This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json) Hash identifier: 3RVmqiXo2F4vjl3iq4wKUeRAdelewNk8OCs1HJbGoys= Subject key identifier: 1F:F4:89:D7:16:9E:3C:84:F8:98:40:95:0A:F2:A9:F8:A9:AA:38:ED Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20 Certificate serial: 019AF2769C6A82A864F39748C9672F8A443C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft Manifest number: 0C09 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 5WaZCnp2h2fpLcYMeX6kLncs6JGUQEG0QO/DDjEgRKY=) 2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9c:6a:82:a8:64:f3:97:48:c9:67:2f:8a:44:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20 Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=1ff489d7169e3c84f89840950af2a9f8a9aa38ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1e:12:2c:33:65:0e:08:8a:51:93:ea:e4:b2: d5:24:c5:87:9a:6f:f7:20:f8:8a:d9:9d:46:d0:8b: c1:20:37:18:31:8c:a7:8b:32:46:8f:ea:f5:1a:58: eb:c4:e9:2a:55:85:d6:bf:77:6a:11:4e:e5:d5:50: 7b:e8:41:af:bb:84:ae:54:2d:3f:8a:cc:5c:3a:52: 69:18:24:47:60:93:7f:81:1c:25:5b:fa:a4:19:0e: d7:37:2d:9b:21:20:80:95:34:02:c7:5f:53:1e:c9: cc:31:bb:5f:fb:2e:79:86:8a:95:25:cb:73:bb:47: 9a:8d:11:71:c6:83:46:79:1b:aa:11:75:e5:a5:00: d8:53:7c:57:05:9d:36:c1:b7:8a:b9:24:62:cb:a5: 60:9c:50:e7:cd:37:a6:31:34:5c:09:e3:1d:f4:88: 3a:f5:a5:fd:25:5e:84:37:b0:58:9a:3c:37:5a:e8: 06:fe:de:00:69:fb:f8:a7:ac:e1:77:bd:2b:b8:8a: f0:95:34:75:de:05:1c:1c:ca:67:fe:69:bd:56:67: 4b:b6:6f:40:72:d6:d7:af:ad:39:f2:03:9b:3a:d1: 95:2c:15:1f:a0:28:dd:a0:71:ce:6b:de:fc:c7:f2: 19:5d:11:bd:b5:ae:75:1d:dd:88:92:d9:1a:b7:a0: 8e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:89:D7:16:9E:3C:84:F8:98:40:95:0A:F2:A9:F8:A9:AA:38:ED X509v3 Authority Key Identifier: keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:46:25:53:f5:c7:c6:9d:be:c6:54:ed:c7:cc:93:6d:97:65: 9c:1b:c1:4d:58:ad:2e:9f:d4:e7:70:e9:1e:ed:7d:7c:55:5d: b3:a2:6d:6c:c0:46:a3:c9:91:26:0d:1f:df:d6:83:d5:56:80: 04:53:07:b3:00:e4:a2:cb:fe:36:38:b8:8a:42:b3:d0:71:85: 38:50:0a:5a:c8:e6:84:2a:ab:4f:b1:56:a9:17:24:bf:3c:70: dd:5a:30:e1:24:1e:eb:d7:54:65:75:e4:0e:5e:ac:45:7f:23: a5:3d:e9:ec:65:89:cc:dc:8c:cf:2a:c4:8a:e9:e9:46:b6:c9: 74:15:fc:18:f8:0e:8d:d0:05:74:41:aa:bc:87:6d:21:7d:95: 58:b1:0c:d6:b0:14:50:43:71:29:c1:4d:75:bd:1c:48:37:c8: e3:11:57:a6:20:de:ab:54:08:ad:18:94:27:b5:2f:0b:06:8b: 5d:af:1c:49:7a:07:1d:4d:b0:d6:4f:49:49:17:ff:cc:d9:ed: 1c:aa:0a:23:fb:63:b5:d5:81:fc:49:79:e0:da:43:65:ea:a6: bd:37:70:99:3f:6a:a7:6d:82:f7:82:e8:7f:94:ba:72:f7:fc: 87:0e:71:53:f2:b1:ed:b2:84:21:de:91:f0:b9:7b:bd:4c:81: 08:5c:5d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpxqgqhk85dIyWcvikQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmY5ZTE3YjliNDE5ODhhOTI1OTljYmNhYmEwMzkxZmZi NjFhMjAwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygxZmY0ODlkNzE2OWUzYzg0Zjg5ODQwOTUwYWYyYTlmOGE5YWEzOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix4SLDNlDgiKUZPq5LLVJMWHmm/3 IPiK2Z1G0IvBIDcYMYynizJGj+r1GljrxOkqVYXWv3dqEU7l1VB76EGvu4SuVC0/ isxcOlJpGCRHYJN/gRwlW/qkGQ7XNy2bISCAlTQCx19THsnMMbtf+y55hoqVJctz u0eajRFxxoNGeRuqEXXlpQDYU3xXBZ02wbeKuSRiy6VgnFDnzTemMTRcCeMd9Ig6 9aX9JV6EN7BYmjw3WugG/t4Aafv4p6zhd70ruIrwlTR13gUcHMpn/mm9VmdLtm9A ctbXr6058gObOtGVLBUfoCjdoHHOa978x/IZXRG9ta51Hd2Iktkat6COBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/0idcWnjyE+JhAlQryqfipqjjtMB8GA1UdIwQY MBaAFNn/nhe5tBmIqSWZy8q6A5H/thogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYt MzdhMGU0NzRhYjE1LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYtMzdhMGU0NzRhYjE1 LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkYlU/XH xp2+xlTtx8yTbZdlnBvBTVitLp/U53DpHu19fFVds6JtbMBGo8mRJg0f39aD1VaA BFMHswDkosv+Nji4ikKz0HGFOFAKWsjmhCqrT7FWqRckvzxw3Vow4SQe69dUZXXk Dl6sRX8jpT3p7GWJzNyMzyrEiunpRrbJdBX8GPgOjdAFdEGqvIdtIX2VWLEM1rAU UENxKcFNdb0cSDfI4xFXpiDeq1QIrRiUJ7UvCwaLXa8cSXoHHU2w1k9JSRf/zNnt HKoKI/tjtdWB/El54NpDZeqmvTdwmT9qp22C94Lof5S6cvf8hw5xU/Kx7bKEId6R 8Ll7vUyBCFxdeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:46 2025 by rpki-client