This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft File: 2PuW6jr1HFMtfo_oyUN29R4epAI.mft (raw, json) Hash identifier: /ZCq0blkUFm+9HwLqi8AY+zM9VCjXbG3JOllX0y4WVI= Subject key identifier: 7C:48:3F:5C:31:E8:39:DA:D5:53:C6:B0:6C:C7:3F:6A:6C:0D:EF:28 Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02 Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402 Certificate serial: 019AF277175CF3218A59B0BA72D2BC3B5C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft Manifest number: 1586 Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: 2PuW6jr1HFMtfo_oyUN29R4epAI.crl (hash: S4MuHwY2S731R1Hu+06bvzzkv0C0ZXMv5gk1jznZB1w=) 2: qvV18edZ4nG1g9Z6XFGjfB91HGk.roa (hash: xA0FHg4k3qhHIOcw440t6o/vgKfLrTtDa1pgd5bBDMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:17:5c:f3:21:8a:59:b0:ba:72:d2:bc:3b:5c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=7c483f5c31e839dad553c6b06cc73f6a6c0def28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:e1:98:e1:8a:50:40:09:9d:30:7c:8e:df: 33:1b:3f:92:19:cf:a1:f3:69:e1:1d:cc:be:64:6a: 33:fb:e8:5a:ad:e0:09:e9:7c:24:d4:c4:d8:0a:79: 93:88:12:b1:ed:d4:ee:66:ae:17:05:d8:5a:7b:ef: e1:5b:e1:86:ef:f3:81:5e:3b:e3:fe:12:6a:f7:e4: b2:71:1b:e1:b9:d5:87:7e:d8:6d:66:33:f5:4d:64: 8c:38:90:cc:84:f8:68:f3:cb:cf:70:80:d7:6e:0e: dc:11:25:64:0b:50:9e:fe:ea:6f:32:19:39:78:0c: d5:48:5f:a2:03:37:e8:26:e0:64:90:2e:fe:1b:58: ac:44:8d:f2:5b:a7:b3:33:09:57:03:f3:73:50:1a: fd:de:ec:4e:10:f3:f7:66:d3:96:71:31:4a:39:c8: e7:13:66:57:00:54:57:7e:85:b2:be:ce:4b:de:67: 0d:3a:d0:53:29:25:bb:3b:16:e9:18:4a:34:47:d8: c0:0c:74:99:34:bc:d2:ad:3a:ed:a6:e1:45:14:d6: 19:50:cf:c7:55:e0:e6:05:af:7c:63:45:da:77:66: 76:76:46:07:6e:c7:3e:0b:9b:02:7c:8b:66:03:59: bf:6e:22:36:7a:18:83:b4:1a:42:cc:91:d6:7a:b1: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:3F:5C:31:E8:39:DA:D5:53:C6:B0:6C:C7:3F:6A:6C:0D:EF:28 X509v3 Authority Key Identifier: keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:80:a7:bc:db:04:9d:c8:4a:3c:6a:79:28:73:f8:4c:1f:cc: 6e:07:d3:6e:11:bf:e4:3b:8b:1f:5a:4d:3e:a1:26:29:41:61: 5e:f4:31:c4:23:03:1f:e8:69:5f:e7:66:84:9d:13:03:2a:5b: c1:04:0d:eb:22:9f:3d:f9:94:f3:f6:2c:3a:18:31:05:63:77: 2e:4a:42:be:be:2a:1e:76:cb:77:43:7e:71:30:b1:59:dc:45: 3e:96:77:42:9c:12:51:0d:b9:0e:02:c4:c9:b1:d4:69:19:eb: 94:f7:6d:96:85:33:53:48:0d:fc:1f:e0:fb:b0:13:06:4b:06: ae:60:87:dd:49:cf:2f:3a:8a:eb:9e:d9:74:3b:52:cc:3e:b0: 03:8c:44:5a:3f:c0:04:07:91:72:e1:bd:96:42:13:cd:25:ef: 12:b2:6c:e3:d6:5b:78:68:6f:3b:51:a2:39:d5:6b:26:af:ad: 25:06:4e:58:b0:b3:d6:8f:09:a9:40:d1:a5:7b:c2:e5:d0:c5: 62:f1:66:e3:3c:0e:8e:5f:a8:e6:bc:31:52:80:41:37:32:73: dd:26:fc:6a:e4:42:08:4b:6d:6f:87:c9:0f:c5:56:61:44:5d: 14:1f:78:fc:4f:70:b5:50:4a:a3:dd:98:4d:07:cd:36:f6:a5: 8f:61:4f:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxdc8yGKWbC6ctK8O1xYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZmI5NmVhM2FmNTFjNTMyZDdlOGZlOGM5NDM3NmY1MWUx ZWE0MDIwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD Eyg3YzQ4M2Y1YzMxZTgzOWRhZDU1M2M2YjA2Y2M3M2Y2YTZjMGRlZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWzhmOGKUEAJnTB8jt8zGz+SGc+h 82nhHcy+ZGoz++hareAJ6Xwk1MTYCnmTiBKx7dTuZq4XBdhae+/hW+GG7/OBXjvj /hJq9+SycRvhudWHfthtZjP1TWSMOJDMhPho88vPcIDXbg7cESVkC1Ce/upvMhk5 eAzVSF+iAzfoJuBkkC7+G1isRI3yW6ezMwlXA/NzUBr93uxOEPP3ZtOWcTFKOcjn E2ZXAFRXfoWyvs5L3mcNOtBTKSW7OxbpGEo0R9jADHSZNLzSrTrtpuFFFNYZUM/H VeDmBa98Y0Xad2Z2dkYHbsc+C5sCfItmA1m/biI2ehiDtBpCzJHWerE5BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxIP1wx6Dna1VPGsGzHP2psDe8oMB8GA1UdIwQY MBaAFNj7luo69RxTLX6P6MlDdvUeHqQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzIt OGViODVlMzI4M2UyLzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzItOGViODVlMzI4M2Uy LzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcICnvNsE nchKPGp5KHP4TB/MbgfTbhG/5DuLH1pNPqEmKUFhXvQxxCMDH+hpX+dmhJ0TAypb wQQN6yKfPfmU8/YsOhgxBWN3LkpCvr4qHnbLd0N+cTCxWdxFPpZ3QpwSUQ25DgLE ybHUaRnrlPdtloUzU0gN/B/g+7ATBksGrmCH3UnPLzqK657ZdDtSzD6wA4xEWj/A BAeRcuG9lkITzSXvErJs49ZbeGhvO1GiOdVrJq+tJQZOWLCz1o8JqUDRpXvC5dDF YvFm4zwOjl+o5rwxUoBBNzJz3Sb8auRCCEttb4fJD8VWYURdFB94/E9wtVBKo92Y TQfNNvalj2FPhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:47 2025 by rpki-client