This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft File: pT2P6iKY_zVCptwIkLEIySIYNjU.mft (raw, json) Hash identifier: OcDX+4fGwNLmmJrm510NzGRRHkzvsPeNCJtTBzI2wec= Subject key identifier: 6F:95:90:CD:EA:18:28:69:96:3B:38:3E:11:56:40:73:7D:C4:60:E7 Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635 Certificate serial: 019B3C7F045E51C6FB79DB496EDDB6760ACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft Manifest number: 0FD1 Signing time: Sat 20 Dec 2025 16:01:55 +0000 Manifest this update: Sat 20 Dec 2025 16:01:55 +0000 Manifest next update: Sun 21 Dec 2025 16:01:55 +0000 Files and hashes: 1: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (hash: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=) 2: pT2P6iKY_zVCptwIkLEIySIYNjU.crl (hash: bOJHAJAwY317YXhAeO9eiouulLUHIOYFw98xwqbzEjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:04:5e:51:c6:fb:79:db:49:6e:dd:b6:76:0a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635 Validity Not Before: Dec 20 16:01:55 2025 GMT Not After : Dec 21 16:01:55 2025 GMT Subject: CN=6f9590cdea182869963b383e115640737dc460e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:30:cf:64:ed:67:02:c3:35:54:18:75:51: d2:47:ce:f2:22:d5:26:76:06:57:5e:9f:88:dd:f8: 27:d9:78:ee:72:aa:4b:af:5d:df:90:e3:41:d8:e3: 05:1b:f3:78:bc:d5:33:88:f2:7e:c7:e7:b0:ad:ea: 33:b9:62:ff:2d:2e:96:2c:25:6a:c6:c6:ac:55:02: a6:c8:b9:07:da:02:b0:ca:2e:15:a3:99:e8:55:d1: 8e:e2:af:8d:71:b2:b4:ac:6d:18:36:88:d2:07:3e: 54:fd:3b:d6:aa:1a:e3:b7:e9:47:96:9b:d0:f4:a0: d3:bb:3d:af:db:85:3e:ed:83:2c:f1:65:50:5d:8a: a2:39:82:5c:52:e2:b1:6c:71:3c:30:7f:91:2f:ea: 69:65:f2:fc:38:35:a7:ab:f0:88:c7:db:3d:62:0a: f8:43:91:7f:f9:b5:d8:96:57:b4:62:bf:21:cc:64: e6:bb:3e:ef:cf:c0:e7:5f:e0:02:e8:c9:88:fe:8b: e6:91:16:2f:6c:eb:72:d1:8d:d4:83:d6:0a:6c:14: 37:d1:35:87:a5:9c:ad:52:3b:ac:59:d2:c7:ec:ef: 5b:f7:29:e6:9a:b7:73:3d:99:74:43:b6:bc:b1:5f: d6:6a:d0:3a:11:0b:59:68:3e:ee:94:ca:cd:0c:f3: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:95:90:CD:EA:18:28:69:96:3B:38:3E:11:56:40:73:7D:C4:60:E7 X509v3 Authority Key Identifier: keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:70:8b:8e:00:d7:48:ed:b8:0e:bf:5d:e7:a4:fc:d7:b2:cf: 2f:72:d3:a7:80:16:d2:fd:5b:2e:8b:d9:ce:61:8a:a2:4e:21: ca:78:3a:a8:31:13:40:f7:00:37:47:81:ef:52:c1:48:f2:24: 21:51:fc:a2:6c:df:69:5a:09:9e:22:ec:71:fb:ad:01:6c:7d: 39:91:fd:49:5f:1a:16:4c:69:9a:35:f1:21:9b:f5:45:02:83: cb:70:70:af:5d:a6:4e:06:a1:18:3b:62:15:a2:02:f0:75:d3: 33:b7:31:ff:33:f6:c6:cc:85:a8:ef:8a:d4:59:90:3c:01:f9: f6:eb:8a:10:36:ed:0d:46:67:09:83:49:89:95:da:73:21:15: 5f:2b:73:7c:d9:d2:6c:d6:ab:9b:15:87:c7:ce:db:96:cf:83: 65:77:ea:4c:cd:c0:d9:32:40:3c:70:c4:e1:ed:fe:a5:b4:0f: 41:f4:94:b0:d6:84:df:23:1a:00:b3:25:6e:13:17:0e:c3:9e: 7e:8b:de:aa:98:77:7f:73:4d:54:3b:df:a7:ed:a5:2e:6a:e1: 2a:99:c2:63:91:11:21:68:2e:9d:c8:98:69:9d:83:fd:cf:01: 35:61:cc:01:f0:3c:3d:b6:54:b0:ce:bc:7f:4f:f3:7c:d3:8d: 0a:09:f5:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwReUcb7edtJbt22dgrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1M2Q4ZmVhMjI5OGZmMzU0MmE2ZGMwODkwYjEwOGM5MjIx ODM2MzUwHhcNMjUxMjIwMTYwMTU1WhcNMjUxMjIxMTYwMTU1WjAzMTEwLwYDVQQD Eyg2Zjk1OTBjZGVhMTgyODY5OTYzYjM4M2UxMTU2NDA3MzdkYzQ2MGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIEwz2TtZwLDNVQYdVHSR87yItUm dgZXXp+I3fgn2XjucqpLr13fkONB2OMFG/N4vNUziPJ+x+ewreozuWL/LS6WLCVq xsasVQKmyLkH2gKwyi4Vo5noVdGO4q+NcbK0rG0YNojSBz5U/TvWqhrjt+lHlpvQ 9KDTuz2v24U+7YMs8WVQXYqiOYJcUuKxbHE8MH+RL+ppZfL8ODWnq/CIx9s9Ygr4 Q5F/+bXYlle0Yr8hzGTmuz7vz8DnX+AC6MmI/ovmkRYvbOty0Y3Ug9YKbBQ30TWH pZytUjusWdLH7O9b9ynmmrdzPZl0Q7a8sV/WatA6EQtZaD7ulMrNDPPjXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+VkM3qGChpljs4PhFWQHN9xGDnMB8GA1UdIwQY MBaAFKU9j+oimP81QqbcCJCxCMkiGDY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgt Y2Q4MjQyNzhjY2U4LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9iYTNiYTMtOTUxZS00MjgwLWFmOTgtY2Q4MjQyNzhjY2U4 LzEvcFQyUDZpS1lfelZDcHR3SWtMRUl5U0lZTmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3CLjgDX SO24Dr9d56T817LPL3LTp4AW0v1bLovZzmGKok4hyng6qDETQPcAN0eB71LBSPIk IVH8omzfaVoJniLscfutAWx9OZH9SV8aFkxpmjXxIZv1RQKDy3Bwr12mTgahGDti FaIC8HXTM7cx/zP2xsyFqO+K1FmQPAH59uuKEDbtDUZnCYNJiZXacyEVXytzfNnS bNarmxWHx87bls+DZXfqTM3A2TJAPHDE4e3+pbQPQfSUsNaE3yMaALMlbhMXDsOe foveqph3f3NNVDvfp+2lLmrhKpnCY5ERIWgunciYaZ2D/c8BNWHMAfA8PbZUsM68 f0/zfNONCgn14A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:06:39 2025 by rpki-client