This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json) Hash identifier: ipTVcn6942eyXx4L/6q4i/rxyCZHF22wENOTCsKEX7A= Subject key identifier: 42:D6:2D:B1:71:30:66:A7:71:F1:6E:07:FE:FD:83:85:19:90:EB:E3 Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04 Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404 Certificate serial: 019B6843E09AA4D0973C062AEC644574544D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft Manifest number: 144C Signing time: Mon 29 Dec 2025 04:00:37 +0000 Manifest this update: Mon 29 Dec 2025 04:00:37 +0000 Manifest next update: Tue 30 Dec 2025 04:00:37 +0000 Files and hashes: 1: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: /sXIs9s+6mNgQLFBXbEMbPL9GFKBQZV+QXETJrt8PN4=) 2: kIzUAPC0DdQ_FT2bfHdyL_f4yoU.roa (hash: rSGry/QGGACqFb/sa5t28CBZOiur+so7pmuHdYgh5Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:43:e0:9a:a4:d0:97:3c:06:2a:ec:64:45:74:54:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404 Validity Not Before: Dec 29 04:00:37 2025 GMT Not After : Dec 30 04:00:37 2025 GMT Subject: CN=42d62db1713066a771f16e07fefd83851990ebe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:52:38:c1:0f:61:fb:43:a8:c4:cb:6d:96:00: 49:54:c3:ed:88:52:6c:b7:93:13:d1:48:72:7c:00: d6:ba:32:f6:97:c9:48:be:43:fc:0d:85:80:93:29: 5d:f9:67:39:eb:ad:42:37:e7:8a:e7:85:9b:39:9f: 91:4f:39:84:c4:20:27:0e:a2:a5:b4:8a:6a:b9:2b: 37:00:09:91:2a:ab:99:44:b5:e1:41:16:98:26:80: a7:ec:2f:6d:e0:03:1d:c8:de:0f:50:9b:e2:d9:a0: 09:f5:fb:8d:0a:27:07:e3:01:92:d8:6a:8e:c7:4e: 0a:bd:61:fe:2e:7a:86:54:43:c4:81:e1:10:33:b5: 56:5d:15:ce:22:2b:d0:90:0c:f5:f1:34:cf:c6:4d: b6:18:53:bb:1e:5c:39:ae:82:b7:e2:77:b9:26:9e: 52:51:11:7d:69:a8:33:b6:0d:32:59:59:12:c1:09: 92:ba:6d:b1:66:2b:10:35:a2:c0:a6:13:1a:11:a3: ff:79:d8:10:b5:c5:ab:f1:cc:19:73:b3:cc:df:2e: 24:c0:2b:ff:56:9c:82:e7:cc:d8:6c:97:d8:80:6c: f2:a8:88:12:88:ab:d5:6f:32:6c:22:b5:3d:a6:d2: e0:0f:d1:92:a6:74:6f:0a:ef:83:da:69:7d:ba:a6: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D6:2D:B1:71:30:66:A7:71:F1:6E:07:FE:FD:83:85:19:90:EB:E3 X509v3 Authority Key Identifier: keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e9:51:f7:f0:d1:13:c7:53:81:3e:e1:db:bb:a7:c4:8e:39: d2:bb:96:62:b0:be:7f:ea:68:09:00:f5:e0:ed:48:8e:ae:e9: 8e:3d:7a:08:89:13:a3:ca:c0:47:32:28:79:ef:fe:04:60:1e: 31:4e:9f:c2:29:bc:f2:20:ab:2a:ae:cc:f6:2f:f0:96:af:f0: f3:cf:e3:cd:66:99:22:c6:f6:6a:0e:15:8d:b8:4a:85:e3:a1: 4a:5f:84:32:25:a9:8f:91:db:a3:00:5a:76:0f:58:45:d5:e3: 92:23:e4:01:bf:2f:53:39:35:4a:e1:ed:cc:fc:51:fe:9a:a3: c2:29:ab:3e:7e:ac:a0:21:d6:e2:bb:55:fc:62:36:72:d2:72: bd:9b:d2:dc:d8:ab:09:35:42:9f:26:ba:f4:e1:40:15:4e:6a: 15:2f:1a:bb:d7:31:85:77:e5:04:c7:db:fe:03:40:5c:ba:0d: 23:c6:44:9e:17:1e:2f:32:85:c1:cb:88:14:c1:e2:b0:3c:4a: 76:f7:e3:42:17:30:6a:5f:45:fd:ab:89:a8:a1:d8:d3:6e:e4: d5:b0:ee:35:47:48:9c:99:16:d5:9d:3e:ff:7b:f6:50:49:3b: 33:e7:43:36:57:06:0c:34:46:1b:ee:69:50:45:94:9e:e6:ff: 27:27:93:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoQ+CapNCXPAYq7GRFdFRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTEyZTg5OTNiMDBiZGEyYjRlOWMwMmFjNTc4Mzc0MDBh YWM0MDQwHhcNMjUxMjI5MDQwMDM3WhcNMjUxMjMwMDQwMDM3WjAzMTEwLwYDVQQD Eyg0MmQ2MmRiMTcxMzA2NmE3NzFmMTZlMDdmZWZkODM4NTE5OTBlYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVI4wQ9h+0OoxMttlgBJVMPtiFJs t5MT0UhyfADWujL2l8lIvkP8DYWAkyld+Wc5661CN+eK54WbOZ+RTzmExCAnDqKl tIpquSs3AAmRKquZRLXhQRaYJoCn7C9t4AMdyN4PUJvi2aAJ9fuNCicH4wGS2GqO x04KvWH+LnqGVEPEgeEQM7VWXRXOIivQkAz18TTPxk22GFO7Hlw5roK34ne5Jp5S URF9aagztg0yWVkSwQmSum2xZisQNaLAphMaEaP/edgQtcWr8cwZc7PM3y4kwCv/ VpyC58zYbJfYgGzyqIgSiKvVbzJsIrU9ptLgD9GSpnRvCu+D2ml9uqZ6/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELWLbFxMGancfFuB/79g4UZkOvjMB8GA1UdIwQY MBaAFNkRLomTsAvaK06cAqxXg3QAqsQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYt NTE3YTY2MWFlNmJkLzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNmY5ZTgtNGI3NS00NGU0LWEwZDYtNTE3YTY2MWFlNmJk LzEvMlJFdWlaT3dDOW9yVHB3Q3JGZURkQUNxeEFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABulR9/DR E8dTgT7h27unxI450ruWYrC+f+poCQD14O1Ijq7pjj16CIkTo8rARzIoee/+BGAe MU6fwim88iCrKq7M9i/wlq/w88/jzWaZIsb2ag4VjbhKheOhSl+EMiWpj5HbowBa dg9YRdXjkiPkAb8vUzk1SuHtzPxR/pqjwimrPn6soCHW4rtV/GI2ctJyvZvS3Nir CTVCnya69OFAFU5qFS8au9cxhXflBMfb/gNAXLoNI8ZEnhceLzKFwcuIFMHisDxK dvfjQhcwal9F/auJqKHY027k1bDuNUdInJkW1Z0+/3v2UEk7M+dDNlcGDDRGG+5p UEWUnub/JyeTtw== -----END CERTIFICATE-----Generated at Mon Dec 29 13:40:27 2025 by rpki-client