This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft File: 2zdeFqGTZ96ZuySsEV0lmioEgaw.mft (raw, json) Hash identifier: Q4aFVWaXV269xiPAZ6Jp+tOi129uXHDWLJvRUJ+stJo= Subject key identifier: 0F:35:3D:C6:41:6D:A5:21:2E:42:06:C8:6E:16:03:F7:24:D3:3B:67 Authority key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC Certificate issuer: /CN=db375e16a19367de99bb24ac115d259a2a0481ac Certificate serial: 019AF50B307824DDF2C2767550DDFC1B3CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft Manifest number: 0CFC Signing time: Sat 06 Dec 2025 19:02:22 +0000 Manifest this update: Sat 06 Dec 2025 19:02:22 +0000 Manifest next update: Sun 07 Dec 2025 19:02:22 +0000 Files and hashes: 1: 2zdeFqGTZ96ZuySsEV0lmioEgaw.crl (hash: c9F5YUiIs6bK2PieYCaveOV13LNbqv+w3C784WN/jgA=) 2: x6hLDer_XW1q_iEu4GXkzkZyC4s.roa (hash: WqVvea5/LNqbNIIZsdml33Mg9/QcNbUM12u8YdmaIWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:30:78:24:dd:f2:c2:76:75:50:dd:fc:1b:3c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db375e16a19367de99bb24ac115d259a2a0481ac Validity Not Before: Dec 6 19:02:22 2025 GMT Not After : Dec 7 19:02:22 2025 GMT Subject: CN=0f353dc6416da5212e4206c86e1603f724d33b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:ef:ff:25:09:8c:07:b3:e0:e3:da:dd:d2: aa:db:2e:85:45:5e:c7:f4:49:35:77:90:06:d2:4a: 9c:28:6e:29:aa:e5:5e:53:96:9e:ef:29:a9:73:39: d2:89:1c:64:e5:cf:ac:d3:cd:b4:a5:89:35:13:bd: 15:d5:56:cf:cc:c2:95:34:58:1a:13:b1:aa:98:b3: ea:26:26:f1:aa:39:9e:79:f8:c0:a9:17:08:a7:c8: b8:10:ee:da:24:37:55:96:54:43:fa:b2:76:ac:d3: d5:70:90:e9:72:87:ff:60:da:26:50:fb:b1:8f:f3: 72:22:ed:3a:79:e0:47:b5:98:6a:28:18:95:81:54: a0:fd:20:0a:bb:81:24:da:34:f9:93:42:74:ea:2c: b4:ce:b3:05:0e:8b:91:dd:c4:b0:a5:35:07:3f:ee: ee:5f:c0:b5:fc:5d:c5:2b:4b:ad:0a:21:0a:6b:29: 0c:a3:14:0e:25:33:db:e4:45:8c:4a:f5:16:b2:2d: e0:8a:d2:aa:bb:4f:37:44:05:59:70:7a:1f:8e:29: 51:ee:bc:12:5b:33:3c:2b:1c:dc:84:c9:43:f0:42: 69:eb:e8:28:f7:3a:3c:82:c6:6c:67:31:57:80:9f: 8d:bb:1a:f5:20:41:0e:3f:28:14:f4:9a:1f:80:4d: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:35:3D:C6:41:6D:A5:21:2E:42:06:C8:6E:16:03:F7:24:D3:3B:67 X509v3 Authority Key Identifier: keyid:DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:6e:4a:d7:52:7a:a1:68:e6:12:f9:ec:3b:69:fb:45:41:0a: 3e:6f:f4:e4:86:3a:2a:67:eb:0b:ae:cc:ab:77:62:c5:0b:aa: 