This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json) Hash identifier: ljOpIw9RUbSxcrfdAsUxU1FpNXuBl+py2Kt2PhktbYU= Subject key identifier: 31:8E:EA:23:AC:DC:44:4B:9B:AA:A6:18:21:1A:71:6C:B5:58:83:3D Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Certificate serial: 019AF31CB63963BE700C4EE353693267C0B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 10:02:16 +0000 Manifest this update: Sat 06 Dec 2025 10:02:16 +0000 Manifest next update: Sun 07 Dec 2025 10:02:16 +0000 Files and hashes: 1: 0ftKGAqo6skKR7cqi9qtdL_HV70.roa (hash: TjEgBHjrqw3YVxgjrIc7R6ndwP73iZoqAQbMc4u67Jw=) 2: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: 4ZYqmwvLWTAmwYTHG0sBPz1nQ3qVdTJGmH+FIELctvs=) 3: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (hash: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=) 4: 6hWOpEB79Jwd3tjKR90wreFxatA.roa (hash: Q/14jrNN3dPge3RXtvSabOT2/zXSC7oSEv0xGz0lOr8=) 5: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (hash: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=) 6: MkgmNw57sqsTbXVssEVVHrIwxnE.roa (hash: Z5vjMyipD469Qc1QSOUIWfFBwT2/MlLQmdGSNOJrb+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b6:39:63:be:70:0c:4e:e3:53:69:32:67:c0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Validity Not Before: Dec 6 10:02:16 2025 GMT Not After : Dec 7 10:02:16 2025 GMT Subject: CN=318eea23acdc444b9baaa618211a716cb558833d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:4b:b2:67:5f:29:e9:17:07:7d:8a:f6:51: 64:da:77:7d:f9:90:03:d9:ee:14:aa:67:87:a3:b9: 13:82:88:e1:90:a6:69:e3:d1:f8:4d:b1:18:3e:0a: c9:b2:82:bb:f5:73:c8:97:dc:44:ab:03:2f:f2:d3: 98:64:8d:b3:0e:94:22:f1:5f:63:1c:07:8b:19:2c: 9b:92:52:1e:21:a7:48:b3:bb:bf:6a:bb:bc:8c:ea: c1:3b:89:f8:0c:39:78:ce:33:70:92:91:85:81:46: 37:28:22:3c:12:3b:fd:45:5f:4a:d3:16:72:36:cc: fc:58:49:1e:0d:a5:7f:85:6b:51:e0:fc:a7:2a:62: 43:c7:42:13:8b:34:19:f3:b3:b5:bf:86:a0:c1:a6: 49:66:7b:ac:82:d0:92:7d:d6:bc:c7:68:64:ef:0e: c0:be:38:18:ae:2e:a6:bc:f7:fa:eb:51:92:54:55: 39:bb:e9:74:95:5d:75:d9:20:6a:fc:04:5a:d9:03: 3b:3b:1d:1d:90:32:35:9c:ca:b4:aa:4a:7f:39:01: bb:7f:3d:2c:f4:5b:59:ca:44:b7:6c:3a:b1:7c:f3: 0a:1b:ec:da:62:69:e8:ce:28:d6:af:fa:bc:f7:13: 01:67:61:85:17:d9:75:79:f8:ff:55:59:4f:1c:ca: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8E:EA:23:AC:DC:44:4B:9B:AA:A6:18:21:1A:71:6C:B5:58:83:3D X509v3 Authority Key Identifier: keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:7e:90:17:3c:4f:0a:77:50:6b:93:1c:9d:98:57:36:c8:03: 30:99:67:b7:d4:77:7a:7e:d7:8c:0d:95:1e:ed:a1:e6:7f:a3: 4f:e3:48:9f:9b:35:53:b0:ac:cd:4c:00:bf:0e:1a:3b:02:90: ba:f5:1d:c1:8b:8f:6f:f1:c4:ab:7b:07:f3:11:69:55:d7:59: d3:ca:d7:8a:30:a5:94:72:66:17:9a:13:2f:3d:ef:45:ff:37: bf:92:6c:9b:79:85:49:7c:ca:58:aa:25:7c:b6:c0:36:3b:f2: 96:4a:63:ef:3a:12:4b:6c:b8:c1:bd:99:8f:2e:4d:a7:b6:f2: 82:5e:bd:af:ea:dd:4a:1f:e2:96:b1:79:ef:66:7f:d9:d4:ea: 09:78:c9:3c:8e:f5:c8:26:14:b4:97:29:e5:70:bd:f1:4a:4a: cf:87:9a:10:54:90:fd:c9:8f:9c:4f:c6:31:f5:96:8d:87:c6: 42:0e:1b:3f:b9:07:9e:99:01:7b:d1:50:63:82:25:d5:a0:b3: d2:ed:f0:84:bc:56:65:64:d8:76:0d:9c:73:c3:8c:f7:e4:b6: 4f:bb:6a:48:f5:1f:c2:22:de:e6:bb:42:4c:2c:50:17:d8:c4: ec:49:1d:14:60:f0:aa:80:01:93:dc:1f:07:ab:e4:09:43:11: 57:1c:d1:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLY5Y75wDE7jU2kyZ8C2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5 NWE0ZWQwHhcNMjUxMjA2MTAwMjE2WhcNMjUxMjA3MTAwMjE2WjAzMTEwLwYDVQQD EygzMThlZWEyM2FjZGM0NDRiOWJhYWE2MTgyMTFhNzE2Y2I1NTg4MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9ZLsmdfKekXB32K9lFk2nd9+ZAD 2e4UqmeHo7kTgojhkKZp49H4TbEYPgrJsoK79XPIl9xEqwMv8tOYZI2zDpQi8V9j HAeLGSybklIeIadIs7u/aru8jOrBO4n4DDl4zjNwkpGFgUY3KCI8Ejv9RV9K0xZy Nsz8WEkeDaV/hWtR4PynKmJDx0ITizQZ87O1v4agwaZJZnusgtCSfda8x2hk7w7A vjgYri6mvPf661GSVFU5u+l0lV112SBq/ARa2QM7Ox0dkDI1nMq0qkp/OQG7fz0s 9FtZykS3bDqxfPMKG+zaYmnozijWr/q89xMBZ2GFF9l1efj/VVlPHMqzdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGO6iOs3ERLm6qmGCEacWy1WIM9MB8GA1UdIwQY MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt MDhiZjIyZjY0MDk3LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3 LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFn6QFzxP CndQa5McnZhXNsgDMJlnt9R3en7XjA2VHu2h5n+jT+NIn5s1U7CszUwAvw4aOwKQ uvUdwYuPb/HEq3sH8xFpVddZ08rXijCllHJmF5oTLz3vRf83v5Jsm3mFSXzKWKol fLbANjvylkpj7zoSS2y4wb2Zjy5Np7bygl69r+rdSh/ilrF572Z/2dTqCXjJPI71 yCYUtJcp5XC98UpKz4eaEFSQ/cmPnE/GMfWWjYfGQg4bP7kHnpkBe9FQY4Il1aCz 0u3whLxWZWTYdg2cc8OM9+S2T7tqSPUfwiLe5rtCTCxQF9jE7EkdFGDwqoABk9wf B6vkCUMRVxzRCw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:47 2025 by rpki-client