This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft File: R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft (raw, json) Hash identifier: vQqreRsxP2ZIZY4Yi5rPhuhLzp3l4AAaPxsvicyYpaY= Subject key identifier: 60:3A:0C:D2:EB:FD:9B:59:6A:4C:A1:84:35:06:84:23:A5:D0:B2:56 Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97 Certificate serial: 019AF20947E6541C80EB37EDBDF0E182D80E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft Manifest number: 0AA7 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl (hash: 3IOfhjecPlGDNGG5ETuEVgFxJ+PA/jKJX66WEOe86ig=) 2: bNv8eusD3Csjo1u3iFVspzQvWAc.roa (hash: GAiEsWZddqBZP7L/gvAH0WfEgVNJ0dl2gxsvC2wdCyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:47:e6:54:1c:80:eb:37:ed:bd:f0:e1:82:d8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=603a0cd2ebfd9b596a4ca18435068423a5d0b256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:d6:a6:a2:06:a1:e4:80:98:f7:12:c7:d3: ad:b0:7d:7a:49:ff:2f:57:3b:74:49:66:0c:7b:13: 4a:ef:3a:17:81:3c:8e:46:21:5a:bf:69:9f:f1:5a: 5c:3d:df:ae:d4:d4:00:d5:de:7c:1a:96:be:d1:d7: 08:13:75:25:96:cd:96:5d:54:0d:0e:e0:91:d9:b1: f2:83:ee:7b:9b:ad:7e:13:02:ed:be:2e:e2:26:c5: a8:41:cf:24:07:0d:0c:6e:8b:de:dd:24:43:3a:09: 85:8d:0e:e1:73:b5:de:4c:b3:db:09:f4:9f:dc:ed: 2e:19:e2:b1:14:5d:69:e4:84:90:32:1f:bb:5d:97: 7d:41:42:ea:23:8b:0b:90:66:57:5b:ff:1e:66:17: b6:81:a7:17:57:d2:15:26:32:8b:42:1b:44:42:91: 38:38:d1:f8:c6:fd:7f:68:ea:98:fb:61:8d:b4:9a: ee:65:d7:81:09:5f:7c:30:7c:6f:d3:a5:3e:7a:5d: 2b:44:a6:40:99:fc:3c:86:35:34:fe:fb:3e:c6:24: 9e:8c:b0:05:26:4b:74:32:66:29:e5:5d:29:78:d0: 25:33:b4:26:0e:c9:cd:a2:b3:0e:5b:6b:af:d4:6d: a0:44:76:5e:2e:29:ce:45:bd:3c:89:7f:e1:98:3e: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3A:0C:D2:EB:FD:9B:59:6A:4C:A1:84:35:06:84:23:A5:D0:B2:56 X509v3 Authority Key Identifier: keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f5:c9:0e:1f:49:06:a1:f9:04:b0:29:2a:fb:5e:e9:e2:63: ae:f5:12:e4:5e:f9:c9:24:77:b0:d8:22:b6:35:13:73:9b:c5: 14:31:e5:b4:dc:99:95:f5:e2:4a:ae:4c:51:5e:16:1e:d8:c2: 86:f8:28:62:69:02:50:6d:99:aa:96:2c:2c:01:ef:14:73:f9: 01:83:f2:5b:1b:4e:74:47:2f:df:19:f1:62:fd:87:22:1f:12: ee:2b:a8:b0:39:e8:64:f7:ef:1c:ff:67:2a:69:d0:b0:a4:e6: 1c:c4:09:96:ee:7a:65:74:53:25:00:fd:f2:1b:ff:c5:1d:5f: b8:af:e7:e7:d0:70:0b:cb:d0:02:e1:9f:ac:b1:df:0b:a1:af: fd:6a:26:7c:08:b9:39:29:be:b6:9a:ba:1e:cb:fb:81:92:5f: e6:70:67:5c:69:bc:a8:bb:3e:c0:1b:92:8c:04:39:28:d4:02: 72:02:2b:cb:b5:4c:9e:fe:96:3f:26:b2:bc:5d:44:b7:7d:d5: 33:b5:b5:5a:48:e9:06:2f:39:7c:30:32:a6:a8:23:56:93:7b: 79:fe:ee:1f:bc:2a:67:e4:be:27:6d:f9:1f:b8:a9:3b:ab:fd: d7:19:38:19:d1:a2:d2:15:43:6c:cf:f4:03:f2:ae:f4:68:6c: af:3b:23:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUfmVByA6zftvfDhgtgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Njg0YTdlYmY5ZGUyOTQ4MzFhMmMwM2UxYjVhMDEyNDIw YWNkOTcwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg2MDNhMGNkMmViZmQ5YjU5NmE0Y2ExODQzNTA2ODQyM2E1ZDBiMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpXWpqIGoeSAmPcSx9OtsH16Sf8v Vzt0SWYMexNK7zoXgTyORiFav2mf8VpcPd+u1NQA1d58Gpa+0dcIE3Ulls2WXVQN DuCR2bHyg+57m61+EwLtvi7iJsWoQc8kBw0Mbove3SRDOgmFjQ7hc7XeTLPbCfSf 3O0uGeKxFF1p5ISQMh+7XZd9QULqI4sLkGZXW/8eZhe2gacXV9IVJjKLQhtEQpE4 ONH4xv1/aOqY+2GNtJruZdeBCV98MHxv06U+el0rRKZAmfw8hjU0/vs+xiSejLAF Jkt0MmYp5V0peNAlM7QmDsnNorMOW2uv1G2gRHZeLinORb08iX/hmD40+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA6DNLr/ZtZakyhhDUGhCOl0LJWMB8GA1UdIwQY MBaAFEdoSn6/neKUgxosA+G1oBJCCs2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUt YjI2ZjcwZTAzZDc2LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wOTg3NzItZGJiNi00ZGJiLWI1OTUtYjI2ZjcwZTAzZDc2 LzEvUjJoS2ZyLWQ0cFNER2l3RDRiV2dFa0lLelpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfXJDh9J BqH5BLApKvte6eJjrvUS5F75ySR3sNgitjUTc5vFFDHltNyZlfXiSq5MUV4WHtjC hvgoYmkCUG2ZqpYsLAHvFHP5AYPyWxtOdEcv3xnxYv2HIh8S7iuosDnoZPfvHP9n KmnQsKTmHMQJlu56ZXRTJQD98hv/xR1fuK/n59BwC8vQAuGfrLHfC6Gv/WomfAi5 OSm+tpq6Hsv7gZJf5nBnXGm8qLs+wBuSjAQ5KNQCcgIry7VMnv6WPyayvF1Et33V M7W1WkjpBi85fDAypqgjVpN7ef7uH7wqZ+S+J235H7ipO6v91xk4GdGi0hVDbM/0 A/Ku9GhsrzsjcA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:20 2025 by rpki-client