06:f8:d3:0b:96:c5:72:99:9d:f0:30:1d:28:8f:e0:4b:13:13: 5a:13:4f:53:3c:f1:80:c5:47:57:68:ac:3a:a0:ea:c4:0c:6a: 81:c2:d2:5e:5c:93:61:e8:9b:aa:76:e5:e4:04:34:e8:89:14: 3e:cb:dc:c3:b3:05:9c:32:59:2e:58:5d:d2:94:25:7b:80:5f: ab:5d:75:8f:55:56:80:21:27:4d:3a:54:92:98:4b:39:70:a4: cb:61:bb:aa:29:54:31:f2:af:a7:89:7d:9e:85:00:6e:66:d3: a0:df:1a:14:0c:7b:b9:fd:36:cc:05:26:39:c3:2d:43:c8:dc: 5b:d6:cb:f4:76:e5:31:f8:50:3e:7a:51:85:3b:6d:21:44:eb: c3:b7:53:36:55:7a:17:51:02:45:9d:97:c2:37:bd:35:0b:1f: fe:d9:c5:bf:9f:a9:16:81:f8:ec:6b:49:6b:d6:88:e1:fe:99: 85:1f:c6:e2:f3:ed:1b:bb:06:c6:70:e6:39:3b:38:51:59:e0: 60:c3:62:74:ef:89:aa:d1:4e:d8:89:a4:08:fb:fa:d2:bc:d2: 95:5c:31:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzB4JN3ywnZ1UN38GzzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMzc1ZTE2YTE5MzY3ZGU5OWJiMjRhYzExNWQyNTlhMmEw NDgxYWMwHhcNMjUxMjA2MTkwMjIyWhcNMjUxMjA3MTkwMjIyWjAzMTEwLwYDVQQD EygwZjM1M2RjNjQxNmRhNTIxMmU0MjA2Yzg2ZTE2MDNmNzI0ZDMzYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaHv/yUJjAez4OPa3dKq2y6FRV7H 9Ek1d5AG0kqcKG4pquVeU5ae7ympcznSiRxk5c+s0820pYk1E70V1VbPzMKVNFga E7GqmLPqJibxqjmeefjAqRcIp8i4EO7aJDdVllRD+rJ2rNPVcJDpcof/YNomUPux j/NyIu06eeBHtZhqKBiVgVSg/SAKu4Ek2jT5k0J06iy0zrMFDouR3cSwpTUHP+7u X8C1/F3FK0utCiEKaykMoxQOJTPb5EWMSvUWsi3gitKqu083RAVZcHofjilR7rwS WzM8KxzchMlD8EJp6+go9zo8gsZsZzFXgJ+Nuxr1IEEOPygU9JofgE1kfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA81PcZBbaUhLkIGyG4WA/ck0ztnMB8GA1UdIwQY MBaAFNs3Xhahk2fembskrBFdJZoqBIGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnpkZUZxR1RaOTZadXlTc0VWMGxtaW9FZ2F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85YmM1YmMtOGY5OS00MmVkLWE4Y2Ut NWI4NmJhNTg1OTIyLzEvMnpkZUZxR1RaOTZadXlTc0VWMGxtaW9FZ2F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85YmM1YmMtOGY5OS00MmVkLWE4Y2UtNWI4NmJhNTg1OTIy LzEvMnpkZUZxR1RaOTZadXlTc0VWMGxtaW9FZ2F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW5K11J6 oWjmEvnsO2n7RUEKPm/05IY6KmfrC67Mq3dixQuqBvjTC5bFcpmd8DAdKI/gSxMT WhNPUzzxgMVHV2isOqDqxAxqgcLSXlyTYeibqnbl5AQ06IkUPsvcw7MFnDJZLlhd 0pQle4Bfq111j1VWgCEnTTpUkphLOXCky2G7qilUMfKvp4l9noUAbmbToN8aFAx7 uf02zAUmOcMtQ8jcW9bL9HblMfhQPnpRhTttIUTrw7dTNlV6F1ECRZ2Xwje9NQsf /tnFv5+pFoH47GtJa9aI4f6ZhR/G4vPtG7sGxnDmOTs4UVngYMNidO+JqtFO2Imk CPv60rzSlVwxDA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:46 2025 by rpki-client