This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json) Hash identifier: v4OAOzMYPZ+ACas1ARSqgXuo7sbS6LUvgYmRKaI50hk= Subject key identifier: 7D:DE:FC:95:D1:50:B5:49:A4:EA:70:0F:39:84:70:0A:81:98:B7:14 Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf Certificate serial: 019AF19B002A5E8F431C0B19079600BE1C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: ERCuoatQwvbXH2VRY+XQrOg2J5bnmgxOQiJMEN1u7n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:00:2a:5e:8f:43:1c:0b:19:07:96:00:be:1c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=7ddefc95d150b549a4ea700f3984700a8198b714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:b4:8b:5d:69:31:23:09:67:a0:f2:f9:49: 26:53:1e:2f:32:2c:c6:c4:a3:a2:71:96:5a:b0:3f: b5:6a:35:93:20:f9:d6:b0:d5:4f:f3:79:41:5b:7f: af:26:10:29:2d:de:2d:0f:e7:8d:43:cb:2d:a5:f7: 8b:e3:c5:ff:62:30:bb:93:71:83:b7:ef:19:57:19: 74:2c:4a:09:8b:c2:89:78:c6:19:89:d2:51:b2:bb: 5b:82:18:17:f1:48:f4:6c:3b:15:0f:6d:80:c9:27: a4:4a:8a:3c:15:fd:0d:0f:43:98:89:3d:f9:26:ce: 0b:b7:08:7a:ff:f6:22:63:44:c2:9e:2b:4a:da:0c: 3a:d8:ae:5f:15:98:18:c3:34:03:da:e2:dd:39:20: 27:53:29:93:fd:a1:17:21:a4:ff:db:d3:7e:a8:da: 0d:7f:52:ac:a5:c5:8b:3d:a5:32:c4:46:f8:a0:66: fd:5d:a5:fb:84:bd:cc:f3:64:df:14:c5:6d:27:5e: 1e:47:65:09:f7:f4:ae:26:f5:31:c7:58:0e:c8:3c: de:79:18:d3:a0:25:c7:9a:9e:cd:8f:d6:a0:a5:04: c4:0c:2e:96:bc:fd:34:85:42:60:0c:eb:57:57:2f: 86:42:53:31:6a:da:39:76:9a:af:42:ff:0e:2c:bb: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DE:FC:95:D1:50:B5:49:A4:EA:70:0F:39:84:70:0A:81:98:B7:14 X509v3 Authority Key Identifier: keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f3:32:79:f4:29:50:61:b4:f4:04:0c:91:bd:0b:cb:46:d4: 29:3f:4a:89:da:2a:15:93:a1:c7:5a:a2:e0:e2:95:98:11:2f: 4e:a5:b5:e3:d6:60:3a:61:1e:77:74:f4:ed:3a:6d:0f:63:11: 1f:e2:75:35:9d:42:11:87:94:40:ea:e4:7f:df:76:e2:e6:95: 27:fa:eb:f6:8e:c3:a7:96:31:ff:9b:e1:5f:2f:20:cc:b7:e4: 85:c7:d0:4b:6e:8b:12:69:cc:94:1b:72:1c:04:d6:e2:7f:17: af:f2:96:fc:23:8a:30:a1:45:1e:2b:87:83:3f:ce:fa:9e:38: c7:41:16:ab:b7:20:a2:c5:1a:ab:44:f5:1f:5b:93:23:be:03: 99:f3:f4:60:c2:38:a6:c4:a7:09:d5:fa:df:35:4f:f5:aa:65: 01:a5:f1:1b:6c:62:e1:84:2c:e7:c2:7b:43:04:87:18:8b:27: 04:32:d2:4d:91:97:73:3e:e6:34:26:b9:9c:ca:bd:f3:20:5c: d9:cb:27:a6:96:4a:56:a7:08:dd:61:00:ea:91:6e:50:21:ad: 47:39:0b:27:d0:24:cd:7a:7c:f3:0f:1f:8c:e9:0d:43:c4:c5: 78:c0:1c:c5:7f:d1:32:36:74:3a:f3:f5:a4:d8:5a:fc:19:c1: eb:57:b8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwAqXo9DHAsZB5YAvhwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4N2Q4MTUwZDExODIzODVjNDYxYjU4MGQ1NjM4YTU3MGMy YmMwYmYwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD Eyg3ZGRlZmM5NWQxNTBiNTQ5YTRlYTcwMGYzOTg0NzAwYTgxOThiNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ20i11pMSMJZ6Dy+UkmUx4vMizG xKOicZZasD+1ajWTIPnWsNVP83lBW3+vJhApLd4tD+eNQ8stpfeL48X/YjC7k3GD t+8ZVxl0LEoJi8KJeMYZidJRsrtbghgX8Uj0bDsVD22AySekSoo8Ff0ND0OYiT35 Js4Ltwh6//YiY0TCnitK2gw62K5fFZgYwzQD2uLdOSAnUymT/aEXIaT/29N+qNoN f1KspcWLPaUyxEb4oGb9XaX7hL3M82TfFMVtJ14eR2UJ9/SuJvUxx1gOyDzeeRjT oCXHmp7Nj9agpQTEDC6WvP00hUJgDOtXVy+GQlMxato5dpqvQv8OLLu5XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3e/JXRULVJpOpwDzmEcAqBmLcUMB8GA1UdIwQY MBaAFNh9gVDRGCOFxGG1gNVjilcMK8C/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkgyQlVORVlJNFhFWWJXQTFXT0tWd3dyd0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lMTEyNGQtN2IzNC00MzlkLTk2MWQt ODY3OTUzYTNiMTgxLzEvMkgyQlVORVlJNFhFWWJXQTFXT0tWd3dyd0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lMTEyNGQtN2IzNC00MzlkLTk2MWQtODY3OTUzYTNiMTgx LzEvMkgyQlVORVlJNFhFWWJXQTFXT0tWd3dyd0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfMyefQp UGG09AQMkb0Ly0bUKT9KidoqFZOhx1qi4OKVmBEvTqW149ZgOmEed3T07TptD2MR H+J1NZ1CEYeUQOrkf9924uaVJ/rr9o7Dp5Yx/5vhXy8gzLfkhcfQS26LEmnMlBty HATW4n8Xr/KW/COKMKFFHiuHgz/O+p44x0EWq7cgosUaq0T1H1uTI74DmfP0YMI4 psSnCdX63zVP9aplAaXxG2xi4YQs58J7QwSHGIsnBDLSTZGXcz7mNCa5nMq98yBc 2csnppZKVqcI3WEA6pFuUCGtRzkLJ9AkzXp88w8fjOkNQ8TFeMAcxX/RMjZ0OvP1 pNha/BnB61e4zg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:50 2025 by rpki-client