This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json) Hash identifier: TyV2IvXRjTy55pCs9LD69WAfvhLT8CLEP63zQMXloeQ= Subject key identifier: 69:19:22:9A:38:89:76:0B:24:01:73:ED:65:A7:C9:B0:22:9A:08:1D Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46 Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46 Certificate serial: 019AF46549A99450B60E1A6F229EE55288CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft Manifest number: 05A1 Signing time: Sat 06 Dec 2025 16:01:09 +0000 Manifest this update: Sat 06 Dec 2025 16:01:09 +0000 Manifest next update: Sun 07 Dec 2025 16:01:09 +0000 Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: h+ElELPVstEB55fuCEzutxnOSSyxsYaEfl/gVlx5CnI=) 2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:49:a9:94:50:b6:0e:1a:6f:22:9e:e5:52:88:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46 Validity Not Before: Dec 6 16:01:09 2025 GMT Not After : Dec 7 16:01:09 2025 GMT Subject: CN=6919229a3889760b240173ed65a7c9b0229a081d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:53:49:5e:f6:a6:7f:92:8f:6e:f7:72:00: a2:4c:0e:fb:1f:88:54:a6:c1:d6:34:b8:c3:53:28: 90:4a:fc:41:dc:e1:42:f2:c3:bf:d8:02:45:e6:33: 43:40:56:5b:ef:76:39:2a:e7:b5:d9:4d:85:49:4a: 79:c1:eb:73:ea:8c:03:f3:ca:b4:59:44:95:46:75: ad:2d:a4:40:21:49:59:b6:75:9f:39:b0:c3:ab:38: a8:01:4d:21:65:19:2d:d3:5b:fa:76:5f:23:44:b0: e2:70:19:9e:6b:e9:f1:3e:33:48:d4:71:3f:1c:93: 97:d6:1f:d8:de:5d:11:31:ec:cd:bc:ed:32:ce:99: 3d:7d:8f:d7:74:f2:b3:e2:7b:d3:9e:40:4d:b3:69: f5:5f:05:df:a5:83:6b:04:ae:3f:22:ac:8d:79:b6: f4:e7:7c:2f:c7:f4:2a:3c:9b:9a:05:07:5a:0a:b4: ea:f8:f2:c9:87:aa:df:3d:87:ea:cd:06:33:4c:c6: 21:d6:7a:2c:1c:97:52:51:0c:e8:57:c0:a5:4d:6a: f6:6e:d9:c1:f2:51:1b:4a:6b:22:f4:81:63:5a:0e: d0:e8:9e:87:db:70:04:90:70:8b:d1:2a:19:dd:d7: 4b:38:6b:77:a5:0e:fd:10:24:57:85:b1:96:0d:eb: 1a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:19:22:9A:38:89:76:0B:24:01:73:ED:65:A7:C9:B0:22:9A:08:1D X509v3 Authority Key Identifier: keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1e:00:95:d1:96:7c:5f:6e:95:04:58:6f:ba:1c:a6:fa:53: 16:5d:c1:68:40:8c:1c:05:fc:8d:b9:f3:6a:5d:19:b0:fd:b8: b4:1e:5d:0b:58:b8:17:04:e1:22:39:44:fa:c4:de:6e:84:67: 3a:e8:7c:81:1b:42:3e:d0:d6:11:72:d8:80:7e:41:6a:70:72: f3:94:29:29:2e:f0:ad:cd:63:0a:27:2c:44:9b:f9:d8:5d:29: a4:1d:9d:df:1b:d0:56:6e:56:91:a1:03:f0:8e:62:8d:63:5c: 62:44:af:fa:1d:24:09:3b:e8:f7:93:01:0b:fa:d3:a9:47:b7: 92:68:3e:00:e7:e6:31:34:4d:c2:a2:c1:6c:83:35:b7:79:7c: 19:3f:c1:9b:6a:47:25:9b:b5:ac:fd:0d:f7:9e:d9:e8:09:66: e9:fa:f8:51:6b:dc:41:47:5f:15:08:4f:14:c8:c0:5d:ca:85: 9f:cd:2f:0e:02:46:ef:ed:e8:f6:3f:b6:b8:ee:3d:24:33:75: 73:ab:9a:7e:60:e1:14:c3:87:fa:72:7e:c5:32:60:02:a0:c6: 25:37:50:b9:07:bf:51:6f:57:55:39:4d:62:e1:c1:0a:d6:ca: da:cf:de:43:c4:f7:d2:1a:ed:6c:f2:2b:85:4f:ee:73:82:6b: c3:17:8b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUmplFC2DhpvIp7lUojKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OTllNWQ2NGU0NGIxNzMzYzYxNzM3MzM3Y2U4MmI0YTY5 NDNhNDYwHhcNMjUxMjA2MTYwMTA5WhcNMjUxMjA3MTYwMTA5WjAzMTEwLwYDVQQD Eyg2OTE5MjI5YTM4ODk3NjBiMjQwMTczZWQ2NWE3YzliMDIyOWEwODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CBTSV72pn+Sj273cgCiTA77H4hU psHWNLjDUyiQSvxB3OFC8sO/2AJF5jNDQFZb73Y5Kue12U2FSUp5wetz6owD88q0 WUSVRnWtLaRAIUlZtnWfObDDqzioAU0hZRkt01v6dl8jRLDicBmea+nxPjNI1HE/ HJOX1h/Y3l0RMezNvO0yzpk9fY/XdPKz4nvTnkBNs2n1XwXfpYNrBK4/IqyNebb0 53wvx/QqPJuaBQdaCrTq+PLJh6rfPYfqzQYzTMYh1nosHJdSUQzoV8ClTWr2btnB 8lEbSmsi9IFjWg7Q6J6H23AEkHCL0SoZ3ddLOGt3pQ79ECRXhbGWDesaYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkZIpo4iXYLJAFz7WWnybAimggdMB8GA1UdIwQY MBaAFNmZ5dZORLFzPGFzczfOgrSmlDpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjIt OWY0N2M3NDEwZDQxLzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjItOWY0N2M3NDEwZDQx LzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANx4AldGW fF9ulQRYb7ocpvpTFl3BaECMHAX8jbnzal0ZsP24tB5dC1i4FwThIjlE+sTeboRn Ouh8gRtCPtDWEXLYgH5BanBy85QpKS7wrc1jCicsRJv52F0ppB2d3xvQVm5WkaED 8I5ijWNcYkSv+h0kCTvo95MBC/rTqUe3kmg+AOfmMTRNwqLBbIM1t3l8GT/Bm2pH JZu1rP0N957Z6Alm6fr4UWvcQUdfFQhPFMjAXcqFn80vDgJG7+3o9j+2uO49JDN1 c6uafmDhFMOH+nJ+xTJgAqDGJTdQuQe/UW9XVTlNYuHBCtbK2s/eQ8T30hrtbPIr hU/uc4JrwxeLgw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:25 2025 by rpki-client