This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json) Hash identifier: UPrE5Owye0CeAGR/kxdctDdVbCr3CuFFIc2tBNulevM= Subject key identifier: DC:E2:AF:88:EF:1F:C2:25:BD:67:60:CD:56:BB:0A:1D:BC:29:57:18 Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Certificate serial: 019AF1D1FADE755E52E2011BDB8EF4726C3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft Manifest number: 1428 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: vQLonq4yTcMxr1d32ubqvDqdU/asVnuXuDUTpn0Zt6o=) 2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=) 3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fa:de:75:5e:52:e2:01:1b:db:8e:f4:72:6c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=dce2af88ef1fc225bd6760cd56bb0a1dbc295718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:33:8d:44:87:1b:ec:7e:0f:38:9f:87:41:27: 8d:1f:9f:76:b8:3a:1f:a0:29:12:79:9e:06:00:83: b6:ae:ad:2c:c9:bc:57:5c:3d:85:1a:97:f2:3c:c1: ff:2b:66:11:a3:80:dc:7b:9e:54:be:fb:ec:34:1d: 83:03:44:c7:42:71:db:61:ca:b6:67:b9:5a:4b:52: e2:aa:53:a6:fa:7c:fd:8d:95:6d:39:a7:77:85:24: 0e:27:92:83:16:94:b3:35:b1:dc:6f:39:1e:9a:83: b8:78:dc:36:12:53:41:95:76:29:43:89:f5:25:ef: ba:48:16:80:78:08:3d:6e:ac:ff:9e:56:2f:ab:a7: 51:da:c0:45:d2:1c:93:4a:b0:23:09:97:2e:5c:e4: 9b:3e:34:c3:dd:bf:19:4e:c0:61:90:5b:bb:f4:57: 69:3a:0f:f2:31:0b:65:2b:92:65:17:0f:15:78:1e: 42:5f:86:0e:41:b8:98:2f:21:c6:b3:61:98:c9:50: 80:3a:cc:92:d2:07:d3:9c:57:9b:f5:2f:3a:f7:87: 14:ac:c7:e6:42:26:8e:56:29:d7:98:da:71:0b:22: 89:b5:2c:64:25:7c:e7:e0:9e:50:a0:c1:d8:5d:d5: 6d:3b:da:50:22:ba:33:ea:9a:3d:e5:d1:d3:2b:01: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E2:AF:88:EF:1F:C2:25:BD:67:60:CD:56:BB:0A:1D:BC:29:57:18 X509v3 Authority Key Identifier: keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e1:9d:63:bf:5c:2d:ce:13:46:5b:5a:43:a6:f8:d4:d3:6f: 2e:f1:75:b4:2c:de:bf:ea:8f:67:b3:e5:8c:21:58:23:f0:4c: 27:08:d9:30:17:2a:ca:03:75:0e:a1:43:36:03:78:e1:5e:e7: 9a:d6:2c:1e:8c:81:3c:b3:3e:ab:1e:a7:78:02:6e:82:9c:0a: 9b:1e:0c:d1:10:15:72:68:c9:23:d4:46:76:ec:c5:34:9f:dc: be:19:0c:81:07:07:f9:1d:df:ac:a2:bf:f0:2d:4a:81:62:4e: fe:1c:50:7f:60:86:56:49:43:66:f2:97:77:c9:d3:c9:44:fc: 1f:ef:b5:73:4a:5f:af:71:c0:3b:99:52:02:49:33:f9:a2:07: d3:51:a1:5a:a5:46:91:16:23:c5:dc:aa:1a:d9:8e:af:4b:4d: 28:c4:85:5e:c2:c8:42:e6:3d:13:82:ff:4d:2f:f8:fb:f9:50: f5:ae:18:00:81:e8:91:31:63:4c:9e:d1:cf:f4:b7:cf:12:45: 6c:90:cd:f6:4b:c0:b8:ee:5d:ea:02:21:8a:6f:bd:79:8f:b7: 85:51:b5:4d:21:d7:0a:c7:57:b6:41:95:5f:94:e2:5e:07:ef: 04:0b:0f:24:10:44:d4:c8:a1:f1:8e:b6:d8:89:55:d4:94:3a: 68:0d:d7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fredV5S4gEb2470cmw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4 NDEyNTYwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhkY2UyYWY4OGVmMWZjMjI1YmQ2NzYwY2Q1NmJiMGExZGJjMjk1NzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jONRIcb7H4POJ+HQSeNH592uDof oCkSeZ4GAIO2rq0sybxXXD2FGpfyPMH/K2YRo4Dce55UvvvsNB2DA0THQnHbYcq2 Z7laS1LiqlOm+nz9jZVtOad3hSQOJ5KDFpSzNbHcbzkemoO4eNw2ElNBlXYpQ4n1 Je+6SBaAeAg9bqz/nlYvq6dR2sBF0hyTSrAjCZcuXOSbPjTD3b8ZTsBhkFu79Fdp Og/yMQtlK5JlFw8VeB5CX4YOQbiYLyHGs2GYyVCAOsyS0gfTnFeb9S8694cUrMfm QiaOVinXmNpxCyKJtSxkJXzn4J5QoMHYXdVtO9pQIroz6po95dHTKwG1EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzir4jvH8IlvWdgzVa7Ch28KVcYMB8GA1UdIwQY MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOGdY79c Lc4TRltaQ6b41NNvLvF1tCzev+qPZ7PljCFYI/BMJwjZMBcqygN1DqFDNgN44V7n mtYsHoyBPLM+qx6neAJugpwKmx4M0RAVcmjJI9RGduzFNJ/cvhkMgQcH+R3frKK/ 8C1KgWJO/hxQf2CGVklDZvKXd8nTyUT8H++1c0pfr3HAO5lSAkkz+aIH01GhWqVG kRYjxdyqGtmOr0tNKMSFXsLIQuY9E4L/TS/4+/lQ9a4YAIHokTFjTJ7Rz/S3zxJF bJDN9kvAuO5d6gIhim+9eY+3hVG1TSHXCsdXtkGVX5TiXgfvBAsPJBBE1Mih8Y62 2IlV1JQ6aA3XMA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:48 2025 by rpki-client