This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json) Hash identifier: 5upD9c1LcDInp1Bb6UUXARnvU/RDBpCrVMWHeHxzQLA= Subject key identifier: 97:FF:EB:64:7A:FB:F9:41:7A:49:E2:9D:9B:D8:1C:9D:B4:9C:D5:E2 Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09 Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009 Certificate serial: 019AF540FFA52C156CE81E9EE088382F0C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft Manifest number: 11C8 Signing time: Sat 06 Dec 2025 20:01:08 +0000 Manifest this update: Sat 06 Dec 2025 20:01:08 +0000 Manifest next update: Sun 07 Dec 2025 20:01:08 +0000 Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: GwFSCYJ4EiGP4dshbTbGFPK38LqzG4EN6BxKBxtDHpA=) 2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:ff:a5:2c:15:6c:e8:1e:9e:e0:88:38:2f:0c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009 Validity Not Before: Dec 6 20:01:08 2025 GMT Not After : Dec 7 20:01:08 2025 GMT Subject: CN=97ffeb647afbf9417a49e29d9bd81c9db49cd5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:30:47:24:11:4d:ba:7e:cf:76:e0:88:5e: 0a:07:e1:a5:4e:06:00:ae:98:c6:89:55:c9:a9:4c: 1a:6d:be:2b:b5:a2:61:81:f7:53:88:1f:9e:c1:8f: 12:59:e6:40:c5:26:ac:15:a8:88:b0:55:81:70:c3: 68:da:9c:38:9d:88:23:71:11:92:2f:0f:0d:05:d3: 8a:7a:ba:54:e8:52:9e:d9:b3:77:b5:5c:c3:06:df: 56:bb:aa:84:c7:f4:7c:53:79:67:20:e5:ec:47:f0: 95:56:41:6c:d8:48:d2:77:23:8a:d5:1a:c4:84:ff: a8:55:4a:d2:0f:9f:5f:76:99:1e:18:65:9e:6f:db: a3:86:f5:dd:56:e7:5a:7e:95:37:5f:ec:e3:43:31: 95:22:92:3e:e1:4c:5a:3b:ce:ea:2a:d5:d0:53:e3: 9f:d9:3c:11:ab:f7:2a:0a:02:bf:66:90:22:0d:bc: b5:72:37:d2:f9:b7:c2:d6:33:33:3e:f0:d3:fc:b1: f8:1a:e0:17:80:d2:3d:d9:bb:81:f8:47:9b:ac:57: 31:b8:20:8a:13:2e:0a:60:69:05:32:35:b5:b5:6f: 87:c5:69:27:f6:17:9e:59:dd:4e:6c:d3:93:c1:e3: 73:98:45:61:18:98:2a:ba:d9:75:d6:cd:aa:98:c1: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:EB:64:7A:FB:F9:41:7A:49:E2:9D:9B:D8:1C:9D:B4:9C:D5:E2 X509v3 Authority Key Identifier: keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6c:6f:6d:2a:78:eb:ca:d4:47:e1:b4:9a:13:34:21:5f:f7: 97:c4:5d:b0:b9:cc:a3:c1:95:91:71:4c:8a:2b:f5:b0:3b:a2: 5f:cb:8d:fd:13:b9:d7:a8:81:e0:e9:61:e8:17:76:7c:fe:cf: 4e:dc:47:71:29:fe:08:25:c2:8a:13:06:a1:8d:f7:92:dd:9a: 71:6d:17:f9:1f:25:d7:f7:7a:2f:d8:9f:d2:8c:93:11:8c:8d: 0a:f6:b2:55:ea:3f:d9:5f:a9:74:d6:51:b3:e1:bc:2f:8e:75: ec:90:39:2c:c6:bb:3d:69:c1:cc:43:f9:4f:48:37:14:ed:6e: 4e:e5:aa:58:91:9a:24:ab:77:94:09:54:2d:cc:e2:63:bf:3d: a5:24:72:ea:b4:7e:3a:34:6c:05:77:98:f1:2b:d8:84:15:0d: 2f:21:4b:11:e1:97:17:14:a6:49:f5:1d:57:e2:a1:33:01:ab: 4f:87:f7:18:18:4d:8a:17:45:7c:b1:46:34:e9:c2:90:47:89: 9f:c1:96:f4:5f:e8:4a:21:fd:4b:74:da:1b:a2:85:e5:a0:de: 16:3e:d1:bd:e8:fa:7e:9f:3b:56:9d:90:ac:17:cf:f8:fc:fc: 99:e2:bc:a0:0e:34:e3:4a:e3:c8:41:43:96:6f:1b:55:a9:a7: ed:2e:d2:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QP+lLBVs6B6e4Ig4LwwcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTE1NjA5NjU2ZjA4ZjdhMjhkMjRiN2M0YmE5YjYzOWNh MGIwMDkwHhcNMjUxMjA2MjAwMTA4WhcNMjUxMjA3MjAwMTA4WjAzMTEwLwYDVQQD Eyg5N2ZmZWI2NDdhZmJmOTQxN2E0OWUyOWQ5YmQ4MWM5ZGI0OWNkNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW0wRyQRTbp+z3bgiF4KB+GlTgYA rpjGiVXJqUwabb4rtaJhgfdTiB+ewY8SWeZAxSasFaiIsFWBcMNo2pw4nYgjcRGS Lw8NBdOKerpU6FKe2bN3tVzDBt9Wu6qEx/R8U3lnIOXsR/CVVkFs2EjSdyOK1RrE hP+oVUrSD59fdpkeGGWeb9ujhvXdVudafpU3X+zjQzGVIpI+4UxaO87qKtXQU+Of 2TwRq/cqCgK/ZpAiDby1cjfS+bfC1jMzPvDT/LH4GuAXgNI92buB+EebrFcxuCCK Ey4KYGkFMjW1tW+HxWkn9heeWd1ObNOTweNzmEVhGJgqutl11s2qmMGI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf/62R6+/lBekninZvYHJ20nNXiMB8GA1UdIwQY MBaAFNiRVgllbwj3oo0kt8S6m2OcoLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMt ZmU0YjVlMzQ2ODQwLzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMtZmU0YjVlMzQ2ODQw LzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWxvbSp4 68rUR+G0mhM0IV/3l8RdsLnMo8GVkXFMiiv1sDuiX8uN/RO516iB4Olh6Bd2fP7P TtxHcSn+CCXCihMGoY33kt2acW0X+R8l1/d6L9if0oyTEYyNCvayVeo/2V+pdNZR s+G8L4517JA5LMa7PWnBzEP5T0g3FO1uTuWqWJGaJKt3lAlULcziY789pSRy6rR+ OjRsBXeY8SvYhBUNLyFLEeGXFxSmSfUdV+KhMwGrT4f3GBhNihdFfLFGNOnCkEeJ n8GW9F/oSiH9S3TaG6KF5aDeFj7Rvej6fp87Vp2QrBfP+Pz8meK8oA4040rjyEFD lm8bVamn7S7S5Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:25 2025 by rpki-client