This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json) Hash identifier: Acuk6DNnR7fDF3pXp+6AEh2Wz0WCeCMgzakgw94HKUU= Subject key identifier: C7:1A:A4:1C:7C:37:64:B4:00:B6:24:EE:85:2E:68:7E:3C:10:12:85 Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Certificate serial: 019AF2767972DF5968C23409040F9180B1E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft Manifest number: 0481 Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: 2Grik8cpRjUmQTDK9koWJpBKzVFQ6bH1y5VTxGwukAA=) 2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:79:72:df:59:68:c2:34:09:04:0f:91:80:b1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=c71aa41c7c3764b400b624ee852e687e3c101285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:cc:3c:77:4d:e0:64:c7:d5:5e:c6:af:81: 45:76:40:87:b5:94:55:51:30:a5:9c:d1:1d:94:78: 53:2a:26:35:c8:7c:04:3a:3c:18:e7:54:5d:9f:e7: 50:f2:a2:54:b8:a3:90:41:27:e5:0b:db:b7:b7:c5: 6a:c2:76:a5:1a:64:d8:9e:6f:5c:5d:95:2c:23:ce: 9b:7e:bd:f6:97:bc:34:be:20:95:92:b3:37:a7:c1: d7:93:1b:aa:50:1f:af:4f:44:6d:f5:c9:4b:56:ae: 34:09:87:6d:fd:d1:c2:26:b0:fd:f9:1b:64:0a:9f: 6b:36:2f:dd:c6:c6:71:fd:c3:5b:30:1a:56:ca:ce: 11:08:0d:24:94:07:6b:6b:55:d6:97:66:cd:49:9b: eb:c7:f2:e3:d3:ea:cd:55:cd:fc:8c:86:48:de:f7: 5f:b6:85:9f:34:7b:46:74:a1:a0:f3:10:9a:79:be: e4:e2:c6:c5:43:3d:c3:3c:29:50:83:ea:8c:e8:17: a2:91:63:f7:1d:b9:42:f6:52:d1:f6:32:57:56:b4: 62:3c:dd:eb:1b:56:2a:55:25:df:d2:93:4f:e1:84: 90:78:e7:35:f9:4a:fb:58:18:b7:8b:df:c8:02:0e: 5c:6f:11:1c:61:33:8e:8e:d0:6a:24:9d:bc:dd:03: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1A:A4:1C:7C:37:64:B4:00:B6:24:EE:85:2E:68:7E:3C:10:12:85 X509v3 Authority Key Identifier: keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:72:7f:e7:b4:e4:e0:bd:08:48:d1:de:ed:6d:18:98:99:53: bb:06:d4:56:f3:df:5f:d6:92:8d:61:f2:64:31:b5:2b:68:02: e5:c8:98:12:b1:e2:cc:71:1e:c6:8c:4f:85:f6:98:85:9d:2b: de:ca:f3:d3:ab:68:4c:14:e4:dd:c2:3f:70:17:24:f8:07:a0: a6:04:8f:99:9d:44:49:25:50:64:39:1c:8e:b0:ea:d2:d3:c0: 00:8c:72:a1:c3:b1:c4:86:49:81:f3:ef:92:68:64:cb:df:76: 5e:e1:21:6a:65:4f:69:3a:99:93:e0:cb:57:5c:67:02:82:6e: 69:81:2a:38:e1:3c:51:81:e3:a2:2e:fc:f7:1d:1c:77:1b:75: d7:75:27:ab:a5:d5:4d:88:88:8a:18:b5:60:de:c6:35:9e:ee: ec:37:7a:77:54:62:7c:ac:33:cf:d0:95:39:28:b8:b9:93:07: 0d:a8:22:1e:fe:7c:18:3e:8a:44:a2:9c:98:49:4a:42:f0:64: 16:32:53:ad:1a:8d:98:23:b6:af:b7:54:47:65:19:de:68:2b: 6c:fc:4c:b8:fc:aa:29:12:0c:ec:4e:04:1b:35:02:b5:15:8a: fe:e7:8e:ed:93:bf:f9:40:94:89:0f:5a:03:01:f7:fd:1c:64: c0:06:a1:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnly31lowjQJBA+RgLHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYTEyZWQ2M2E0ODRjMDNkNGMzYzI3MWNiMmVmZjA1NTNl MTIzNzAwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EyhjNzFhYTQxYzdjMzc2NGI0MDBiNjI0ZWU4NTJlNjg3ZTNjMTAxMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttrMPHdN4GTH1V7Gr4FFdkCHtZRV UTClnNEdlHhTKiY1yHwEOjwY51Rdn+dQ8qJUuKOQQSflC9u3t8VqwnalGmTYnm9c XZUsI86bfr32l7w0viCVkrM3p8HXkxuqUB+vT0Rt9clLVq40CYdt/dHCJrD9+Rtk Cp9rNi/dxsZx/cNbMBpWys4RCA0klAdra1XWl2bNSZvrx/Lj0+rNVc38jIZI3vdf toWfNHtGdKGg8xCaeb7k4sbFQz3DPClQg+qM6BeikWP3HblC9lLR9jJXVrRiPN3r G1YqVSXf0pNP4YSQeOc1+Ur7WBi3i9/IAg5cbxEcYTOOjtBqJJ283QPIuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcapBx8N2S0ALYk7oUuaH48EBKFMB8GA1UdIwQY MBaAFNqhLtY6SEwD1MPCccsu/wVT4SNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTIt OTFhMDAzNGE5ODllLzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTItOTFhMDAzNGE5ODll LzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnJ/57Tk 4L0ISNHe7W0YmJlTuwbUVvPfX9aSjWHyZDG1K2gC5ciYErHizHEexoxPhfaYhZ0r 3srz06toTBTk3cI/cBck+AegpgSPmZ1ESSVQZDkcjrDq0tPAAIxyocOxxIZJgfPv kmhky992XuEhamVPaTqZk+DLV1xnAoJuaYEqOOE8UYHjoi789x0cdxt113Unq6XV TYiIihi1YN7GNZ7u7Dd6d1RifKwzz9CVOSi4uZMHDagiHv58GD6KRKKcmElKQvBk FjJTrRqNmCO2r7dUR2UZ3mgrbPxMuPyqKRIM7E4EGzUCtRWK/ueO7ZO/+UCUiQ9a AwH3/RxkwAah6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:03 2025 by rpki-client