This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json) Hash identifier: ODS7bVoc1s4yXDKz937KKqvMXKZcqLlOe6RwtypFH9o= Subject key identifier: 3A:DC:F3:E0:9E:9C:53:0F:7A:47:2D:F5:D2:D9:E1:50:60:0F:5F:B5 Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc Certificate serial: 019AF12DEAAE055AF33B6A61460E0C164F1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft Manifest number: 0FDE Signing time: Sat 06 Dec 2025 01:01:49 +0000 Manifest this update: Sat 06 Dec 2025 01:01:49 +0000 Manifest next update: Sun 07 Dec 2025 01:01:49 +0000 Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: 8OuoQNIjwt3ltse4hon3/eKQVuyNHA/emcFXT6TmUow=) 2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ea:ae:05:5a:f3:3b:6a:61:46:0e:0c:16:4f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc Validity Not Before: Dec 6 01:01:49 2025 GMT Not After : Dec 7 01:01:49 2025 GMT Subject: CN=3adcf3e09e9c530f7a472df5d2d9e150600f5fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:48:76:f0:15:70:28:40:42:d8:2d:f1:d0: 54:e2:c9:6b:a0:e9:44:29:e5:6e:ec:9f:22:32:f9: bc:48:3f:06:cd:65:12:d9:c5:9a:9f:59:df:62:cc: 36:96:a2:5c:63:10:88:94:87:5c:75:4a:c0:a2:c1: 4d:7c:a0:36:02:ee:c1:44:68:96:06:7c:5b:af:a5: 2f:8b:b5:e0:ed:10:3a:b9:30:f6:04:cf:7e:e4:55: a8:d2:3e:1c:e5:23:7d:07:ef:da:52:9b:26:97:d2: 71:86:a7:43:72:6e:46:b5:64:ab:4f:47:a8:9f:ff: 6e:a0:bf:cd:db:c4:02:96:e2:d7:98:d8:97:29:78: 5e:65:b5:54:59:81:8f:d1:b8:df:86:32:31:64:d7: 0a:df:fa:53:92:59:a2:d7:60:12:1a:86:09:ce:f8: b7:6b:16:4c:83:b2:4f:d1:33:a7:bd:54:9e:a4:10: c6:40:37:40:f1:29:29:aa:c0:ad:dc:35:67:63:79: 97:7d:ed:ae:28:d2:ea:9f:6f:e4:b6:cb:91:dd:34: 02:c0:00:e7:ec:03:8d:12:58:a6:51:a4:95:50:da: 6f:54:d3:7c:3d:d3:d6:e3:2f:f4:71:38:46:74:74: 58:6f:c3:dc:f2:36:9b:94:5e:4d:60:74:2e:df:a9: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DC:F3:E0:9E:9C:53:0F:7A:47:2D:F5:D2:D9:E1:50:60:0F:5F:B5 X509v3 Authority Key Identifier: keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:89:28:6f:fa:82:69:55:4c:c0:45:f7:3a:8a:61:d4:79:6e: 4e:37:61:bc:61:7b:dc:c3:03:30:e8:48:ac:87:7d:9b:7d:ae: c4:98:81:2d:76:76:8b:d3:3f:0f:1c:6f:1d:94:a1:c9:da:62: 08:92:5d:4d:ce:e0:e1:86:45:19:b7:35:0f:17:37:13:45:da: 46:d8:e9:5d:08:ff:00:63:cb:fe:0a:8e:f5:2c:6a:10:81:37: d6:a8:fa:51:fc:ba:63:0b:79:b5:26:a3:b5:78:13:8f:f0:bd: 3f:24:9e:83:2e:22:5d:0f:e6:fb:e9:f4:d0:fd:1d:ed:97:61: 45:18:84:57:29:61:a4:da:33:f6:bd:99:d3:d8:74:2b:7b:64: c1:89:ba:9e:98:ec:70:cd:d1:42:73:13:af:f6:aa:38:f4:b5: 12:ca:1d:61:de:f5:b0:14:fd:82:1a:91:5a:e5:ee:7c:77:93: 90:3f:3e:96:86:5e:76:7d:d2:fe:92:db:f0:24:72:69:f4:75: 6b:8d:6f:d1:ec:f5:a3:9b:3f:db:de:ef:43:9e:b4:71:fb:43: cb:d3:b4:39:c3:a5:5e:7c:0e:8f:32:37:19:c2:13:29:cf:81: bf:bf:cd:f9:c1:0f:69:3f:43:58:37:fc:b7:f0:bd:8b:e9:27: 87:e8:b1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLequBVrzO2phRg4MFk8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNTJjMzhmMGM3ZmViYWUxMzVkNWRkZGQ5NDhjZjI2YmVj ZWYzYmMwHhcNMjUxMjA2MDEwMTQ5WhcNMjUxMjA3MDEwMTQ5WjAzMTEwLwYDVQQD EygzYWRjZjNlMDllOWM1MzBmN2E0NzJkZjVkMmQ5ZTE1MDYwMGY1ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOhIdvAVcChAQtgt8dBU4slroOlE KeVu7J8iMvm8SD8GzWUS2cWan1nfYsw2lqJcYxCIlIdcdUrAosFNfKA2Au7BRGiW Bnxbr6Uvi7Xg7RA6uTD2BM9+5FWo0j4c5SN9B+/aUpsml9JxhqdDcm5GtWSrT0eo n/9uoL/N28QCluLXmNiXKXheZbVUWYGP0bjfhjIxZNcK3/pTklmi12ASGoYJzvi3 axZMg7JP0TOnvVSepBDGQDdA8SkpqsCt3DVnY3mXfe2uKNLqn2/ktsuR3TQCwADn 7AONElimUaSVUNpvVNN8PdPW4y/0cThGdHRYb8Pc8jablF5NYHQu36k3iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrc8+CenFMPekct9dLZ4VBgD1+1MB8GA1UdIwQY MBaAFNpSw48Mf+uuE11d3dlIzya+zvO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDct NDFlY2RjN2EzNmY0LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mMzFiZTAtMTBlMC00MGVkLWE2ZDctNDFlY2RjN2EzNmY0 LzEvMmxMRGp3eF82NjRUWFYzZDJValBKcjdPODd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIkob/qC aVVMwEX3Ooph1HluTjdhvGF73MMDMOhIrId9m32uxJiBLXZ2i9M/DxxvHZShydpi CJJdTc7g4YZFGbc1Dxc3E0XaRtjpXQj/AGPL/gqO9SxqEIE31qj6Ufy6Ywt5tSaj tXgTj/C9PySegy4iXQ/m++n00P0d7ZdhRRiEVylhpNoz9r2Z09h0K3tkwYm6npjs cM3RQnMTr/aqOPS1EsodYd71sBT9ghqRWuXufHeTkD8+loZedn3S/pLb8CRyafR1 a41v0ez1o5s/297vQ560cftDy9O0OcOlXnwOjzI3GcITKc+Bv7/N+cEPaT9DWDf8 t/C9i+knh+ixyg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:51 2025 by rpki-client