This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json) Hash identifier: xrzGFwRbUaJHOEpXSU+8VrkAIEjcquzMANDAJebYtKY= Subject key identifier: D5:2C:D7:AF:85:5F:30:35:0C:22:98:05:BC:C4:E9:FF:A9:C2:F7:A1 Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75 Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75 Certificate serial: 019AF2ADA554AA0747A67B07E3203EFF9540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft Manifest number: 0871 Signing time: Sat 06 Dec 2025 08:00:57 +0000 Manifest this update: Sat 06 Dec 2025 08:00:57 +0000 Manifest next update: Sun 07 Dec 2025 08:00:57 +0000 Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: STQeJHOFu3ucHAXheA3BvLxf1GMQDZRWiPQ8H467zhI=) 2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a5:54:aa:07:47:a6:7b:07:e3:20:3e:ff:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75 Validity Not Before: Dec 6 08:00:57 2025 GMT Not After : Dec 7 08:00:57 2025 GMT Subject: CN=d52cd7af855f30350c229805bcc4e9ffa9c2f7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:0d:36:33:a3:77:76:bd:bc:6e:77:be:e0: ec:81:64:86:02:64:ca:d7:82:95:04:48:54:38:2b: f0:11:c0:50:78:22:3b:07:90:e2:87:91:c9:7e:ed: b8:67:f9:e5:f3:1b:54:fb:5b:ff:77:a8:74:b9:43: 8d:09:52:04:00:20:cf:2d:14:50:31:73:6d:02:15: f6:52:fd:50:a1:f2:c7:5b:03:7c:c7:b8:27:d1:49: 16:dc:91:a5:37:b8:9c:7a:6c:84:4f:eb:24:f0:61: 99:09:de:b1:d8:87:11:02:9b:24:e4:72:0c:a2:24: d9:46:fa:7c:9a:5a:3b:78:0a:0d:47:ff:21:93:f9: df:8d:c9:51:d6:b9:c8:cc:8e:99:0b:9a:07:a9:a4: f0:87:42:22:30:49:30:c7:d5:69:93:f0:26:63:e1: df:00:83:31:b4:14:25:86:d7:20:a0:22:77:70:9c: 4b:c0:3d:47:51:4d:f9:1d:62:0b:5d:de:16:ea:6f: 46:ff:f4:fa:ad:0e:7f:44:0c:4a:c0:db:1e:35:03: 99:11:94:d0:3b:ac:43:eb:5d:1f:fe:2a:2c:ef:d0: bb:9c:ae:4b:5f:51:82:bc:4a:e0:e7:b0:4a:79:00: 73:06:10:50:91:c0:e4:9f:55:6f:07:bf:1b:39:c6: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2C:D7:AF:85:5F:30:35:0C:22:98:05:BC:C4:E9:FF:A9:C2:F7:A1 X509v3 Authority Key Identifier: keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dc:42:10:22:00:84:b2:16:8a:23:1b:e2:0d:25:14:b2:56: de:74:17:18:fd:d4:e6:1a:0f:5b:68:b1:af:6d:00:1f:fd:63: be:74:81:58:09:53:90:aa:68:86:d2:7d:0b:0b:5b:33:77:67: a9:d6:14:9a:06:d1:87:b8:3a:4c:63:0b:e1:ce:77:b4:aa:3c: 93:86:a8:94:3d:fb:21:aa:8a:a3:12:00:98:60:60:a5:0c:a2: d6:6c:2c:f4:9a:19:f0:24:ad:74:72:61:a5:b3:9b:ae:57:76: 11:79:f3:78:40:b1:e0:8a:ec:dd:62:b5:45:09:99:00:79:6f: 12:18:8d:2c:74:3a:14:19:32:2d:92:be:fd:e0:0e:c2:4e:52: d4:5a:a4:89:3f:05:2a:5b:7b:b8:61:c5:0f:d3:bd:68:91:7d: ad:10:c0:6d:9f:a0:6a:78:50:b0:f3:d9:8e:20:ad:c6:98:f9: e5:fc:0a:7c:2b:2a:2b:0c:2b:3d:d5:4d:dd:bd:f5:0f:1d:7b: 0d:ba:d4:06:aa:4c:0e:1e:b8:da:16:52:bb:b0:d9:6f:8d:bd: 11:54:93:74:3c:7a:7b:67:f9:d1:5b:2b:0e:ba:86:08:74:7e: 87:cb:ed:a2:d1:53:7e:d5:c5:33:ac:54:e4:92:fb:ee:25:b6: 0c:f3:4c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraVUqgdHpnsH4yA+/5VAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MGI0OTdkNTFiZDlmNDdiODRmNjkzZDY4N2ZiZThjZjZj ZmZiNzUwHhcNMjUxMjA2MDgwMDU3WhcNMjUxMjA3MDgwMDU3WjAzMTEwLwYDVQQD EyhkNTJjZDdhZjg1NWYzMDM1MGMyMjk4MDViY2M0ZTlmZmE5YzJmN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1psNNjOjd3a9vG53vuDsgWSGAmTK 14KVBEhUOCvwEcBQeCI7B5Dih5HJfu24Z/nl8xtU+1v/d6h0uUONCVIEACDPLRRQ MXNtAhX2Uv1QofLHWwN8x7gn0UkW3JGlN7icemyET+sk8GGZCd6x2IcRApsk5HIM oiTZRvp8mlo7eAoNR/8hk/nfjclR1rnIzI6ZC5oHqaTwh0IiMEkwx9Vpk/AmY+Hf AIMxtBQlhtcgoCJ3cJxLwD1HUU35HWILXd4W6m9G//T6rQ5/RAxKwNseNQOZEZTQ O6xD610f/ios79C7nK5LX1GCvErg57BKeQBzBhBQkcDkn1VvB78bOcaBoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUs16+FXzA1DCKYBbzE6f+pwvehMB8GA1UdIwQY MBaAFNgLSX1RvZ9HuE9pPWh/voz2z/t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMt NGM4NTQ0NWEwMzZhLzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMtNGM4NTQ0NWEwMzZh LzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdxCECIA hLIWiiMb4g0lFLJW3nQXGP3U5hoPW2ixr20AH/1jvnSBWAlTkKpohtJ9CwtbM3dn qdYUmgbRh7g6TGML4c53tKo8k4aolD37IaqKoxIAmGBgpQyi1mws9JoZ8CStdHJh pbObrld2EXnzeECx4Irs3WK1RQmZAHlvEhiNLHQ6FBkyLZK+/eAOwk5S1FqkiT8F Klt7uGHFD9O9aJF9rRDAbZ+ganhQsPPZjiCtxpj55fwKfCsqKwwrPdVN3b31Dx17 DbrUBqpMDh642hZSu7DZb429EVSTdDx6e2f50VsrDrqGCHR+h8vtotFTftXFM6xU 5JL77iW2DPNMlw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:57 2025 by rpki-client