA96F69D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft Manifest number: 0834 Signing time: Sat 20 Dec 2025 17:01:11 +0000 Manifest this update: Sat 20 Dec 2025 17:01:11 +0000 Manifest next update: Sun 21 Dec 2025 17:01:11 +0000 Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: djwkRFT2xSzcXZFNlD3yKLfyUDsbsRad3XUGifklGJ0=) 2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:44:93:6e:f5:ff:0a:49:cb:1f:eb:a9:6f:69:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Validity Not Before: Dec 20 17:01:11 2025 GMT Not After : Dec 21 17:01:11 2025 GMT Subject: CN=dfb9546b8d488875b699d65bb63cf0a2f097540f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cc:15:ab:62:be:30:13:a3:5e:0f:0a:dc:0d: 06:39:12:17:78:4b:59:56:60:b5:c8:25:c3:97:34: 96:e9:31:3a:3a:3b:ff:6a:a8:16:ba:75:98:28:05: 7c:5f:1d:af:8b:55:1e:2c:8e:d6:05:9b:f8:50:10: 6b:37:48:1b:58:0f:b1:a8:0c:08:89:91:80:2c:72: 9d:44:5e:43:e3:f4:e2:40:ca:06:95:51:15:3c:c6: 80:81:69:ec:df:bd:d2:76:c5:97:7f:74:fd:9c:65: 7c:4b:4c:b6:7c:34:d8:16:e9:d6:4a:24:a4:70:7c: ad:d0:bb:d8:f3:77:c9:25:52:5a:c3:51:9f:2a:6d: 6a:f1:d9:a9:fd:a3:1d:11:38:e2:c7:6c:02:d3:5c: 74:da:88:2e:d5:2e:09:f1:83:b7:9b:2f:eb:5f:f5: a4:a3:7f:02:12:33:50:37:e6:ea:e7:96:c8:cd:ed: d2:5c:75:51:3d:7c:8f:18:4e:58:2e:9b:02:6b:6c: 4e:0e:29:40:ad:73:93:65:c3:38:92:66:7a:34:b2: bc:65:36:02:5d:06:e5:71:a0:49:ce:7d:0b:60:69: 7d:b2:5a:5c:9c:2a:18:33:8d:d5:69:8c:5c:48:53: 5a:e6:eb:a4:17:8d:0d:38:26:02:36:29:34:9f:98: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:54:6B:8D:48:88:75:B6:99:D6:5B:B6:3C:F0:A2:F0:97:54:0F X509v3 Authority Key Identifier: keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:74:f7:76:f6:fc:dd:08:36:fa:c6:b1:56:48:50:12:91:35: 73:eb:e6:10:1f:fa:33:f5:d8:2b:92:41:2a:db:43:39:a9:a4: 96:e8:4c:99:29:17:49:23:4e:8a:25:57:f1:93:1d:0d:f7:fb: c1:46:f3:c4:79:10:a2:e8:12:1d:1a:3c:69:b2:52:28:ca:b9: 40:58:36:9c:1e:75:d2:03:50:bd:17:46:dd:be:8e:d5:51:a7: 86:b7:53:07:07:05:e8:9d:fe:09:e4:6d:aa:fb:f2:a6:61:c4: 54:1b:12:f0:fd:27:8d:75:33:e2:c2:09:5e:83:db:4d:e1:03: b1:90:30:c2:13:98:48:a4:b5:df:92:fa:f9:db:ee:bd:7b:c6: 35:e8:63:54:8d:4e:b3:98:82:ec:ad:3a:9d:8e:54:3e:bb:35: 8b:83:bc:a4:b9:c2:02:39:b9:3f:04:a5:c7:a4:07:f6:26:00: cd:94:05:c6:90:17:9b:86:7e:61:c8:ab:d0:31:67:d2:2f:be: f9:b4:80:44:de:0c:e5:70:f4:58:09:1c:d6:08:05:b7:0a:00: 63:92:2a:5b:6f:60:c4:88:d1:9f:c7:29:85:9e:54:45:b7:3b: 93:db:74:72:4b:8e:0b:27:fe:91:9f:55:7a:f3:7a:2c:8f:d3: 97:66:f7:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUSTbvX/CknLH+upb2nQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh YTA2YTYwHhcNMjUxMjIwMTcwMTExWhcNMjUxMjIxMTcwMTExWjAzMTEwLwYDVQQD EyhkZmI5NTQ2YjhkNDg4ODc1YjY5OWQ2NWJiNjNjZjBhMmYwOTc1NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8wVq2K+MBOjXg8K3A0GORIXeEtZ VmC1yCXDlzSW6TE6Ojv/aqgWunWYKAV8Xx2vi1UeLI7WBZv4UBBrN0gbWA+xqAwI iZGALHKdRF5D4/TiQMoGlVEVPMaAgWns373SdsWXf3T9nGV8S0y2fDTYFunWSiSk cHyt0LvY83fJJVJaw1GfKm1q8dmp/aMdETjix2wC01x02ogu1S4J8YO3my/rX/Wk o38CEjNQN+bq55bIze3SXHVRPXyPGE5YLpsCa2xODilArXOTZcM4kmZ6NLK8ZTYC XQblcaBJzn0LYGl9slpcnCoYM43VaYxcSFNa5uukF40NOCYCNik0n5gmXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+5VGuNSIh1tpnWW7Y88KLwl1QPMB8GA1UdIwQY MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt MTYxMGEwYzk5M2I0LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0 LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHT3dvb8 3Qg2+saxVkhQEpE1c+vmEB/6M/XYK5JBKttDOamkluhMmSkXSSNOiiVX8ZMdDff7 wUbzxHkQougSHRo8abJSKMq5QFg2nB510gNQvRdG3b6O1VGnhrdTBwcF6J3+CeRt qvvypmHEVBsS8P0njXUz4sIJXoPbTeEDsZAwwhOYSKS135L6+dvuvXvGNehjVI1O s5iC7K06nY5UPrs1i4O8pLnCAjm5PwSlx6QH9iYAzZQFxpAXm4Z+Ycir0DFn0i++ +bSARN4M5XD0WAkc1ggFtwoAY5IqW29gxIjRn8cphZ5URbc7k9t0ckuOCyf+kZ9V evN6LI/Tl2b3Ng== -----END CERTIFICATE-----Generated at Sat Dec 20 20:41:54 2025 by rpki-client