This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json) Hash identifier: iI6z2hu2jnG4U3YqKPbvjm1O4XbK5VBpaezWXBbgXlI= Subject key identifier: CA:BF:B3:04:29:7B:68:9F:70:BA:DC:AD:06:39:71:2E:93:5B:AC:97 Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64 Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064 Certificate serial: 019AF3C0861E21F7873D0F50F5C84916B227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft Manifest number: 06BA Signing time: Sat 06 Dec 2025 13:01:11 +0000 Manifest this update: Sat 06 Dec 2025 13:01:11 +0000 Manifest next update: Sun 07 Dec 2025 13:01:11 +0000 Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: b+Rha2EZnRstQtobU2fes/CwKGJXEXAgfX9WX6BxWiU=) 2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=) 3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:86:1e:21:f7:87:3d:0f:50:f5:c8:49:16:b2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064 Validity Not Before: Dec 6 13:01:11 2025 GMT Not After : Dec 7 13:01:11 2025 GMT Subject: CN=cabfb304297b689f70badcad0639712e935bac97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:9a:88:1e:cd:07:76:d3:01:d4:82:3b:36: 29:86:ff:8a:b6:a2:6f:0a:3e:0c:71:49:b9:a0:1c: 3e:21:ff:7b:36:8a:69:3e:15:a3:66:84:f2:eb:d4: 83:1f:41:f1:b2:68:ac:51:77:bf:a5:8c:d2:1a:47: 65:21:a9:39:22:4c:14:07:2d:f3:e2:43:f9:bd:33: 82:9a:f6:dd:27:80:cf:4c:ae:0e:a2:07:cb:51:11: b1:4c:4d:bd:ac:54:26:71:89:f1:54:56:2e:e8:61: 36:ee:37:99:6a:9e:e3:57:ca:8f:eb:f5:c1:3c:c4: 81:ca:35:be:8b:20:d2:42:2c:ea:4c:43:b8:f0:b2: 56:9f:02:1a:d2:95:4b:9f:04:17:d3:df:3c:16:e8: de:d2:01:ea:de:61:4b:b7:9b:fe:85:51:2c:32:2a: 5f:8a:01:11:8e:60:a3:a2:f4:da:f5:bb:da:6e:21: 23:71:36:2a:4c:cd:a3:18:d5:c0:5d:e1:d0:6c:5a: df:c2:37:7f:68:0e:42:ee:87:b8:94:b5:19:9e:c6: c1:31:fa:dc:2e:f9:a5:1d:65:0f:1e:02:51:ed:bd: f8:36:40:c9:75:7f:6c:25:17:aa:69:89:77:d5:38: 84:b5:3c:fb:c7:2a:70:77:65:0a:8d:14:66:27:0c: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BF:B3:04:29:7B:68:9F:70:BA:DC:AD:06:39:71:2E:93:5B:AC:97 X509v3 Authority Key Identifier: keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a6:44:51:dc:56:68:2d:23:bd:46:16:07:8c:57:90:32:a0: e3:94:8d:b6:18:6c:6a:be:3a:d0:54:59:3a:dc:00:96:92:0f: b1:50:ba:68:cd:79:97:40:93:5f:b9:e3:af:8e:50:fa:e9:2a: f4:85:91:a3:6d:31:72:fb:75:42:05:a8:ce:de:53:23:67:82: 08:4c:71:0d:78:76:50:f5:bb:04:9a:6c:fb:28:f2:23:40:f2: 69:c5:38:45:90:77:d0:4d:c3:45:af:44:14:f6:29:52:f3:35: 3a:f2:47:0b:bb:dc:e5:7c:e9:f8:b1:57:b1:f9:dd:65:4b:62: 27:bb:ee:a2:26:89:16:86:5f:9b:0d:da:f6:11:00:8c:2e:28: 6d:a4:fd:b4:99:8b:80:d1:fc:30:10:91:aa:63:d1:4b:4e:c0: c4:9d:a7:54:91:2f:f3:c1:49:d6:1d:42:c1:af:23:bc:06:20: f1:df:f9:a1:0a:22:66:ac:6c:39:81:39:62:49:33:43:3d:da: ec:cc:48:36:97:50:b3:1f:37:8f:07:90:5c:74:53:4e:42:ca: 25:b9:a0:de:6e:3b:49:83:0c:1c:a6:9c:9c:8f:e8:4b:70:92: 3e:b0:91:87:24:19:66:11:51:54:3f:50:e5:01:68:07:0f:c1: 15:67:23:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIYeIfeHPQ9Q9chJFrInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMzBmMmZmZjRmZTEwYjFhNzljMTI3YTZhNGFkODJjYTUz MjYwNjQwHhcNMjUxMjA2MTMwMTExWhcNMjUxMjA3MTMwMTExWjAzMTEwLwYDVQQD EyhjYWJmYjMwNDI5N2I2ODlmNzBiYWRjYWQwNjM5NzEyZTkzNWJhYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTqaiB7NB3bTAdSCOzYphv+KtqJv Cj4McUm5oBw+If97NoppPhWjZoTy69SDH0HxsmisUXe/pYzSGkdlIak5IkwUBy3z 4kP5vTOCmvbdJ4DPTK4OogfLURGxTE29rFQmcYnxVFYu6GE27jeZap7jV8qP6/XB PMSByjW+iyDSQizqTEO48LJWnwIa0pVLnwQX0988Fuje0gHq3mFLt5v+hVEsMipf igERjmCjovTa9bvabiEjcTYqTM2jGNXAXeHQbFrfwjd/aA5C7oe4lLUZnsbBMfrc LvmlHWUPHgJR7b34NkDJdX9sJReqaYl31TiEtTz7xypwd2UKjRRmJww58QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq/swQpe2ifcLrcrQY5cS6TW6yXMB8GA1UdIwQY MBaAFNsw8v/0/hCxp5wSempK2CylMmBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYt OTM3ZTI1MjNkNmY3LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYtOTM3ZTI1MjNkNmY3 LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6ZEUdxW aC0jvUYWB4xXkDKg45SNthhsar460FRZOtwAlpIPsVC6aM15l0CTX7njr45Q+ukq 9IWRo20xcvt1QgWozt5TI2eCCExxDXh2UPW7BJps+yjyI0DyacU4RZB30E3DRa9E FPYpUvM1OvJHC7vc5Xzp+LFXsfndZUtiJ7vuoiaJFoZfmw3a9hEAjC4obaT9tJmL gNH8MBCRqmPRS07AxJ2nVJEv88FJ1h1Cwa8jvAYg8d/5oQoiZqxsOYE5YkkzQz3a 7MxINpdQsx83jweQXHRTTkLKJbmg3m47SYMMHKacnI/oS3CSPrCRhyQZZhFRVD9Q 5QFoBw/BFWcjrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:39 2025 by rpki-client