This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json) Hash identifier: U4XViAdQCL3WCymO6TjWhz7xkMYKTfqH/bxB9cnqM78= Subject key identifier: BB:5D:11:B5:05:79:42:A4:DE:B5:49:BB:1F:76:9B:22:5C:A0:12:FC Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6 Certificate serial: 019B2D78D23DE489F32BB8CA2D4904DB0702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft Manifest number: 0985 Signing time: Wed 17 Dec 2025 18:00:51 +0000 Manifest this update: Wed 17 Dec 2025 18:00:51 +0000 Manifest next update: Thu 18 Dec 2025 18:00:51 +0000 Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: Nr8hkSC5K0d+alyNnsxpBZ9sg8iGx5AqE1X1gNQ9ZyA=) 2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:d2:3d:e4:89:f3:2b:b8:ca:2d:49:04:db:07:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6 Validity Not Before: Dec 17 18:00:51 2025 GMT Not After : Dec 18 18:00:51 2025 GMT Subject: CN=bb5d11b5057942a4deb549bb1f769b225ca012fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:eb:f0:b6:81:11:61:47:f1:c8:72:81:8d: ae:57:c4:dd:38:cb:5f:80:be:50:83:f8:53:c7:6b: 8e:74:25:06:82:43:1a:81:58:c2:63:03:31:db:d4: 0b:d4:2e:48:7c:07:f9:ef:05:b4:96:29:78:a0:8e: 4d:35:6c:4e:c0:13:9a:ee:71:56:8a:46:c8:e8:3b: 13:3f:8a:77:f6:9d:72:29:36:d7:83:44:be:ba:68: 37:11:00:02:50:62:71:42:c0:be:1c:08:f6:71:d5: 20:36:17:7a:6c:5e:fa:5f:22:69:4d:e2:5d:30:d4: 2b:c1:91:21:81:88:1b:15:7a:1c:2e:5d:1d:db:ef: 68:b6:a9:f3:1e:e1:5b:e1:9f:5b:ee:78:0c:49:08: 31:11:41:21:69:b6:89:c5:6c:a6:df:dd:3d:3d:99: 7b:31:b2:79:9f:09:bf:8c:88:f7:04:99:75:55:66: 96:01:23:14:37:aa:69:a1:55:35:df:8f:cb:dc:eb: 5b:29:44:56:f8:57:b4:40:ba:38:6b:e3:8c:0b:9e: 04:26:ed:bc:ea:12:74:f8:1a:8b:9e:1e:7f:c1:ff: 5a:88:c9:21:10:03:4a:dd:8a:3c:aa:1b:f7:17:78: ab:45:9b:31:42:6b:4a:b0:f0:f5:d5:dd:d9:49:3e: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5D:11:B5:05:79:42:A4:DE:B5:49:BB:1F:76:9B:22:5C:A0:12:FC X509v3 Authority Key Identifier: keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3a:73:15:dd:e0:ea:85:1c:3d:83:ae:00:4a:13:c9:7a:b8: a8:79:69:b2:ff:fa:7a:f1:13:ee:78:ad:25:b9:a1:ff:7b:8e: b4:c0:a4:b3:de:87:53:fd:35:d2:8f:0d:1a:9d:df:36:ec:94: 80:78:6f:0f:f5:af:4f:98:a7:e2:b2:47:dc:bb:ef:ca:1f:8e: b5:22:2e:9e:52:24:e3:42:9d:a2:e8:57:84:06:86:65:77:7a: 31:d1:37:70:40:5b:9a:a1:14:df:a6:b5:52:9c:c0:aa:57:79: c5:0b:be:b7:44:86:39:ad:7d:8a:eb:a4:7f:a2:7d:ee:9b:67: f2:74:48:8f:96:99:0a:40:f9:e3:90:89:fd:8e:22:a0:47:0e: 8a:cb:92:08:c2:78:d1:de:73:28:53:7b:26:97:62:1a:c1:6b: c6:c7:c8:1b:d5:56:ef:26:dc:71:e0:c1:cd:8f:16:4b:40:63: 52:bc:04:5c:97:26:62:93:5e:67:4e:2f:ee:f2:c4:f6:06:03: 6d:6e:c3:84:9e:ed:16:01:e5:71:a3:5e:01:1f:0c:74:a2:5a: cb:c0:7b:1a:70:c1:5a:06:b1:0f:5a:14:bb:69:15:62:46:89: 5e:88:c0:4a:3f:58:d5:27:07:fc:5c:df:b7:79:47:3d:93:61: f9:e7:32:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteNI95InzK7jKLUkE2wcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGZmZGJjOTMzMTc4ZDdhMWJiZjk5NjA4ZTNhOTVkNGRl ZThhZTYwHhcNMjUxMjE3MTgwMDUxWhcNMjUxMjE4MTgwMDUxWjAzMTEwLwYDVQQD EyhiYjVkMTFiNTA1Nzk0MmE0ZGViNTQ5YmIxZjc2OWIyMjVjYTAxMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolHr8LaBEWFH8chygY2uV8TdOMtf gL5Qg/hTx2uOdCUGgkMagVjCYwMx29QL1C5IfAf57wW0lil4oI5NNWxOwBOa7nFW ikbI6DsTP4p39p1yKTbXg0S+umg3EQACUGJxQsC+HAj2cdUgNhd6bF76XyJpTeJd MNQrwZEhgYgbFXocLl0d2+9otqnzHuFb4Z9b7ngMSQgxEUEhabaJxWym3909PZl7 MbJ5nwm/jIj3BJl1VWaWASMUN6ppoVU134/L3OtbKURW+Fe0QLo4a+OMC54EJu28 6hJ0+BqLnh5/wf9aiMkhEANK3Yo8qhv3F3irRZsxQmtKsPD11d3ZST5+HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtdEbUFeUKk3rVJux92myJcoBL8MB8GA1UdIwQY MBaAFNoP/byTMXjXobv5lgjjqV1N7ormMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2Ut M2NhZDM3MDY3NDA1LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2UtM2NhZDM3MDY3NDA1 LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzpzFd3g 6oUcPYOuAEoTyXq4qHlpsv/6evET7nitJbmh/3uOtMCks96HU/010o8NGp3fNuyU gHhvD/WvT5in4rJH3Lvvyh+OtSIunlIk40KdouhXhAaGZXd6MdE3cEBbmqEU36a1 UpzAqld5xQu+t0SGOa19iuukf6J97ptn8nRIj5aZCkD545CJ/Y4ioEcOisuSCMJ4 0d5zKFN7JpdiGsFrxsfIG9VW7ybcceDBzY8WS0BjUrwEXJcmYpNeZ04v7vLE9gYD bW7DhJ7tFgHlcaNeAR8MdKJay8B7GnDBWgaxD1oUu2kVYkaJXojASj9Y1ScH/Fzf t3lHPZNh+ecyDw== -----END CERTIFICATE-----Generated at Wed Dec 17 23:43:10 2025 by rpki-client