This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json) Hash identifier: icFAez0L4vwYMNXm+Wg+3ZrNGxE5oGZ1hWIaOKVikFM= Subject key identifier: 98:47:B2:22:45:FC:0C:77:6F:A3:C9:A3:AC:0A:6D:85:4A:58:AE:DD Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d Certificate serial: 019AF2091AECA601EA2B0C44AA73C791588A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft Manifest number: 06C0 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: SSyFhlxVMSpXnoUYs1YqM035MOS3d5YBfrcR+BlZ2iA=) 2: CNIEoZIziaoslXjxziyj4Mdy2Eo.roa (hash: 4PTTm5j22xd4jPqtcvlATSikSzXljAnxaAWrrtmpJlA=) 3: FlnzfKEWQXvyzPbJunTOYgt_UAw.roa (hash: gO1Tnf/OgaAMr5cFfmPztpDAe1LPXtrDbGch2EErAao=) 4: eSQariLNcOVONXIRBttHL2zmsmA.roa (hash: BSF3F1gyfF9aY0clzhNrKkylzybNRIfIIJkR0Co2kv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1a:ec:a6:01:ea:2b:0c:44:aa:73:c7:91:58:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=9847b22245fc0c776fa3c9a3ac0a6d854a58aedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:76:28:44:57:d6:91:5c:d5:c7:97:28:05: 08:fe:32:63:0a:c9:49:eb:6c:99:ad:8b:1b:53:10: 69:fc:bf:56:cb:ef:9a:35:20:02:cc:a6:d2:f5:db: f6:75:7c:d2:a3:43:d3:21:47:51:c3:c3:77:33:da: 07:4e:5d:5d:19:ba:11:af:ae:56:6f:1e:8c:c1:08: 04:16:f5:5a:bd:00:82:0e:ed:58:8a:7d:33:3d:c9: 87:e2:ec:a4:82:b6:3a:24:5f:47:93:5b:49:74:d4: bb:20:3d:f6:d5:c2:be:5d:74:c4:b6:8d:3e:60:08: 00:b4:74:c0:ea:50:5f:38:2d:ee:1d:05:63:84:0f: f5:28:02:62:43:be:5c:3d:4e:05:fe:17:da:76:5f: 18:1c:c2:d1:91:b1:f6:8b:d6:64:eb:c3:80:e9:fa: b1:92:43:f7:8b:7f:cb:81:22:5a:ba:f5:45:14:ef: aa:a3:e8:25:28:09:e1:79:f6:af:0e:7c:a7:e1:70: 01:cd:9e:b6:45:8d:fa:25:0c:b6:fe:d8:6f:0e:a7: 7c:e2:83:12:9e:ac:45:36:e4:f4:f6:09:9a:24:8c: 31:70:a7:04:73:90:cb:0f:6f:7c:7d:26:55:03:0a: d3:ff:d4:32:26:d1:20:28:da:9d:f8:a8:69:ea:79: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:47:B2:22:45:FC:0C:77:6F:A3:C9:A3:AC:0A:6D:85:4A:58:AE:DD X509v3 Authority Key Identifier: keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:57:44:2e:4a:64:74:ad:b2:54:bd:96:d4:0a:8c:7a:80:2a: fa:c1:2c:9f:d6:72:ff:79:33:fe:98:8f:b3:98:8e:a5:24:8b: d0:5b:6c:55:5f:de:9a:66:78:b5:a2:5d:52:1e:33:b9:0d:a2: 61:3f:11:d7:fe:a8:55:2b:df:90:9b:55:91:6e:0e:85:a2:8a: 8a:5c:4a:4b:6d:cd:12:22:91:c3:8e:09:8f:ef:64:e5:c0:0e: 00:f6:c5:84:11:42:33:cd:62:93:b2:6f:f7:ca:66:50:6f:c4: 4f:d8:ba:ce:4c:59:3f:f6:d5:c1:56:0e:15:a6:a3:c8:59:fc: b1:4f:2a:9b:40:c5:94:7d:63:2c:d6:f7:3c:77:c8:9d:96:15: a2:58:d8:8f:95:b6:de:a9:e3:89:2a:20:d5:96:2d:54:9a:65: b0:d7:3f:f8:01:b6:5b:be:e7:63:9c:99:94:68:96:35:0a:b7: 61:d2:bf:df:d6:e0:7e:de:7f:94:c7:14:de:5e:d6:a5:8a:50: dd:69:04:61:0f:d1:fb:8c:73:0d:5e:c9:cf:5e:7a:0e:10:72: 9a:c2:79:62:c6:b3:fa:a2:31:b6:b1:1b:cf:fd:45:9f:a7:e0: 77:e3:9c:5f:9d:d0:64:89:ca:bd:72:6a:17:1d:c3:98:db:38: a8:b5:fc:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRrspgHqKwxEqnPHkViKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjgyZmQ4OTczMTdjMmNhZGQ3YjEzOTY5ZjZmMDE1YzM5 N2UwNWQwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg5ODQ3YjIyMjQ1ZmMwYzc3NmZhM2M5YTNhYzBhNmQ4NTRhNThhZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TR2KERX1pFc1ceXKAUI/jJjCslJ 62yZrYsbUxBp/L9Wy++aNSACzKbS9dv2dXzSo0PTIUdRw8N3M9oHTl1dGboRr65W bx6MwQgEFvVavQCCDu1Yin0zPcmH4uykgrY6JF9Hk1tJdNS7ID321cK+XXTEto0+ YAgAtHTA6lBfOC3uHQVjhA/1KAJiQ75cPU4F/hfadl8YHMLRkbH2i9Zk68OA6fqx kkP3i3/LgSJauvVFFO+qo+glKAnhefavDnyn4XABzZ62RY36JQy2/thvDqd84oMS nqxFNuT09gmaJIwxcKcEc5DLD298fSZVAwrT/9QyJtEgKNqd+Khp6nngmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhHsiJF/Ax3b6PJo6wKbYVKWK7dMB8GA1UdIwQY MBaAFNsoL9iXMXwsrdexOWn28BXDl+BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NlYjgtNDg1Ni00NDYzLWI3Yjgt MzUzYmM2MjY2ZWU2LzEvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iN2NlYjgtNDg1Ni00NDYzLWI3YjgtMzUzYmM2MjY2ZWU2 LzEvMnlndjJKY3hmQ3l0MTdFNWFmYndGY09YNEYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVdELkpk dK2yVL2W1AqMeoAq+sEsn9Zy/3kz/piPs5iOpSSL0FtsVV/emmZ4taJdUh4zuQ2i YT8R1/6oVSvfkJtVkW4OhaKKilxKS23NEiKRw44Jj+9k5cAOAPbFhBFCM81ik7Jv 98pmUG/ET9i6zkxZP/bVwVYOFaajyFn8sU8qm0DFlH1jLNb3PHfInZYVoljYj5W2 3qnjiSog1ZYtVJplsNc/+AG2W77nY5yZlGiWNQq3YdK/39bgft5/lMcU3l7WpYpQ 3WkEYQ/R+4xzDV7Jz156DhBymsJ5Ysaz+qIxtrEbz/1Fn6fgd+OcX53QZInKvXJq Fx3DmNs4qLX85g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:33 2025 by rpki-client