This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json) Hash identifier: 24bxCIljYpHnd9X81gwYozaaKDenlPzvsXLTgc10SyQ= Subject key identifier: B0:6D:C7:80:9B:6D:50:60:C7:18:A7:B1:59:FC:26:87:D3:AC:D3:46 Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77 Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777 Certificate serial: 019AF208A68660FF95EB61DBECB4C88E28DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft Manifest number: 164B Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: 8brM5IcsIvwGwHvARbceau6UmGB1VWWXUjXMBemcbsE=) 2: UHp7t70IbcWp2bwKOGl-4b8ScF4.roa (hash: UvX//cn/2erRwYZHy/h/xPpeIQdcBl4GUvhBbyEANqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a6:86:60:ff:95:eb:61:db:ec:b4:c8:8e:28:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777 Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=b06dc7809b6d5060c718a7b159fc2687d3acd346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:00:f9:a7:57:f9:4f:3f:42:f1:11:e1:c8: 04:81:00:c9:1d:d0:60:7a:eb:cc:90:1d:43:9d:0f: 49:09:00:20:b2:e6:8f:ce:b3:f4:f1:de:ff:39:5b: dc:12:ae:96:d4:b0:3b:e8:40:4b:10:a4:bc:44:ca: bd:57:55:f6:ec:c7:da:9a:f9:c4:56:1d:f8:00:65: 7d:c4:98:5b:4d:ee:29:d8:81:28:2d:e9:07:65:fb: bc:63:0a:9f:96:b3:fd:8a:36:ff:ee:4b:98:25:5f: 68:b3:9a:9c:ef:fa:e1:88:1a:46:dd:27:7c:c3:4a: f8:aa:7c:99:d7:5f:a0:8c:28:8f:18:b8:33:2f:34: fb:04:2f:80:b6:67:03:2b:47:c7:c7:51:27:7c:65: e1:24:e2:a5:3b:ad:33:ec:03:6e:89:a7:48:16:62: 42:8d:c4:a5:e5:09:59:eb:ee:bb:7b:53:32:eb:a5: 0c:4c:cf:69:05:71:74:5f:17:95:fd:6d:1d:55:2f: 7d:b3:b4:43:1b:25:fa:dc:5b:5f:16:e8:39:5f:49: 82:ad:17:da:e2:bc:5f:d0:ee:69:46:29:e6:54:76: 18:79:64:35:94:ab:0d:66:f2:32:17:a4:c9:a0:4f: a9:c5:5b:7c:23:78:b5:f2:ad:a3:77:2b:7a:c6:14: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6D:C7:80:9B:6D:50:60:C7:18:A7:B1:59:FC:26:87:D3:AC:D3:46 X509v3 Authority Key Identifier: keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5b:31:52:ec:33:8a:90:ea:cd:5e:82:fe:44:10:48:36:0e: 23:59:d5:16:01:f1:46:2d:27:07:0e:7f:51:36:23:44:52:5b: 86:fe:3c:a8:9e:bf:7f:eb:54:31:9e:a2:e2:3f:5c:ce:e7:f7: 00:41:77:7c:28:db:21:08:d9:59:47:bf:85:36:f1:e3:0b:63: 30:a0:15:5c:db:67:99:6c:10:c8:a8:00:2e:b3:0f:c6:34:cd: 41:4e:ec:0d:8d:53:72:c6:bb:99:2e:ba:95:66:20:66:52:a8: 8d:d2:0d:b4:a3:7f:9a:b5:51:1d:b6:de:39:15:cf:06:02:51: b9:95:8b:d1:15:ec:a8:3c:c4:65:af:6c:9a:13:84:2b:a2:b7: bb:89:0d:ac:06:7f:67:ab:c3:d9:50:70:2d:53:4f:be:01:ba: 70:20:73:ea:47:a0:ac:28:db:51:98:95:1e:0e:73:62:87:75: f5:32:17:c5:40:20:d6:2d:1a:43:49:94:2f:f7:68:a7:4a:30: 80:62:e5:09:77:cb:2d:be:ad:73:13:e7:04:bd:f8:dd:33:08: bb:5d:16:d9:be:26:3a:f4:3d:a1:38:46:80:07:0d:eb:7d:e8: cf:14:a6:60:8c:ca:15:70:fd:ad:7a:71:5f:86:73:ee:da:0c: 88:d0:44:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKaGYP+V62Hb7LTIjijaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh ZmM3NzcwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EyhiMDZkYzc4MDliNmQ1MDYwYzcxOGE3YjE1OWZjMjY4N2QzYWNkMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueEA+adX+U8/QvER4cgEgQDJHdBg euvMkB1DnQ9JCQAgsuaPzrP08d7/OVvcEq6W1LA76EBLEKS8RMq9V1X27MfamvnE Vh34AGV9xJhbTe4p2IEoLekHZfu8YwqflrP9ijb/7kuYJV9os5qc7/rhiBpG3Sd8 w0r4qnyZ11+gjCiPGLgzLzT7BC+AtmcDK0fHx1EnfGXhJOKlO60z7ANuiadIFmJC jcSl5QlZ6+67e1My66UMTM9pBXF0XxeV/W0dVS99s7RDGyX63FtfFug5X0mCrRfa 4rxf0O5pRinmVHYYeWQ1lKsNZvIyF6TJoE+pxVt8I3i18q2jdyt6xhTzAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBtx4CbbVBgxxinsVn8JofTrNNGMB8GA1UdIwQY MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVsxUuwz ipDqzV6C/kQQSDYOI1nVFgHxRi0nBw5/UTYjRFJbhv48qJ6/f+tUMZ6i4j9czuf3 AEF3fCjbIQjZWUe/hTbx4wtjMKAVXNtnmWwQyKgALrMPxjTNQU7sDY1Tcsa7mS66 lWYgZlKojdINtKN/mrVRHbbeORXPBgJRuZWL0RXsqDzEZa9smhOEK6K3u4kNrAZ/ Z6vD2VBwLVNPvgG6cCBz6kegrCjbUZiVHg5zYod19TIXxUAg1i0aQ0mUL/dop0ow gGLlCXfLLb6tcxPnBL343TMIu10W2b4mOvQ9oThGgAcN633ozxSmYIzKFXD9rXpx X4Zz7toMiNBE5w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:30 2025 by rpki-client