This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json) Hash identifier: EyR4plLNXGh6Op7llzUkHQn9gxeRK9YBAnMlw+wjW3c= Subject key identifier: A9:06:BA:02:AE:26:B2:CD:C5:C2:67:CA:4C:75:DF:99:F6:59:44:65 Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5 Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5 Certificate serial: 019AF12E5FF0E51BB1337577D23680847989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft Manifest number: 1274 Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: YujBfei98zX5Lrtin3GSZK0d9wL4/kmKqczKVsJhzgs=) 2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5f:f0:e5:1b:b1:33:75:77:d2:36:80:84:79:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=a906ba02ae26b2cdc5c267ca4c75df99f6594465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:30:44:c3:ae:a6:0b:93:bf:67:44:3e:54: 9a:05:63:9a:2f:be:57:62:aa:c2:1a:bd:3a:cb:f5: d3:47:0a:4a:59:a4:e3:66:2d:d6:a9:17:61:ce:3f: cb:ea:53:a8:a4:20:e2:aa:a8:77:63:3d:a3:25:5b: 73:fe:a4:72:e4:16:a6:2c:5f:01:44:b6:3d:ab:8c: 88:b9:82:48:32:33:fd:6a:8b:cf:25:1f:9d:f7:c2: d4:a2:ee:be:ab:e9:24:29:73:41:f2:66:f0:21:61: 05:ba:78:73:0d:cd:e9:34:d2:d7:c8:58:f5:d2:c7: fd:bc:96:c8:09:74:5c:36:2e:eb:18:b9:02:9a:fb: 4a:da:71:4b:df:9a:1f:10:9c:42:09:ee:65:34:c6: 05:62:ae:be:e8:48:77:85:a6:33:de:79:d5:d0:06: 1f:ae:49:81:eb:98:17:1e:72:3c:60:17:67:fb:58: d9:60:6e:11:0a:e5:26:f4:f3:3c:a8:9f:f3:b7:8d: 9f:4e:77:aa:c3:f4:81:5d:af:16:7e:0f:34:0b:52: dd:04:45:48:5b:2b:41:10:46:94:7c:e3:5f:cf:15: 65:6f:30:76:50:e9:ac:f2:4e:98:f2:76:2d:9c:09: b6:d3:6a:bc:80:8a:1d:a6:a4:d7:b8:04:24:cd:72: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:06:BA:02:AE:26:B2:CD:C5:C2:67:CA:4C:75:DF:99:F6:59:44:65 X509v3 Authority Key Identifier: keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e5:04:f5:3d:77:3f:9b:e9:47:07:4d:72:02:b5:19:cf:b2: 28:53:37:a8:34:32:86:03:55:4b:12:d4:ff:80:d9:c8:b4:84: 59:83:cc:4c:91:d5:36:53:16:46:6f:d1:26:08:d1:ff:4c:e3: 56:34:32:4e:c7:6e:e8:70:02:5b:2f:9a:80:6c:ad:37:f7:5f: a2:09:5e:74:e4:d0:74:11:0d:b3:95:c5:3a:f2:d7:3e:90:e3: bc:79:cb:d6:59:64:a7:0e:01:61:bd:ca:28:50:cb:3a:15:a5: a3:92:e2:2e:46:7c:b4:76:9a:7b:aa:96:30:96:6f:49:57:51: 1f:64:fb:dc:53:6d:c0:ce:2d:0a:86:6a:70:30:4c:b3:84:8e: 64:cb:70:db:d1:1d:f0:97:58:d8:2c:dd:f2:e6:63:ea:bc:72: 9a:ac:26:da:0c:8e:1d:59:2e:71:e3:ee:31:e1:d3:32:31:4d: a8:2c:22:d9:57:82:e6:40:b6:b6:ff:c1:40:10:d9:44:b2:df: 37:e6:d1:ed:a3:26:92:05:d1:74:6b:0c:ff:f1:a8:58:eb:a2: 66:fd:26:97:4e:31:f5:e8:1a:8f:38:a1:33:f0:05:46:4f:3c: 4e:f1:1c:dc:35:0a:5e:f2:4f:38:3e:92:aa:a0:df:5a:ba:ed: 56:e4:59:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl/w5RuxM3V30jaAhHmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzRjYjUxMTUwODAyYTQwMThjYzI1NmFkMjlmNTQ3MjA2 NzVlZDUwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD EyhhOTA2YmEwMmFlMjZiMmNkYzVjMjY3Y2E0Yzc1ZGY5OWY2NTk0NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo8wRMOupguTv2dEPlSaBWOaL75X YqrCGr06y/XTRwpKWaTjZi3WqRdhzj/L6lOopCDiqqh3Yz2jJVtz/qRy5BamLF8B RLY9q4yIuYJIMjP9aovPJR+d98LUou6+q+kkKXNB8mbwIWEFunhzDc3pNNLXyFj1 0sf9vJbICXRcNi7rGLkCmvtK2nFL35ofEJxCCe5lNMYFYq6+6Eh3haYz3nnV0AYf rkmB65gXHnI8YBdn+1jZYG4RCuUm9PM8qJ/zt42fTneqw/SBXa8Wfg80C1LdBEVI WytBEEaUfONfzxVlbzB2UOms8k6Y8nYtnAm202q8gIodpqTXuAQkzXL/twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkGugKuJrLNxcJnykx135n2WURlMB8GA1UdIwQY MBaAFNrEy1EVCAKkAYzCVq0p9UcgZ17VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEt NDE4MGY5ZTMwOTQ1LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEtNDE4MGY5ZTMwOTQ1 LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuUE9T13 P5vpRwdNcgK1Gc+yKFM3qDQyhgNVSxLU/4DZyLSEWYPMTJHVNlMWRm/RJgjR/0zj VjQyTsdu6HACWy+agGytN/dfogledOTQdBENs5XFOvLXPpDjvHnL1llkpw4BYb3K KFDLOhWlo5LiLkZ8tHaae6qWMJZvSVdRH2T73FNtwM4tCoZqcDBMs4SOZMtw29Ed 8JdY2Czd8uZj6rxymqwm2gyOHVkucePuMeHTMjFNqCwi2VeC5kC2tv/BQBDZRLLf N+bR7aMmkgXRdGsM//GoWOuiZv0ml04x9egajzihM/AFRk88TvEc3DUKXvJPOD6S qqDfWrrtVuRZqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:59 2025 by rpki-client