This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json) Hash identifier: SKUf+QEfh2bqhUhKBvzsGK+Vx2Z7anxa780cltH2TjM= Subject key identifier: E2:C0:DC:5C:33:3E:F0:F2:E7:49:B9:24:86:45:C2:15:36:2B:5A:00 Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48 Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48 Certificate serial: 019AF163E8FF4DBFE1E4A3FB9D5406C3A0A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft Manifest number: 29 Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: 0L+Gq4nJvW+jrr8nLfXduR1NGdNhGjDoiQn1Vipyikc=) 2: hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa (hash: R04Z5dzTVpp/mJ118ZonHq/GgrG1tGSGF8iWqD8/YV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e8:ff:4d:bf:e1:e4:a3:fb:9d:54:06:c3:a0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=e2c0dc5c333ef0f2e749b9248645c215362b5a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:3d:fd:3f:d6:56:ea:13:9f:47:ac:6a:9a: 59:69:31:2d:a9:3d:9f:e7:42:9b:f6:2d:5f:e0:72: ec:cf:03:67:38:b9:a2:4a:cc:91:91:be:e6:76:2d: a4:eb:54:17:9a:c9:53:bb:fb:f0:7c:34:db:f7:ab: 9a:03:bc:18:76:64:a3:17:46:28:08:fe:93:2b:a0: 85:11:49:8b:1f:9f:e5:fa:c1:95:7e:69:e4:8f:cc: 5d:a7:af:a5:a0:10:26:2f:d5:09:fb:7e:66:f3:be: 20:83:79:8c:b1:ce:62:6c:20:c9:74:91:d6:70:fa: ac:c7:c2:7b:ba:5b:83:ef:63:d9:7f:bd:2c:6e:32: 72:7c:8c:33:0c:83:a1:18:02:05:21:4f:48:9d:24: 97:10:f9:83:28:98:dc:8d:92:c3:c6:23:49:a7:51: 87:88:7b:2a:66:ef:ac:b6:69:58:e6:d0:5a:87:a9: 33:6d:e7:fe:5f:c9:2f:f8:f6:65:eb:b3:01:0b:45: 84:cb:e6:4b:37:fb:65:a1:65:ee:89:cb:ee:19:d3: 7e:e3:a9:50:68:1e:2c:6c:83:42:3c:0c:cf:e3:2f: ec:1f:37:34:7b:46:67:28:18:69:fb:ec:4e:02:33: 3e:f1:84:be:dc:73:b1:16:9d:a6:f3:29:3b:91:6e: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C0:DC:5C:33:3E:F0:F2:E7:49:B9:24:86:45:C2:15:36:2B:5A:00 X509v3 Authority Key Identifier: keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:75:12:eb:17:20:d1:63:c1:d4:73:11:28:14:59:1e:3d:60: 6f:40:26:56:69:6f:45:82:8d:79:38:83:84:4e:6c:06:52:65: 69:78:a6:f7:60:df:2e:6c:56:70:22:4e:a0:41:81:4b:a0:13: 68:3d:7d:aa:a1:de:16:f5:e2:95:b2:df:49:a1:28:dd:a4:6b: fe:66:44:d5:ab:86:0c:44:9a:73:ca:ba:b9:61:65:3d:b2:c4: 62:95:8f:42:c9:ce:ec:17:75:64:56:df:5c:6e:c2:8a:25:ee: 26:4b:2d:9c:92:19:73:c2:73:96:53:8d:86:48:4d:d8:0e:2f: 7b:c0:40:e6:58:77:f5:9f:a1:bd:e2:c0:f3:10:33:04:77:fc: 9d:a5:fa:09:dd:67:28:99:b0:81:37:58:eb:b4:55:cb:14:9c: ad:f8:46:c0:65:06:d9:b8:1b:68:47:1b:de:f0:ab:b3:62:88: d5:b6:4a:fe:62:82:42:2b:4d:08:31:b3:69:2b:b5:be:fe:6e: a9:51:4a:8e:97:cb:58:d9:d2:67:c1:d3:ab:c4:ca:29:69:e5: f8:47:65:9f:c6:8a:b2:23:1d:cf:77:e5:04:9e:87:f4:9b:0d: 48:30:a1:a7:a2:52:9f:20:90:93:77:03:5a:af:bd:33:df:24: e8:1c:78:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+j/Tb/h5KP7nVQGw6ClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NTBiOTYwYWRlOTQ0OWYxZTgwODE0M2EzNzFjZTJlM2Ex ODdlNDgwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EyhlMmMwZGM1YzMzM2VmMGYyZTc0OWI5MjQ4NjQ1YzIxNTM2MmI1YTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFA9/T/WVuoTn0esappZaTEtqT2f 50Kb9i1f4HLszwNnOLmiSsyRkb7mdi2k61QXmslTu/vwfDTb96uaA7wYdmSjF0Yo CP6TK6CFEUmLH5/l+sGVfmnkj8xdp6+loBAmL9UJ+35m874gg3mMsc5ibCDJdJHW cPqsx8J7uluD72PZf70sbjJyfIwzDIOhGAIFIU9InSSXEPmDKJjcjZLDxiNJp1GH iHsqZu+stmlY5tBah6kzbef+X8kv+PZl67MBC0WEy+ZLN/tloWXuicvuGdN+46lQ aB4sbINCPAzP4y/sHzc0e0ZnKBhp++xOAjM+8YS+3HOxFp2m8yk7kW4oYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLA3FwzPvDy50m5JIZFwhU2K1oAMB8GA1UdIwQY MBaAFNhQuWCt6USfHoCBQ6Nxzi46GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt MDE1MGM5NGY5NDBkLzEvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk LzEvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXUS6xcg 0WPB1HMRKBRZHj1gb0AmVmlvRYKNeTiDhE5sBlJlaXim92DfLmxWcCJOoEGBS6AT aD19qqHeFvXilbLfSaEo3aRr/mZE1auGDESac8q6uWFlPbLEYpWPQsnO7Bd1ZFbf XG7CiiXuJkstnJIZc8JzllONhkhN2A4ve8BA5lh39Z+hveLA8xAzBHf8naX6Cd1n KJmwgTdY67RVyxScrfhGwGUG2bgbaEcb3vCrs2KI1bZK/mKCQitNCDGzaSu1vv5u qVFKjpfLWNnSZ8HTq8TKKWnl+Edln8aKsiMdz3flBJ6H9JsNSDChp6JSnyCQk3cD Wq+9M98k6Bx4/w== -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:22 2025 by rpki-client