This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft File: 2AOiwMslPPmzM18ONacI2a6fyYY.mft (raw, json) Hash identifier: F7OlvAn9Q0ScAMpxcHG9tqXMToZB8Xi/nis5Q92uuTo= Subject key identifier: C7:9E:8F:A5:6B:A4:4A:C6:3B:52:94:96:54:88:B2:51:61:28:56:28 Authority key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86 Certificate issuer: /CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986 Certificate serial: 019AF164158502D0520AB9AD18CF4E35262C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft Manifest number: 3E Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: 2AOiwMslPPmzM18ONacI2a6fyYY.crl (hash: 3rfi8NTo3O0xC31Nh/H2MDLDS6uPvg2foTDXow69yE4=) 2: IIOYiI5xrYPdbR4qy_NB1by3k8w.roa (hash: IMPI0ZFIXgwW+ovabDEnw4q8w52HbQuW+CoCXLtpKLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:15:85:02:d0:52:0a:b9:ad:18:cf:4e:35:26:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=c79e8fa56ba44ac63b5294965488b25161285628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:70:db:de:80:fc:8c:91:2b:a4:c8:75:88: 64:a0:83:ce:9c:17:54:d6:aa:a2:7c:1a:59:0a:a9: 66:f3:2e:b6:5e:cb:6b:76:6e:b2:ff:b1:f5:e1:de: 16:05:85:03:9f:9f:69:54:74:1f:fb:1b:a1:91:06: 03:95:1e:9b:80:1c:de:4d:fa:a0:d1:0a:99:89:32: 5f:36:08:3c:61:fb:d6:45:dc:e8:c8:84:35:ed:86: df:2a:41:88:17:2e:44:59:c8:77:31:66:29:92:39: 84:b2:65:9b:d3:1f:85:e0:ae:05:cf:bd:c8:c7:f1: f2:be:bd:28:42:ac:3b:bc:e7:5e:e3:fa:b8:d9:1e: 99:1e:12:bd:c6:22:8f:69:f0:d4:5d:6a:20:6e:51: b9:75:14:6f:49:bd:83:66:e5:f6:01:ac:41:95:50: 89:b4:c4:8c:d3:ae:3b:27:0c:86:04:3c:96:f0:fe: 76:49:48:8e:9b:8e:c9:fa:6a:29:1c:ea:24:44:c1: aa:bf:5e:8b:86:ec:3e:74:36:38:ff:2d:da:36:fb: 1a:68:e4:dc:b4:c0:1d:c1:70:f6:80:b9:a1:5b:2d: 3e:cf:5f:c0:cf:f6:98:4c:5a:6e:f9:62:92:fa:0f: 5c:36:bb:64:59:13:b4:3d:b8:c8:1e:e1:86:15:a1: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9E:8F:A5:6B:A4:4A:C6:3B:52:94:96:54:88:B2:51:61:28:56:28 X509v3 Authority Key Identifier: keyid:D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:42:2b:05:ec:2d:00:f3:b4:6f:88:41:69:5b:4c:b6:b5:62: 9e:4f:31:d9:8f:57:86:4e:46:61:d7:53:e0:14:71:51:18:41: 28:84:70:01:2f:23:1d:62:c1:9e:e1:1e:b4:ed:b3:fb:aa:18: 5a:e0:b6:02:46:bb:3d:14:6d:51:72:65:1e:6b:fd:1e:ec:e9: d0:b9:75:a7:83:71:67:22:ee:11:09:d4:5a:1a:09:84:f7:52: 6c:1c:e3:e9:ab:56:3a:c2:18:17:7d:1b:20:10:b9:33:51:e3: 08:e3:fa:9b:fc:93:d0:05:27:30:14:ef:5f:26:d7:77:cf:22: ea:c6:29:ed:f6:a5:97:cc:cb:8c:f8:45:51:aa:34:e4:1b:24: a9:54:15:a1:06:20:00:90:67:c1:84:0c:c0:2f:ac:8a:df:7a: 47:09:fc:58:1b:e4:6e:25:64:bd:0d:95:c7:ae:85:eb:d0:ea: 8d:8f:73:da:14:c2:ae:73:fb:ab:50:31:50:9b:e1:68:00:59: e0:a3:b0:08:b6:b1:cb:6e:2d:a2:0c:06:e7:f6:fb:78:2d:7e: ce:47:39:b5:de:fe:5b:7b:e5:2b:02:53:47:64:95:c0:fc:e5: a0:0a:80:64:91:bc:4b:52:b5:2e:0c:89:5d:8f:55:7a:cc:8d: 19:e8:d2:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBWFAtBSCrmtGM9ONSYsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDNhMmMwY2IyNTNjZjliMzMzNWYwZTM1YTcwOGQ5YWU5 ZmM5ODYwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EyhjNzllOGZhNTZiYTQ0YWM2M2I1Mjk0OTY1NDg4YjI1MTYxMjg1NjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEFw296A/IyRK6TIdYhkoIPOnBdU 1qqifBpZCqlm8y62Xstrdm6y/7H14d4WBYUDn59pVHQf+xuhkQYDlR6bgBzeTfqg 0QqZiTJfNgg8YfvWRdzoyIQ17YbfKkGIFy5EWch3MWYpkjmEsmWb0x+F4K4Fz73I x/Hyvr0oQqw7vOde4/q42R6ZHhK9xiKPafDUXWogblG5dRRvSb2DZuX2AaxBlVCJ tMSM0647JwyGBDyW8P52SUiOm47J+mopHOokRMGqv16Lhuw+dDY4/y3aNvsaaOTc tMAdwXD2gLmhWy0+z1/Az/aYTFpu+WKS+g9cNrtkWRO0PbjIHuGGFaFBRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeej6VrpErGO1KUllSIslFhKFYoMB8GA1UdIwQY MBaAFNgDosDLJTz5szNfDjWnCNmun8mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kZGNmZDktZDQxOS00MGRkLWEwZjAt OGUyZDIxMmNlZmVmLzEvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kZGNmZDktZDQxOS00MGRkLWEwZjAtOGUyZDIxMmNlZmVm LzEvMkFPaXdNc2xQUG16TTE4T05hY0kyYTZmeVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEIrBewt APO0b4hBaVtMtrVink8x2Y9Xhk5GYddT4BRxURhBKIRwAS8jHWLBnuEetO2z+6oY WuC2Aka7PRRtUXJlHmv9Huzp0Ll1p4NxZyLuEQnUWhoJhPdSbBzj6atWOsIYF30b IBC5M1HjCOP6m/yT0AUnMBTvXybXd88i6sYp7fall8zLjPhFUao05BskqVQVoQYg AJBnwYQMwC+sit96Rwn8WBvkbiVkvQ2Vx66F69DqjY9z2hTCrnP7q1AxUJvhaABZ 4KOwCLaxy24togwG5/b7eC1+zkc5td7+W3vlKwJTR2SVwPzloAqAZJG8S1K1LgyJ XY9VesyNGejSHg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:27 2025 by rpki-client