This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json) Hash identifier: Qq02jjm1O6CzMKA55iuHb2BuxfJ0cuqJD0ngGy7m0ic= Subject key identifier: C5:EC:5F:2E:3D:CF:68:6E:3D:EB:A0:56:F9:75:05:C2:66:6F:7E:84 Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Certificate serial: 019AF3F7E7AAB294E553723EA11D0BAC2D0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft Manifest number: 036D Signing time: Sat 06 Dec 2025 14:01:41 +0000 Manifest this update: Sat 06 Dec 2025 14:01:41 +0000 Manifest next update: Sun 07 Dec 2025 14:01:41 +0000 Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: Wae8hZT3XaoJm7ZxKzDANrzBZ3o187dZi/tnI3qCnEY=) 2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e7:aa:b2:94:e5:53:72:3e:a1:1d:0b:ac:2d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Validity Not Before: Dec 6 14:01:41 2025 GMT Not After : Dec 7 14:01:41 2025 GMT Subject: CN=c5ec5f2e3dcf686e3deba056f97505c2666f7e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:3c:7d:58:9a:71:0b:bc:56:ef:2d:df:79: 01:d2:e8:7b:a0:ab:0f:0b:85:0a:e8:7e:36:d2:b1: ce:7b:0e:cb:24:05:e4:3d:c3:41:35:6a:b1:c3:84: 29:8e:d7:ae:a3:63:75:28:9d:a1:cb:23:fa:05:e4: 04:d4:66:41:fa:94:ad:ab:cb:9d:09:58:b5:38:37: 73:3c:11:07:ab:a6:1f:4b:e4:b0:fc:45:b5:80:2c: d6:9c:bb:81:12:3b:fd:4d:eb:1e:5f:14:df:ad:dc: 5a:ca:85:bd:7c:70:3b:ee:6e:39:60:fb:a1:05:29: f4:02:23:64:a0:12:04:c7:63:9c:13:20:ab:6e:33: 3a:a0:8b:64:98:a4:ed:35:19:fc:ac:9e:75:ec:5a: f3:a3:68:f9:c5:25:da:bb:34:5c:c9:7d:d9:87:74: d3:55:f8:b9:79:22:33:a5:d5:3d:d0:9c:53:20:49: df:47:ab:1f:d1:34:7f:a5:97:66:17:93:06:e7:bb: 34:66:58:86:53:8b:9c:af:b6:8b:d6:12:7b:9d:d0: 32:37:b1:e8:83:31:16:6e:e4:5d:42:65:a5:b2:d2: 3f:b3:67:41:12:93:76:03:6b:ad:cf:7f:2e:b2:d9: 14:ff:d4:af:44:26:a3:e1:52:aa:e8:31:b3:46:62: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EC:5F:2E:3D:CF:68:6E:3D:EB:A0:56:F9:75:05:C2:66:6F:7E:84 X509v3 Authority Key Identifier: keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:20:d9:79:73:4c:84:1c:ef:67:76:c3:5f:f6:56:de:50:c5: d2:a4:24:58:c1:42:b9:c4:96:a1:47:82:01:e9:5c:f1:5b:77: 48:94:c7:36:f4:dd:ec:88:5b:b7:10:1e:f6:48:6b:f7:9b:11: 2e:d5:62:a4:09:64:b7:a1:60:64:6b:c4:2b:43:b2:e0:16:4b: 47:67:9c:d1:e1:d3:75:8e:d2:58:99:fc:f7:e2:ce:b9:5e:ee: 04:a4:d5:e1:22:f1:83:09:d8:b1:77:7e:b9:96:95:bf:88:29: 81:12:a4:40:c6:e3:5a:e7:5c:fb:53:32:3c:21:d0:fd:9d:a0: c6:f3:7f:cd:15:28:98:78:95:9f:fc:f1:44:5a:f4:f4:81:c1: b4:eb:74:0b:31:ad:45:ef:4e:c6:a6:85:a6:2d:ab:01:b6:3f: 02:eb:d2:bd:a4:a5:4e:60:96:3f:bd:03:2c:08:7d:dc:70:54: 1c:7f:63:c6:02:1f:a3:c1:b2:45:71:9e:cd:37:31:5c:f2:1d: 1b:29:08:2e:53:64:f6:5d:5d:4e:dd:d7:da:8e:41:98:12:94: 90:26:38:ea:37:cd:b6:da:8d:6c:fe:b2:b4:16:8e:e1:45:70: 4e:74:59:a1:9a:c4:79:bd:17:d7:a4:27:c3:fc:73:21:52:1e: b2:17:a3:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+eqspTlU3I+oR0LrC0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmVmOTdjYTAxMGJhZDRmZjU5ZWY3ZDJiNmJjOTA3Nzg2 MGFhYjIwHhcNMjUxMjA2MTQwMTQxWhcNMjUxMjA3MTQwMTQxWjAzMTEwLwYDVQQD EyhjNWVjNWYyZTNkY2Y2ODZlM2RlYmEwNTZmOTc1MDVjMjY2NmY3ZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKE8fViacQu8Vu8t33kB0uh7oKsP C4UK6H420rHOew7LJAXkPcNBNWqxw4Qpjteuo2N1KJ2hyyP6BeQE1GZB+pStq8ud CVi1ODdzPBEHq6YfS+Sw/EW1gCzWnLuBEjv9TeseXxTfrdxayoW9fHA77m45YPuh BSn0AiNkoBIEx2OcEyCrbjM6oItkmKTtNRn8rJ517Frzo2j5xSXauzRcyX3Zh3TT Vfi5eSIzpdU90JxTIEnfR6sf0TR/pZdmF5MG57s0ZliGU4ucr7aL1hJ7ndAyN7Ho gzEWbuRdQmWlstI/s2dBEpN2A2utz38ustkU/9SvRCaj4VKq6DGzRmL1owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXsXy49z2huPeugVvl1BcJmb36EMB8GA1UdIwQY MBaAFNr++XygELrU/1nvfStryQd4YKqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgt YmZhOTRlYjFhYTAyLzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgtYmZhOTRlYjFhYTAy LzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSDZeXNM hBzvZ3bDX/ZW3lDF0qQkWMFCucSWoUeCAelc8Vt3SJTHNvTd7IhbtxAe9khr95sR LtVipAlkt6FgZGvEK0Oy4BZLR2ec0eHTdY7SWJn89+LOuV7uBKTV4SLxgwnYsXd+ uZaVv4gpgRKkQMbjWudc+1MyPCHQ/Z2gxvN/zRUomHiVn/zxRFr09IHBtOt0CzGt Re9OxqaFpi2rAbY/AuvSvaSlTmCWP70DLAh93HBUHH9jxgIfo8GyRXGezTcxXPId GykILlNk9l1dTt3X2o5BmBKUkCY46jfNttqNbP6ytBaO4UVwTnRZoZrEeb0X16Qn w/xzIVIeshejjg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:52 2025 by rpki-client