This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft File: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft (raw, json) Hash identifier: FMkkKdmjnnrJQIN6obKcU9Mazhdu2aT2QXifMH9+XkY= Subject key identifier: E3:A2:B3:EA:D0:81:71:23:D1:2B:0B:28:42:38:A7:37:9D:AC:2D:3F Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb Certificate serial: 019AF2E42E6F5659321D53FF80D0991C5BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft Manifest number: D4 Signing time: Sat 06 Dec 2025 09:00:31 +0000 Manifest this update: Sat 06 Dec 2025 09:00:31 +0000 Manifest next update: Sun 07 Dec 2025 09:00:31 +0000 Files and hashes: 1: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl (hash: H7h1BaJstbvnONPltWXFLVg4ELWSRMTmUTNymOEMBtE=) 2: pxwnw1PcgrCjP2FI0u6V3im7xqk.roa (hash: f0v/CDub2SSdoEUZ7uzF5yhPQYzLwuNhqz6tW+qNh1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:2e:6f:56:59:32:1d:53:ff:80:d0:99:1c:5b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb Validity Not Before: Dec 6 09:00:31 2025 GMT Not After : Dec 7 09:00:31 2025 GMT Subject: CN=e3a2b3ead0817123d12b0b284238a7379dac2d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:bb:e7:58:57:92:6e:bb:ca:e1:71:98:c8: 73:6e:a1:d7:1e:7f:e8:54:c5:e7:93:6f:e4:73:c0: ad:36:af:6d:4f:ad:dd:8a:2e:26:db:78:4a:3a:67: 3b:c8:f2:74:b7:c2:7b:8b:c4:1d:26:81:42:3a:b3: 88:cc:56:cd:b5:bb:e4:29:a0:60:c5:c1:33:7a:bf: ec:75:51:1f:fc:51:b4:92:1a:61:16:27:28:a5:48: 97:17:dd:3b:ca:68:14:f3:32:d5:b2:ba:77:f3:bb: f4:f7:a9:4b:e8:57:8f:4b:b2:39:c2:2f:74:7e:99: bf:35:5f:54:b1:c3:c4:81:7a:f3:40:66:14:9b:a1: 97:cc:e5:0f:15:bb:a1:3f:ff:c6:01:ba:ca:70:30: 98:10:73:fb:d8:bc:30:64:e7:ca:5a:18:31:05:1c: 56:26:07:31:a2:3c:7c:0d:5c:a5:78:94:e0:5b:95: 75:7e:7a:34:bd:bf:40:bc:f2:12:96:eb:f0:51:c0: 60:b5:73:c7:92:72:25:0c:53:98:14:8a:0d:6a:b2: 06:57:fe:9b:a3:75:8d:df:b3:67:43:19:66:c4:cb: 6c:f6:d1:37:79:2c:3c:58:aa:6e:10:96:06:71:34: bb:8c:88:ae:a7:c5:a9:c9:5c:6b:d6:ff:e1:fb:b9: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A2:B3:EA:D0:81:71:23:D1:2B:0B:28:42:38:A7:37:9D:AC:2D:3F X509v3 Authority Key Identifier: keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cd:2d:b8:03:ee:25:2e:72:9d:d3:b9:18:41:b5:d8:bc:46: 89:ab:16:a6:6f:4d:fc:1a:fa:41:30:b8:db:f1:95:24:6d:5a: 8a:9a:49:2f:42:b3:19:c5:65:ca:3d:b3:fa:c1:d5:48:b8:32: 04:8d:e1:7e:3e:30:de:6a:77:a9:e7:8c:62:03:98:67:b4:54: b1:a9:ca:3c:fa:f1:71:66:21:f2:28:ae:d6:61:0f:10:00:57: 8b:36:14:72:ac:d4:4c:ad:a7:43:e5:9e:ce:da:74:e2:2b:98: 09:7d:65:a8:88:73:99:4e:7d:bc:5e:8e:f7:57:26:d3:02:5d: c0:18:0d:db:de:e2:d9:49:cf:e2:92:b1:3a:af:73:87:21:d0: fc:fd:06:1c:6e:59:c7:f2:28:56:96:42:5b:be:d8:c9:f3:eb: 4e:0b:86:b2:3e:9c:26:3b:19:73:16:ab:d3:cf:ea:fa:e2:6a: 53:8b:ae:0a:86:50:3b:fa:d7:d4:c4:5c:bd:4f:09:c8:ed:c0: b8:31:5f:31:25:95:28:e7:e9:63:3e:f9:22:f5:39:50:33:25: 66:1d:11:97:40:24:4a:1e:d8:32:cf:4d:28:8e:57:c0:2a:76: 71:94:ed:57:81:b0:51:ad:51:25:23:83:c8:3d:65:00:3f:e0: 62:7b:73:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5C5vVlkyHVP/gNCZHFvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDA4OWViNzAxZjY5ZmRjN2I1YTA5OWYxZGY5MGU2MTQ4 YzZiY2IwHhcNMjUxMjA2MDkwMDMxWhcNMjUxMjA3MDkwMDMxWjAzMTEwLwYDVQQD EyhlM2EyYjNlYWQwODE3MTIzZDEyYjBiMjg0MjM4YTczNzlkYWMyZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeW751hXkm67yuFxmMhzbqHXHn/o VMXnk2/kc8CtNq9tT63dii4m23hKOmc7yPJ0t8J7i8QdJoFCOrOIzFbNtbvkKaBg xcEzer/sdVEf/FG0khphFicopUiXF907ymgU8zLVsrp387v096lL6FePS7I5wi90 fpm/NV9UscPEgXrzQGYUm6GXzOUPFbuhP//GAbrKcDCYEHP72LwwZOfKWhgxBRxW Jgcxojx8DVyleJTgW5V1fno0vb9AvPISluvwUcBgtXPHknIlDFOYFIoNarIGV/6b o3WN37NnQxlmxMts9tE3eSw8WKpuEJYGcTS7jIiup8WpyVxr1v/h+7mJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOis+rQgXEj0SsLKEI4pzedrC0/MB8GA1UdIwQY MBaAFNjQietwH2n9x7WgmfHfkOYUjGvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5DSjYzQWZhZjNIdGFDWjhkLVE1aFNNYThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNmY1MWYtZTNjYy00MGFlLWJlZjAt YTY5NTFhM2FkZTQwLzEvMk5DSjYzQWZhZjNIdGFDWjhkLVE1aFNNYThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNmY1MWYtZTNjYy00MGFlLWJlZjAtYTY5NTFhM2FkZTQw LzEvMk5DSjYzQWZhZjNIdGFDWjhkLVE1aFNNYThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM0tuAPu JS5yndO5GEG12LxGiasWpm9N/Br6QTC42/GVJG1aippJL0KzGcVlyj2z+sHVSLgy BI3hfj4w3mp3qeeMYgOYZ7RUsanKPPrxcWYh8iiu1mEPEABXizYUcqzUTK2nQ+We ztp04iuYCX1lqIhzmU59vF6O91cm0wJdwBgN297i2UnP4pKxOq9zhyHQ/P0GHG5Z x/IoVpZCW77YyfPrTguGsj6cJjsZcxar08/q+uJqU4uuCoZQO/rX1MRcvU8JyO3A uDFfMSWVKOfpYz75IvU5UDMlZh0Rl0AkSh7YMs9NKI5XwCp2cZTtV4GwUa1RJSOD yD1lAD/gYntzIA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:31 2025 by rpki-client