This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json) Hash identifier: 76SNfTJF4vblebJDT2wGTzq49h3ejh7Gr5Az2VfFFEQ= Subject key identifier: E1:1B:15:80:D8:7C:E9:BA:A4:CD:E9:13:55:DD:15:16:6A:98:25:57 Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06 Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306 Certificate serial: 019AF61C95F4063CD05E730C54DAEF007E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft Manifest number: 1527 Signing time: Sun 07 Dec 2025 00:00:59 +0000 Manifest this update: Sun 07 Dec 2025 00:00:59 +0000 Manifest next update: Mon 08 Dec 2025 00:00:59 +0000 Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: 4ZYWSmhDvBXz1647Tqh8GEGjWRgu0xoAfdGF1I6iXU8=) 2: FjL5MqcK0dv0phSETNIP5t1SBWg.roa (hash: HghvVzu9hsO9wX3NaFq2EgUKtQhDl/MHwAlkrJlofBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:95:f4:06:3c:d0:5e:73:0c:54:da:ef:00:7e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306 Validity Not Before: Dec 7 00:00:59 2025 GMT Not After : Dec 8 00:00:59 2025 GMT Subject: CN=e11b1580d87ce9baa4cde91355dd15166a982557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a6:bf:26:50:bd:87:1c:8a:88:46:f2:de:7d: 38:ff:c9:76:8b:70:d6:94:c6:9d:68:dd:06:bf:94: 4b:46:49:13:ad:c6:23:f7:1c:e8:ac:ac:94:4d:99: 1e:88:9b:6a:42:8b:e2:f3:44:5a:87:92:e2:64:e0: 2a:5e:85:62:bb:37:0f:2b:d9:04:e6:c7:24:4f:2c: b1:a1:c6:8d:be:97:cf:04:d1:e9:58:84:65:6b:e5: b0:3e:a8:aa:37:4f:33:e5:ff:e3:f2:87:bd:da:52: 22:af:fe:c3:92:76:9d:af:94:ef:13:36:18:f1:5c: a4:6b:e6:43:25:c8:5d:40:0d:63:b6:eb:d6:04:30: 2a:29:5a:4a:1c:1b:b2:4d:d0:7a:df:ec:1e:86:ed: 8a:15:7c:42:6f:97:88:03:d8:6b:6a:04:3c:fc:b2: 16:88:8e:58:d4:66:15:bf:27:47:cc:59:11:fc:8f: 7f:d2:5d:62:87:3e:50:5b:d2:c8:7b:49:8a:6d:59: a8:ee:78:47:1c:79:ee:1d:33:85:b6:58:c8:de:3b: f2:95:e3:fa:a1:2c:35:8f:d7:e9:21:eb:04:7d:01: 3c:0a:0d:1a:ca:66:2e:3d:75:91:31:e7:8b:c1:75: 56:13:cc:93:05:ef:76:48:52:c4:e3:a1:29:34:2c: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:15:80:D8:7C:E9:BA:A4:CD:E9:13:55:DD:15:16:6A:98:25:57 X509v3 Authority Key Identifier: keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ce:c4:b7:27:f9:03:4b:90:12:66:25:55:7f:c8:53:15:db: 6d:d6:3d:aa:45:b2:cc:5c:aa:f3:31:3d:79:fe:1f:b5:ea:2e: ce:51:1d:6b:45:38:d6:c0:2f:d8:c0:1b:93:0b:ac:3f:99:66: 09:de:11:ab:a1:f0:95:59:9c:1e:7e:03:c8:9e:4d:d9:5a:ce: 84:63:56:4a:27:74:46:67:e5:8d:50:ca:da:7a:4c:5c:29:9c: 26:ff:a9:70:bf:e2:55:0f:57:81:82:fa:30:66:70:7c:c2:20: 7d:7d:5e:75:ed:cf:41:8f:e3:67:19:a8:6b:a3:42:7b:d6:35: a9:41:0e:05:61:9f:6d:ae:d2:9d:ee:0a:18:64:22:68:70:d3: 13:0b:b3:a3:30:4d:f4:8a:e6:5e:27:a9:e1:1a:75:45:1a:41: 4d:d8:3f:93:0b:f0:46:34:53:6b:6f:58:92:e0:0b:ae:cb:1c: f4:d1:ef:f5:6a:5b:ff:e3:af:70:21:d5:33:57:8a:d8:bb:e4: 01:67:d9:04:2f:ac:80:7d:da:6d:80:25:3a:ca:26:d1:d7:50: 1b:72:0f:b0:a6:e8:15:35:62:7d:f4:6a:ba:0a:32:54:73:28: 22:ab:77:37:be:b0:14:97:5d:68:3c:a3:3d:51:c7:cc:f0:41: 0c:14:13:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJX0BjzQXnMMVNrvAH6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMTRlN2E2YmU5N2NlYzZmNWJjMWE2NzhhNzZlYTZkMTYx OWMzMDYwHhcNMjUxMjA3MDAwMDU5WhcNMjUxMjA4MDAwMDU5WjAzMTEwLwYDVQQD EyhlMTFiMTU4MGQ4N2NlOWJhYTRjZGU5MTM1NWRkMTUxNjZhOTgyNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKa/JlC9hxyKiEby3n04/8l2i3DW lMadaN0Gv5RLRkkTrcYj9xzorKyUTZkeiJtqQovi80Rah5LiZOAqXoViuzcPK9kE 5sckTyyxocaNvpfPBNHpWIRla+WwPqiqN08z5f/j8oe92lIir/7Dknadr5TvEzYY 8Vyka+ZDJchdQA1jtuvWBDAqKVpKHBuyTdB63+wehu2KFXxCb5eIA9hragQ8/LIW iI5Y1GYVvydHzFkR/I9/0l1ihz5QW9LIe0mKbVmo7nhHHHnuHTOFtljI3jvyleP6 oSw1j9fpIesEfQE8Cg0aymYuPXWRMeeLwXVWE8yTBe92SFLE46EpNCwtSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEbFYDYfOm6pM3pE1XdFRZqmCVXMB8GA1UdIwQY MBaAFNsU56a+l87G9bwaZ4p26m0WGcMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAt MTFmOTFkMDczOWM5LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xMDY0NWQtMzU0Mi00ZTVkLThlNzAtMTFmOTFkMDczOWM5 LzEvMnhUbnByNlh6c2IxdkJwbmluYnFiUllad3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc7Etyf5 A0uQEmYlVX/IUxXbbdY9qkWyzFyq8zE9ef4fteouzlEda0U41sAv2MAbkwusP5lm Cd4Rq6HwlVmcHn4DyJ5N2VrOhGNWSid0RmfljVDK2npMXCmcJv+pcL/iVQ9XgYL6 MGZwfMIgfX1ede3PQY/jZxmoa6NCe9Y1qUEOBWGfba7Sne4KGGQiaHDTEwuzozBN 9IrmXiep4Rp1RRpBTdg/kwvwRjRTa29YkuALrssc9NHv9Wpb/+OvcCHVM1eK2Lvk AWfZBC+sgH3abYAlOsom0ddQG3IPsKboFTViffRqugoyVHMoIqt3N76wFJddaDyj PVHHzPBBDBQTcQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:13 2025 by rpki-client