This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft File: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft (raw, json) Hash identifier: AEgKpMz3tsN/l4Qs13MXaMs6gRhkOdLY7XAepQ3pjug= Subject key identifier: 9D:E1:9B:05:A4:3D:4F:5A:E7:39:B2:00:05:AC:81:A9:84:10:6D:12 Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c Certificate serial: 019AF1D24359A075D1678A5BE6AF5E2FD9A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl (hash: sz5O+wlVIxCwD4xSADYcYt267ENnhSjtoVrFySQR4aY=) 2: bdqrLURz5G694Fm80xmKAo0IogU.roa (hash: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:43:59:a0:75:d1:67:8a:5b:e6:af:5e:2f:d9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=9de19b05a43d4f5ae739b20005ac81a984106d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:0a:8d:fe:54:5f:6e:73:ce:ce:6d:3f:ac: 28:34:f9:79:a9:1c:37:df:13:d4:09:34:a3:27:15: e0:02:2d:5e:36:f0:6d:0a:d1:7f:46:5c:49:d8:7f: c2:b4:e8:5b:a6:9a:e6:25:76:b9:13:b2:68:c7:f8: f7:2f:73:3b:18:dc:3a:22:de:b1:d4:e3:52:6b:91: 47:0c:68:51:e5:cd:ca:6c:69:0b:b2:be:8e:47:49: d5:12:78:f7:98:a1:57:83:76:8a:b5:31:b1:e3:f4: 7b:72:fb:2a:3b:c4:99:86:01:c5:95:ab:11:5e:7c: a7:86:46:ed:ab:6f:5c:ad:58:1c:49:10:0a:a9:64: 93:06:90:49:4b:4e:08:a8:3e:81:91:08:3a:c1:77: b5:0a:e0:f5:2d:f3:d1:85:e8:10:05:1d:3e:a1:f8: 6e:86:e5:d2:86:6a:0c:68:b6:7a:25:1a:6f:fa:15: 15:ab:cc:17:ea:3f:11:4b:2e:df:16:7e:e7:92:3c: dd:b0:20:bc:dc:a1:ce:3c:0d:d7:86:e2:bc:ad:54: cc:b9:f3:a3:27:9a:d8:a9:3e:73:9e:e7:73:10:a5: ff:bd:ef:59:e8:81:5d:b1:84:5b:77:14:67:a0:4f: 4f:30:ac:9a:d9:59:cd:73:10:4f:fb:c3:e5:f3:af: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E1:9B:05:A4:3D:4F:5A:E7:39:B2:00:05:AC:81:A9:84:10:6D:12 X509v3 Authority Key Identifier: keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:38:d6:20:6b:64:96:7a:fd:51:59:b6:b1:34:94:35:63:83: 30:db:7f:75:8d:13:d3:6d:a7:6a:c2:89:1f:91:0b:bd:4f:03: dd:c1:0c:b1:40:5e:03:7d:1b:41:99:8e:4e:5e:c8:be:fe:b2: c9:9f:7b:c6:c5:e4:02:a5:6f:e3:e0:3f:58:13:03:af:1a:13: be:7c:8c:49:56:33:8b:70:f5:61:13:b9:d2:d0:d1:49:fa:d1: 80:c9:b2:3f:03:4b:91:02:d4:eb:f2:a9:26:10:ca:2f:8f:4a: b1:46:7e:f6:3a:e7:cd:08:c3:c1:d6:91:2f:e0:37:90:3d:5f: 2d:98:b2:04:a4:7c:03:74:68:0a:86:e2:fa:9f:f3:61:e4:0a: 5a:8d:9f:bf:25:76:56:5d:ee:bd:b7:4c:d2:7c:b8:33:d7:c2: 2a:68:a6:79:f9:f7:1b:97:88:21:0d:6a:8b:52:ea:84:d4:64: ee:92:bc:b2:c6:52:f9:d0:d1:cc:d3:69:3a:1f:a8:29:8d:9a: ed:57:a3:34:f1:46:61:2d:3a:7b:82:80:44:6b:f0:cf:9e:c4: 44:cf:b2:ac:ab:1c:40:f1:7a:f2:ac:2c:aa:0b:46:5b:f3:1b: 45:e3:d0:c8:0d:8a:e0:1d:4c:61:d8:02:a0:c8:86:26:c5:66: 69:30:e0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kNZoHXRZ4pb5q9eL9mmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZjBhMzljZmFkZjkxMGY2YjEzMmFkMjI4ZTYwNjU2MTg4 N2EwNmMwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD Eyg5ZGUxOWIwNWE0M2Q0ZjVhZTczOWIyMDAwNWFjODFhOTg0MTA2ZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRYKjf5UX25zzs5tP6woNPl5qRw3 3xPUCTSjJxXgAi1eNvBtCtF/RlxJ2H/CtOhbpprmJXa5E7Jox/j3L3M7GNw6It6x 1ONSa5FHDGhR5c3KbGkLsr6OR0nVEnj3mKFXg3aKtTGx4/R7cvsqO8SZhgHFlasR Xnynhkbtq29crVgcSRAKqWSTBpBJS04IqD6BkQg6wXe1CuD1LfPRhegQBR0+ofhu huXShmoMaLZ6JRpv+hUVq8wX6j8RSy7fFn7nkjzdsCC83KHOPA3XhuK8rVTMufOj J5rYqT5znudzEKX/ve9Z6IFdsYRbdxRnoE9PMKya2VnNcxBP+8Pl86/+EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3hmwWkPU9a5zmyAAWsgamEEG0SMB8GA1UdIwQY MBaAFNrwo5z635EPaxMq0ijmBlYYh6BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMt OTJiMjA3ZjY0MWIxLzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9mZmE0NTctMzRjOC00OGMyLTllYmMtOTJiMjA3ZjY0MWIx LzEvMnZDam5QcmZrUTlyRXlyU0tPWUdWaGlIb0d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjjWIGtk lnr9UVm2sTSUNWODMNt/dY0T022nasKJH5ELvU8D3cEMsUBeA30bQZmOTl7Ivv6y yZ97xsXkAqVv4+A/WBMDrxoTvnyMSVYzi3D1YRO50tDRSfrRgMmyPwNLkQLU6/Kp JhDKL49KsUZ+9jrnzQjDwdaRL+A3kD1fLZiyBKR8A3RoCobi+p/zYeQKWo2fvyV2 Vl3uvbdM0ny4M9fCKmimefn3G5eIIQ1qi1LqhNRk7pK8ssZS+dDRzNNpOh+oKY2a 7VejNPFGYS06e4KARGvwz57ERM+yrKscQPF68qwsqgtGW/MbRePQyA2K4B1MYdgC oMiGJsVmaTDg0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:33 2025 by rpki-client