This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json) Hash identifier: spgONNIymdd8YxsLleva/yB00MTMKriDZqia1sdgRNw= Subject key identifier: 0A:D4:33:18:C8:E3:46:2A:C2:E6:D2:D5:5E:B6:10:D0:AA:21:B5:3B Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81 Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81 Certificate serial: 019AF2766B20662A365F9CE71DCE219C9F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: 18LRJQNyrOn6JMnWWAd0cxTwplIVgyDfroSB1lnN8Cg=) 2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6b:20:66:2a:36:5f:9c:e7:1d:ce:21:9c:9f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=0ad43318c8e3462ac2e6d2d55eb610d0aa21b53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:2d:85:ee:0f:8f:6a:75:8f:ac:19:10:ae: 22:11:c7:37:3f:02:b2:cd:8f:e8:86:08:7c:c2:5c: 26:6d:0f:af:9e:e6:e4:ff:71:c9:85:29:58:4a:3c: 6c:6b:3d:f1:68:07:6a:75:53:22:78:1e:e3:60:90: fa:16:80:05:44:47:b5:76:43:bc:bb:c6:13:1b:d5: 03:55:05:cf:7b:3a:a0:e0:51:cd:a3:fb:5b:df:67: c0:54:a3:68:85:66:b6:35:0a:ba:b0:6c:8f:5d:04: 9d:b6:b2:c0:97:ac:ab:4e:f4:c5:1a:2b:67:8d:93: e6:42:34:17:81:4a:bc:19:14:d7:63:a7:e6:6f:97: 54:1f:04:40:b7:77:75:76:46:c0:8c:eb:57:c8:92: d3:03:d5:a4:d3:54:92:95:90:a1:84:b0:92:9c:92: 08:de:a6:4a:f2:b7:a8:ee:4b:fb:fb:2c:1f:3a:32: ea:08:10:d2:ee:d9:b0:c4:66:a5:ec:83:5c:d4:3e: 15:7a:25:9d:94:19:ad:16:58:6e:cc:bd:57:dd:e1: 04:4f:0f:1a:ed:76:7b:dd:5f:17:71:f1:fb:6e:1f: 4b:da:00:3f:2e:e3:db:8c:d9:16:9a:c1:da:5d:2b: 04:30:ec:de:28:2f:6d:a1:26:a0:fc:d6:ec:10:d9: de:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D4:33:18:C8:E3:46:2A:C2:E6:D2:D5:5E:B6:10:D0:AA:21:B5:3B X509v3 Authority Key Identifier: keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:68:bc:bd:7f:cc:42:cd:10:01:61:29:d7:ab:fd:0b:4d:ba: 16:47:af:70:0e:40:62:be:76:b1:b0:40:31:9a:79:89:65:98: 4a:81:ed:92:f1:3c:4b:be:5f:cf:2f:64:99:57:cc:0b:ee:f6: d0:ef:44:9e:9b:09:48:87:6e:b9:4a:b0:14:3b:63:65:90:4a: d0:01:e5:70:7f:10:c0:d4:4a:49:6c:53:10:1c:85:7d:76:26: 59:24:00:a3:fd:24:5a:d4:5d:f5:2d:0e:f8:b1:65:ea:68:6a: 16:81:98:ad:2d:ef:24:48:4c:35:f9:a8:36:81:c4:76:30:f6: 1c:0e:ee:29:ae:c4:d3:d1:07:8f:fd:35:11:5f:5e:35:57:8b: db:97:21:93:2b:7b:c0:f3:95:bb:dc:48:03:2d:cc:ce:66:99: 8e:58:6d:d5:e0:63:71:b8:3d:23:24:a1:bc:90:ef:8f:c2:02: bd:9a:2c:e3:5b:a0:13:8e:f8:4b:96:c2:db:9a:73:4e:88:7b: e4:07:45:08:33:fc:bb:f9:b8:a3:b8:4b:68:33:c1:34:64:72: 07:c6:79:11:3e:b0:13:3d:27:cd:e0:c6:92:b0:69:ab:2f:47: 1e:f9:22:4a:c1:72:3b:2e:d7:5e:68:3f:66:95:a2:f7:c2:5f: 9a:aa:8e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmsgZio2X5znHc4hnJ+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm N2VjODEwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EygwYWQ0MzMxOGM4ZTM0NjJhYzJlNmQyZDU1ZWI2MTBkMGFhMjFiNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT0the4Pj2p1j6wZEK4iEcc3PwKy zY/ohgh8wlwmbQ+vnubk/3HJhSlYSjxsaz3xaAdqdVMieB7jYJD6FoAFREe1dkO8 u8YTG9UDVQXPezqg4FHNo/tb32fAVKNohWa2NQq6sGyPXQSdtrLAl6yrTvTFGitn jZPmQjQXgUq8GRTXY6fmb5dUHwRAt3d1dkbAjOtXyJLTA9Wk01SSlZChhLCSnJII 3qZK8reo7kv7+ywfOjLqCBDS7tmwxGal7INc1D4VeiWdlBmtFlhuzL1X3eEETw8a 7XZ73V8XcfH7bh9L2gA/LuPbjNkWmsHaXSsEMOzeKC9toSag/NbsENneiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArUMxjI40YqwubS1V62ENCqIbU7MB8GA1UdIwQY MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt MjQxZWVjZmY5YWIwLzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2i8vX/M Qs0QAWEp16v9C026FkevcA5AYr52sbBAMZp5iWWYSoHtkvE8S75fzy9kmVfMC+72 0O9EnpsJSIduuUqwFDtjZZBK0AHlcH8QwNRKSWxTEByFfXYmWSQAo/0kWtRd9S0O +LFl6mhqFoGYrS3vJEhMNfmoNoHEdjD2HA7uKa7E09EHj/01EV9eNVeL25chkyt7 wPOVu9xIAy3MzmaZjlht1eBjcbg9IyShvJDvj8ICvZos41ugE474S5bC25pzToh7 5AdFCDP8u/m4o7hLaDPBNGRyB8Z5ET6wEz0nzeDGkrBpqy9HHvkiSsFyOy7XXmg/ ZpWi98JfmqqOyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:15 2025 by rpki-client