This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json) Hash identifier: Wh4ooy/4zoq8UJQfs0sDStlBOXlNwaqeC6AhGy8QLYw= Subject key identifier: 23:94:1B:6D:1E:5D:76:F3:AE:C9:67:BB:DD:95:DE:32:9E:76:75:CB Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b Certificate serial: 019AF50B7468FE65A7A9251B41C06F894E15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 19:02:39 +0000 Manifest this update: Sat 06 Dec 2025 19:02:39 +0000 Manifest next update: Sun 07 Dec 2025 19:02:39 +0000 Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: Cg6GVHl4rTcs8+QPzbIPPL/6BDCtaNUY9X9WfRsw4y0=) 2: gd86nab0qf28eq3d5pPFq5e9rZo.roa (hash: OleM9BzJjHgCcSMlxVVC1tH0LyJmqbhh/CO/g3APccs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:74:68:fe:65:a7:a9:25:1b:41:c0:6f:89:4e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b Validity Not Before: Dec 6 19:02:39 2025 GMT Not After : Dec 7 19:02:39 2025 GMT Subject: CN=23941b6d1e5d76f3aec967bbdd95de329e7675cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:a7:25:a9:16:1e:b4:2a:44:38:9b:68:db: f9:38:b1:50:2b:98:27:cc:b0:be:09:52:ed:8f:ae: 11:96:23:0f:81:e0:a7:e6:0d:45:e7:bc:b0:07:4d: cf:a6:e0:57:ea:13:32:4e:c1:79:44:7c:a3:5a:33: ec:85:f9:25:44:4b:4b:a2:a2:10:59:01:d2:b7:82: 6f:5b:83:4f:0a:09:3d:e9:3a:bf:6d:2c:42:a6:0f: 6f:89:1c:ef:a4:70:dc:77:77:b2:bc:5d:ce:0d:13: 7a:ca:81:51:b5:33:11:9f:9f:ee:89:01:ae:42:72: 27:61:e5:a9:0a:22:73:9a:76:c6:ad:f9:57:33:15: 16:d7:d0:54:18:db:dd:c4:bf:39:fe:51:4a:e3:2f: 57:c4:80:2e:54:e8:a3:4a:89:e0:9b:9a:86:17:d0: e3:78:cb:7d:6c:8e:04:42:d7:78:f4:08:85:d1:75: 1a:ef:22:91:46:33:a0:75:fa:7d:d2:00:6c:20:f0: b7:0a:5e:6b:e7:90:0a:aa:c4:06:3b:2d:86:0d:6e: 51:c1:8a:50:10:ea:50:8f:7e:4a:06:68:6e:52:bd: 57:f1:74:76:b6:c9:ec:fa:ac:1b:2c:2f:ea:53:7e: fd:fc:10:38:c5:cf:e5:83:23:f2:e1:56:85:b5:5c: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:94:1B:6D:1E:5D:76:F3:AE:C9:67:BB:DD:95:DE:32:9E:76:75:CB X509v3 Authority Key Identifier: keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7b:20:c6:8f:83:90:e2:d5:5b:ff:d7:b4:01:fe:0e:a5:5a: e1:5d:7f:2b:64:be:c9:00:9f:0a:2b:89:8e:5c:27:1c:ae:f8: 92:99:af:0f:3b:46:6c:47:f5:e4:96:df:f4:a7:26:eb:85:c2: e4:d3:f4:f3:c9:ab:a1:52:5e:0a:5c:77:d2:81:70:68:ec:2e: 16:bd:44:f1:85:69:3a:7d:76:97:af:9c:a6:aa:6e:b2:1d:44: 0c:42:01:cb:0e:77:f9:a4:02:f1:b3:4d:64:d2:39:bd:46:5b: fb:59:c8:24:2b:69:b6:0c:a9:78:41:fa:65:0b:70:bb:da:f6: 15:de:f9:f5:09:3d:0f:1e:98:04:40:0c:fd:91:6c:a7:9a:4c: c5:b1:5e:7d:40:0b:a3:6d:84:8d:47:a6:93:d8:23:01:4d:44: 48:b0:c2:01:f8:8d:d4:08:f7:2d:8f:1c:0a:25:a1:3f:75:f5: 9e:d4:81:6e:9f:31:56:8a:41:d1:4f:ac:c2:46:8b:42:c6:8e: 28:a9:bc:75:6d:e6:df:f6:30:c3:1e:03:1c:4a:5a:1d:e3:9b: 09:f3:da:6f:b8:93:eb:c8:53:6a:f2:5c:3a:3b:12:b8:88:57: d3:a4:dc:2e:f7:1d:a4:b6:bc:ad:0b:f3:e2:de:42:2b:25:84: d5:01:21:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3Ro/mWnqSUbQcBviU4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ODFlNTc3N2NjZTk5MGMwYjJiMGY0YzI5Y2M4ZDJjZjlh ZmU4M2IwHhcNMjUxMjA2MTkwMjM5WhcNMjUxMjA3MTkwMjM5WjAzMTEwLwYDVQQD EygyMzk0MWI2ZDFlNWQ3NmYzYWVjOTY3YmJkZDk1ZGUzMjllNzY3NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP2nJakWHrQqRDibaNv5OLFQK5gn zLC+CVLtj64RliMPgeCn5g1F57ywB03PpuBX6hMyTsF5RHyjWjPshfklREtLoqIQ WQHSt4JvW4NPCgk96Tq/bSxCpg9viRzvpHDcd3eyvF3ODRN6yoFRtTMRn5/uiQGu QnInYeWpCiJzmnbGrflXMxUW19BUGNvdxL85/lFK4y9XxIAuVOijSongm5qGF9Dj eMt9bI4EQtd49AiF0XUa7yKRRjOgdfp90gBsIPC3Cl5r55AKqsQGOy2GDW5RwYpQ EOpQj35KBmhuUr1X8XR2tsns+qwbLC/qU379/BA4xc/lgyPy4VaFtVwEfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOUG20eXXbzrslnu92V3jKednXLMB8GA1UdIwQY MBaAFNiB5Xd8zpkMCysPTCnMjSz5r+g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDct ZDgzNWRlMDhiY2Y2LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDctZDgzNWRlMDhiY2Y2 LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXsgxo+D kOLVW//XtAH+DqVa4V1/K2S+yQCfCiuJjlwnHK74kpmvDztGbEf15Jbf9Kcm64XC 5NP088mroVJeClx30oFwaOwuFr1E8YVpOn12l6+cpqpush1EDEIByw53+aQC8bNN ZNI5vUZb+1nIJCtptgypeEH6ZQtwu9r2Fd759Qk9Dx6YBEAM/ZFsp5pMxbFefUAL o22EjUemk9gjAU1ESLDCAfiN1Aj3LY8cCiWhP3X1ntSBbp8xVopB0U+swkaLQsaO KKm8dW3m3/Ywwx4DHEpaHeObCfPab7iT68hTavJcOjsSuIhX06TcLvcdpLa8rQvz 4t5CKyWE1QEhTw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:24 2025 by rpki-client