This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft File: c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft (raw, json) Hash identifier: e3OUPOMCCItICmrxz2u9yh/G/6zmF10smLX1UZXtP4s= Subject key identifier: 2C:E8:6B:0F:C9:20:E2:64:F9:79:17:E6:BF:B5:D1:EA:90:0C:AA:F3 Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C Certificate issuer: /CN=7365ec12014f911f7205eecbc2fc818b9b35723c Certificate serial: 019AF4650663DE2D3E6A609F24A9459BD50E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft Manifest number: 0509 Signing time: Sat 06 Dec 2025 16:00:52 +0000 Manifest this update: Sat 06 Dec 2025 16:00:52 +0000 Manifest next update: Sun 07 Dec 2025 16:00:52 +0000 Files and hashes: 1: 7F1850F_Obxj3JwCHIHSCiVNcoQ.roa (hash: tsb8renTt83lozgludTeHNU0hdaTBRXVrETnPNYQBRY=) 2: SCpEo2_kovwtJ7h461SY3LLkpsY.roa (hash: NtJ3kukozr/4572zznTzib4QwdfrhaOpAf0JjjBMM9U=) 3: c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl (hash: rheHM4RMdNVLgxqGjUVOfog2djs6mvmRKTHdvz9/LY0=) 4: yB3BSH-t3iqf-k7DXrq_Qwtwhu8.roa (hash: V0TvJM1MDMOgB+cgdEr/rySGEYGibK2chUUjTcXO7vA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:06:63:de:2d:3e:6a:60:9f:24:a9:45:9b:d5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c Validity Not Before: Dec 6 16:00:52 2025 GMT Not After : Dec 7 16:00:52 2025 GMT Subject: CN=2ce86b0fc920e264f97917e6bfb5d1ea900caaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:b3:7c:2a:87:6c:0d:d1:66:6a:79:f6:86: 8b:13:07:9c:96:86:8f:35:46:0a:31:eb:f5:0f:85: 6a:19:14:da:c0:7d:45:b6:dc:46:a7:4a:c8:8e:de: 65:c8:b9:80:5f:51:a3:65:ed:84:0f:89:a7:19:c6: 25:e1:40:09:84:c2:af:b2:d2:b1:9a:ca:a2:6b:32: 48:db:21:41:b3:47:ea:22:5f:2f:ee:8e:91:7d:30: 88:db:47:ed:6e:5f:96:e9:0a:42:33:66:81:36:40: 43:91:b1:36:4b:46:e0:0c:7a:6e:56:91:57:fa:96: 98:26:da:46:e0:f4:11:a8:84:ce:1f:04:fa:da:49: 17:9b:cb:96:8d:44:b3:aa:2c:f5:bf:3e:71:ba:56: ae:22:42:e8:35:80:67:5a:df:8c:cd:51:ed:60:42: e7:f2:3e:17:a7:a6:09:27:80:ef:d1:f0:5a:3b:17: 15:48:7d:f4:8c:38:66:a2:9e:32:0c:b4:97:06:d4: b3:3d:4f:2f:b1:32:2f:10:ad:2b:69:2c:f8:25:30: 69:f3:3b:f6:a8:be:56:b4:fe:05:c0:c2:19:1c:b2: f5:6b:30:ec:3c:3c:e9:1b:fa:97:d8:4c:75:19:54: 88:23:49:09:a6:9a:1d:e6:3b:7f:7e:8b:02:f1:8d: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E8:6B:0F:C9:20:E2:64:F9:79:17:E6:BF:B5:D1:EA:90:0C:AA:F3 X509v3 Authority Key Identifier: keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:87:77:4f:25:09:dc:d5:97:4e:a9:62:cc:4b:50:df:46:85: 76:38:d7:b0:3b:00:f0:e7:85:f3:36:16:ed:3e:7f:4e:f5:45: 92:ab:6a:67:82:50:d0:e0:d2:55:94:f1:f8:b2:b2:24:01:cb: f6:eb:de:54:cc:55:e4:ad:9b:ca:6a:25:36:7a:8f:1f:e9:03: 30:08:d9:8b:b4:80:e0:26:dd:25:b0:f0:36:94:6e:e0:b1:b2: cc:48:f1:ca:7e:c7:e0:db:0c:ca:1e:20:83:77:fd:3f:98:d9: 1b:f0:31:89:29:92:d6:f0:21:a2:45:00:a3:23:97:48:23:a5: 28:9e:a8:b5:f9:b6:c1:9e:41:d7:13:db:e2:1c:8a:bf:a0:d7: 1d:83:17:5f:b0:9b:40:65:8a:f1:28:a7:be:ef:45:cb:38:23: fe:78:e2:70:86:b8:3a:57:8f:35:f1:71:c3:5a:bf:b3:35:8d: 78:bf:a7:0e:ec:09:88:ea:b7:d1:6c:a3:3b:20:d1:79:cf:e3: ac:06:d9:8a:8b:30:31:d2:53:6e:53:49:9b:69:16:39:36:48: a8:6d:16:7a:d5:90:66:a0:01:e5:1a:60:7d:8f:84:ac:47:96: 28:86:eb:2f:64:99:a0:28:99:17:be:a1:1e:e1:6b:a2:fc:df: 0d:73:59:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQZj3i0+amCfJKlFm9UOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjVlYzEyMDE0ZjkxMWY3MjA1ZWVjYmMyZmM4MThiOWIz NTcyM2MwHhcNMjUxMjA2MTYwMDUyWhcNMjUxMjA3MTYwMDUyWjAzMTEwLwYDVQQD EygyY2U4NmIwZmM5MjBlMjY0Zjk3OTE3ZTZiZmI1ZDFlYTkwMGNhYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EezfCqHbA3RZmp59oaLEwecloaP NUYKMev1D4VqGRTawH1FttxGp0rIjt5lyLmAX1GjZe2ED4mnGcYl4UAJhMKvstKx msqiazJI2yFBs0fqIl8v7o6RfTCI20ftbl+W6QpCM2aBNkBDkbE2S0bgDHpuVpFX +paYJtpG4PQRqITOHwT62kkXm8uWjUSzqiz1vz5xulauIkLoNYBnWt+MzVHtYELn 8j4Xp6YJJ4Dv0fBaOxcVSH30jDhmop4yDLSXBtSzPU8vsTIvEK0raSz4JTBp8zv2 qL5WtP4FwMIZHLL1azDsPDzpG/qX2Ex1GVSII0kJppod5jt/fosC8Y0xRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzoaw/JIOJk+XkX5r+10eqQDKrzMB8GA1UdIwQY MBaAFHNl7BIBT5EfcgXuy8L8gYubNXI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYt NWExOWFmZGIwNmE3LzEvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYtNWExOWFmZGIwNmE3 LzEvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4d3TyUJ 3NWXTqlizEtQ30aFdjjXsDsA8OeF8zYW7T5/TvVFkqtqZ4JQ0ODSVZTx+LKyJAHL 9uveVMxV5K2bymolNnqPH+kDMAjZi7SA4CbdJbDwNpRu4LGyzEjxyn7H4NsMyh4g g3f9P5jZG/AxiSmS1vAhokUAoyOXSCOlKJ6otfm2wZ5B1xPb4hyKv6DXHYMXX7Cb QGWK8Sinvu9Fyzgj/njicIa4OlePNfFxw1q/szWNeL+nDuwJiOq30WyjOyDRec/j rAbZioswMdJTblNJm2kWOTZIqG0WetWQZqAB5RpgfY+ErEeWKIbrL2SZoCiZF76h HuFrovzfDXNZNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:53 2025 by rpki-client