This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json) Hash identifier: sCLBbgZpgZLGhT4p6ywvWTMQprf/2AIyGP3TFLKoz04= Subject key identifier: 14:5B:20:43:9F:62:BD:CC:BC:93:9B:86:CD:C6:92:5D:3C:12:C7:5C Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e Certificate serial: 019AF0515F0E8B3ECD19633F6EF0613AE494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft Manifest number: 0200 Signing time: Fri 05 Dec 2025 21:00:55 +0000 Manifest this update: Fri 05 Dec 2025 21:00:55 +0000 Manifest next update: Sat 06 Dec 2025 21:00:55 +0000 Files and hashes: 1: Hfyt8Qxc-gVePz7GLADpDZ9etco.roa (hash: uR8oD8fOmYTQyMejXkLhA4C3sZCjQppq7tu7DlOn9C8=) 2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: 8v43DYZJbtmR6dOUSKuXj08spNyskhab7PjUa06c6XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:5f:0e:8b:3e:cd:19:63:3f:6e:f0:61:3a:e4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e Validity Not Before: Dec 5 21:00:55 2025 GMT Not After : Dec 6 21:00:55 2025 GMT Subject: CN=145b20439f62bdccbc939b86cdc6925d3c12c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:24:16:c3:53:c9:3e:a7:1a:f7:57:54:d5:51: 56:ca:ab:84:48:65:52:9c:ec:f7:1b:e3:29:a9:69: a4:eb:47:03:03:47:2f:60:66:94:ca:a0:11:67:13: ad:13:2b:86:88:9b:92:76:a9:0f:5e:39:73:fd:05: 54:19:6e:d8:cd:1a:ee:74:0f:91:99:60:9b:c8:7e: 0b:16:41:9b:9e:55:f8:f0:e1:2c:8f:99:35:0a:2f: c3:22:b9:02:f8:ca:b8:60:69:b1:4a:1f:31:09:51: bf:ce:67:86:f8:f3:7b:18:60:86:ea:93:7b:59:41: f6:eb:5f:0e:78:e0:a8:8f:0b:cf:e9:32:25:27:90: d9:b9:8a:dc:42:72:23:97:91:0e:89:03:ae:0b:d7: 4e:30:16:fa:f7:d4:96:85:22:9a:a8:28:4c:ba:bc: 18:ca:b1:45:61:42:b1:90:67:8b:1a:a9:95:67:b1: 56:ea:b9:5e:56:d3:d1:7f:3a:ce:30:35:55:de:d0: 86:8c:38:83:5b:0c:0a:af:d3:46:17:36:6b:dd:83: f7:d4:09:73:6f:3d:e1:05:a1:4f:d2:41:00:02:de: f7:c7:3b:c7:aa:90:0f:ce:35:aa:db:f7:d7:e2:c7: bb:68:79:c8:76:a2:0b:1c:c8:37:e2:aa:fc:88:d3: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5B:20:43:9F:62:BD:CC:BC:93:9B:86:CD:C6:92:5D:3C:12:C7:5C X509v3 Authority Key Identifier: keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:40:e6:55:47:34:52:b8:77:8d:0f:dd:46:cd:45:cb:48:b7: d1:d7:a8:d4:57:af:85:8c:39:3a:c2:f4:5a:99:74:51:59:a0: 5e:6f:3c:14:f1:22:ce:02:0e:bb:ac:a1:d1:6d:e8:b5:19:85: 0b:d2:b0:9f:68:19:05:0b:8d:8c:59:b8:68:87:c9:67:7b:8d: d6:7b:9f:42:c0:17:73:57:f5:9d:09:ce:39:56:26:fa:eb:8e: a1:19:b3:93:a1:9c:a4:a5:01:f3:a3:7a:15:34:c4:e1:88:e7: f0:c2:ca:87:7c:1c:d1:84:2b:87:c1:83:0a:e4:3e:24:34:9b: a4:43:8b:33:ec:a9:1c:3c:39:79:ff:77:06:d1:f7:99:56:94: 60:19:dd:e3:b4:5b:42:08:52:f2:10:14:37:0d:8f:18:7b:77: 44:df:f4:58:6b:32:a7:c1:33:e1:46:8d:1f:60:a2:2b:df:08: c2:7a:76:60:ba:96:bf:1b:45:14:cd:be:55:0d:85:a9:d8:a2: 5c:46:a2:11:63:2d:70:06:ce:13:63:9c:eb:ac:8a:2e:65:d9: 82:44:b8:1d:2e:d6:9b:53:45:bc:2e:c9:a6:85:d1:bf:35:0d: 90:14:63:7b:f0:9f:d3:e1:30:5c:a2:42:8a:ff:64:15:da:0c: ba:d2:79:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUV8Oiz7NGWM/bvBhOuSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmMyYmU3YmY0MjgyZTFjZDY5MDhmMjg5YTc5Y2VjMGE1 ZGY0MmUwHhcNMjUxMjA1MjEwMDU1WhcNMjUxMjA2MjEwMDU1WjAzMTEwLwYDVQQD EygxNDViMjA0MzlmNjJiZGNjYmM5MzliODZjZGM2OTI1ZDNjMTJjNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iQWw1PJPqca91dU1VFWyquESGVS nOz3G+MpqWmk60cDA0cvYGaUyqARZxOtEyuGiJuSdqkPXjlz/QVUGW7YzRrudA+R mWCbyH4LFkGbnlX48OEsj5k1Ci/DIrkC+Mq4YGmxSh8xCVG/zmeG+PN7GGCG6pN7 WUH2618OeOCojwvP6TIlJ5DZuYrcQnIjl5EOiQOuC9dOMBb699SWhSKaqChMurwY yrFFYUKxkGeLGqmVZ7FW6rleVtPRfzrOMDVV3tCGjDiDWwwKr9NGFzZr3YP31Alz bz3hBaFP0kEAAt73xzvHqpAPzjWq2/fX4se7aHnIdqILHMg34qr8iNMUyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRbIEOfYr3MvJObhs3Gkl08EsdcMB8GA1UdIwQY MBaAFK9sK+e/QoLhzWkI8omnnOwKXfQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUt MGQ4ZWJjZTg2Y2FjLzEvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUtMGQ4ZWJjZTg2Y2Fj LzEvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEDmVUc0 Urh3jQ/dRs1Fy0i30deo1FevhYw5OsL0Wpl0UVmgXm88FPEizgIOu6yh0W3otRmF C9Kwn2gZBQuNjFm4aIfJZ3uN1nufQsAXc1f1nQnOOVYm+uuOoRmzk6GcpKUB86N6 FTTE4Yjn8MLKh3wc0YQrh8GDCuQ+JDSbpEOLM+ypHDw5ef93BtH3mVaUYBnd47Rb QghS8hAUNw2PGHt3RN/0WGsyp8Ez4UaNH2CiK98Iwnp2YLqWvxtFFM2+VQ2Fqdii XEaiEWMtcAbOE2Oc66yKLmXZgkS4HS7Wm1NFvC7JpoXRvzUNkBRje/Cf0+EwXKJC iv9kFdoMutJ5MA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:36 2025 by rpki-client