This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json) Hash identifier: 90NsJtrg19KFjiuxaorSq4m2BJBZwpqBY/+UG5HFJ4k= Subject key identifier: 96:D4:45:78:DB:F6:7D:1D:33:EC:2F:82:BB:58:6C:12:3F:6C:39:EB Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75 Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75 Certificate serial: 019B2C9CF9E464B5CFFA5568178D2D8DB993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft Manifest number: 088F Signing time: Wed 17 Dec 2025 14:00:43 +0000 Manifest this update: Wed 17 Dec 2025 14:00:43 +0000 Manifest next update: Thu 18 Dec 2025 14:00:43 +0000 Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: CWKLkxOAs4k2wQKKVC9xf3cHBPtYOoKjro13hiHui1w=) 2: hdAMTn4jDkrD2hHAq0_eM98drDA.roa (hash: tBnX0T05qx7IyB4+d81WJZpMceoIZZmZdpDJiqlpcEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9c:f9:e4:64:b5:cf:fa:55:68:17:8d:2d:8d:b9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75 Validity Not Before: Dec 17 14:00:43 2025 GMT Not After : Dec 18 14:00:43 2025 GMT Subject: CN=96d44578dbf67d1d33ec2f82bb586c123f6c39eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:e9:92:e2:70:00:c2:9d:c5:9d:e7:a2:f9: a8:d8:d9:ab:4f:31:8e:35:52:79:2c:fa:be:04:eb: 13:53:b9:bf:ed:24:7e:b6:dd:04:06:e0:74:b9:0b: 9e:5c:7a:0c:79:66:05:e0:74:32:b4:01:7f:51:9f: e9:de:70:88:9c:e5:ba:01:4e:f0:c1:d4:b3:07:94: b3:e4:42:1b:f5:d9:0c:0d:b0:d7:e6:2b:d5:6b:86: 3a:e6:6b:92:f2:0a:d2:30:e8:6b:b4:12:9f:51:f5: c4:38:a0:55:1b:1c:6d:50:c5:16:03:e5:ec:d3:38: 29:33:71:15:56:48:f2:fd:bb:4a:96:7a:9a:4c:4b: 99:1c:c1:c2:f0:45:92:6c:90:66:60:93:60:4e:b1: 97:06:eb:4a:57:56:46:67:7f:2b:30:04:26:e4:3a: 26:bd:9c:3e:1d:ad:2c:09:bb:75:27:d6:da:5b:98: 97:16:0b:47:5d:4e:39:26:56:b3:00:a7:c5:18:10: 17:66:02:5e:45:15:64:39:55:88:be:70:92:c8:94: 35:3b:e9:5f:2e:d1:92:c6:33:e6:e9:1b:fd:d5:2d: 7b:e0:95:2e:93:5e:b4:c0:c7:93:fd:6d:1f:d6:5c: fc:78:cf:bc:d0:2c:77:f4:6b:9b:46:12:22:f3:3a: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:45:78:DB:F6:7D:1D:33:EC:2F:82:BB:58:6C:12:3F:6C:39:EB X509v3 Authority Key Identifier: keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:09:44:b7:19:73:be:7c:20:1d:76:4e:84:5d:74:fc:99:61: 1e:c8:ec:31:ac:8f:a5:a5:a3:66:ac:9c:7f:7f:a6:ea:41:7b: ec:7e:19:6f:3e:96:c7:7b:93:ed:77:f2:81:b1:a7:87:98:6b: f9:d4:f0:59:79:fb:e8:c5:81:a7:e5:a9:e3:a2:74:39:d3:ac: a0:b6:17:b2:45:ef:1f:b1:08:76:68:ac:b6:92:00:e9:33:40: 8b:b2:9e:17:88:bd:ec:06:6a:bf:93:85:76:9e:6c:50:bb:ba: 44:7c:a7:d0:f5:3c:9a:8b:b1:a1:f1:64:06:54:79:86:34:c8: 9d:8d:ac:49:54:82:48:fb:c7:5e:00:a1:2a:99:bc:7b:74:dd: 02:0a:fe:b5:e3:32:a7:9d:c5:cc:c8:96:c9:c9:3c:d5:16:fb: 1c:88:10:ac:f9:65:24:0f:4f:9b:59:f4:04:3e:af:25:d6:a6: 15:8e:a5:63:e5:13:bf:2a:69:87:27:bd:ec:35:e4:0d:b3:96: 5b:ee:f6:da:40:03:aa:e6:b0:cb:2d:dd:55:23:6f:8b:e7:02: 16:93:88:39:97:2a:f9:8b:ec:a6:6f:2a:a1:95:6e:97:64:43: ea:72:04:9a:d9:4c:a6:30:23:2a:2a:25:a2:0c:6e:3f:df:6d: 5c:2c:55:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnPnkZLXP+lVoF40tjbmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MGI0OTdkNTFiZDlmNDdiODRmNjkzZDY4N2ZiZThjZjZj ZmZiNzUwHhcNMjUxMjE3MTQwMDQzWhcNMjUxMjE4MTQwMDQzWjAzMTEwLwYDVQQD Eyg5NmQ0NDU3OGRiZjY3ZDFkMzNlYzJmODJiYjU4NmMxMjNmNmMzOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl7pkuJwAMKdxZ3novmo2NmrTzGO NVJ5LPq+BOsTU7m/7SR+tt0EBuB0uQueXHoMeWYF4HQytAF/UZ/p3nCInOW6AU7w wdSzB5Sz5EIb9dkMDbDX5ivVa4Y65muS8grSMOhrtBKfUfXEOKBVGxxtUMUWA+Xs 0zgpM3EVVkjy/btKlnqaTEuZHMHC8EWSbJBmYJNgTrGXButKV1ZGZ38rMAQm5Dom vZw+Ha0sCbt1J9baW5iXFgtHXU45JlazAKfFGBAXZgJeRRVkOVWIvnCSyJQ1O+lf LtGSxjPm6Rv91S174JUuk160wMeT/W0f1lz8eM+80Cx39GubRhIi8zrX5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbURXjb9n0dM+wvgrtYbBI/bDnrMB8GA1UdIwQY MBaAFNgLSX1RvZ9HuE9pPWh/voz2z/t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMt NGM4NTQ0NWEwMzZhLzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMtNGM4NTQ0NWEwMzZh LzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwlEtxlz vnwgHXZOhF10/JlhHsjsMayPpaWjZqycf3+m6kF77H4Zbz6Wx3uT7XfygbGnh5hr +dTwWXn76MWBp+Wp46J0OdOsoLYXskXvH7EIdmistpIA6TNAi7KeF4i97AZqv5OF dp5sULu6RHyn0PU8mouxofFkBlR5hjTInY2sSVSCSPvHXgChKpm8e3TdAgr+teMy p53FzMiWyck81Rb7HIgQrPllJA9Pm1n0BD6vJdamFY6lY+UTvypphye97DXkDbOW W+722kADquawyy3dVSNvi+cCFpOIOZcq+Yvspm8qoZVul2RD6nIEmtlMpjAjKiol ogxuP99tXCxVRA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:55:27 2025 by rpki-client