This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json) Hash identifier: FV5fK2JZA3w995ffSu3UKHRgAcKi139hBu0+U0Z+pqM= Subject key identifier: 67:03:ED:5A:A8:F9:53:C9:06:B6:6C:75:5F:DA:94:5D:C1:3C:B9:19 Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Certificate serial: 019AF208E130B229A97A3A043CCB8C250C08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft Manifest number: 0D3A Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: rGnrlOMBKPNVudn2dkGd+6/1IzATRdtVZLZPBkIiycw=) 2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e1:30:b2:29:a9:7a:3a:04:3c:cb:8c:25:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=6703ed5aa8f953c906b66c755fda945dc13cb919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:35:9c:59:2e:c9:b9:7a:04:93:e9:f7:4e: ea:22:d1:f4:d0:30:32:82:d8:e2:2b:b6:76:bf:41: 91:82:32:5e:06:fa:5c:a2:7d:2a:6d:df:a9:f7:a1: f3:98:f1:0b:2c:3e:29:15:3a:7d:2f:0c:48:c4:7a: 1f:b6:2d:dc:60:7a:bb:cf:88:6b:e6:ec:fa:4b:a7: d4:df:8f:06:01:b7:8f:dc:8e:fb:23:0e:53:06:5e: f6:88:62:d9:48:7f:86:0f:66:f2:c2:29:6b:e3:e2: b1:66:bf:aa:c3:5c:22:a5:7e:f9:43:54:cf:dd:7d: d9:72:cb:2d:90:ea:2a:e6:88:22:ae:d2:06:46:04: ce:47:14:37:10:c0:bc:e7:4d:43:f7:00:95:f1:20: da:fc:30:a0:6f:05:7b:d0:cf:37:c6:12:69:46:0d: bb:b3:2c:e3:1c:e2:fb:bd:ae:ba:7f:bb:71:34:34: 53:b7:31:73:12:8f:25:a2:6b:af:4a:f0:9b:c2:2d: 9c:cf:27:d8:e5:d2:41:b2:78:a0:f7:17:83:41:17: 06:d4:7c:74:05:c6:90:76:20:11:05:03:17:86:52: 97:75:86:3c:e8:f0:34:ed:f2:56:ae:6c:bc:9b:df: bb:2a:1a:7f:3e:f0:e1:2a:44:b1:0d:ba:8a:56:59: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:ED:5A:A8:F9:53:C9:06:B6:6C:75:5F:DA:94:5D:C1:3C:B9:19 X509v3 Authority Key Identifier: keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ba:e1:96:0c:07:ff:5c:f0:31:da:00:18:90:79:74:f5:3a: b6:92:e7:23:e6:86:11:9a:cf:20:7b:c6:92:2f:2e:cd:1e:b2: 96:b7:47:06:12:f8:eb:81:71:ef:7e:7d:26:d5:e0:53:c2:5a: 38:5b:1e:01:e7:61:02:91:62:45:de:b8:7f:ce:9e:d0:b8:cc: 6c:e1:cb:83:6f:a9:49:61:10:e3:bc:fa:87:73:e4:7c:98:b8: b4:ab:a8:c5:31:a4:22:3a:e7:67:e5:c7:05:de:2b:1f:69:a0: 35:dc:bc:16:81:62:b9:39:7a:34:ff:ce:f0:f1:41:71:04:2c: ae:de:18:04:a5:c1:f7:80:51:7c:88:fa:f0:01:f4:a3:b1:41: fc:a1:c5:07:d7:c9:bc:65:81:cb:0c:ba:a9:c8:46:f1:50:73: 5e:b0:f3:3e:e1:55:f5:cc:51:4f:af:0b:ba:20:0f:8b:0a:d7: a3:53:23:00:71:f6:47:af:08:0c:fc:8e:c9:71:96:ce:e5:4c: 3b:07:37:e8:5f:8a:01:14:be:74:c4:c1:27:fc:8e:6d:05:e0: 50:87:b5:07:a4:62:75:4b:e1:98:41:04:c1:06:65:2d:f7:3a: 9a:8d:27:6b:ea:49:af:c5:8c:a5:8e:bb:f5:26:62:65:11:16: 62:03:ff:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOEwsimpejoEPMuMJQwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi ODUyMjIwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD Eyg2NzAzZWQ1YWE4Zjk1M2M5MDZiNjZjNzU1ZmRhOTQ1ZGMxM2NiOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9U1nFkuybl6BJPp907qItH00DAy gtjiK7Z2v0GRgjJeBvpcon0qbd+p96HzmPELLD4pFTp9LwxIxHofti3cYHq7z4hr 5uz6S6fU348GAbeP3I77Iw5TBl72iGLZSH+GD2bywilr4+KxZr+qw1wipX75Q1TP 3X3ZcsstkOoq5ogirtIGRgTORxQ3EMC8501D9wCV8SDa/DCgbwV70M83xhJpRg27 syzjHOL7va66f7txNDRTtzFzEo8lomuvSvCbwi2czyfY5dJBsnig9xeDQRcG1Hx0 BcaQdiARBQMXhlKXdYY86PA07fJWrmy8m9+7Khp/PvDhKkSxDbqKVlnT4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcD7Vqo+VPJBrZsdV/alF3BPLkZMB8GA1UdIwQY MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLrhlgwH /1zwMdoAGJB5dPU6tpLnI+aGEZrPIHvGki8uzR6ylrdHBhL464Fx7359JtXgU8Ja OFseAedhApFiRd64f86e0LjMbOHLg2+pSWEQ47z6h3PkfJi4tKuoxTGkIjrnZ+XH Bd4rH2mgNdy8FoFiuTl6NP/O8PFBcQQsrt4YBKXB94BRfIj68AH0o7FB/KHFB9fJ vGWBywy6qchG8VBzXrDzPuFV9cxRT68LuiAPiwrXo1MjAHH2R68IDPyOyXGWzuVM Owc36F+KARS+dMTBJ/yObQXgUIe1B6RidUvhmEEEwQZlLfc6mo0na+pJr8WMpY67 9SZiZREWYgP/RA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:20 2025 by rpki-client