This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json) Hash identifier: QHJC5QYDrMe4XFtoTG7ZmO6Om7flzh8R94Ima3vU3EM= Subject key identifier: B0:37:2C:D1:0A:74:13:F2:43:28:A4:46:4A:EE:A9:9F:08:3C:30:AF Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Certificate serial: 019AF42DFED64D973B1B025173DAD689BA85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft Manifest number: 067E Signing time: Sat 06 Dec 2025 15:00:46 +0000 Manifest this update: Sat 06 Dec 2025 15:00:46 +0000 Manifest next update: Sun 07 Dec 2025 15:00:46 +0000 Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: 1LYqBcPRZmf82UglyrluxlAY/9va8W+N4pVw8nbvCzo=) 2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=) 3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:fe:d6:4d:97:3b:1b:02:51:73:da:d6:89:ba:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Validity Not Before: Dec 6 15:00:46 2025 GMT Not After : Dec 7 15:00:46 2025 GMT Subject: CN=b0372cd10a7413f24328a4464aeea99f083c30af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:e7:b8:52:1c:a6:55:34:9b:d9:2b:21:76: 30:89:ba:be:dd:6b:f0:69:14:93:bd:68:93:a5:fc: e8:39:07:ab:11:44:88:9e:57:10:69:ea:d8:1a:2c: df:2d:39:cd:c5:fa:95:85:b9:ce:f9:d1:04:8f:bb: fb:36:ce:46:9a:f9:fd:dd:bd:9b:ca:4d:85:af:44: 28:15:bf:a1:05:af:e1:88:e6:ab:8c:c0:f3:ba:51: 40:40:17:39:b9:f6:b7:79:d5:08:45:e9:42:a3:5c: 09:fe:19:cd:0c:1e:66:85:44:9d:ad:96:3f:f6:0c: b6:5e:88:bd:4f:6c:2b:4d:a6:86:5c:9f:35:77:45: 0b:90:fd:9d:69:a5:18:9b:59:83:f5:4b:22:fb:bd: 6f:60:2f:94:eb:47:72:28:64:6c:55:2d:c5:47:c9: 99:5a:c5:3e:bf:4a:d5:60:2f:20:98:92:2b:8c:98: 30:79:c0:f5:4b:41:f2:3b:67:a1:21:d9:4b:1b:2f: cd:14:17:43:8a:af:0d:0c:c4:b8:53:b1:6e:7f:28: 04:53:c2:a4:9e:31:13:24:5c:3b:df:e5:6c:89:0e: 2a:93:6b:c2:54:2f:1f:94:61:29:39:5e:f8:35:de: 44:0f:ac:19:98:d8:42:eb:a6:b7:5b:d4:23:3b:c9: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:2C:D1:0A:74:13:F2:43:28:A4:46:4A:EE:A9:9F:08:3C:30:AF X509v3 Authority Key Identifier: keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:70:2b:fb:a0:51:5a:95:eb:08:74:c3:81:0f:58:18:66:07: 64:12:72:8d:a6:26:fc:fc:e7:57:e4:26:55:9c:e4:74:2e:b8: 2e:1f:ab:48:a1:6f:e1:fb:f7:52:ea:9e:79:55:cd:a1:c7:7c: 08:50:c9:b9:ef:1f:cf:55:fc:33:9f:7b:14:98:09:8d:20:09: 55:c6:0d:b3:84:ea:d7:2f:26:d8:f8:a7:6e:51:2c:4f:1c:b3: f2:9c:4e:f4:ba:d3:c1:c9:b4:08:5a:0d:95:96:58:fb:cb:5e: ec:13:67:69:26:3f:72:06:fd:fc:43:cc:57:6e:48:62:ae:6f: 93:bc:05:f4:7d:d2:7b:1b:28:b3:7c:41:a0:4f:59:b7:63:2b: 4c:27:69:e5:3c:4e:7b:79:98:73:d0:0a:a5:8b:33:b7:e1:3c: c9:6b:16:ac:d7:eb:75:b5:3d:5e:d4:f9:3a:95:60:20:70:a7: 2c:f7:82:a5:3c:24:13:e7:0b:c4:77:31:66:f9:c2:c2:32:7b: 88:59:f2:eb:27:eb:cd:ff:f7:eb:b2:63:af:aa:1e:33:96:5e: ea:1a:d4:06:16:2b:02:d8:4c:0a:1e:96:1f:85:d7:f2:6c:e1: 8a:c8:ce:98:a7:08:ea:f0:64:98:90:de:7e:11:66:61:f3:4c: 3c:89:6e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lf7WTZc7GwJRc9rWibqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy MGM0ODUwHhcNMjUxMjA2MTUwMDQ2WhcNMjUxMjA3MTUwMDQ2WjAzMTEwLwYDVQQD EyhiMDM3MmNkMTBhNzQxM2YyNDMyOGE0NDY0YWVlYTk5ZjA4M2MzMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+HnuFIcplU0m9krIXYwibq+3Wvw aRSTvWiTpfzoOQerEUSInlcQaerYGizfLTnNxfqVhbnO+dEEj7v7Ns5Gmvn93b2b yk2Fr0QoFb+hBa/hiOarjMDzulFAQBc5ufa3edUIRelCo1wJ/hnNDB5mhUSdrZY/ 9gy2Xoi9T2wrTaaGXJ81d0ULkP2daaUYm1mD9Usi+71vYC+U60dyKGRsVS3FR8mZ WsU+v0rVYC8gmJIrjJgwecD1S0HyO2ehIdlLGy/NFBdDiq8NDMS4U7FufygEU8Kk njETJFw73+VsiQ4qk2vCVC8flGEpOV74Nd5ED6wZmNhC66a3W9QjO8nPgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA3LNEKdBPyQyikRkruqZ8IPDCvMB8GA1UdIwQY MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHAr+6BR WpXrCHTDgQ9YGGYHZBJyjaYm/PznV+QmVZzkdC64Lh+rSKFv4fv3UuqeeVXNocd8 CFDJue8fz1X8M597FJgJjSAJVcYNs4Tq1y8m2PinblEsTxyz8pxO9LrTwcm0CFoN lZZY+8te7BNnaSY/cgb9/EPMV25IYq5vk7wF9H3Sexsos3xBoE9Zt2MrTCdp5TxO e3mYc9AKpYszt+E8yWsWrNfrdbU9XtT5OpVgIHCnLPeCpTwkE+cLxHcxZvnCwjJ7 iFny6yfrzf/367Jjr6oeM5Ze6hrUBhYrAthMCh6WH4XX8mzhisjOmKcI6vBkmJDe fhFmYfNMPIlu+A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:52 2025 by rpki-client