This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json) Hash identifier: y1sVJUr5QnQWamd+dfa0t7nMdLgkMwMOoQc/H3gc2Z4= Subject key identifier: FE:93:F0:95:34:5F:BF:06:E8:95:D9:CB:27:98:47:B4:12:9D:85:D3 Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Certificate serial: 019B2C2F9B7B5C7222E7BDFF1BBAE28B1B2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft Manifest number: 069B Signing time: Wed 17 Dec 2025 12:01:15 +0000 Manifest this update: Wed 17 Dec 2025 12:01:15 +0000 Manifest next update: Thu 18 Dec 2025 12:01:15 +0000 Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: n8veJpiFST+Ls1ud0tDey0hd3LaiyPXj+pA9fTvGgJ0=) 2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=) 3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:9b:7b:5c:72:22:e7:bd:ff:1b:ba:e2:8b:1b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Validity Not Before: Dec 17 12:01:15 2025 GMT Not After : Dec 18 12:01:15 2025 GMT Subject: CN=fe93f095345fbf06e895d9cb279847b4129d85d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:85:d8:49:26:7d:1e:92:1d:b7:b5:32:7e: a3:f5:19:16:39:92:64:60:39:99:c2:f5:e6:4f:ee: 5f:24:ee:b9:f5:cf:b0:40:2d:89:85:8b:05:45:67: 35:a0:29:de:97:8a:67:1e:f5:0e:c7:4d:a9:bc:c2: 2b:08:e3:73:92:f5:7c:11:49:3f:3e:d2:54:9b:e9: 5e:c1:4b:fc:bb:c4:53:17:a7:08:e6:35:75:d1:56: 48:1a:16:2c:57:e2:88:ad:de:ca:52:9e:89:44:21: 71:8b:4c:9f:47:66:e4:2b:4d:66:49:e6:d1:3c:63: 18:ec:aa:3b:3f:70:85:f7:71:04:0e:7b:bb:bb:b7: c7:3f:44:b4:13:e7:3e:ef:0c:4f:cc:1c:1b:05:ae: 45:08:9d:56:87:66:cc:03:21:1d:fe:5e:30:42:21: e4:70:34:bb:04:1a:15:f5:4b:82:14:cb:81:d4:57: 2b:d9:c1:5e:0b:b7:02:4a:aa:a4:c7:09:33:7c:c1: c1:7e:cd:25:9e:fb:1d:3e:2f:e5:34:ed:1c:1a:1b: 77:ef:c9:10:0c:9b:2b:4d:43:e1:e4:a6:7b:7f:45: 6b:1e:c3:77:d6:d0:3e:d8:7e:7c:d8:05:df:98:f3: 81:55:77:ab:7e:5a:74:d1:9c:32:c1:4a:b6:a2:f7: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:93:F0:95:34:5F:BF:06:E8:95:D9:CB:27:98:47:B4:12:9D:85:D3 X509v3 Authority Key Identifier: keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e1:83:3f:b9:bb:e9:9f:cf:5d:ee:48:66:c1:b5:99:6b:fd: 97:d1:3d:81:c6:bb:f9:37:d6:7c:ac:5c:2a:48:b3:9a:b6:40: 99:aa:b1:33:02:e0:11:a1:82:43:47:97:5c:95:20:72:10:8d: 96:75:d9:2e:8b:f2:bf:80:20:af:9c:90:08:89:8d:db:81:bc: a8:1d:75:63:2d:96:92:b7:a3:75:f1:6b:00:3f:7b:d6:5d:e3: d0:51:64:9e:3d:c8:d2:bb:f9:a9:7c:cc:f1:5c:a3:4a:30:30: c3:a1:b8:ed:03:a5:04:3b:36:87:fd:40:d9:15:54:ba:91:c9: c7:8b:e9:b3:45:90:13:dc:f2:fe:0d:21:8b:7e:7f:30:e3:80: 4e:ad:08:8b:44:bf:13:5b:eb:d2:83:63:7f:7b:bb:bb:ed:04: 11:6f:83:29:f1:27:9d:80:1c:21:bf:5e:f4:e2:8c:8b:7c:b4: c0:ea:d7:e3:91:ae:4a:9e:fe:f4:70:61:d6:ce:72:2d:80:6c: e5:b4:3f:6e:00:5f:2c:19:a5:65:07:d9:a5:3a:55:1b:3b:03: 5d:0d:ec:95:67:be:84:82:cb:7a:95:af:2f:7e:4e:0a:dc:ce: c6:e4:64:01:b5:0a:67:b6:a5:33:9b:c1:63:7e:ae:e0:a2:3b: 95:cf:92:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5t7XHIi573/G7riixsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy MGM0ODUwHhcNMjUxMjE3MTIwMTE1WhcNMjUxMjE4MTIwMTE1WjAzMTEwLwYDVQQD EyhmZTkzZjA5NTM0NWZiZjA2ZTg5NWQ5Y2IyNzk4NDdiNDEyOWQ4NWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPKF2EkmfR6SHbe1Mn6j9RkWOZJk YDmZwvXmT+5fJO659c+wQC2JhYsFRWc1oCnel4pnHvUOx02pvMIrCONzkvV8EUk/ PtJUm+lewUv8u8RTF6cI5jV10VZIGhYsV+KIrd7KUp6JRCFxi0yfR2bkK01mSebR PGMY7Ko7P3CF93EEDnu7u7fHP0S0E+c+7wxPzBwbBa5FCJ1Wh2bMAyEd/l4wQiHk cDS7BBoV9UuCFMuB1Fcr2cFeC7cCSqqkxwkzfMHBfs0lnvsdPi/lNO0cGht378kQ DJsrTUPh5KZ7f0VrHsN31tA+2H582AXfmPOBVXerflp00ZwywUq2ovfHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6T8JU0X78G6JXZyyeYR7QSnYXTMB8GA1UdIwQY MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeGDP7m7 6Z/PXe5IZsG1mWv9l9E9gca7+TfWfKxcKkizmrZAmaqxMwLgEaGCQ0eXXJUgchCN lnXZLovyv4Agr5yQCImN24G8qB11Yy2WkrejdfFrAD971l3j0FFknj3I0rv5qXzM 8VyjSjAww6G47QOlBDs2h/1A2RVUupHJx4vps0WQE9zy/g0hi35/MOOATq0Ii0S/ E1vr0oNjf3u7u+0EEW+DKfEnnYAcIb9e9OKMi3y0wOrX45GuSp7+9HBh1s5yLYBs 5bQ/bgBfLBmlZQfZpTpVGzsDXQ3slWe+hILLepWvL35OCtzOxuRkAbUKZ7alM5vB Y36u4KI7lc+SRQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:28:16 2025 by rpki-client