This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json) Hash identifier: dSHXDo/5OQ8/eZhIoO3Zlk3bl3HKrA7O2Bj8rP5sB5U= Subject key identifier: 6D:71:96:86:70:E3:B7:81:C7:1B:3B:61:6D:75:09:BF:A4:EC:3C:2A Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096 Certificate serial: 019AF23FE295AB5406C89100CE82E4286E93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft Manifest number: 0C68 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: 1+84/QeJWb3Y6JX9OEcK1ssjAmY78/2hYlt7+2nbHew=) 2: IdU9T1FkI4A5QGWSCJhjbXvJUH8.roa (hash: oWd/kpimW/XKu4I8ZbE0KWw8XTvLyveRYZw0B6kosK4=) 3: dRyK6fyOLluuno6mdLfm9I8N5cU.roa (hash: hGLM1rnaqR4GcFlhsxhGDSd143ODBHpnIFqXniXaJBo=) 4: oQAGdFifd-TKFIBS06405IGsyvA.roa (hash: zpSW+ojYEzYzrGwuoKq30ePtiLpag8R8YWj5wxmdW5A=) 5: omEKk6HfpuKW0m6N-9CapGLlA_o.roa (hash: KyIBEH08U3tFJ8Ty4CJ5NL0S9/Sl8DxHoRzlmOSkNDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e2:95:ab:54:06:c8:91:00:ce:82:e4:28:6e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=6d71968670e3b781c71b3b616d7509bfa4ec3c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:a5:02:96:08:dc:e2:56:d2:c4:f2:86:59: 40:05:d4:f6:2f:9d:5b:12:d7:1d:3b:5d:e1:29:e2: 9a:e3:96:73:14:c5:98:51:a4:23:f0:a8:51:45:68: f9:dd:21:19:84:55:68:4f:eb:ae:4a:b9:b4:58:d5: 95:03:b2:56:99:fd:ab:6b:ac:ca:bc:48:9f:22:0a: 4e:1b:e7:c7:08:cc:8c:3f:06:6e:b6:cf:3f:66:64: 54:d9:06:7a:8c:e6:f8:86:c1:69:23:50:72:5a:64: 35:58:5b:b6:c3:af:8a:e2:23:a2:69:5b:de:90:76: 4c:14:54:d1:1c:ca:03:c3:21:9b:26:aa:7c:0d:e8: 6e:95:16:c5:dd:e1:ee:0a:8b:bc:b6:c7:b8:51:11: 40:79:1e:9a:4c:6d:09:b7:ea:0d:cb:da:12:77:99: fd:6c:9c:d9:25:98:c7:a9:24:f8:3a:2c:d8:09:ff: 01:60:3e:50:57:c0:22:86:40:d9:c0:04:33:ea:49: 7d:b7:de:42:f8:b9:b0:31:36:7d:24:d7:03:7d:51: 16:c4:3c:a9:fe:4e:36:8c:41:57:4f:b5:52:f7:d3: 30:8d:4b:10:a5:19:24:44:07:63:68:9e:e4:71:30: d8:18:a5:c3:f5:5a:c3:d5:85:3b:8c:ab:8d:ec:4a: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:71:96:86:70:E3:B7:81:C7:1B:3B:61:6D:75:09:BF:A4:EC:3C:2A X509v3 Authority Key Identifier: keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9d:42:21:22:59:e5:a4:98:31:02:50:c9:8f:f9:fd:76:cc: 18:bc:61:ac:26:f5:b5:a3:0c:62:44:b4:f3:a9:fe:1a:db:26: 4c:83:23:1b:99:90:5b:71:85:64:45:39:5b:60:29:ac:b3:07: 33:5d:8c:08:9b:24:21:eb:66:1f:55:7e:35:60:b3:57:7a:af: f6:b5:84:d9:d5:be:a3:1c:cf:f1:a8:31:de:fd:e6:ad:bb:81: ab:70:4b:fd:6c:9a:e1:f9:b2:b5:d2:b8:ca:ba:88:cb:2d:1b: 27:d0:7b:9f:00:25:a4:24:de:97:2a:34:e3:03:f5:b2:5b:46: a8:fd:df:35:d1:96:29:6a:11:01:ad:c1:15:de:c5:6c:56:27: f4:14:52:4b:cc:f9:8c:f4:6e:8d:56:5e:96:42:91:fa:7d:42: aa:7c:c1:01:91:eb:b5:61:e0:6d:0d:a8:32:d1:2b:94:1c:52: 85:0f:2f:ef:bc:f8:c2:c2:3c:13:18:38:56:48:cc:9b:16:e6: 94:c6:88:58:43:b8:fa:f6:33:f6:46:8d:00:0a:f2:56:a0:66: 6a:46:51:80:ec:52:be:e7:31:a9:45:78:84:38:1a:f2:2a:c5: 23:8a:16:bd:18:e2:8a:2c:ef:5d:11:7e:4a:46:e4:fe:d6:9f: cb:aa:f1:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+KVq1QGyJEAzoLkKG6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3 NDAwOTYwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD Eyg2ZDcxOTY4NjcwZTNiNzgxYzcxYjNiNjE2ZDc1MDliZmE0ZWMzYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGlApYI3OJW0sTyhllABdT2L51b EtcdO13hKeKa45ZzFMWYUaQj8KhRRWj53SEZhFVoT+uuSrm0WNWVA7JWmf2ra6zK vEifIgpOG+fHCMyMPwZuts8/ZmRU2QZ6jOb4hsFpI1ByWmQ1WFu2w6+K4iOiaVve kHZMFFTRHMoDwyGbJqp8DehulRbF3eHuCou8tse4URFAeR6aTG0Jt+oNy9oSd5n9 bJzZJZjHqST4OizYCf8BYD5QV8AihkDZwAQz6kl9t95C+LmwMTZ9JNcDfVEWxDyp /k42jEFXT7VS99MwjUsQpRkkRAdjaJ7kcTDYGKXD9VrD1YU7jKuN7EqULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1xloZw47eBxxs7YW11Cb+k7DwqMB8GA1UdIwQY MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt MTRlM2MyMDE3OTY5LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5 LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAp1CISJZ 5aSYMQJQyY/5/XbMGLxhrCb1taMMYkS086n+GtsmTIMjG5mQW3GFZEU5W2AprLMH M12MCJskIetmH1V+NWCzV3qv9rWE2dW+oxzP8agx3v3mrbuBq3BL/Wya4fmytdK4 yrqIyy0bJ9B7nwAlpCTelyo04wP1sltGqP3fNdGWKWoRAa3BFd7FbFYn9BRSS8z5 jPRujVZelkKR+n1CqnzBAZHrtWHgbQ2oMtErlBxShQ8v77z4wsI8Exg4VkjMmxbm lMaIWEO4+vYz9kaNAAryVqBmakZRgOxSvucxqUV4hDga8irFI4oWvRjiiizvXRF+ Skbk/tafy6rxIw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:45 2025 by rpki-client