This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json) Hash identifier: nSjqkerSVEWUY7N2iHPoytw3Ri64tDZxjnnIOVgGvIA= Subject key identifier: 98:4D:DB:73:DA:FD:2A:88:F5:4D:C6:64:B2:A2:C0:E4:37:E8:09:0A Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Certificate serial: 019AF4654787892DB565E3B896205C5CB448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 16:01:09 +0000 Manifest this update: Sat 06 Dec 2025 16:01:09 +0000 Manifest next update: Sun 07 Dec 2025 16:01:09 +0000 Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: fRFrh28T1i+XfRkY1SyYBjgwoFXy4RMzjbed5uS7PHQ=) 2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:47:87:89:2d:b5:65:e3:b8:96:20:5c:5c:b4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Validity Not Before: Dec 6 16:01:09 2025 GMT Not After : Dec 7 16:01:09 2025 GMT Subject: CN=984ddb73dafd2a88f54dc664b2a2c0e437e8090a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:0e:5c:7b:8e:0e:b5:7a:9a:88:69:7b:06: 29:4b:ab:a6:f2:b0:c7:b7:cd:e8:6e:3c:47:f5:f0: dd:7e:28:5c:6d:12:5f:e3:b7:4f:5b:99:e1:e3:cc: 67:61:c2:65:c7:12:4b:23:c8:30:01:2b:01:fe:0f: bf:4a:0f:06:8a:fc:a3:e8:72:57:5e:d5:b7:30:02: 8c:22:b9:cd:2d:a5:fb:c4:b6:bf:92:9a:fc:21:e0: 2c:82:db:62:9b:0a:71:26:65:d5:71:47:ba:71:9f: 46:55:9b:d4:7f:e3:8b:b1:d8:bd:ed:87:81:4e:53: c4:a1:33:f4:6c:a3:14:a2:5a:37:12:ca:55:6b:7f: 69:4b:66:b8:ca:73:42:70:88:f6:af:fd:31:5f:3e: a7:a0:18:cf:e4:f2:ae:82:5b:38:e9:cf:f9:a5:7d: dd:32:67:ed:15:1d:9e:de:40:8a:4f:ed:83:fb:6a: 7c:78:4a:b0:86:40:7c:b5:a3:81:66:20:9c:2f:ed: 9b:cc:b5:4a:76:a8:3b:9a:ef:e7:34:9c:2b:3b:11: 58:1a:48:d5:e1:87:40:60:44:75:b7:b3:7f:76:7a: 41:13:7b:96:fb:10:53:ce:b9:88:42:0b:f4:d7:ef: 88:ea:e6:04:c7:99:67:98:bd:0b:3f:dc:b6:34:45: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4D:DB:73:DA:FD:2A:88:F5:4D:C6:64:B2:A2:C0:E4:37:E8:09:0A X509v3 Authority Key Identifier: keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4c:e9:f5:5a:80:11:97:46:31:60:22:b2:32:ab:cf:75:76: 3e:53:8a:20:a1:44:f0:95:0c:f4:48:b5:34:96:eb:f9:87:6b: e8:37:db:d6:a7:be:51:17:be:e5:c3:1e:ab:00:66:38:60:83: 74:a4:9a:be:af:f8:07:73:17:36:ba:2c:81:1c:78:72:18:3d: 26:22:82:14:cf:d6:e9:cc:0a:9a:b5:ae:97:97:e9:f6:17:ef: e4:6f:a8:66:cc:ff:98:0c:07:7a:4e:1c:9b:d9:8a:39:64:c4: 52:72:80:dd:97:6f:0a:84:70:ea:fd:07:4c:ac:30:67:fa:26: 20:0b:be:a0:a5:bb:41:4b:74:5b:ee:1c:9c:43:47:93:9d:3d: 8a:a5:e2:89:20:f3:db:cc:f4:28:07:bd:fd:75:df:4d:66:75: 26:b3:9b:2c:13:f2:96:5e:aa:e8:0f:8a:b2:82:ea:0f:27:1d: 0d:0c:1d:09:78:99:21:98:0e:c7:26:06:3a:10:2f:71:a3:23: e0:c6:af:5a:44:6c:8e:90:81:ed:15:5a:c5:09:d1:68:0d:56: 7a:f8:ff:ef:3d:fa:3a:80:39:be:51:da:7c:0c:91:7a:da:a1: 34:93:f6:c7:e8:9b:06:07:b8:06:23:a9:e6:24:0d:ea:6b:83: 43:05:47:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUeHiS21ZeO4liBcXLRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh MmJjNjcwHhcNMjUxMjA2MTYwMTA5WhcNMjUxMjA3MTYwMTA5WjAzMTEwLwYDVQQD Eyg5ODRkZGI3M2RhZmQyYTg4ZjU0ZGM2NjRiMmEyYzBlNDM3ZTgwOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0UOXHuODrV6mohpewYpS6um8rDH t83objxH9fDdfihcbRJf47dPW5nh48xnYcJlxxJLI8gwASsB/g+/Sg8Givyj6HJX XtW3MAKMIrnNLaX7xLa/kpr8IeAsgttimwpxJmXVcUe6cZ9GVZvUf+OLsdi97YeB TlPEoTP0bKMUolo3EspVa39pS2a4ynNCcIj2r/0xXz6noBjP5PKugls46c/5pX3d MmftFR2e3kCKT+2D+2p8eEqwhkB8taOBZiCcL+2bzLVKdqg7mu/nNJwrOxFYGkjV 4YdAYER1t7N/dnpBE3uW+xBTzrmIQgv01++I6uYEx5lnmL0LP9y2NEUZIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhN23Pa/SqI9U3GZLKiwOQ36AkKMB8GA1UdIwQY MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2 LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUzp9VqA EZdGMWAisjKrz3V2PlOKIKFE8JUM9Ei1NJbr+Ydr6Dfb1qe+URe+5cMeqwBmOGCD dKSavq/4B3MXNrosgRx4chg9JiKCFM/W6cwKmrWul5fp9hfv5G+oZsz/mAwHek4c m9mKOWTEUnKA3ZdvCoRw6v0HTKwwZ/omIAu+oKW7QUt0W+4cnENHk509iqXiiSDz 28z0KAe9/XXfTWZ1JrObLBPyll6q6A+KsoLqDycdDQwdCXiZIZgOxyYGOhAvcaMj 4MavWkRsjpCB7RVaxQnRaA1Wevj/7z36OoA5vlHafAyRetqhNJP2x+ibBge4BiOp 5iQN6muDQwVHIA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:43 2025 by rpki-client