This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json) Hash identifier: Uq1k4l0PLid/NyIMhfWrcQkt5SXVb+IBmiB8mpTOVc8= Subject key identifier: 34:21:7C:01:30:B9:EA:90:AF:51:D6:CB:8D:76:8F:4F:72:7D:F0:C9 Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Certificate serial: 019AF31C3DB77FA0CC3BBEA367993840BE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft Manifest number: 06B9 Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: mhDc75HctfTvqa0cfDJp7YjtmNgktlh+lif6LfPsjeg=) 2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3d:b7:7f:a0:cc:3b:be:a3:67:99:38:40:be:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=34217c0130b9ea90af51d6cb8d768f4f727df0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:38:13:8f:41:80:75:4b:e0:f3:03:d9:12: 8d:38:82:20:46:b6:77:10:15:2c:c7:2a:64:59:04: f1:2c:5a:ba:dd:bf:c1:4f:09:55:7d:f5:b0:ed:24: 06:bd:6e:02:32:81:dd:18:5b:ba:64:38:94:1d:54: 05:59:f2:f6:6f:fe:6a:ad:3f:5e:82:b7:c3:49:c4: a6:1b:54:ef:9b:02:79:95:3c:4d:52:3f:3f:e9:8f: 30:6e:c2:6b:f8:a6:47:d5:ac:51:12:d5:80:6f:68: 7d:bc:0b:91:00:7e:d6:0f:7a:35:30:cb:08:63:8a: f5:d5:d2:5a:36:e7:9c:a6:df:20:eb:63:48:13:9d: 3d:d0:41:85:fc:c1:d2:a4:1d:f4:92:dc:58:54:8f: 51:56:e5:42:e3:35:99:0d:bf:f9:89:5e:49:1e:d6: 21:9d:1b:16:3f:98:93:9b:4b:c5:88:21:cb:8e:16: 7e:de:d4:f6:f7:92:77:93:83:eb:e7:bc:91:dd:eb: 4b:9b:89:a4:ef:97:9b:02:b4:e7:92:f8:20:93:7f: d7:31:75:7d:3b:4f:4a:b1:f8:12:cf:19:23:49:e7: e5:ed:72:30:42:c0:e1:bb:dd:82:be:6e:06:f5:fb: c4:8d:86:ee:0a:d4:06:f4:4d:f3:6a:70:96:2c:e9: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:7C:01:30:B9:EA:90:AF:51:D6:CB:8D:76:8F:4F:72:7D:F0:C9 X509v3 Authority Key Identifier: keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1c:18:bc:ee:49:3f:84:2b:8d:30:49:44:68:52:dc:3d:81: 6c:1e:44:53:1a:2b:e9:7f:2f:23:19:2e:ce:1b:b3:33:c2:54: 77:d0:d3:3b:15:d3:08:09:b6:c1:dd:f3:6d:ca:ff:21:35:39: 9d:e6:c9:8d:d5:36:71:6f:68:92:5f:70:64:30:a7:bc:7c:cb: de:29:69:2a:b8:cb:30:3f:0c:55:d8:3b:c5:b0:c6:60:7d:a3: 9b:a8:cf:6b:50:e8:58:f0:4f:de:1b:59:8b:ce:21:b5:1a:01: d4:05:32:28:b0:bc:a3:bf:31:38:c3:19:13:a5:7d:b0:a5:1d: 54:7a:b3:53:ba:d4:2e:29:19:20:0f:fd:cd:f7:f7:58:6e:f2: 5c:b4:ee:36:9c:74:44:64:6b:2a:e8:20:86:f5:58:71:13:99: 87:48:35:34:f4:f4:2b:ca:ce:a2:1d:e4:a7:33:4a:9a:86:82: bb:9c:ed:93:61:c3:62:75:0e:03:a8:19:fc:e8:e3:1d:a4:57: 3e:87:4b:de:62:fd:f6:d3:38:e7:be:2c:52:67:e7:a6:2c:ae: 68:b0:07:de:d6:51:a7:59:cb:12:60:ba:8d:01:87:ff:2a:24: 62:63:94:95:27:a6:b0:54:c9:07:88:81:1e:54:42:c7:37:89: 0a:eb:a8:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHD23f6DMO76jZ5k4QL6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5 MWY4ZmEwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD EygzNDIxN2MwMTMwYjllYTkwYWY1MWQ2Y2I4ZDc2OGY0ZjcyN2RmMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDc4E49BgHVL4PMD2RKNOIIgRrZ3 EBUsxypkWQTxLFq63b/BTwlVffWw7SQGvW4CMoHdGFu6ZDiUHVQFWfL2b/5qrT9e grfDScSmG1TvmwJ5lTxNUj8/6Y8wbsJr+KZH1axREtWAb2h9vAuRAH7WD3o1MMsI Y4r11dJaNuecpt8g62NIE5090EGF/MHSpB30ktxYVI9RVuVC4zWZDb/5iV5JHtYh nRsWP5iTm0vFiCHLjhZ+3tT295J3k4Pr57yR3etLm4mk75ebArTnkvggk3/XMXV9 O09KsfgSzxkjSefl7XIwQsDhu92Cvm4G9fvEjYbuCtQG9E3zanCWLOkqiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQhfAEwueqQr1HWy412j09yffDJMB8GA1UdIwQY MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRwYvO5J P4QrjTBJRGhS3D2BbB5EUxor6X8vIxkuzhuzM8JUd9DTOxXTCAm2wd3zbcr/ITU5 nebJjdU2cW9okl9wZDCnvHzL3ilpKrjLMD8MVdg7xbDGYH2jm6jPa1DoWPBP3htZ i84htRoB1AUyKLC8o78xOMMZE6V9sKUdVHqzU7rULikZIA/9zff3WG7yXLTuNpx0 RGRrKugghvVYcROZh0g1NPT0K8rOoh3kpzNKmoaCu5ztk2HDYnUOA6gZ/OjjHaRX PodL3mL99tM4574sUmfnpiyuaLAH3tZRp1nLEmC6jQGH/yokYmOUlSemsFTJB4iB HlRCxzeJCuuoqA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:11 2025 by rpki-client