This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json) Hash identifier: jPxahpgfjbQN24LfWrxfIfPk/x9GJ2FPzXiwL8L0ue4= Subject key identifier: D7:D2:A1:1E:8A:9B:BE:8E:AD:57:65:27:0D:CC:EA:BA:EB:13:51:44 Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3 Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3 Certificate serial: 019AF3F7A53F65DDD1B31F6DA6F4627D372B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 14:01:24 +0000 Manifest this update: Sat 06 Dec 2025 14:01:24 +0000 Manifest next update: Sun 07 Dec 2025 14:01:24 +0000 Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: n3f7lDRoxzVs/A1g4E7vuq4LoQxIExHeTGEvt6NODRM=) 2: 4yhoCs9M-fjQaMlDWlUpC1ERe-g.roa (hash: t+8njXgDpdo9kegDaGKO6tPmuatvzfS0I/p9sqY0v4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a5:3f:65:dd:d1:b3:1f:6d:a6:f4:62:7d:37:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3 Validity Not Before: Dec 6 14:01:24 2025 GMT Not After : Dec 7 14:01:24 2025 GMT Subject: CN=d7d2a11e8a9bbe8ead5765270dcceabaeb135144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:15:4b:f0:6a:6b:c6:c9:64:42:e6:29:58: ac:f0:0c:18:5f:9b:bc:aa:b9:4e:95:41:b4:8c:4a: 7b:68:aa:fe:09:01:54:64:ff:e7:82:99:90:b9:f0: f4:37:84:90:b4:25:3b:53:06:b1:95:5b:f6:d1:a4: 42:cb:69:e2:28:8b:9e:64:84:ce:2e:3d:fc:bd:56: 7c:c7:16:7d:8d:f6:11:de:98:f5:dd:ba:e4:5f:9f: af:0c:2a:c1:dc:d2:47:24:c5:31:ee:58:e4:22:d4: e7:2e:1a:4f:02:e2:c7:16:cc:f3:ee:40:cb:3b:06: 37:31:e8:24:3f:57:ae:a8:3b:22:f4:9d:af:a6:0a: c0:36:4a:e3:d0:96:ce:9e:5d:27:4b:c8:3d:32:e9: 05:69:1f:4c:bd:41:b1:3c:10:3f:c4:14:60:43:f8: 12:df:73:e0:b9:11:c4:06:3a:8c:a9:62:57:92:63: 49:68:fb:c0:14:e2:58:07:0d:2f:5d:d6:ff:bf:a5: 73:dd:d0:d7:7a:78:d0:b4:14:59:15:f0:c8:f4:ad: 83:ff:4b:8c:60:e9:74:29:2d:0e:f0:af:67:e9:0e: a6:6b:8a:cc:6a:e0:a2:cb:20:4d:94:4a:78:ed:7a: 17:ee:18:bd:1d:2d:8e:5e:ea:99:17:65:41:3c:8f: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D2:A1:1E:8A:9B:BE:8E:AD:57:65:27:0D:CC:EA:BA:EB:13:51:44 X509v3 Authority Key Identifier: keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:be:d9:f3:ac:24:e0:4b:81:ab:02:6d:eb:b1:d6:a3:98:b0: 66:fb:86:73:ed:ad:d8:e5:eb:4d:55:bd:6c:12:57:d9:c8:9f: 0b:ea:78:e2:20:4c:b5:b5:02:7b:d7:ac:f0:74:62:99:d8:36: 3e:b9:f1:9b:b5:7f:92:94:c5:0c:82:ff:1e:53:3f:5d:38:4d: e4:0f:7d:20:63:08:aa:59:f9:0b:30:f7:5b:2e:4d:b0:49:87: e1:af:48:32:57:de:01:b2:66:aa:c0:3a:09:ee:10:88:de:69: 8a:d5:b6:9f:63:8c:35:04:eb:23:a9:49:fc:92:ba:35:ee:ff: 74:db:4c:1c:f1:7e:09:d0:b8:8c:d7:7d:37:b1:33:4e:a6:e0: b9:79:23:a5:10:de:d8:66:8d:b2:53:8f:f4:c6:74:14:8a:88: a6:d7:45:fe:cf:92:2f:22:c4:e2:e5:91:3d:c9:02:e0:d4:b6: 59:cc:27:22:75:1e:6a:9d:1f:d8:a8:76:81:0b:bc:18:41:20: 42:33:a8:21:23:c4:7e:8d:83:39:dd:d3:89:e9:99:5e:e3:14: f0:21:9e:e5:3a:3a:d3:5e:a7:10:ea:37:cf:d8:9a:f5:27:20: cf:9c:d3:62:aa:40:6e:c3:c2:00:b2:1a:9d:05:9b:8b:b2:7e: 14:e7:9e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96U/Zd3Rsx9tpvRifTcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjVhNjZjZmQyMWE1Y2FkN2EyOWI4ZWI1Y2Q5MmFhNDYw MzIwYzMwHhcNMjUxMjA2MTQwMTI0WhcNMjUxMjA3MTQwMTI0WjAzMTEwLwYDVQQD EyhkN2QyYTExZThhOWJiZThlYWQ1NzY1MjcwZGNjZWFiYWViMTM1MTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwsVS/Bqa8bJZELmKVis8AwYX5u8 qrlOlUG0jEp7aKr+CQFUZP/ngpmQufD0N4SQtCU7UwaxlVv20aRCy2niKIueZITO Lj38vVZ8xxZ9jfYR3pj13brkX5+vDCrB3NJHJMUx7ljkItTnLhpPAuLHFszz7kDL OwY3MegkP1euqDsi9J2vpgrANkrj0JbOnl0nS8g9MukFaR9MvUGxPBA/xBRgQ/gS 33PguRHEBjqMqWJXkmNJaPvAFOJYBw0vXdb/v6Vz3dDXenjQtBRZFfDI9K2D/0uM YOl0KS0O8K9n6Q6ma4rMauCiyyBNlEp47XoX7hi9HS2OXuqZF2VBPI87dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfSoR6Km76OrVdlJw3M6rrrE1FEMB8GA1UdIwQY MBaAFNj1pmz9IaXK16KbjrXNkqpGAyDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mZTIwZmYtNjU5MC00ZmIwLWI2NTct ODIxMGRiNzA0OWIxLzEvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mZTIwZmYtNjU5MC00ZmIwLWI2NTctODIxMGRiNzA0OWIx LzEvMlBXbWJQMGhwY3JYb3B1T3RjMlNxa1lESU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb7Z86wk 4EuBqwJt67HWo5iwZvuGc+2t2OXrTVW9bBJX2cifC+p44iBMtbUCe9es8HRimdg2 Prnxm7V/kpTFDIL/HlM/XThN5A99IGMIqln5CzD3Wy5NsEmH4a9IMlfeAbJmqsA6 Ce4QiN5pitW2n2OMNQTrI6lJ/JK6Ne7/dNtMHPF+CdC4jNd9N7EzTqbguXkjpRDe 2GaNslOP9MZ0FIqIptdF/s+SLyLE4uWRPckC4NS2WcwnInUeap0f2Kh2gQu8GEEg QjOoISPEfo2DOd3TiemZXuMU8CGe5To6016nEOo3z9ia9Scgz5zTYqpAbsPCALIa nQWbi7J+FOeeGA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:22:43 2025 by rpki-client