This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json) Hash identifier: wfjLhKfGeZr5+DkKsU2E5KsHThKI08TuTgY9H2csB2k= Subject key identifier: 9C:79:F5:BF:1B:B8:E0:7F:D2:60:F5:87:67:C7:07:52:87:3A:A3:0C Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d Certificate serial: 019AF16472FBCE93F7572D1785BD5BE1DAAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: H5QmgBOHRnlkSDIwprixaSMD9uMT1yJvAnNjpJXEP7k=) 2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:72:fb:ce:93:f7:57:2d:17:85:bd:5b:e1:da:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=9c79f5bf1bb8e07fd260f58767c70752873aa30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:e3:a1:de:60:94:e4:a9:2f:09:94:72:1b: 5f:78:c8:18:67:4d:69:34:91:1b:5c:87:99:d8:c7: 18:79:56:7f:22:32:00:d5:4e:54:f8:70:23:85:9b: 54:1a:9b:5a:27:89:21:1e:59:c9:96:5e:dc:81:bd: 62:46:b4:70:09:d9:ee:c6:68:3e:fc:1a:bc:da:6d: e7:f7:87:a8:fa:5c:6b:23:bb:ac:6e:f4:e2:b7:f2: 1d:86:62:8f:3f:05:29:db:1d:d2:86:23:dc:a5:4a: ab:5f:b7:c4:cf:2a:51:75:20:f0:89:0b:d0:63:02: b1:48:3c:a5:da:ec:c3:1f:a9:8c:51:fc:e3:26:15: 85:6c:81:e8:57:fe:98:f0:66:74:24:4f:78:2e:85: 50:57:a2:cc:ba:c7:5d:ce:46:94:fc:1a:34:de:dc: d9:29:91:90:b5:d1:86:d7:65:8c:f1:01:d3:7b:af: 33:56:e8:53:d1:3e:9f:ab:d1:23:cf:51:c8:fd:70: 2e:b4:63:22:1d:8d:96:f6:3e:a9:87:bd:fb:0c:44: fe:49:f7:96:f9:34:7f:da:b3:0d:0e:55:93:18:0d: ba:61:f1:5a:84:df:b2:68:67:54:f7:09:4c:aa:38: 57:64:fe:6c:8f:4e:e5:69:54:4d:07:1f:b7:04:86: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:79:F5:BF:1B:B8:E0:7F:D2:60:F5:87:67:C7:07:52:87:3A:A3:0C X509v3 Authority Key Identifier: keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:7c:e6:ab:33:dc:5d:39:ef:89:80:cb:88:97:31:8b:ee:35: 8a:4f:8f:b4:94:59:de:fb:ee:18:44:ce:91:23:4f:76:c7:95: aa:65:f0:e8:bc:74:9a:47:80:a8:0f:13:c4:7e:47:f3:80:40: b5:e6:84:64:f2:fd:69:79:d1:c5:cd:bc:21:2b:d1:40:9e:91: 3d:33:99:33:a8:7b:09:2a:30:17:94:68:5f:2d:05:4b:25:bc: 1c:ec:55:ee:71:6c:60:b7:30:7e:50:1b:dc:9b:91:5d:0f:6e: 48:87:48:95:db:a8:0e:36:95:64:31:17:28:b5:15:16:01:82: fb:09:19:33:e0:54:fc:ab:73:5c:89:8f:02:e7:2e:32:f2:46: 78:ef:f0:04:fa:af:80:b5:1d:a6:40:a5:b8:1f:8e:ae:77:6f: 97:3b:09:83:13:3d:be:0b:16:d9:37:3b:4f:65:8d:5d:09:56: 24:bd:6a:3c:db:4c:a8:bf:06:ea:45:12:36:4a:70:4d:f6:1a: a0:d0:f6:05:41:9d:30:bd:48:60:e6:27:22:f0:2d:4f:50:3e: f0:50:92:1d:d3:f1:ab:ea:54:a3:bf:3e:9f:ab:3f:cb:da:f6: 3b:42:b8:ec:26:e1:56:de:4d:dd:c7:e9:78:38:17:40:ce:48: bb:ca:49:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHL7zpP3Vy0Xhb1b4dqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWRhMzIxODQzZjlmYWQxMzhlNjExNWQ4NWJlZThhOTIw YjhlMWQwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD Eyg5Yzc5ZjViZjFiYjhlMDdmZDI2MGY1ODc2N2M3MDc1Mjg3M2FhMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucTjod5glOSpLwmUchtfeMgYZ01p NJEbXIeZ2McYeVZ/IjIA1U5U+HAjhZtUGptaJ4khHlnJll7cgb1iRrRwCdnuxmg+ /Bq82m3n94eo+lxrI7usbvTit/IdhmKPPwUp2x3ShiPcpUqrX7fEzypRdSDwiQvQ YwKxSDyl2uzDH6mMUfzjJhWFbIHoV/6Y8GZ0JE94LoVQV6LMusddzkaU/Bo03tzZ KZGQtdGG12WM8QHTe68zVuhT0T6fq9Ejz1HI/XAutGMiHY2W9j6ph737DET+SfeW +TR/2rMNDlWTGA26YfFahN+yaGdU9wlMqjhXZP5sj07laVRNBx+3BIZYNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJx59b8buOB/0mD1h2fHB1KHOqMMMB8GA1UdIwQY MBaAFNsdoyGEP5+tE45hFdhb7oqSC44dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAt NzM5ZDYyNjY5ZjkxLzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAtNzM5ZDYyNjY5Zjkx LzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnzmqzPc XTnviYDLiJcxi+41ik+PtJRZ3vvuGETOkSNPdseVqmXw6Lx0mkeAqA8TxH5H84BA teaEZPL9aXnRxc28ISvRQJ6RPTOZM6h7CSowF5RoXy0FSyW8HOxV7nFsYLcwflAb 3JuRXQ9uSIdIlduoDjaVZDEXKLUVFgGC+wkZM+BU/KtzXImPAucuMvJGeO/wBPqv gLUdpkCluB+OrndvlzsJgxM9vgsW2Tc7T2WNXQlWJL1qPNtMqL8G6kUSNkpwTfYa oND2BUGdML1IYOYnIvAtT1A+8FCSHdPxq+pUo78+n6s/y9r2O0K47CbhVt5N3cfp eDgXQM5Iu8pJ9w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:38 2025 by rpki-client