This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft File: Iss2-FBsEYv8QfXa42ImSpaBSZA.mft (raw, json) Hash identifier: MXodkrsmEymGKAf4AVRaB07NOBuzHr/S869gMxJdwWY= Subject key identifier: 42:BE:C9:24:E1:0A:93:8F:E9:53:B4:C2:13:20:F0:85:4C:09:95:6C Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 Certificate issuer: /CN=22cb36f8506c118bfc41f5dae362264a96814990 Certificate serial: 019AF0BF7B545475A25A56F46AB419659738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft Manifest number: 56 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: Iss2-FBsEYv8QfXa42ImSpaBSZA.crl (hash: XD3qxIIh6ITS23DurFNhnr9i3VRx5apH9djuxAcJ/HU=) 2: g9Qng6ACgAuBODGkbHiafdbJxzY.roa (hash: e5Lp+G7TOMYhM1H52WWLfJNs8UZtlWDCqmJ6QLye2Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7b:54:54:75:a2:5a:56:f4:6a:b4:19:65:97:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990 Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=42bec924e10a938fe953b4c21320f0854c09956c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:96:50:82:f1:42:4a:64:6a:f1:95:fd:d5: db:d7:e3:04:16:08:99:dc:9d:2d:5f:1d:88:33:ca: 4b:41:04:aa:50:6a:15:86:1f:9f:4f:72:22:4a:78: 59:5b:9a:7a:26:ee:2d:66:1e:d5:c3:7f:6d:1c:e6: 35:52:1b:11:da:d8:a5:8a:48:71:25:c2:50:10:95: 3e:08:55:1c:44:26:39:b6:9f:c7:16:00:b5:23:8a: ce:b9:88:00:a3:a9:1d:5f:9b:0e:66:f8:b6:db:d8: 5e:57:00:c4:06:a2:55:40:ad:b0:0a:89:c2:40:95: 63:ab:b0:e8:28:f6:44:84:da:31:82:cc:e3:dd:85: 54:13:36:ab:42:38:37:b8:1e:7b:d4:88:5b:6a:10: 93:35:e0:1a:5b:26:4a:28:97:29:a5:86:18:bc:ec: 2c:2a:f1:ff:93:fc:db:1a:34:16:57:83:20:36:62: a4:1c:61:7c:ba:bb:73:51:5a:a0:1a:0a:85:02:e7: 9f:e5:7c:79:03:a5:42:5f:ff:96:05:71:58:8b:51: 4e:f9:92:8d:97:d5:4b:ba:f2:fa:ae:f6:46:df:89: b4:c8:ee:af:7a:06:6e:75:1c:8a:bc:5e:ee:cb:37: e7:46:d2:01:88:8b:51:63:e3:ed:d8:0a:93:fc:07: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BE:C9:24:E1:0A:93:8F:E9:53:B4:C2:13:20:F0:85:4C:09:95:6C X509v3 Authority Key Identifier: keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:24:d8:5e:86:af:82:b9:bb:aa:54:00:9b:e4:89:c7:88:b5: 3f:75:cb:5b:45:14:6f:d9:3b:e2:e7:fc:fb:f8:b7:4c:27:7a: 4c:4b:40:1d:1d:da:d6:ee:82:0d:4d:ff:95:54:23:1c:c9:7f: df:22:8e:06:8f:89:5e:f9:59:19:d6:62:f6:b1:a1:92:62:7c: e5:9c:03:98:16:eb:53:cd:aa:1a:84:08:e7:ab:0a:67:a5:fd: c7:67:24:6a:50:68:56:ed:a8:3f:9b:8d:63:ca:98:4f:ec:3d: cf:33:d8:c0:27:7c:e0:e6:77:d4:41:ae:5b:60:93:4e:79:a5: 96:11:8d:7e:6b:71:6a:cb:0c:3a:c9:49:9c:e7:70:df:35:f2: 70:33:cb:92:40:6b:7f:dd:46:ec:3f:83:79:b2:f6:1c:6d:45: b3:fb:2e:ca:3f:b2:a9:e0:cd:97:13:be:b4:d7:2f:bd:57:46: b3:50:81:d5:4b:f7:67:20:0a:be:a3:ed:ad:1b:26:26:92:c6: 53:f0:b5:7c:49:85:00:92:44:32:60:4b:60:ad:09:06:af:b2: 38:9f:41:f5:83:3b:13:29:f2:59:0c:b8:e4:74:45:2a:fb:23: a7:56:bf:a9:8b:6d:15:6b:53:71:d4:17:02:43:d1:24:0d:16: 81:ad:d1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3tUVHWiWlb0arQZZZc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2IzNmY4NTA2YzExOGJmYzQxZjVkYWUzNjIyNjRhOTY4 MTQ5OTAwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD Eyg0MmJlYzkyNGUxMGE5MzhmZTk1M2I0YzIxMzIwZjA4NTRjMDk5NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDaWUILxQkpkavGV/dXb1+MEFgiZ 3J0tXx2IM8pLQQSqUGoVhh+fT3IiSnhZW5p6Ju4tZh7Vw39tHOY1UhsR2tilikhx JcJQEJU+CFUcRCY5tp/HFgC1I4rOuYgAo6kdX5sOZvi229heVwDEBqJVQK2wConC QJVjq7DoKPZEhNoxgszj3YVUEzarQjg3uB571IhbahCTNeAaWyZKKJcppYYYvOws KvH/k/zbGjQWV4MgNmKkHGF8urtzUVqgGgqFAuef5Xx5A6VCX/+WBXFYi1FO+ZKN l9VLuvL6rvZG34m0yO6vegZudRyKvF7uyzfnRtIBiItRY+Pt2AqT/AcgxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEK+ySThCpOP6VO0whMg8IVMCZVsMB8GA1UdIwQY MBaAFCLLNvhQbBGL/EH12uNiJkqWgUmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYt MjM2Nzg5NTg3OTk3LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MGNhMzUtYmRlNi00NTA4LWI4MGYtMjM2Nzg5NTg3OTk3 LzEvSXNzMi1GQnNFWXY4UWZYYTQySW1TcGFCU1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiTYXoav grm7qlQAm+SJx4i1P3XLW0UUb9k74uf8+/i3TCd6TEtAHR3a1u6CDU3/lVQjHMl/ 3yKOBo+JXvlZGdZi9rGhkmJ85ZwDmBbrU82qGoQI56sKZ6X9x2ckalBoVu2oP5uN Y8qYT+w9zzPYwCd84OZ31EGuW2CTTnmllhGNfmtxassMOslJnOdw3zXycDPLkkBr f91G7D+DebL2HG1Fs/suyj+yqeDNlxO+tNcvvVdGs1CB1Uv3ZyAKvqPtrRsmJpLG U/C1fEmFAJJEMmBLYK0JBq+yOJ9B9YM7EynyWQy45HRFKvsjp1a/qYttFWtTcdQX AkPRJA0Wga3ROQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:16 2025 by rpki-client