This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json) Hash identifier: AzN0jUiOTLzodhmOCmkgTeXPzfBf+Xy5pesio1DBor0= Subject key identifier: 91:D3:63:78:9D:67:CC:5A:A9:26:4A:E8:95:40:75:83:C1:28:D3:F9 Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe Certificate serial: 019AF2AD6C31BB7164D6E6EF060BC8396F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft Manifest number: 14CD Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: x8smmdayyrDsdfgBslbUjlVxgd7f17hufiYX0Z3E6u0=) 2: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=) 3: DTFwzq2g65Dq-1Vdc_lPETGChPI.roa (hash: vSxLCXuhhkqZVNd7lpT8hCgMyR9Cz5KGCKvVphrxEVI=) 4: LZoTpPM2VkILReCwMFeJVUb0VAo.roa (hash: ID8ZXpUjQ9jwywDgmAXCourXR8hKniMNfDnHcEORfgE=) 5: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=) 6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=) 7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=) 8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=) 9: yl2_YgC-tBVxL8RhU8L2adT98-I.roa (hash: AMuPFgWghyfaBGHNj/l+7jY+wwAmCTQqhQ3xsaE8j4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6c:31:bb:71:64:d6:e6:ef:06:0b:c8:39:6f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=91d363789d67cc5aa9264ae895407583c128d3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:e4:97:0c:47:ea:de:81:91:c1:9d:de:8a: b7:75:0d:cc:36:41:6a:50:36:e0:cf:94:bb:3a:86: b7:e1:56:37:e8:ac:f0:22:95:a5:92:00:72:52:5b: 13:ca:b0:97:5a:16:ac:d8:99:55:64:d4:a2:83:71: 11:3c:69:57:a7:b5:5e:c9:4f:c5:08:55:db:d5:d5: ba:22:ea:19:fb:70:a8:08:4c:c4:f3:0d:a7:1e:3d: 87:1b:a2:99:8b:31:36:c9:05:8b:28:ed:10:1e:68: 12:21:ef:e6:6e:bc:f9:a9:4d:69:b5:ce:3a:f7:03: 10:4e:c7:3b:94:ab:b1:49:ba:7c:5f:b8:10:6e:20: 2e:c6:a3:70:34:dc:0b:09:0d:16:f3:8a:81:a3:a1: 3a:d9:58:c2:b0:0f:f3:b2:fe:12:6b:c1:e6:34:db: 2f:8c:9d:76:59:85:d0:b4:af:f0:f8:f6:2a:0f:d6: cb:e3:f5:5a:47:39:8a:f5:1b:25:bc:f8:9d:06:6a: 05:3e:81:74:fb:9b:67:08:46:79:66:cc:36:96:ae: b9:f0:50:08:18:f4:94:a8:90:06:ff:47:ef:62:f6: 5a:e3:01:6f:fb:44:07:97:2f:30:ef:2e:c3:05:43: 2d:2b:53:01:d9:81:b9:3e:26:c6:a0:a5:a8:fc:2e: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D3:63:78:9D:67:CC:5A:A9:26:4A:E8:95:40:75:83:C1:28:D3:F9 X509v3 Authority Key Identifier: keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:14:37:ff:79:8e:61:be:01:f7:46:31:1d:15:1e:10:bb:56: a8:5d:89:15:9d:c7:a7:7e:ee:65:8e:be:fa:42:86:0a:ab:87: f4:fc:4f:49:b6:1f:43:60:cd:a3:b7:5a:2a:e4:1d:45:36:08: b1:ee:10:e4:80:9c:8e:61:e9:82:53:9b:35:9c:48:0d:6e:71: 2b:2b:f2:1e:19:6f:0f:d5:e2:8a:ca:6e:83:da:2d:c3:a8:c4: ca:65:d6:1e:b7:8d:84:72:3c:ef:4b:45:65:c9:4e:a6:70:e5: 08:ba:61:d3:90:3f:30:c9:f7:c4:d6:9c:ad:d5:d7:e4:c4:37: 09:34:b7:d4:9b:b7:83:bf:5e:77:21:4f:59:0a:8c:11:b0:37: cf:e7:42:da:28:5c:ab:00:33:ef:45:bc:1f:3e:cc:30:9f:a8: fc:ec:f4:e8:5a:c7:dc:3e:2d:a1:95:3e:f7:fd:ba:a8:43:73: a9:15:a0:6a:17:c5:bb:73:45:98:81:6b:85:f4:65:d6:2c:4f: 28:eb:c6:cd:02:88:e5:d9:e1:0d:02:04:66:8b:33:1a:82:e5: 35:5a:46:db:cf:c5:aa:47:9b:d1:9c:87:11:2e:08:a3:c7:d4: e7:cb:79:c3:82:1f:43:d7:e1:a0:e0:89:a0:c0:73:be:d3:9e: a7:e7:57:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWwxu3Fk1ubvBgvIOW+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx OGJhYmUwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD Eyg5MWQzNjM3ODlkNjdjYzVhYTkyNjRhZTg5NTQwNzU4M2MxMjhkM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eHklwxH6t6BkcGd3oq3dQ3MNkFq UDbgz5S7Ooa34VY36KzwIpWlkgByUlsTyrCXWhas2JlVZNSig3ERPGlXp7VeyU/F CFXb1dW6IuoZ+3CoCEzE8w2nHj2HG6KZizE2yQWLKO0QHmgSIe/mbrz5qU1ptc46 9wMQTsc7lKuxSbp8X7gQbiAuxqNwNNwLCQ0W84qBo6E62VjCsA/zsv4Sa8HmNNsv jJ12WYXQtK/w+PYqD9bL4/VaRzmK9RslvPidBmoFPoF0+5tnCEZ5Zsw2lq658FAI GPSUqJAG/0fvYvZa4wFv+0QHly8w7y7DBUMtK1MB2YG5PibGoKWo/C5nyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHTY3idZ8xaqSZK6JVAdYPBKNP5MB8GA1UdIwQY MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehQ3/3mO Yb4B90YxHRUeELtWqF2JFZ3Hp37uZY6++kKGCquH9PxPSbYfQ2DNo7daKuQdRTYI se4Q5ICcjmHpglObNZxIDW5xKyvyHhlvD9Xiispug9otw6jEymXWHreNhHI870tF ZclOpnDlCLph05A/MMn3xNacrdXX5MQ3CTS31Ju3g79edyFPWQqMEbA3z+dC2ihc qwAz70W8Hz7MMJ+o/Oz06FrH3D4toZU+9/26qENzqRWgahfFu3NFmIFrhfRl1ixP KOvGzQKI5dnhDQIEZoszGoLlNVpG28/Fqkeb0ZyHES4Io8fU58t5w4IfQ9fhoOCJ oMBzvtOep+dXFw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:28:56 2025 by rpki-client