This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft File: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft (raw, json) Hash identifier: sVWiUPeuhGmaK0MCOTR1uPryMZh0A5G3pDCwQUjXW4A= Subject key identifier: 34:CF:76:63:9B:F4:DD:3C:8A:39:9C:72:8E:5E:F4:EF:4A:53:A5:28 Authority key identifier: D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 Certificate issuer: /CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Certificate serial: 019AF2E43F2243C3447F32A00667278E8624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft Manifest number: 0E9A Signing time: Sat 06 Dec 2025 09:00:35 +0000 Manifest this update: Sat 06 Dec 2025 09:00:35 +0000 Manifest next update: Sun 07 Dec 2025 09:00:35 +0000 Files and hashes: 1: 2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl (hash: L4Q+rJi7DD5JBUQycFvaZCUxpYTRNXbSMp+Eqa7LUoE=) 2: NJJQIAvEDlH4wZu4zaM1fPZpVGI.roa (hash: zmrVvshEoDYlY+afA5JOHL7lyVYdqt5pXq3EABMgUFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3f:22:43:c3:44:7f:32:a0:06:67:27:8e:86:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95413eb29a43d2e45fecdd88ee5396c96bf1cb5 Validity Not Before: Dec 6 09:00:35 2025 GMT Not After : Dec 7 09:00:35 2025 GMT Subject: CN=34cf76639bf4dd3c8a399c728e5ef4ef4a53a528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:af:47:c3:ef:1b:d3:f0:8e:65:ab:c6:33: 85:b8:9b:72:cc:55:7e:3c:48:fe:0b:73:cc:37:55: bb:d1:cb:13:85:d6:e2:6e:5e:84:51:ed:8c:94:24: ea:5a:43:46:cf:a8:fc:e3:7a:08:a8:62:db:5b:c8: 2e:d6:e0:d5:dd:6d:54:49:51:d7:bb:d7:88:f1:74: 78:bf:6e:20:5e:81:1c:27:6b:33:b7:0b:e6:e3:c5: c5:f1:61:33:0d:64:14:08:30:7b:de:51:31:f2:82: f1:5e:4e:05:26:9f:db:b9:61:b7:da:18:a0:bf:ac: 47:64:f0:4a:b0:be:4c:1d:e8:65:6e:72:13:e0:8a: c2:75:e6:19:98:af:85:c8:b1:18:87:5a:7f:57:6e: 91:26:72:ca:59:10:53:9b:dd:8d:a5:df:30:f9:2c: 00:2f:4a:45:9c:1e:9d:65:6b:0a:e8:42:a7:03:94: aa:79:62:a9:e0:b7:3f:96:a8:fc:c9:19:53:7f:a3: 0f:3b:9f:08:ff:27:2b:de:93:f6:44:e7:86:67:e2: 23:7b:fa:38:6b:67:7a:ce:38:fc:f4:88:cf:0a:62: 93:96:ea:aa:6d:28:34:8a:62:40:1c:3b:53:26:4b: 7e:52:57:a8:e1:5d:a6:f4:77:02:7e:2f:63:0c:e4: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CF:76:63:9B:F4:DD:3C:8A:39:9C:72:8E:5E:F4:EF:4A:53:A5:28 X509v3 Authority Key Identifier: keyid:D9:54:13:EB:29:A4:3D:2E:45:FE:CD:D8:8E:E5:39:6C:96:BF:1C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VQT6ymkPS5F_s3YjuU5bJa_HLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f19c9e-c541-4363-b25b-a806163ec294/1/2VQT6ymkPS5F_s3YjuU5bJa_HLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2a:ef:4f:69:0e:56:cf:84:cf:68:6f:f3:fc:19:02:c2:08: eb:50:1a:4a:08:f4:81:d5:a5:53:67:2e:62:86:e7:c9:e5:4d: 62:09:7a:ce:d1:08:4c:4c:3d:d4:64:bf:28:0e:41:07:9a:f1: ea:ab:29:2e:4b:12:99:2a:29:80:e0:c1:23:bb:11:d2:bd:e5: 79:d9:c5:5b:96:db:43:61:7a:77:63:ab:e6:d8:b1:eb:0d:2f: 6a:cf:39:e9:b9:e6:fc:57:07:a1:6a:4d:86:28:e5:fe:a7:e2: 10:bc:17:6b:1c:18:89:3c:da:2a:f5:79:ed:48:8c:2a:11:4f: 47:66:84:e5:66:a2:b3:fc:f3:c6:38:e5:03:d3:be:28:c5:10: 60:81:f6:2e:c0:68:31:d5:d1:5b:a9:d2:60:18:eb:6a:53:f4: 5d:f4:e5:dd:d9:2e:9f:99:9e:2b:bf:75:fb:c9:7d:6e:d0:cd: 87:22:0e:23:ea:25:d1:61:db:b7:f5:44:e4:fa:ed:f5:6b:c7: ad:2c:72:f6:6b:25:b9:d9:7a:7a:42:1d:7a:f5:24:7d:5d:93: 8e:27:b7:f0:47:8e:d5:4f:27:d9:83:2d:a4:86:07:45:10:47: 66:59:37:ca:c6:f3:16:4e:85:d0:d2:0f:f1:25:a8:7e:23:c6: 91:df:2e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5D8iQ8NEfzKgBmcnjoYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTQxM2ViMjlhNDNkMmU0NWZlY2RkODhlZTUzOTZjOTZi ZjFjYjUwHhcNMjUxMjA2MDkwMDM1WhcNMjUxMjA3MDkwMDM1WjAzMTEwLwYDVQQD EygzNGNmNzY2MzliZjRkZDNjOGEzOTljNzI4ZTVlZjRlZjRhNTNhNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLivR8PvG9PwjmWrxjOFuJtyzFV+ PEj+C3PMN1W70csThdbibl6EUe2MlCTqWkNGz6j843oIqGLbW8gu1uDV3W1USVHX u9eI8XR4v24gXoEcJ2sztwvm48XF8WEzDWQUCDB73lEx8oLxXk4FJp/buWG32hig v6xHZPBKsL5MHehlbnIT4IrCdeYZmK+FyLEYh1p/V26RJnLKWRBTm92Npd8w+SwA L0pFnB6dZWsK6EKnA5SqeWKp4Lc/lqj8yRlTf6MPO58I/ycr3pP2ROeGZ+Ije/o4 a2d6zjj89IjPCmKTluqqbSg0imJAHDtTJkt+Uleo4V2m9HcCfi9jDOTXnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTPdmOb9N08ijmcco5e9O9KU6UoMB8GA1UdIwQY MBaAFNlUE+sppD0uRf7N2I7lOWyWvxy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWIt YTgwNjE2M2VjMjk0LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9mMTljOWUtYzU0MS00MzYzLWIyNWItYTgwNjE2M2VjMjk0 LzEvMlZRVDZ5bWtQUzVGX3MzWWp1VTViSmFfSExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCrvT2kO Vs+Ez2hv8/wZAsII61AaSgj0gdWlU2cuYobnyeVNYgl6ztEITEw91GS/KA5BB5rx 6qspLksSmSopgODBI7sR0r3lednFW5bbQ2F6d2Or5tix6w0vas856bnm/FcHoWpN hijl/qfiELwXaxwYiTzaKvV57UiMKhFPR2aE5Wais/zzxjjlA9O+KMUQYIH2LsBo MdXRW6nSYBjralP0XfTl3dkun5meK791+8l9btDNhyIOI+ol0WHbt/VE5Prt9WvH rSxy9msludl6ekIdevUkfV2Tjie38EeO1U8n2YMtpIYHRRBHZlk3ysbzFk6F0NIP 8SWofiPGkd8uVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:06 2025 by rpki-client