This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: RDZ7iRHJC+0u4ME1WRkIHxNCYQ5cFuymcTr5GXpL/ic= Subject key identifier: 8D:CD:01:4C:E5:55:C2:97:52:4D:DC:BE:42:21:F1:07:9A:4A:CB:3C Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019AF1D21081C288F85439F0192297824C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0616 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: +G+MXl7RIa950D8CAYrhs+kcYa8pfdgt1E8e2QdqrzI=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: 4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa (hash: 7KT8zX1ut3NI1KMa06d5NbNTRIbK0mONunluRgrTKdc=) 4: 56KKt4BpkIwEHMFmq2QXksA-2io.roa (hash: 54GcazY6u68JnZUu56e7FZCBJWXeMImZQ8ihkRRuFTc=) 5: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 6: EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa (hash: Ju4zKmRJh/EbFKeLrhI6L7JYjbJ+gosDVEmrn3gTxds=) 7: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 8: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 9: hfy8wKzZ1lOnw8rRIAp89k1HBQg.roa (hash: w/O4MPtS75N0zJ8yWXd9FMAgNBIXsYLEr12sXp5bZHk=) 10: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 11: lWNGZyoYxMMDcNyLWjAJGitLlFk.roa (hash: 6BoUCdn7LLlUMhRVmjkftBgzwA47YP9UtF03OcYu1VA=) 12: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 13: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 14: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 15: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 16: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:10:81:c2:88:f8:54:39:f0:19:22:97:82:4c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=8dcd014ce555c297524ddcbe4221f1079a4acb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:97:62:de:16:fa:bc:9e:e7:81:b5:d1:fe: ef:a9:a3:b7:16:2d:56:a2:9f:1d:3a:53:b2:bf:e1: ca:8e:fe:b9:02:c4:6b:af:db:95:e8:3d:36:99:1c: 43:38:2e:32:92:76:c9:f5:11:3e:6f:1b:8f:33:80: 72:05:da:a8:02:d4:4a:37:54:80:27:75:86:f8:82: 3e:82:73:32:7c:82:48:77:e2:59:38:5f:a0:19:4e: a8:0e:81:61:04:e8:a3:78:a4:4d:8f:d0:a8:cd:87: 14:11:87:fb:5c:3f:41:39:73:72:be:7d:3f:b4:69: 0e:93:3f:15:18:c3:13:bd:c8:a7:6d:b3:25:cf:c6: 5c:9a:9a:e8:c3:cb:b2:a8:60:92:5f:43:9e:61:36: 5e:cc:81:80:80:ea:37:55:24:cd:cb:ad:bb:32:17: 10:41:5f:67:41:f5:7a:19:a6:86:28:4c:0b:b0:01: c9:c7:71:aa:60:7e:26:70:9b:9f:91:d6:a7:dd:d7: ec:49:0e:ab:18:a8:0e:32:9f:6c:dd:d6:f2:c3:64: 32:6a:94:bc:79:7e:ce:ab:44:79:45:d3:73:78:c9: 0b:32:e5:a7:06:a5:c8:50:47:1d:a1:9f:65:e4:07: ca:b6:f2:1a:45:94:bd:9e:04:f3:e6:ae:0e:34:10: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:01:4C:E5:55:C2:97:52:4D:DC:BE:42:21:F1:07:9A:4A:CB:3C X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:03:a7:c8:4d:b1:2c:94:e2:78:7b:11:8e:f9:1d:30:c4:ef: 39:e2:e7:0d:d8:b0:35:cf:1f:94:20:65:38:03:d5:13:99:a2: 85:38:79:42:10:63:56:a4:e1:64:98:59:78:f5:66:67:2d:c8: 81:ee:12:d9:9a:9c:c8:a9:df:38:e4:30:16:08:e5:71:90:76: d8:f9:33:08:1f:0b:ec:08:b2:cd:fd:9f:96:c6:a7:1c:31:f9: 96:e9:cd:f2:d4:5c:9c:27:dc:d7:b7:5d:b7:8d:36:55:d8:4d: f6:67:98:d5:cb:fa:50:01:d2:08:69:de:9f:35:47:cc:db:71: 23:35:fb:91:dd:13:74:2e:66:94:f8:1e:bc:b3:01:47:29:26: 32:dc:be:a6:9c:9c:6d:13:66:c6:4c:6c:fd:fc:d9:4c:96:43: f0:d9:86:e9:86:f0:a7:7b:5a:76:1a:2c:7e:4d:58:43:53:5a: 9c:60:3e:4a:bd:54:87:6c:d1:0f:da:c9:30:31:1a:35:6d:58: 8b:3e:ed:74:b3:7a:5c:ca:37:17:7f:8c:52:4a:6e:fe:ad:4a: 47:e5:8a:5f:7a:e9:2c:34:b5:80:d6:32:73:43:bf:33:ff:cd: dd:7a:ca:9a:3c:31:44:98:39:c2:dd:15:b6:35:4f:fa:d2:6f: 9c:a9:4f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hCBwoj4VDnwGSKXgkwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD Eyg4ZGNkMDE0Y2U1NTVjMjk3NTI0ZGRjYmU0MjIxZjEwNzlhNGFjYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtViXYt4W+rye54G10f7vqaO3Fi1W op8dOlOyv+HKjv65AsRrr9uV6D02mRxDOC4yknbJ9RE+bxuPM4ByBdqoAtRKN1SA J3WG+II+gnMyfIJId+JZOF+gGU6oDoFhBOijeKRNj9CozYcUEYf7XD9BOXNyvn0/ tGkOkz8VGMMTvcinbbMlz8Zcmprow8uyqGCSX0OeYTZezIGAgOo3VSTNy627MhcQ QV9nQfV6GaaGKEwLsAHJx3GqYH4mcJufkdan3dfsSQ6rGKgOMp9s3dbyw2QyapS8 eX7Oq0R5RdNzeMkLMuWnBqXIUEcdoZ9l5AfKtvIaRZS9ngTz5q4ONBA2+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3NAUzlVcKXUk3cvkIh8QeaSss8MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAOnyE2x LJTieHsRjvkdMMTvOeLnDdiwNc8flCBlOAPVE5mihTh5QhBjVqThZJhZePVmZy3I ge4S2ZqcyKnfOOQwFgjlcZB22PkzCB8L7Aiyzf2flsanHDH5lunN8tRcnCfc17dd t402VdhN9meY1cv6UAHSCGnenzVHzNtxIzX7kd0TdC5mlPgevLMBRykmMty+ppyc bRNmxkxs/fzZTJZD8NmG6Ybwp3tadhosfk1YQ1NanGA+Sr1Uh2zRD9rJMDEaNW1Y iz7tdLN6XMo3F3+MUkpu/q1KR+WKX3rpLDS1gNYyc0O/M//N3XrKmjwxRJg5wt0V tjVP+tJvnKlPmA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:29 2025 by rpki-client