This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json) Hash identifier: rhduZW1JpzkiwkuiDPzXh4MhizECEfeoXv1lr4dt96Y= Subject key identifier: 2D:D7:BC:E0:D6:B5:75:95:68:EB:3C:80:3A:9D:94:11:55:A9:97:53 Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78 Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678 Certificate serial: 019AF5AE68EBB307659CFDAC619F21B7D817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 22:00:39 +0000 Manifest this update: Sat 06 Dec 2025 22:00:39 +0000 Manifest next update: Sun 07 Dec 2025 22:00:39 +0000 Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: 0tU3u0ldBNeTkzDGBjPi5S5cTt5q49m3uhgHZHA7TRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:68:eb:b3:07:65:9c:fd:ac:61:9f:21:b7:d8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678 Validity Not Before: Dec 6 22:00:39 2025 GMT Not After : Dec 7 22:00:39 2025 GMT Subject: CN=2dd7bce0d6b5759568eb3c803a9d941155a99753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:2d:3b:2e:ad:52:0d:2f:92:6b:c5:a4:44: 2e:bd:54:b8:6a:dd:81:59:e0:08:91:34:f2:79:bb: f4:0d:3d:4d:b1:45:f1:ea:7c:f8:91:cb:7f:c5:56: aa:95:fc:83:6f:39:56:82:d0:f1:fa:7f:2a:31:5d: 0f:9a:da:ff:bd:51:53:8b:e3:c4:bd:82:c4:2d:87: fa:63:2f:68:11:cf:27:3c:f7:3e:32:c2:bb:08:1b: b0:de:1b:2a:00:fb:c8:b1:b1:67:06:6d:fa:00:46: 7a:bf:33:80:7a:68:98:c1:11:28:2d:eb:75:b4:d0: 3a:2a:4f:00:46:1b:ff:f7:3c:9b:71:8b:d9:3e:15: 46:c3:fc:c7:e9:06:e4:05:a6:74:4d:98:13:cb:50: 81:4f:0e:9a:0c:eb:bf:cd:87:3a:36:94:5a:c1:a1: 56:7b:16:a7:ce:76:2b:bd:fa:8e:e4:8b:82:15:3d: f4:fd:50:12:a6:c1:cd:b0:58:bf:5a:18:8b:c7:a9: 3f:01:89:cf:cf:36:fa:39:e3:ab:2d:73:88:21:4b: 42:de:bc:2c:c5:7c:c3:0c:e3:37:f2:a8:70:5f:57: c9:28:88:ea:c6:69:d5:42:39:23:78:00:79:17:00: 11:1c:a8:6d:46:96:d6:b4:37:07:cb:2a:53:35:d5: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:BC:E0:D6:B5:75:95:68:EB:3C:80:3A:9D:94:11:55:A9:97:53 X509v3 Authority Key Identifier: keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:6f:ad:05:e4:63:d1:cd:f7:d3:d2:4c:0d:2a:84:be:ad: 1b:b6:c0:21:16:29:51:21:a7:b7:27:e4:5b:26:65:e6:93:a4: c6:b0:f5:e4:df:ae:5c:7e:25:2e:f5:8a:2a:58:d7:e8:ff:94: 22:5d:74:75:d8:9c:be:e0:0d:c5:27:3f:d1:a3:80:b2:bf:a7: 61:fd:68:65:c4:25:5e:ae:61:2b:8c:79:9d:e1:83:0d:2c:04: fc:0e:2c:bb:5a:58:bd:11:78:2d:f6:fe:41:35:43:10:5b:9d: 0f:0e:6c:41:ac:cc:05:27:a4:6b:9b:47:db:af:24:55:d6:d1: af:ef:f4:21:1b:a6:b6:74:af:8a:21:81:e9:81:64:ae:8d:b8: 18:a4:45:e1:47:67:41:50:e5:cc:ec:24:3a:7b:d1:14:dc:62: e9:fa:0c:57:f1:c1:d3:34:db:c8:24:73:5a:a7:32:b2:4f:e2: 2d:5a:f7:72:18:f7:96:90:c4:0a:6f:bf:71:66:1e:73:c8:19: b6:d0:7b:51:bb:60:79:4a:39:d8:a7:2c:ad:f7:ef:4a:74:0c: 34:3d:2a:9c:c8:14:37:82:61:90:e1:3b:8e:15:b5:52:73:84: 0c:b0:9f:f0:d1:7a:48:12:17:c1:69:d9:4d:26:0a:27:b4:92: 5c:a6:72:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rmjrswdlnP2sYZ8ht9gXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTU2MWQ3MmM2Yjk4NDc3MDAzZWU2MjI4OWZlYzU3MGMx ZTE2NzgwHhcNMjUxMjA2MjIwMDM5WhcNMjUxMjA3MjIwMDM5WjAzMTEwLwYDVQQD EygyZGQ3YmNlMGQ2YjU3NTk1NjhlYjNjODAzYTlkOTQxMTU1YTk5NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i0tOy6tUg0vkmvFpEQuvVS4at2B WeAIkTTyebv0DT1NsUXx6nz4kct/xVaqlfyDbzlWgtDx+n8qMV0Pmtr/vVFTi+PE vYLELYf6Yy9oEc8nPPc+MsK7CBuw3hsqAPvIsbFnBm36AEZ6vzOAemiYwREoLet1 tNA6Kk8ARhv/9zybcYvZPhVGw/zH6QbkBaZ0TZgTy1CBTw6aDOu/zYc6NpRawaFW exanznYrvfqO5IuCFT30/VASpsHNsFi/WhiLx6k/AYnPzzb6OeOrLXOIIUtC3rws xXzDDOM38qhwX1fJKIjqxmnVQjkjeAB5FwARHKhtRpbWtDcHyypTNdXtkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3XvODWtXWVaOs8gDqdlBFVqZdTMB8GA1UdIwQY MBaAFNiVYdcsa5hHcAPuYiif7FcMHhZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jNzExNmUtY2Q2MC00MDRlLTkxZmEt NzZlN2RhZThhMWNiLzEvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jNzExNmUtY2Q2MC00MDRlLTkxZmEtNzZlN2RhZThhMWNi LzEvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMNvrQXk Y9HN99PSTA0qhL6tG7bAIRYpUSGntyfkWyZl5pOkxrD15N+uXH4lLvWKKljX6P+U Il10ddicvuANxSc/0aOAsr+nYf1oZcQlXq5hK4x5neGDDSwE/A4su1pYvRF4Lfb+ QTVDEFudDw5sQazMBSeka5tH268kVdbRr+/0IRumtnSviiGB6YFkro24GKRF4Udn QVDlzOwkOnvRFNxi6foMV/HB0zTbyCRzWqcysk/iLVr3chj3lpDECm+/cWYec8gZ ttB7UbtgeUo52KcsrffvSnQMND0qnMgUN4JhkOE7jhW1UnOEDLCf8NF6SBIXwWnZ TSYKJ7SSXKZy9g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:49 2025 by rpki-client