This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json) Hash identifier: A6in/XCeB8P742nR8DblPfLCDxPv+x2gUwbmvGImNGA= Subject key identifier: 55:D4:E4:2C:78:D6:8F:6B:8E:AE:26:1D:DB:24:BE:99:74:9A:31:9A Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Certificate serial: 019AF1D192D702FF0DCC1FD36DACDB26CD63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft Manifest number: 015F Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: IjytcCFd3VxLBEpAiVO8Ql9bm2nub9ebLrwpRg9qinU=) 2: Yl5dVHvt8TLEuXDW_2N88snHkxY.roa (hash: RVpoQeieFNCy2NDCVSw5A9nvcWMxgvqJyoDHS7AWVvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:92:d7:02:ff:0d:cc:1f:d3:6d:ac:db:26:cd:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=55d4e42c78d68f6b8eae261ddb24be99749a319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:b8:b1:8d:91:56:10:27:38:e3:c3:91:60: 8a:72:26:57:6f:7e:e6:23:b4:25:3c:4c:b4:7e:46: 09:ab:f4:23:80:58:41:92:19:33:8f:d1:6c:6a:8f: 73:9f:bb:c9:5f:7f:4e:23:6c:53:8e:2b:cf:a8:27: 72:22:33:1a:4c:be:7d:dd:0c:c7:55:8c:ca:d6:a5: 11:ed:c1:ad:32:76:d8:07:6e:78:6f:51:a5:78:a9: 4b:ed:05:2e:a9:e9:08:4c:7d:dd:d0:3a:33:be:62: c4:93:ad:ba:4e:d4:bb:2f:50:2e:f9:35:2e:21:3b: ba:8a:3f:17:89:4b:61:38:7a:a4:8e:ab:b4:db:c8: 06:a3:69:94:42:55:61:cb:0a:a7:67:73:c0:8b:ba: e5:b1:83:0b:9c:0e:ab:51:45:29:72:02:76:8e:55: ea:70:be:1e:a3:02:18:94:11:3e:a9:73:b2:35:29: 96:ff:3d:eb:fe:33:3e:e9:52:d5:64:96:e6:cb:49: 92:4f:27:c0:6e:26:83:fe:b9:b3:30:a2:b5:ed:6e: 48:7d:a5:fd:20:9e:c0:b8:29:c4:bd:b9:0f:9d:6a: 1e:97:15:05:ed:15:d6:60:61:49:65:b2:91:99:ee: 56:20:64:45:44:fc:4d:cb:ad:e4:03:13:b4:3c:6e: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D4:E4:2C:78:D6:8F:6B:8E:AE:26:1D:DB:24:BE:99:74:9A:31:9A X509v3 Authority Key Identifier: keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:32:d1:09:37:16:8f:2a:90:79:f1:6f:71:a1:7f:22:06:06: 30:18:0a:97:68:b1:ae:52:d7:ed:89:d3:45:4c:51:b8:2e:9f: e1:d0:fa:1d:33:67:4b:ca:c9:18:5a:55:16:7a:d7:73:ef:57: b7:76:47:24:ca:6b:4a:34:01:84:d6:8a:32:0d:75:c0:a7:a7: 96:63:be:59:de:58:c7:f6:82:f0:20:c6:36:4c:66:90:38:01: c6:3d:b0:80:04:41:8e:3a:cf:6f:68:0b:12:28:cc:96:5d:77: ae:6b:11:02:6b:32:6d:2f:ac:79:ee:c8:76:55:83:41:33:2f: 64:1f:dc:5c:d5:7f:69:91:a9:d6:cf:f8:6f:d2:29:f3:3c:7c: 93:82:1d:da:81:a6:c6:78:53:81:8d:23:e2:63:b6:7a:da:63: e6:8a:ea:4a:99:f4:f8:32:e3:06:f4:b5:16:4d:93:4d:75:35: 0e:e9:3c:b8:5f:bf:71:02:e7:bb:02:c4:59:3e:41:6e:87:85: 7a:e6:1a:ee:b2:ea:a6:eb:3e:25:5e:d5:69:02:3e:8f:18:cd: 6f:36:04:bf:e0:56:c2:82:70:6f:44:e5:ba:02:99:49:43:12: 43:04:14:6d:da:e3:c6:2a:ab:bb:be:18:1b:08:f5:b7:eb:47: 4f:59:95:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZLXAv8NzB/TbazbJs1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy NGVmNjUwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD Eyg1NWQ0ZTQyYzc4ZDY4ZjZiOGVhZTI2MWRkYjI0YmU5OTc0OWEzMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1+4sY2RVhAnOOPDkWCKciZXb37m I7QlPEy0fkYJq/QjgFhBkhkzj9Fsao9zn7vJX39OI2xTjivPqCdyIjMaTL593QzH VYzK1qUR7cGtMnbYB254b1GleKlL7QUuqekITH3d0DozvmLEk626TtS7L1Au+TUu ITu6ij8XiUthOHqkjqu028gGo2mUQlVhywqnZ3PAi7rlsYMLnA6rUUUpcgJ2jlXq cL4eowIYlBE+qXOyNSmW/z3r/jM+6VLVZJbmy0mSTyfAbiaD/rmzMKK17W5IfaX9 IJ7AuCnEvbkPnWoelxUF7RXWYGFJZbKRme5WIGRFRPxNy63kAxO0PG6k+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXU5Cx41o9rjq4mHdskvpl0mjGaMB8GA1UdIwQY MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt NTJjYmE5N2Q5YjllLzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTLRCTcW jyqQefFvcaF/IgYGMBgKl2ixrlLX7YnTRUxRuC6f4dD6HTNnS8rJGFpVFnrXc+9X t3ZHJMprSjQBhNaKMg11wKenlmO+Wd5Yx/aC8CDGNkxmkDgBxj2wgARBjjrPb2gL EijMll13rmsRAmsybS+see7IdlWDQTMvZB/cXNV/aZGp1s/4b9Ip8zx8k4Id2oGm xnhTgY0j4mO2etpj5orqSpn0+DLjBvS1Fk2TTXU1Duk8uF+/cQLnuwLEWT5BboeF euYa7rLqpus+JV7VaQI+jxjNbzYEv+BWwoJwb0TlugKZSUMSQwQUbdrjxiqru74Y Gwj1t+tHT1mVBg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:29 2025 by rpki-client