This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json) Hash identifier: DJxAyOh5ifIN4L/tLZ1U6uL2QjQbqC/xjmSRtg1i5ck= Subject key identifier: EF:CD:4A:68:B6:88:2C:C5:C5:4D:1C:B6:21:CB:90:2A:79:85:2E:9F Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Certificate serial: 019AF20998B781ED8D4B025C57EB8F858D91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft Manifest number: 0D40 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: LBWq5pY/TBU42TGriX4nqUwhWwQ8k736ZMUA3UljT8o=) 2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:98:b7:81:ed:8d:4b:02:5c:57:eb:8f:85:8d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140 Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=efcd4a68b6882cc5c54d1cb621cb902a79852e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:05:4a:8f:f5:3a:12:0f:4e:d7:e3:c3:4c:30: 46:1b:4a:83:9e:fb:32:f0:a2:c9:d1:3d:26:81:7d: 99:8a:64:96:14:15:0a:fb:29:fd:58:d5:90:16:6b: 92:18:52:73:ac:01:c6:f6:c1:45:53:1a:b4:10:3f: 3f:e1:5b:f0:ef:da:6c:a9:f6:8c:66:d5:c5:11:f0: 8a:14:14:44:36:7c:3d:7e:f6:5e:58:1f:49:64:31: b1:45:f2:db:99:8c:aa:d7:28:19:79:24:fb:04:81: be:5d:18:c1:94:ad:f3:9d:6a:18:25:5f:8d:cb:92: 0a:e9:cc:a3:c7:e7:f7:7e:8d:ad:b7:dd:6a:97:ee: 90:c4:ff:2f:9d:02:c6:e5:59:e6:a5:3f:75:27:49: cb:77:a8:db:7c:dd:03:e0:7e:9d:6e:3f:2c:8f:a7: 24:20:c1:76:4b:e6:b7:4c:57:0d:ab:1b:32:10:9d: fd:af:cf:28:e6:58:03:3e:39:92:f4:0d:fb:7f:e0: 7e:ce:6e:bf:dd:7e:c5:f2:40:bc:8f:f8:f8:e1:60: 8e:ae:6e:86:e2:40:04:ee:9f:20:da:32:54:61:bc: be:99:7d:22:82:1b:0d:36:ea:9f:84:6a:b9:49:21: 72:c0:77:a2:56:9b:ef:ac:47:22:eb:55:ef:56:f3: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CD:4A:68:B6:88:2C:C5:C5:4D:1C:B6:21:CB:90:2A:79:85:2E:9F X509v3 Authority Key Identifier: keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d0:e3:96:f2:9b:33:b1:75:76:af:53:87:be:99:2b:27:ae: b8:1c:b0:15:a2:e0:0c:ed:07:0e:75:50:df:a1:53:79:76:e8: b3:23:5b:59:fc:e2:ca:6b:ed:a7:f2:7c:68:d5:13:73:e5:1f: 11:46:38:44:89:6d:e8:5f:67:64:d4:ec:e6:29:f2:c5:ab:a1: 03:d4:59:43:86:1c:3a:ea:45:c1:6f:c8:6f:d0:31:95:79:b5: 37:f1:04:fa:be:a7:4a:be:26:f3:25:dc:10:73:3b:a7:85:bf: a9:f4:57:ef:53:e6:7b:cf:1e:23:4d:ad:fb:27:1c:46:c2:7b: f8:3e:f6:81:22:7e:b7:44:1a:59:51:a2:cc:df:e2:06:e7:15: b9:df:dd:51:bb:f5:1d:4f:c0:c0:e5:42:f9:7a:68:cb:f4:e4: 2a:db:01:8e:ff:e2:22:cc:3d:a3:a9:d4:b7:c0:47:7f:bb:b8: b4:1d:9e:47:88:76:99:38:7c:0f:d2:27:66:99:5e:7e:d8:f4: ce:cc:3b:36:4d:5c:b9:42:af:19:b7:34:20:d5:86:7a:34:24: e3:52:e1:99:e3:1a:65:2f:5e:11:2f:48:2e:aa:f9:0e:d3:16: da:df:a1:d9:3b:ec:10:f4:5d:d6:20:8e:0d:8e:f9:8d:57:db: a7:b5:aa:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZi3ge2NSwJcV+uPhY2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzAwOTM2ZmI1MDBhNzQ1NjQ0MGFiYThiM2I4YWQ1M2M5 ZjAxNDAwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EyhlZmNkNGE2OGI2ODgyY2M1YzU0ZDFjYjYyMWNiOTAyYTc5ODUyZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AVKj/U6Eg9O1+PDTDBGG0qDnvsy 8KLJ0T0mgX2ZimSWFBUK+yn9WNWQFmuSGFJzrAHG9sFFUxq0ED8/4Vvw79psqfaM ZtXFEfCKFBRENnw9fvZeWB9JZDGxRfLbmYyq1ygZeST7BIG+XRjBlK3znWoYJV+N y5IK6cyjx+f3fo2tt91ql+6QxP8vnQLG5VnmpT91J0nLd6jbfN0D4H6dbj8sj6ck IMF2S+a3TFcNqxsyEJ39r88o5lgDPjmS9A37f+B+zm6/3X7F8kC8j/j44WCOrm6G 4kAE7p8g2jJUYby+mX0ighsNNuqfhGq5SSFywHeiVpvvrEci61XvVvNn4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/NSmi2iCzFxU0ctiHLkCp5hS6fMB8GA1UdIwQY MBaAFNgwCTb7UAp0VkQKuos7itU8nwFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzkt YWRkY2Q4NTUyMDI2LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83N2YyYWEtY2MwYy00ZjE1LThiMzktYWRkY2Q4NTUyMDI2 LzEvMkRBSk52dFFDblJXUkFxNml6dUsxVHlmQVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9DjlvKb M7F1dq9Th76ZKyeuuBywFaLgDO0HDnVQ36FTeXbosyNbWfziymvtp/J8aNUTc+Uf EUY4RIlt6F9nZNTs5inyxauhA9RZQ4YcOupFwW/Ib9AxlXm1N/EE+r6nSr4m8yXc EHM7p4W/qfRX71Pme88eI02t+yccRsJ7+D72gSJ+t0QaWVGizN/iBucVud/dUbv1 HU/AwOVC+Xpoy/TkKtsBjv/iIsw9o6nUt8BHf7u4tB2eR4h2mTh8D9InZpleftj0 zsw7Nk1cuUKvGbc0INWGejQk41LhmeMaZS9eES9ILqr5DtMW2t+h2TvsEPRd1iCO DY75jVfbp7WqNw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:11 2025 by rpki-client