This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft File: 2sKEXGHawupQysuD_QkxGjDjqQ4.mft (raw, json) Hash identifier: tkVcppbRHJ6u2mwpZFwvvQd2kzUeYfoe8HQ89gCtgo4= Subject key identifier: DD:03:0A:98:EB:A0:48:A3:0D:F1:76:CE:A4:77:62:75:80:BD:69:80 Authority key identifier: DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E Certificate issuer: /CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e Certificate serial: 019AF23FF66831AB7B94436D8B9F4BE467B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft Manifest number: 01DC Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: 2sKEXGHawupQysuD_QkxGjDjqQ4.crl (hash: DIJ3aWuglvLcHEANVv4dPeHFL+RFdihfINZhe6pUTNY=) 2: KIJNA59uDb5jeuperkH1ytHHaXY.roa (hash: FNj6mHvJhlFniaYHRv1Jg0zqnMbw0aJyG3OHR4imABM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f6:68:31:ab:7b:94:43:6d:8b:9f:4b:e4:67:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac2845c61dac2ea50cacb83fd09311a30e3a90e Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=dd030a98eba048a30df176cea477627580bd6980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:a6:a2:32:dc:4e:71:fd:bc:f9:e0:2a:8c: de:48:66:f4:e3:a9:d6:8d:72:1e:2c:ac:4e:3a:38: b7:56:a6:23:74:10:a5:ac:8d:0c:6d:16:a9:dc:07: 08:88:f4:80:70:b3:71:95:ae:ee:cd:7e:8e:4d:22: c3:fe:fa:7b:eb:a6:05:bc:9d:fd:5a:ae:d5:03:fa: 3a:99:03:13:82:f9:6a:81:90:ad:2e:c2:10:f0:a7: 29:9d:8d:94:2d:2b:2a:a2:a4:51:da:a1:5f:5f:e3: 0d:c6:a7:1d:14:16:8a:3e:fc:5c:64:9a:89:a2:5f: 02:90:59:89:55:e4:01:f5:50:4b:6c:40:b1:26:91: 65:95:cd:c6:07:07:82:db:6a:2b:0a:af:4e:10:e0: 7e:63:c9:c3:aa:79:ba:86:00:1b:ce:3b:37:ee:96: 98:3f:0d:d5:35:f6:6d:90:bc:43:8b:1e:8c:33:05: 50:60:c3:c0:69:83:2c:0f:b5:23:24:23:47:90:06: ba:c3:89:49:96:b4:16:aa:19:36:d9:78:4d:74:b9: 29:6b:7e:b3:30:d2:b2:39:2f:89:46:d8:84:d7:a0: bd:bd:05:5f:f2:59:11:bd:19:9e:da:d2:ba:4a:50: 4e:cf:53:93:b9:fb:d9:b8:b5:46:cd:c2:65:58:21: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:03:0A:98:EB:A0:48:A3:0D:F1:76:CE:A4:77:62:75:80:BD:69:80 X509v3 Authority Key Identifier: keyid:DA:C2:84:5C:61:DA:C2:EA:50:CA:CB:83:FD:09:31:1A:30:E3:A9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sKEXGHawupQysuD_QkxGjDjqQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5d846-9ac8-41f5-8604-eae600a52c01/1/2sKEXGHawupQysuD_QkxGjDjqQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:54:a9:5d:5f:b7:e5:00:19:c2:e9:85:e4:2b:94:f6:2a:aa: 0f:a8:e9:3e:d3:89:a0:a9:34:40:65:f0:50:13:f0:07:e9:e8: 1f:1e:5a:68:1c:02:fb:cf:2f:86:d8:ed:3b:ca:ea:a9:bc:c7: bf:ff:c9:81:9b:d3:2e:ba:02:41:df:da:28:90:6c:d1:d3:66: 97:a3:81:10:3c:7e:e6:68:9d:3f:9f:24:8a:00:58:d6:14:63: 68:a3:65:cf:5c:c1:88:5f:41:67:b0:84:8e:4a:57:55:ff:24: bb:b6:ab:2b:00:be:0e:85:7a:0f:7f:c2:f5:79:50:1b:41:fd: 08:ca:d1:15:38:ff:84:69:e4:34:1e:6f:be:66:a1:6d:17:5f: 70:ea:65:b3:f7:6d:84:fe:c9:15:1c:94:e1:bb:8b:aa:17:29: 0c:78:dd:e0:06:2d:09:a3:d5:74:c4:5a:6c:8f:58:30:77:f4: b3:2e:d3:e5:2d:7d:87:21:c2:06:a0:06:99:4f:e8:8e:18:d8: 74:c5:65:8c:99:fd:f4:3b:81:bc:5a:eb:37:4a:3a:ba:2d:ce: 09:9f:72:26:b0:7e:1a:65:69:67:96:9f:b4:ae:5e:59:3a:c7: 31:d7:85:d9:68:af:21:6e:d9:94:e8:97:96:99:ef:dd:bd:42: 15:d3:f0:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/ZoMat7lENti59L5GezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzI4NDVjNjFkYWMyZWE1MGNhY2I4M2ZkMDkzMTFhMzBl M2E5MGUwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD EyhkZDAzMGE5OGViYTA0OGEzMGRmMTc2Y2VhNDc3NjI3NTgwYmQ2OTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRSmojLcTnH9vPngKozeSGb046nW jXIeLKxOOji3VqYjdBClrI0MbRap3AcIiPSAcLNxla7uzX6OTSLD/vp766YFvJ39 Wq7VA/o6mQMTgvlqgZCtLsIQ8KcpnY2ULSsqoqRR2qFfX+MNxqcdFBaKPvxcZJqJ ol8CkFmJVeQB9VBLbECxJpFllc3GBweC22orCq9OEOB+Y8nDqnm6hgAbzjs37paY Pw3VNfZtkLxDix6MMwVQYMPAaYMsD7UjJCNHkAa6w4lJlrQWqhk22XhNdLkpa36z MNKyOS+JRtiE16C9vQVf8lkRvRme2tK6SlBOz1OTufvZuLVGzcJlWCGD3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0DCpjroEijDfF2zqR3YnWAvWmAMB8GA1UdIwQY MBaAFNrChFxh2sLqUMrLg/0JMRow46kOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQt ZWFlNjAwYTUyYzAxLzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kNWQ4NDYtOWFjOC00MWY1LTg2MDQtZWFlNjAwYTUyYzAx LzEvMnNLRVhHSGF3dXBReXN1RF9Ra3hHakRqcVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlSpXV+3 5QAZwumF5CuU9iqqD6jpPtOJoKk0QGXwUBPwB+noHx5aaBwC+88vhtjtO8rqqbzH v//JgZvTLroCQd/aKJBs0dNml6OBEDx+5midP58kigBY1hRjaKNlz1zBiF9BZ7CE jkpXVf8ku7arKwC+DoV6D3/C9XlQG0H9CMrRFTj/hGnkNB5vvmahbRdfcOpls/dt hP7JFRyU4buLqhcpDHjd4AYtCaPVdMRabI9YMHf0sy7T5S19hyHCBqAGmU/ojhjY dMVljJn99DuBvFrrN0o6ui3OCZ9yJrB+GmVpZ5aftK5eWTrHMdeF2WivIW7ZlOiX lpnv3b1CFdPwzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:14 2025 by rpki-client