This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json) Hash identifier: kT2UuBxMcRD0F/2ExkTZk2Ft1K406qFwHf5VkAc91K8= Subject key identifier: 66:E0:0F:FD:16:4D:2B:EC:C8:16:4C:85:8D:06:EE:1C:01:7F:F5:9E Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe Certificate serial: 019B4C962AF02DFC2FE952136E8D63C6B062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft Manifest number: 107B Signing time: Tue 23 Dec 2025 19:01:08 +0000 Manifest this update: Tue 23 Dec 2025 19:01:08 +0000 Manifest next update: Wed 24 Dec 2025 19:01:08 +0000 Files and hashes: 1: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: r5uIxvVAs14cHH3mdlnEiMetCmoH2OOzcaS3u4OojzA=) 2: vHSz7syZCdc9si7_Pq1PLv6tdnc.roa (hash: DpwRdEh/R0r3FLFeNbLkCKGthqDKuAQzsAmQCtR8AOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:2a:f0:2d:fc:2f:e9:52:13:6e:8d:63:c6:b0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe Validity Not Before: Dec 23 19:01:08 2025 GMT Not After : Dec 24 19:01:08 2025 GMT Subject: CN=66e00ffd164d2becc8164c858d06ee1c017ff59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:f9:99:80:e1:57:99:cf:90:7e:f7:89:e6: 52:0f:8b:f9:33:e5:31:6c:15:b3:9f:35:ed:de:ab: 00:86:3b:0a:5e:60:31:5a:f7:f0:d6:c0:fd:bb:62: 1e:81:8f:a6:d3:4f:9d:58:0e:e6:ef:33:2a:b1:9f: 9b:91:c5:0b:e1:e5:78:06:2c:cf:58:ea:91:0c:b8: 96:7b:8a:cd:88:b7:1a:ef:8f:9d:4f:b1:ec:5b:77: 35:1d:cc:a7:21:6b:f4:37:d6:2c:f9:b9:a3:19:7b: db:7f:dd:41:0c:f5:c0:7c:51:1e:f9:fc:14:4d:5d: 98:6b:29:c6:f7:b0:91:72:3e:dc:11:d3:c7:88:04: 14:3e:16:31:b2:8b:f8:f9:09:c4:3e:f9:49:f1:d9: 49:4a:35:c4:92:6e:ee:e5:64:cb:8d:1c:e9:3a:b6: b8:37:0c:6a:77:47:c6:dd:70:cb:b4:a7:71:f4:43: 0b:55:f1:e3:4e:d6:7e:15:d1:f6:05:9e:f8:53:cf: ef:0d:70:3d:66:46:b1:3d:62:07:69:d9:b4:38:ec: 61:11:46:13:bf:23:5c:3a:40:e6:07:72:53:00:40: d3:59:b7:e0:8c:5d:a8:1a:25:1e:78:4e:b6:d8:27: 44:c3:93:4c:a2:f9:c4:34:23:d5:e6:fe:56:3c:9c: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E0:0F:FD:16:4D:2B:EC:C8:16:4C:85:8D:06:EE:1C:01:7F:F5:9E X509v3 Authority Key Identifier: keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:03:dd:57:24:e5:9d:a8:31:d1:76:d6:b4:83:5f:e0:a3:74: 55:dc:89:21:a4:6e:16:96:60:3a:de:ec:91:8b:1e:18:86:11: 5c:20:34:69:56:dc:68:59:2e:ac:b4:48:0a:80:8e:91:5f:76: 6f:bc:32:3f:25:d6:b1:be:23:70:41:0c:89:22:03:86:03:24: 78:e6:90:5f:6c:de:26:15:cb:a9:d9:1f:3c:49:76:50:02:28: ce:29:dd:96:4d:94:e5:1d:03:5c:bb:26:96:d0:f9:c0:65:09: 75:e0:81:1c:24:aa:90:c7:16:62:84:86:c9:ae:5d:ef:30:f0: 26:c9:17:0c:d7:5d:1a:c4:ac:37:f5:b2:0b:cb:4f:84:75:04: b1:c6:62:ad:1c:a4:d8:21:0c:bc:28:5a:dd:fc:b9:5f:b3:41: b2:22:6b:0a:83:96:69:06:31:c4:e2:e3:28:d4:ab:26:b7:a1: f5:c2:ac:61:53:58:23:44:ec:ab:d0:31:e6:35:a2:b4:fb:36: 63:dc:e6:50:24:c4:41:a2:cf:bb:1e:d8:bd:e2:c1:1d:b5:ca: 35:ac:f3:bd:86:6a:05:11:b0:bd:e2:17:a6:e5:26:65:98:05: 2f:55:d5:9f:aa:16:8c:58:0d:d1:f1:3a:20:8d:45:b4:e7:73: f8:1a:1a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlirwLfwv6VITbo1jxrBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjBjYWFjZjc3NzY5OWE4YzQzMjM3Yjg5MjZjNjhlNGQx MmM0ZmUwHhcNMjUxMjIzMTkwMTA4WhcNMjUxMjI0MTkwMTA4WjAzMTEwLwYDVQQD Eyg2NmUwMGZmZDE2NGQyYmVjYzgxNjRjODU4ZDA2ZWUxYzAxN2ZmNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b/5mYDhV5nPkH73ieZSD4v5M+Ux bBWznzXt3qsAhjsKXmAxWvfw1sD9u2IegY+m00+dWA7m7zMqsZ+bkcUL4eV4BizP WOqRDLiWe4rNiLca74+dT7HsW3c1HcynIWv0N9Ys+bmjGXvbf91BDPXAfFEe+fwU TV2YaynG97CRcj7cEdPHiAQUPhYxsov4+QnEPvlJ8dlJSjXEkm7u5WTLjRzpOra4 Nwxqd0fG3XDLtKdx9EMLVfHjTtZ+FdH2BZ74U8/vDXA9ZkaxPWIHadm0OOxhEUYT vyNcOkDmB3JTAEDTWbfgjF2oGiUeeE622CdEw5NMovnENCPV5v5WPJz44wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbgD/0WTSvsyBZMhY0G7hwBf/WeMB8GA1UdIwQY MBaAFLdgyqz3d2majEMje4kmxo5NEsT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYt YzYyYmU4YTcwM2NlLzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYtYzYyYmU4YTcwM2Nl LzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQPdVyTl nagx0XbWtINf4KN0VdyJIaRuFpZgOt7skYseGIYRXCA0aVbcaFkurLRICoCOkV92 b7wyPyXWsb4jcEEMiSIDhgMkeOaQX2zeJhXLqdkfPEl2UAIozindlk2U5R0DXLsm ltD5wGUJdeCBHCSqkMcWYoSGya5d7zDwJskXDNddGsSsN/WyC8tPhHUEscZirRyk 2CEMvCha3fy5X7NBsiJrCoOWaQYxxOLjKNSrJreh9cKsYVNYI0Tsq9Ax5jWitPs2 Y9zmUCTEQaLPux7YveLBHbXKNazzvYZqBRGwveIXpuUmZZgFL1XVn6oWjFgN0fE6 II1FtOdz+BoauA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:46 2025 by rpki-client