This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json) Hash identifier: 9iHsULVB1J/7h3Q3U9uZrPvmTBYldRV012i6NnmuYjw= Subject key identifier: A7:E9:94:10:29:BF:79:43:44:7D:25:7E:32:60:A5:5C:6E:46:9C:70 Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2 Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2 Certificate serial: 019AF49C5D2F12EDDFAD104C9675A3893919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:01:19 +0000 Manifest this update: Sat 06 Dec 2025 17:01:19 +0000 Manifest next update: Sun 07 Dec 2025 17:01:19 +0000 Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=) 2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: uf3Nzp5Na75vr+STzEf9bvQb919czg7qJ30mO8hX1Hg=) 3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5d:2f:12:ed:df:ad:10:4c:96:75:a3:89:39:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2 Validity Not Before: Dec 6 17:01:19 2025 GMT Not After : Dec 7 17:01:19 2025 GMT Subject: CN=a7e9941029bf7943447d257e3260a55c6e469c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:26:a9:bd:a8:50:63:93:37:01:ee:2e:de:28: ca:90:13:4d:c0:61:aa:32:62:43:26:f6:8b:45:cd: b3:d6:01:39:b2:2e:da:cd:25:63:81:2b:6b:a5:90: a3:d8:ad:0c:35:a4:8f:98:b7:d4:0e:3a:c3:c9:f8: 62:fb:c8:12:03:45:b2:61:bd:7a:4a:7f:97:f3:ab: 62:35:1c:60:c8:cb:ec:b1:6a:ac:72:f4:6a:fb:84: 99:94:f8:02:90:54:ef:f6:67:9c:05:f7:25:65:1a: 29:9e:f4:82:e1:80:78:7a:44:2d:c2:55:89:d5:43: a3:d2:34:07:16:6e:75:10:c5:35:e9:c4:bf:c1:d4: 83:73:8c:fc:87:11:27:05:b5:89:87:f3:e2:2a:b9: ec:ac:f4:64:24:81:48:1b:e6:cd:f7:b6:b7:82:34: 88:cf:77:d7:ad:7d:76:1e:15:6c:8f:c0:7d:36:d2: 67:c7:e8:f1:31:e7:70:2a:98:45:64:09:ce:68:b1: 29:ff:f5:bb:76:69:c2:28:27:cc:ae:d0:37:3a:e8: aa:f0:39:0c:66:22:97:bc:08:f3:1c:39:81:c0:9c: 14:fe:a8:7d:70:c6:45:4f:79:c0:6e:6c:5e:1b:5f: 2f:bd:98:04:0b:41:f0:03:d3:96:d1:29:52:00:1c: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E9:94:10:29:BF:79:43:44:7D:25:7E:32:60:A5:5C:6E:46:9C:70 X509v3 Authority Key Identifier: keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:53:73:af:d8:a9:f5:36:01:bf:f5:3c:33:bd:10:e7:19:57: a2:f7:c2:66:ff:ba:33:b7:9a:a8:cd:73:35:93:3f:30:be:00: d1:09:6e:e7:94:55:fb:02:79:66:96:0f:14:87:ba:86:15:0d: e2:f9:88:e7:8c:f9:6b:ba:d8:db:b2:fd:31:2b:0f:fc:76:39: 48:19:1b:f3:9e:cb:cc:eb:0c:e5:8b:ea:c6:95:a8:98:00:83: 0d:98:a2:13:4d:ad:98:69:62:ad:fa:06:a0:ac:41:cd:7d:88: c9:b9:7c:95:85:6f:79:5e:32:29:32:15:1f:94:11:be:a7:02: c9:71:89:9f:40:f5:ea:b4:63:3f:b9:ac:5a:c8:56:34:5b:02: 46:c9:96:e3:f7:2b:7b:3d:f1:76:40:69:3c:cb:f5:e6:5d:84: 58:cb:e2:76:eb:2c:3c:40:52:7a:e9:f1:04:2c:ec:eb:73:8b: c4:f1:35:5b:e3:8b:b6:c0:50:df:f1:18:86:af:47:12:8b:66: 95:92:94:f4:37:de:14:d2:30:a9:2e:1f:42:fa:1f:a8:b9:14: 92:64:e7:30:b1:e8:0b:fb:76:c7:30:88:5a:8d:82:83:91:66: 50:f2:16:e5:22:56:11:43:8a:08:f2:f5:4c:62:90:6a:e2:b6: d2:c3:41:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nF0vEu3frRBMlnWjiTkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh MGFmZjIwHhcNMjUxMjA2MTcwMTE5WhcNMjUxMjA3MTcwMTE5WjAzMTEwLwYDVQQD EyhhN2U5OTQxMDI5YmY3OTQzNDQ3ZDI1N2UzMjYwYTU1YzZlNDY5YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliapvahQY5M3Ae4u3ijKkBNNwGGq MmJDJvaLRc2z1gE5si7azSVjgStrpZCj2K0MNaSPmLfUDjrDyfhi+8gSA0WyYb16 Sn+X86tiNRxgyMvssWqscvRq+4SZlPgCkFTv9mecBfclZRopnvSC4YB4ekQtwlWJ 1UOj0jQHFm51EMU16cS/wdSDc4z8hxEnBbWJh/PiKrnsrPRkJIFIG+bN97a3gjSI z3fXrX12HhVsj8B9NtJnx+jxMedwKphFZAnOaLEp//W7dmnCKCfMrtA3Ouiq8DkM ZiKXvAjzHDmBwJwU/qh9cMZFT3nAbmxeG18vvZgEC0HwA9OW0SlSABxubwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfplBApv3lDRH0lfjJgpVxuRpxwMB8GA1UdIwQY MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt NWMwMTdiZDQzNjYzLzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFNzr9ip 9TYBv/U8M70Q5xlXovfCZv+6M7eaqM1zNZM/ML4A0Qlu55RV+wJ5ZpYPFIe6hhUN 4vmI54z5a7rY27L9MSsP/HY5SBkb857LzOsM5YvqxpWomACDDZiiE02tmGlirfoG oKxBzX2Iybl8lYVveV4yKTIVH5QRvqcCyXGJn0D16rRjP7msWshWNFsCRsmW4/cr ez3xdkBpPMv15l2EWMvidussPEBSeunxBCzs63OLxPE1W+OLtsBQ3/EYhq9HEotm lZKU9DfeFNIwqS4fQvofqLkUkmTnMLHoC/t2xzCIWo2Cg5FmUPIW5SJWEUOKCPL1 TGKQauK20sNB3w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:52 2025 by rpki-client