This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json) Hash identifier: vgHwwXe9T0bAdEbyBQAjFGdmM8srpB6eEpLlbgiLHsE= Subject key identifier: 6C:EB:D6:4E:03:43:ED:DF:96:63:87:68:49:7A:48:3C:E7:57:B3:A5 Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Certificate serial: 019B30B0AC07DBA6945D47319B9F3FDA9C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft Manifest number: 0EBA Signing time: Thu 18 Dec 2025 09:00:43 +0000 Manifest this update: Thu 18 Dec 2025 09:00:43 +0000 Manifest next update: Fri 19 Dec 2025 09:00:43 +0000 Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: zvnF5ZKW3bOWfguAaG0Huul+Lgf43eiok81HA6vsjWM=) 2: NJJQIAvEDlH4wZu4zaM1fPZpVGI.roa (hash: zmrVvshEoDYlY+afA5JOHL7lyVYdqt5pXq3EABMgUFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:ac:07:db:a6:94:5d:47:31:9b:9f:3f:da:9c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Validity Not Before: Dec 18 09:00:43 2025 GMT Not After : Dec 19 09:00:43 2025 GMT Subject: CN=6cebd64e0343eddf96638768497a483ce757b3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:dc:c3:11:ce:fa:47:11:59:4a:40:3f:eb: 84:6e:59:2b:63:aa:f2:ce:89:c3:20:1b:bc:78:89: aa:47:85:3e:f6:31:3a:de:4a:4e:97:0b:b3:91:81: f7:39:a8:5e:fc:1d:3f:23:28:5e:f9:a7:a3:8d:4b: 5d:48:ec:3d:ea:c7:4f:84:38:c1:3a:8e:4e:22:fd: b9:26:3c:95:c2:af:1a:2d:83:4c:42:9e:ad:52:ba: 09:51:f7:45:72:3d:d8:af:0b:26:1e:df:08:c7:6c: 8f:b3:89:c8:33:db:54:6c:42:af:07:52:d3:a8:aa: 13:22:e6:b1:d4:3f:28:3c:f1:45:05:4d:69:16:ee: 8f:78:58:f2:5a:4c:5f:ab:44:8f:0c:56:5d:ae:26: c9:c4:ae:c6:fb:17:8b:9c:32:6e:f2:62:b9:2e:10: af:56:fe:92:51:43:30:48:78:95:00:ba:62:5e:d0: ce:ca:a3:c4:83:48:78:aa:25:5d:0e:c8:76:33:68: dc:70:b1:a1:4b:38:ca:39:23:b6:24:5e:37:89:95: 1d:8c:ef:73:74:46:9f:10:00:8e:b3:e6:ea:ed:03: 08:2f:36:06:1f:b8:e8:79:b9:a3:d8:42:4c:d7:00: c6:a8:a6:6a:1f:fb:72:40:92:ae:21:fe:bf:88:e2: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EB:D6:4E:03:43:ED:DF:96:63:87:68:49:7A:48:3C:E7:57:B3:A5 X509v3 Authority Key Identifier: keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ff:c9:1d:1f:93:eb:14:57:20:80:18:85:a1:16:77:93:15: cb:81:c2:4f:a1:bf:27:5d:17:db:77:e8:b4:07:6c:58:c4:33: 5f:51:8b:00:72:d6:35:30:1d:e0:76:d2:43:fa:bf:db:57:a1: 82:c8:10:0d:85:dc:e6:68:c3:38:8c:f7:15:09:4a:e9:5a:8c: b7:5e:71:01:92:bf:a4:c5:7a:3d:cf:c0:7b:2f:bc:33:0c:4c: 9f:bf:d1:19:db:04:85:0a:95:82:a9:68:22:17:03:02:10:17: c5:7e:86:8d:95:1f:06:9e:6b:f8:d2:35:3e:dd:00:d3:e7:7e: 67:11:31:dc:97:19:ea:45:31:86:bd:52:7a:03:62:34:60:e3: 12:31:fd:67:a4:12:ea:d4:80:e2:bb:c3:ad:6c:b7:60:f6:92: 44:34:5d:f3:fc:81:8c:71:9e:7d:53:ec:9d:2a:b5:b7:a7:90: cf:84:ee:03:28:9b:33:68:3c:a2:39:c3:66:5d:8c:1c:f1:b7: 95:d7:51:a7:20:73:26:10:30:95:5b:93:4b:71:ec:e2:c0:37: 1f:e5:f3:cc:84:88:ef:68:28:a8:49:81:70:e3:2c:0e:aa:64: bb:f7:58:36:12:eb:34:ee:16:52:cd:6e:a6:a6:ab:6e:3b:fd: 69:3d:cc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsKwH26aUXUcxm58/2pxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTQxM2ViMjlhNDNkMmU0NWZlY2RkODhlZTUzOTZjOTZi ZjFjYjUwHhcNMjUxMjE4MDkwMDQzWhcNMjUxMjE5MDkwMDQzWjAzMTEwLwYDVQQD Eyg2Y2ViZDY0ZTAzNDNlZGRmOTY2Mzg3Njg0OTdhNDgzY2U3NTdiM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kHcwxHO+kcRWUpAP+uEblkrY6ry zonDIBu8eImqR4U+9jE63kpOlwuzkYH3Oahe/B0/Iyhe+aejjUtdSOw96sdPhDjB Oo5OIv25JjyVwq8aLYNMQp6tUroJUfdFcj3YrwsmHt8Ix2yPs4nIM9tUbEKvB1LT qKoTIuax1D8oPPFFBU1pFu6PeFjyWkxfq0SPDFZdribJxK7G+xeLnDJu8mK5LhCv Vv6SUUMwSHiVALpiXtDOyqPEg0h4qiVdDsh2M2jccLGhSzjKOSO2JF43iZUdjO9z dEafEACOs+bq7QMILzYGH7joebmj2EJM1wDGqKZqH/tyQJKuIf6/iOLuiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzr1k4DQ+3flmOHaEl6SDznV7OlMB8GA1UdIwQY MBaAFNlUE+sppD0uRf7N2I7lOWyWvxy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWIt YTgwNjE2M2VjMjk0LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWItYTgwNjE2M2VjMjk0 LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf/JHR+T 6xRXIIAYhaEWd5MVy4HCT6G/J10X23fotAdsWMQzX1GLAHLWNTAd4HbSQ/q/21eh gsgQDYXc5mjDOIz3FQlK6VqMt15xAZK/pMV6Pc/Aey+8MwxMn7/RGdsEhQqVgqlo IhcDAhAXxX6GjZUfBp5r+NI1Pt0A0+d+ZxEx3JcZ6kUxhr1SegNiNGDjEjH9Z6QS 6tSA4rvDrWy3YPaSRDRd8/yBjHGefVPsnSq1t6eQz4TuAyibM2g8ojnDZl2MHPG3 lddRpyBzJhAwlVuTS3Hs4sA3H+XzzISI72goqEmBcOMsDqpku/dYNhLrNO4WUs1u pqarbjv9aT3M6w== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:50 2025 by rpki-client