This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json) Hash identifier: zmOb9uWugo5FxV+wcQVdagIT+wYWsRra3zoGTFUXPsU= Subject key identifier: 62:6E:C0:0E:32:6A:15:E8:B9:CE:AF:1E:A6:F3:D3:06:76:BD:69:82 Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32 Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732 Certificate serial: 019AF1641FBD05FE852D5685F77A01ABF510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=) 2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: T0mBY3NQLMHfLfXRPJbk6NlHplLpum2n0jPLwKDJUvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1f:bd:05:fe:85:2d:56:85:f7:7a:01:ab:f5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732 Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=626ec00e326a15e8b9ceaf1ea6f3d30676bd6982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:35:9b:8e:29:57:a4:91:56:dd:38:a8:f3: 51:9f:16:74:9c:7c:c0:c2:e1:ec:e8:8c:c2:1e:fb: 3d:64:bf:c6:d0:e8:8f:27:e6:99:97:5e:b3:07:4f: f5:27:fa:fe:8c:45:f3:d3:5c:a5:7f:fa:13:32:b3: 51:ad:56:ed:3d:6a:43:c5:31:d1:b6:00:24:1f:31: b6:47:64:76:9c:6c:b0:cf:ab:7a:46:60:fd:63:39: c4:d6:87:10:c1:7a:a7:0c:6f:75:a2:40:de:37:79: 97:f7:a7:4f:f0:d0:5b:68:d0:ec:31:04:4c:b0:0f: f4:56:6a:56:f6:8f:fc:dc:b5:b9:d0:ff:e2:de:bd: d3:8b:d8:fd:0f:97:3c:2b:31:13:35:7b:50:7d:a1: e7:2b:a3:84:b4:0f:c6:fd:3e:77:2c:70:01:a6:f2: f8:07:eb:fa:10:6f:78:2c:35:67:bb:4c:ef:43:c4: ab:5a:b9:11:ed:1c:e7:b7:f1:73:fe:a2:f3:65:27: c5:06:47:f1:c9:1d:18:ff:6b:ae:e0:3b:53:a5:d1: 40:cd:ab:d5:3c:96:56:ee:33:7b:99:d1:ca:b3:a6: e2:3e:fb:74:a7:80:b4:08:2f:40:f8:e9:8e:85:78: b9:a8:98:27:9f:66:a7:ab:d1:72:5a:87:78:31:d7: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:C0:0E:32:6A:15:E8:B9:CE:AF:1E:A6:F3:D3:06:76:BD:69:82 X509v3 Authority Key Identifier: keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f9:37:07:66:8b:97:25:7f:81:ba:be:a2:1c:b7:96:c7:5b: 2f:41:33:59:04:b7:48:6d:4b:ff:ea:45:d1:fe:17:f1:df:94: ca:09:45:65:e6:62:58:7a:76:54:94:dd:39:c9:2e:7c:89:d1: 26:f0:ef:98:16:5d:d8:1d:a1:34:f0:2b:aa:24:e7:2d:f4:41: aa:be:f5:56:70:ce:1f:75:d6:ea:70:f1:dd:c7:c2:66:04:4c: 78:80:e4:ae:69:bc:a0:28:25:88:25:9b:f1:fa:66:bb:b8:fa: 46:d8:09:6d:85:0a:7b:0b:35:06:37:de:01:fd:11:28:7d:dd: 40:a4:24:e6:0f:aa:c6:42:10:d4:92:b6:d7:38:05:83:70:13: 5d:71:e1:21:75:b8:4d:ee:b0:7a:07:87:ae:bd:37:0c:e4:21: 14:5c:48:65:cf:18:2a:58:d9:83:2e:8e:26:13:18:c8:b5:70: 0b:bb:7b:c2:bd:82:5b:44:9f:28:94:4a:7b:79:d4:40:c1:cd: 94:74:4f:dd:3a:65:49:5e:e0:e7:92:59:ca:f5:3d:ee:38:dc: 4c:4e:39:c2:05:0d:37:d4:f6:ea:2b:7f:d8:9d:ba:1e:63:21: cd:d7:0e:fd:ba:e9:3e:eb:e0:d9:30:7d:f4:06:ec:bd:32:c1: 20:0c:7c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZB+9Bf6FLVaF93oBq/UQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNjQ5NzlhYWVkNGU3ODhlNDUxMGVkZjhiNjk2YmQ5NmNh Yzc3MzIwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD Eyg2MjZlYzAwZTMyNmExNWU4YjljZWFmMWVhNmYzZDMwNjc2YmQ2OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1U1m44pV6SRVt04qPNRnxZ0nHzA wuHs6IzCHvs9ZL/G0OiPJ+aZl16zB0/1J/r+jEXz01ylf/oTMrNRrVbtPWpDxTHR tgAkHzG2R2R2nGywz6t6RmD9YznE1ocQwXqnDG91okDeN3mX96dP8NBbaNDsMQRM sA/0VmpW9o/83LW50P/i3r3Ti9j9D5c8KzETNXtQfaHnK6OEtA/G/T53LHABpvL4 B+v6EG94LDVnu0zvQ8SrWrkR7Rznt/Fz/qLzZSfFBkfxyR0Y/2uu4DtTpdFAzavV PJZW7jN7mdHKs6biPvt0p4C0CC9A+OmOhXi5qJgnn2anq9FyWod4MddJtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJuwA4yahXouc6vHqbz0wZ2vWmCMB8GA1UdIwQY MBaAFL9kl5qu1OeI5FEO34tpa9lsrHcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTIt MTMzZjg1OTk0YjFiLzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84Zjc4OTItN2Y3ZC00OWRiLWE5MTItMTMzZjg1OTk0YjFi LzEvdjJTWG1xN1U1NGprVVE3ZmkybHIyV3lzZHpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPk3B2aL lyV/gbq+ohy3lsdbL0EzWQS3SG1L/+pF0f4X8d+UyglFZeZiWHp2VJTdOckufInR JvDvmBZd2B2hNPArqiTnLfRBqr71VnDOH3XW6nDx3cfCZgRMeIDkrmm8oCgliCWb 8fpmu7j6RtgJbYUKews1BjfeAf0RKH3dQKQk5g+qxkIQ1JK21zgFg3ATXXHhIXW4 Te6wegeHrr03DOQhFFxIZc8YKljZgy6OJhMYyLVwC7t7wr2CW0SfKJRKe3nUQMHN lHRP3TplSV7g55JZyvU97jjcTE45wgUNN9T26it/2J26HmMhzdcO/brpPuvg2TB9 9AbsvTLBIAx8Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:25 2025 by rpki-client