This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json) Hash identifier: IwQnPTNKkfUJjWopaEI2bU4ZEDmGJmshhDMnK0aSwMk= Subject key identifier: 16:9F:C9:ED:F9:76:EE:71:DE:B8:9F:DC:BA:FE:BA:29:76:22:D9:C7 Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2 Certificate serial: 019AF2AD4150C779EF1F178FC80CB551C021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft Manifest number: 04A0 Signing time: Sat 06 Dec 2025 08:00:31 +0000 Manifest this update: Sat 06 Dec 2025 08:00:31 +0000 Manifest next update: Sun 07 Dec 2025 08:00:31 +0000 Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: rIdYjlMFtVqG9S5rs1tFl5AjBQsYCBvVMRBC4sH+G6I=) 2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=) 3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:41:50:c7:79:ef:1f:17:8f:c8:0c:b5:51:c0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2 Validity Not Before: Dec 6 08:00:31 2025 GMT Not After : Dec 7 08:00:31 2025 GMT Subject: CN=169fc9edf976ee71deb89fdcbafeba297622d9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:a9:52:cd:41:1e:fc:e8:0e:92:25:ad:1e: 08:26:78:b8:58:d1:06:f3:73:23:40:74:c6:eb:92: 11:df:70:16:81:ed:7f:20:a0:3f:42:7d:10:e9:bb: 49:47:76:46:6d:04:6c:16:dd:ca:bc:f4:4a:b4:35: 7f:23:d7:51:b3:47:44:c4:f2:18:d5:13:0c:4f:9b: bc:53:07:f7:7a:a8:9b:bd:2a:d0:93:2c:28:36:f5: 2c:51:35:87:f0:7a:3c:1c:1f:46:bf:83:d2:09:cd: 4e:6b:a9:c3:72:21:ab:7e:59:90:66:2c:e0:17:44: 7f:f6:22:60:7a:48:f3:73:4b:f2:93:9e:f1:93:d1: 41:85:ad:22:cd:31:c9:3c:d5:1f:7b:6f:7f:5b:f9: 9e:c4:e3:55:2e:2e:ea:19:04:36:f1:96:a2:07:85: b4:aa:5f:b3:e6:1d:f6:2c:76:d9:33:d4:d0:48:76: 9d:f7:bd:84:24:25:75:8d:5d:2b:ab:51:a2:f8:c1: 3a:70:54:d4:9f:b7:9a:d8:99:a1:fc:ab:f1:e9:95: aa:a4:92:ee:85:21:99:b0:b7:8d:61:86:18:72:00: 11:c8:34:48:03:54:96:50:2b:f2:7e:15:08:00:36: b8:29:26:0d:30:06:91:e2:47:b5:c1:0d:ba:e6:d8: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9F:C9:ED:F9:76:EE:71:DE:B8:9F:DC:BA:FE:BA:29:76:22:D9:C7 X509v3 Authority Key Identifier: keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:12:e1:a8:e7:d1:d7:2f:9b:ab:90:51:16:38:da:28:9f:8f: d8:32:b6:4e:ea:99:ac:48:60:40:c2:19:5b:d7:21:e2:91:d2: 6a:ee:80:6a:b0:61:53:ac:f8:77:5a:50:84:01:8c:b0:ea:ee: e7:e8:97:69:5c:80:fc:a7:35:83:d9:03:4f:85:7f:55:d2:be: f2:ba:28:2d:9d:bd:62:fa:2d:ff:90:bd:83:1f:17:ae:08:18: 1d:21:45:2c:b9:88:7d:a8:bc:a3:ce:81:0d:c3:e3:43:8d:56: d8:3f:da:28:13:71:fa:10:a0:97:06:01:5d:cc:e5:24:41:cf: d7:2a:4d:98:df:da:44:68:95:1c:35:37:a3:65:20:9e:9a:f3: da:0e:4c:02:b9:e5:68:b1:43:d4:3c:3a:92:4d:39:8f:4e:54: 40:c8:9f:d9:b8:81:13:8e:88:71:4e:24:f2:b7:fc:46:f8:cc: a1:98:46:eb:ce:99:8b:6e:f8:c5:84:7f:c6:23:a6:be:29:06: d4:6f:8a:4b:e8:f4:91:14:83:3c:6a:e4:d7:e4:18:79:f1:66: 9c:69:05:e8:13:12:e4:2f:5f:f1:b7:82:4b:b6:7c:b0:8c:be: 7a:b4:58:f6:70:a9:4a:14:67:fe:be:91:13:79:5d:fb:4c:66: 9f:c7:36:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUFQx3nvHxePyAy1UcAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3 MDZjZTIwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD EygxNjlmYzllZGY5NzZlZTcxZGViODlmZGNiYWZlYmEyOTc2MjJkOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMipUs1BHvzoDpIlrR4IJni4WNEG 83MjQHTG65IR33AWge1/IKA/Qn0Q6btJR3ZGbQRsFt3KvPRKtDV/I9dRs0dExPIY 1RMMT5u8Uwf3eqibvSrQkywoNvUsUTWH8Ho8HB9Gv4PSCc1Oa6nDciGrflmQZizg F0R/9iJgekjzc0vyk57xk9FBha0izTHJPNUfe29/W/mexONVLi7qGQQ28ZaiB4W0 ql+z5h32LHbZM9TQSHad972EJCV1jV0rq1Gi+ME6cFTUn7ea2Jmh/Kvx6ZWqpJLu hSGZsLeNYYYYcgARyDRIA1SWUCvyfhUIADa4KSYNMAaR4ke1wQ265tgoUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBafye35du5x3rif3Lr+uil2ItnHMB8GA1UdIwQY MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0 LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhLhqOfR 1y+bq5BRFjjaKJ+P2DK2TuqZrEhgQMIZW9ch4pHSau6AarBhU6z4d1pQhAGMsOru 5+iXaVyA/Kc1g9kDT4V/VdK+8rooLZ29Yvot/5C9gx8XrggYHSFFLLmIfai8o86B DcPjQ41W2D/aKBNx+hCglwYBXczlJEHP1ypNmN/aRGiVHDU3o2Ugnprz2g5MArnl aLFD1Dw6kk05j05UQMif2biBE46IcU4k8rf8RvjMoZhG686Zi274xYR/xiOmvikG 1G+KS+j0kRSDPGrk1+QYefFmnGkF6BMS5C9f8beCS7Z8sIy+erRY9nCpShRn/r6R E3ld+0xmn8c2Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:01 2025 by rpki-client