This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json) Hash identifier: +ycoELZfmgcSuysf3byhnLtKKXTc1+gxCxkzJG67+gg= Subject key identifier: 38:5C:27:90:BB:84:21:AC:70:66:A2:E8:AE:69:0A:55:02:7C:DB:08 Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Certificate serial: 019AF1D20D5F822FC1ADEF09D9A1A9869760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: Qphq3hwAxVhsXvqBC6e+uT0ZaXL6GiMgCPHtbAYU8C4=) 2: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (hash: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0d:5f:82:2f:c1:ad:ef:09:d9:a1:a9:86:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=385c2790bb8421ac7066a2e8ae690a55027cdb08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:50:34:95:83:5a:b7:bd:0a:cf:7b:7b:af: de:3e:43:a0:91:53:97:2a:fb:05:d7:e0:75:d1:87: 4c:79:43:a2:36:75:be:2a:45:dd:95:b2:0a:2a:6b: bf:64:68:ef:eb:5d:ca:b3:cd:72:1a:83:ef:0a:ad: 96:2c:c5:19:16:b6:eb:18:bf:84:72:a8:4d:d2:8d: 3b:6c:00:44:83:06:5e:35:ef:e3:85:94:e8:77:05: 65:69:ed:71:9a:bb:87:fc:63:fb:e9:94:c7:57:93: 14:79:88:68:75:4f:ec:65:b4:0f:88:e9:46:3d:18: 89:07:8c:5f:00:60:24:03:f7:f8:b9:85:69:cd:4b: ff:33:61:db:08:77:7b:12:c7:fe:08:9d:d5:5e:92: 7a:77:c2:43:97:fa:32:ba:c9:b0:a7:97:a8:4f:61: f9:9e:c5:ae:73:12:1d:bc:be:73:03:a2:0b:c6:73: d6:60:57:f5:4b:a5:58:97:5d:ab:29:61:29:40:f9: 63:25:3d:ab:bd:53:c2:fa:fd:37:44:7f:ea:f5:cd: 26:e6:89:e8:f5:48:ef:f4:9e:0c:8d:ef:2c:04:96: a8:ed:d2:52:02:6b:50:dc:19:6d:2e:1b:ec:8d:6d: 0a:59:f1:98:bc:ec:03:89:ba:00:50:dd:e7:27:96: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5C:27:90:BB:84:21:AC:70:66:A2:E8:AE:69:0A:55:02:7C:DB:08 X509v3 Authority Key Identifier: keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:14:3c:d0:a8:77:04:86:da:59:99:d0:77:58:10:bb:ad:64: 7d:30:26:95:2c:af:71:5d:80:d4:a7:20:9c:ba:e1:a3:bf:7b: bf:06:bf:61:c3:70:f3:b8:9f:a7:29:67:4b:6d:7f:da:b4:41: 7a:9b:cf:e4:8b:66:14:a8:4d:49:d9:d7:0f:18:38:5d:72:12: bd:39:f0:90:42:de:01:d4:43:a9:95:48:67:ac:30:6e:a1:83: 40:51:37:17:28:8a:a9:85:e5:d6:14:22:b3:c9:20:75:03:bc: e5:b3:af:42:3c:23:cc:b7:df:63:aa:3c:aa:f4:45:a7:9f:bf: b6:f3:5a:97:a6:4b:b3:24:3d:21:94:f2:d0:26:74:93:f0:04: bb:05:6a:39:57:f7:af:56:02:86:89:5b:54:40:4c:a5:f7:02: e9:8a:07:86:83:06:0e:14:f8:74:eb:9f:6c:a1:41:90:82:b5: bf:9c:4a:a0:64:80:32:bb:a7:25:f8:27:a3:b1:98:61:52:3f: 67:ff:c6:f4:5e:fd:f6:ee:49:cd:85:13:b0:e3:92:40:e4:8f: 60:70:48:f1:2a:28:74:39:6d:c9:b8:75:89:29:95:16:ef:07: a4:c2:d8:23:ca:83:81:3b:fd:37:b9:9a:94:ab:af:0f:6d:c5: c1:05:e3:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g1fgi/Bre8J2aGphpdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjA5OWU3ZmYzYTE3MWJjZTNiNmZlOTllYmI0ZDI0Y2I4 NWU0NjEwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EygzODVjMjc5MGJiODQyMWFjNzA2NmEyZThhZTY5MGE1NTAyN2NkYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WdQNJWDWre9Cs97e6/ePkOgkVOX KvsF1+B10YdMeUOiNnW+KkXdlbIKKmu/ZGjv613Ks81yGoPvCq2WLMUZFrbrGL+E cqhN0o07bABEgwZeNe/jhZTodwVlae1xmruH/GP76ZTHV5MUeYhodU/sZbQPiOlG PRiJB4xfAGAkA/f4uYVpzUv/M2HbCHd7Esf+CJ3VXpJ6d8JDl/oyusmwp5eoT2H5 nsWucxIdvL5zA6ILxnPWYFf1S6VYl12rKWEpQPljJT2rvVPC+v03RH/q9c0m5ono 9Ujv9J4Mje8sBJao7dJSAmtQ3BltLhvsjW0KWfGYvOwDiboAUN3nJ5aifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhcJ5C7hCGscGai6K5pClUCfNsIMB8GA1UdIwQY MBaAFNpgmef/Ohcbzjtv6Z67TSTLheRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUt NDU5ODY4OWQ1NTFlLzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy82YzM3NDEtY2Y4Yy00ZDVkLWJiOGUtNDU5ODY4OWQ1NTFl LzEvMm1DWjVfODZGeHZPTzJfcG5ydE5KTXVGNUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRQ80Kh3 BIbaWZnQd1gQu61kfTAmlSyvcV2A1KcgnLrho797vwa/YcNw87ifpylnS21/2rRB epvP5ItmFKhNSdnXDxg4XXISvTnwkELeAdRDqZVIZ6wwbqGDQFE3FyiKqYXl1hQi s8kgdQO85bOvQjwjzLffY6o8qvRFp5+/tvNal6ZLsyQ9IZTy0CZ0k/AEuwVqOVf3 r1YCholbVEBMpfcC6YoHhoMGDhT4dOufbKFBkIK1v5xKoGSAMrunJfgno7GYYVI/ Z//G9F799u5JzYUTsOOSQOSPYHBI8SoodDltybh1iSmVFu8HpMLYI8qDgTv9N7ma lKuvD23FwQXj+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:41:57 2025 by rpki-client