This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json) Hash identifier: k8Og0apo+sLYo7pdrDWZjGIMQF+umwNrA6mozI/ZEkk= Subject key identifier: 72:13:57:5F:A2:A8:06:1C:58:2C:B5:DE:97:45:68:3D:DA:FE:B5:28 Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb Certificate serial: 019AF50B1DF9A4F4573B8D601D447DF6DDDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:02:17 +0000 Manifest this update: Sat 06 Dec 2025 19:02:17 +0000 Manifest next update: Sun 07 Dec 2025 19:02:17 +0000 Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: tzJeGY07nRenz6Jxv95hJ6yOrtTw+lLhSMFXknRQ1F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:1d:f9:a4:f4:57:3b:8d:60:1d:44:7d:f6:dd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb Validity Not Before: Dec 6 19:02:17 2025 GMT Not After : Dec 7 19:02:17 2025 GMT Subject: CN=7213575fa2a8061c582cb5de9745683ddafeb528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:14:09:b3:43:cf:13:7d:8a:36:b7:54:71: e9:73:39:46:88:50:2c:1e:5f:57:7c:8f:46:0b:f1: fd:a1:f9:86:28:4e:3e:9e:d4:a7:bd:05:9a:0b:b1: 2a:c0:30:84:d3:e2:39:f2:6f:65:d5:c6:db:6f:c6: c4:ab:3e:6c:7a:3c:ae:80:72:17:48:ba:15:99:41: 54:66:30:b6:09:54:37:6b:6f:a3:32:41:59:be:5f: 05:33:98:e6:01:a5:bd:5a:d1:b7:09:c5:0e:e0:2b: f2:48:5b:53:e2:4c:35:04:8b:e0:02:b0:c7:c9:6f: b6:10:ab:78:6d:d0:a3:d4:52:98:fe:86:9a:2d:b8: be:7b:08:1c:6b:e6:e0:49:1b:e6:b8:f5:b9:88:19: 64:67:2c:87:e3:51:e9:0c:ba:e9:7e:ee:92:78:91: 41:e1:dc:6b:9a:98:30:3a:c3:25:fe:8b:e1:b1:8e: 3d:10:cc:63:80:93:03:1a:d1:4a:91:a2:57:82:3d: 54:6b:e8:f9:5a:6d:10:ed:76:5d:3f:17:d4:0d:28: 3f:47:10:22:03:bc:3c:ae:9a:5d:24:fc:16:df:15: c0:97:e7:f5:3f:54:ab:40:c6:d8:d0:3a:21:47:ce: 0c:ad:84:21:b8:79:e8:6b:cd:1d:1f:f2:4f:1a:f9: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:13:57:5F:A2:A8:06:1C:58:2C:B5:DE:97:45:68:3D:DA:FE:B5:28 X509v3 Authority Key Identifier: keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a0:f7:6d:51:f9:18:dc:77:44:04:02:20:82:84:ac:89:0d: fe:74:55:53:03:e1:30:71:57:6c:61:97:0d:c3:df:9a:5d:73: af:d3:85:45:56:02:32:f2:e6:d9:a4:e9:1a:57:b4:e6:83:20: fc:6e:6f:07:04:4b:01:a1:0f:e3:75:1b:72:07:a4:b7:6f:94: 4a:45:d5:e5:85:fc:90:93:c1:2e:9a:0f:e7:37:80:85:de:59: db:ee:2d:ab:9a:12:0c:66:02:88:6d:f7:e4:b9:57:71:5a:6f: e8:15:5b:a2:24:6b:67:44:f9:6d:a8:03:d8:47:ee:86:ba:d7: 5f:99:ee:7d:56:15:c2:95:f4:59:79:5d:7b:aa:67:a3:4c:b9: 56:c3:0f:dd:f3:07:96:a0:12:85:d4:9e:3d:b7:df:5c:3d:04: c6:8d:2f:ba:6d:08:eb:68:a3:f3:44:66:75:a6:ac:6f:14:ac: f3:80:f6:5d:94:2b:d4:c0:57:79:7d:2e:39:52:34:34:67:a4: a2:e2:43:04:12:e2:54:35:51:1c:73:dd:2d:31:d8:60:8a:70: 31:7c:1d:fc:1f:28:7e:4c:4d:3f:63:da:f0:d0:2a:c6:21:01: 00:7a:97:6c:37:07:2c:08:00:a0:ef:28:8e:5e:1f:d3:f0:8a: b8:16:df:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cx35pPRXO41gHUR99t3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj MmYzZmIwHhcNMjUxMjA2MTkwMjE3WhcNMjUxMjA3MTkwMjE3WjAzMTEwLwYDVQQD Eyg3MjEzNTc1ZmEyYTgwNjFjNTgyY2I1ZGU5NzQ1NjgzZGRhZmViNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0QUCbNDzxN9ija3VHHpczlGiFAs Hl9XfI9GC/H9ofmGKE4+ntSnvQWaC7EqwDCE0+I58m9l1cbbb8bEqz5sejyugHIX SLoVmUFUZjC2CVQ3a2+jMkFZvl8FM5jmAaW9WtG3CcUO4CvySFtT4kw1BIvgArDH yW+2EKt4bdCj1FKY/oaaLbi+ewgca+bgSRvmuPW5iBlkZyyH41HpDLrpfu6SeJFB 4dxrmpgwOsMl/ovhsY49EMxjgJMDGtFKkaJXgj1Ua+j5Wm0Q7XZdPxfUDSg/RxAi A7w8rppdJPwW3xXAl+f1P1SrQMbY0DohR84MrYQhuHnoa80dH/JPGvmkrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHITV1+iqAYcWCy13pdFaD3a/rUoMB8GA1UdIwQY MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2 LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqD3bVH5 GNx3RAQCIIKErIkN/nRVUwPhMHFXbGGXDcPfml1zr9OFRVYCMvLm2aTpGle05oMg /G5vBwRLAaEP43Ubcgekt2+USkXV5YX8kJPBLpoP5zeAhd5Z2+4tq5oSDGYCiG33 5LlXcVpv6BVboiRrZ0T5bagD2EfuhrrXX5nufVYVwpX0WXlde6pno0y5VsMP3fMH lqAShdSePbffXD0Exo0vum0I62ij80RmdaasbxSs84D2XZQr1MBXeX0uOVI0NGek ouJDBBLiVDVRHHPdLTHYYIpwMXwd/B8ofkxNP2Pa8NAqxiEBAHqXbDcHLAgAoO8o jl4f0/CKuBbf0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:20 2025 by rpki-client