This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json) Hash identifier: mWXbzuIOmFn3Xu6glOLthLLWlgMrdLk08CRMb6B8CLE= Subject key identifier: D7:4F:76:7A:C4:BD:2E:95:A3:4D:D4:95:E7:52:D8:99:7F:36:AD:54 Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Certificate serial: 019AF5409B1E50330466642CAF9C64FE3479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft Manifest number: 0ED2 Signing time: Sat 06 Dec 2025 20:00:43 +0000 Manifest this update: Sat 06 Dec 2025 20:00:43 +0000 Manifest next update: Sun 07 Dec 2025 20:00:43 +0000 Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=) 2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=) 3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: vgmlW2G2Jh9rCzGGsHY75Nkm0yePIgVCovcW1LZRg9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:9b:1e:50:33:04:66:64:2c:af:9c:64:fe:34:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Validity Not Before: Dec 6 20:00:43 2025 GMT Not After : Dec 7 20:00:43 2025 GMT Subject: CN=d74f767ac4bd2e95a34dd495e752d8997f36ad54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:f8:01:fb:e5:5f:6e:eb:eb:6e:54:5b:4f: c7:fb:04:0f:8e:1e:dd:48:40:95:1d:b7:b0:3e:27: 81:41:18:17:0e:97:e4:53:8d:3b:91:e9:3c:5e:e2: 29:22:3b:18:89:57:f6:a6:97:8e:ae:fa:69:28:c8: 03:a1:96:ca:97:7d:c3:91:2c:48:e6:be:be:6a:e1: bd:96:be:0e:ee:a4:68:7a:69:0a:aa:81:ad:1c:b4: a0:d6:e5:ee:9c:50:e2:eb:31:8d:ea:2b:1c:98:10: d2:fb:0e:80:13:cf:f5:dd:5b:82:b1:36:8f:b2:f2: 40:f3:f5:2c:b1:8d:6b:60:72:2f:08:2c:8d:0b:79: db:c7:21:5c:94:cb:50:8c:63:c5:c1:fa:cf:45:07: 46:56:45:0a:cb:d5:8c:52:8c:a2:88:d3:7c:34:f0: bb:0a:89:1e:57:f9:09:81:38:07:57:3e:ff:c7:04: d2:45:4e:3f:b7:1a:5d:ff:d0:52:4d:0d:64:8f:e1: bf:ba:93:47:7c:65:8a:cc:d4:47:ac:6b:3d:9b:40: 9f:76:81:7c:55:3d:fc:ed:4b:4c:18:d8:aa:1b:92: 86:4e:87:0c:26:14:6e:14:8c:d5:d5:f0:e1:99:00: f9:91:e6:e6:26:16:d8:94:71:24:d6:57:42:c8:49: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4F:76:7A:C4:BD:2E:95:A3:4D:D4:95:E7:52:D8:99:7F:36:AD:54 X509v3 Authority Key Identifier: keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:67:03:41:d4:74:8d:c5:74:26:1f:55:e1:e7:20:78:65:7a: 5a:0f:01:ab:77:7f:e0:5a:99:9d:0d:48:08:77:60:a2:f3:bf: e2:c0:74:9c:d7:a7:7a:43:65:5c:47:19:9b:55:da:5a:c9:af: fd:41:5e:59:99:1f:b3:0b:1e:a7:cc:f8:23:53:5e:29:59:68: 95:c0:26:9e:20:e4:78:21:9d:6e:1e:2f:3a:dd:1b:98:8b:a7: ce:2c:28:e1:cf:71:28:b5:7e:cb:4a:1d:16:f2:4d:c8:cb:02: 60:d7:d3:62:5d:bb:38:55:a7:66:0d:6f:10:b9:e1:50:03:f6: d1:b3:51:4a:44:05:e4:b5:e5:16:54:a8:4c:da:8a:b5:c7:ad: 20:05:1a:07:cf:b1:c8:59:49:89:e3:65:13:b2:e3:75:b6:f4: 40:01:a1:6e:ea:04:f6:d1:88:76:1d:13:5d:db:c5:be:45:97: d2:7d:23:42:87:f9:6f:c4:0d:87:6d:1c:f5:61:e7:d4:a8:d6: 96:c5:e4:4a:e5:d3:3b:42:76:60:8c:57:79:38:ed:89:5b:74: dc:28:ba:4a:ad:97:04:46:53:8d:74:2a:cb:9b:8a:a0:0b:47: 50:8d:a7:20:c7:59:f3:74:c5:d5:07:77:5e:83:66:14:98:ad: 74:5a:98:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJseUDMEZmQsr5xk/jR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi MjBmYTYwHhcNMjUxMjA2MjAwMDQzWhcNMjUxMjA3MjAwMDQzWjAzMTEwLwYDVQQD EyhkNzRmNzY3YWM0YmQyZTk1YTM0ZGQ0OTVlNzUyZDg5OTdmMzZhZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr/4AfvlX27r625UW0/H+wQPjh7d SECVHbewPieBQRgXDpfkU407kek8XuIpIjsYiVf2ppeOrvppKMgDoZbKl33DkSxI 5r6+auG9lr4O7qRoemkKqoGtHLSg1uXunFDi6zGN6iscmBDS+w6AE8/13VuCsTaP svJA8/UssY1rYHIvCCyNC3nbxyFclMtQjGPFwfrPRQdGVkUKy9WMUoyiiNN8NPC7 CokeV/kJgTgHVz7/xwTSRU4/txpd/9BSTQ1kj+G/upNHfGWKzNRHrGs9m0CfdoF8 VT387UtMGNiqG5KGTocMJhRuFIzV1fDhmQD5kebmJhbYlHEk1ldCyEmA7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdPdnrEvS6Vo03UledS2Jl/Nq1UMB8GA1UdIwQY MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWcDQdR0 jcV0Jh9V4ecgeGV6Wg8Bq3d/4FqZnQ1ICHdgovO/4sB0nNenekNlXEcZm1XaWsmv /UFeWZkfswsep8z4I1NeKVlolcAmniDkeCGdbh4vOt0bmIunziwo4c9xKLV+y0od FvJNyMsCYNfTYl27OFWnZg1vELnhUAP20bNRSkQF5LXlFlSoTNqKtcetIAUaB8+x yFlJieNlE7Ljdbb0QAGhbuoE9tGIdh0TXdvFvkWX0n0jQof5b8QNh20c9WHn1KjW lsXkSuXTO0J2YIxXeTjtiVt03Ci6Sq2XBEZTjXQqy5uKoAtHUI2nIMdZ83TF1Qd3 XoNmFJitdFqYuw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:34 2025 by rpki-client