This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json) Hash identifier: jj2JNgcJMQK3zgcVBKm8dbaXnGafoDaLTnBaWxWnF4Q= Subject key identifier: 0F:96:6B:6C:60:35:86:7C:A4:1F:F9:BB:06:BF:66:84:1B:43:3E:38 Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0 Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0 Certificate serial: 019AF12E1BFBDB7380B0E72D64CCF423BC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft Manifest number: 0867 Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: lNTkWLxqNeH62OAUBSxkxXRAHZWXJbGO/G5IDrEKy4k=) 2: VyRcdQegnHw4kuW58Uqx25GobPA.roa (hash: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1b:fb:db:73:80:b0:e7:2d:64:cc:f4:23:bc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0 Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=0f966b6c6035867ca41ff9bb06bf66841b433e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:ce:eb:7a:e1:59:e4:7d:4d:81:a2:61:3b: 0c:59:dc:77:f4:07:0f:df:fa:fc:a6:3c:68:cc:90: dd:72:bc:a4:e4:f4:cf:32:8f:29:b9:3b:16:99:fc: c8:2d:93:42:05:c5:45:b5:26:ec:36:60:4b:8d:5f: 32:64:f7:81:2b:fb:3a:08:78:97:09:92:c6:b2:52: 3e:51:7b:8f:f3:24:8c:26:a8:bb:20:5f:47:2f:3b: 75:fe:3b:2f:e1:09:8a:8e:5c:d3:d7:2c:8c:04:8e: 2f:0d:c8:7c:62:b4:90:a2:4f:ce:98:be:3b:88:b9: 65:85:f1:fb:fb:de:0b:2d:7e:5f:56:e1:fd:41:47: 59:e4:a3:d9:48:1b:f4:53:a6:dd:7e:a0:0c:27:25: 97:92:f1:8b:c4:87:bf:7b:e4:db:48:62:c6:70:57: 82:f8:4e:59:af:f4:1f:0a:d8:80:46:98:d0:02:77: 17:38:40:84:66:b2:20:00:ad:dc:53:cd:47:09:f0: 26:2d:50:b0:a4:9b:f1:f4:2c:ab:81:18:33:f3:12: 3f:a5:6e:0e:6a:7b:a2:b7:b0:78:ec:e7:66:2d:61: 8f:9d:77:0f:38:77:2b:41:f5:98:23:e0:c8:50:42: 49:6b:92:54:f5:65:2d:27:76:b3:8e:2f:1a:b2:6e: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:96:6B:6C:60:35:86:7C:A4:1F:F9:BB:06:BF:66:84:1B:43:3E:38 X509v3 Authority Key Identifier: keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7d:a4:13:ca:70:d5:e8:be:c2:a8:d8:2b:b6:a6:3c:e9:e6: f6:c2:33:98:84:9e:d8:77:1a:ea:1e:45:4b:ac:56:58:6a:a8: c2:bc:d9:97:b8:da:87:5a:8e:e1:65:a1:84:86:8e:60:83:11: b9:0b:6d:48:28:ea:54:c5:c1:48:a4:53:26:20:ce:b4:57:6b: 2c:5c:eb:c5:17:32:3e:45:d4:7a:6f:48:9e:ff:3d:db:aa:c9: 56:6b:ee:d7:c6:d1:1b:d3:85:9f:7b:94:f0:ad:b9:af:ee:dc: 70:19:2a:93:83:e4:1c:07:03:31:93:58:41:70:e1:e1:bb:b6: 8d:31:58:47:6d:41:4f:83:f2:d5:b1:15:e6:58:37:da:c6:01: 7e:79:7c:a4:05:02:8e:63:41:e8:08:51:3b:a5:ad:b9:a5:a8: aa:e3:7d:19:37:2e:2a:f7:5a:b4:66:65:93:56:29:0f:70:df: c9:39:ec:3b:da:14:c7:74:4f:20:d7:b0:9b:76:6b:cf:20:82: 7e:58:62:17:0c:90:79:24:ec:77:5d:a1:85:8a:b8:4e:da:41: c2:9d:ee:2c:51:f1:b0:bf:c4:9a:2c:4e:37:f2:65:76:ad:77: 80:24:ab:7f:c1:7a:da:e2:13:70:1d:2f:8d:ad:c8:4b:e1:f3: 69:ac:7c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhv723OAsOctZMz0I7yCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MTg0MzAzMjE2NGUwYjYyZWQ2ZGE3YzY3NTU3YmY0Njg5 NWQwZjAwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD EygwZjk2NmI2YzYwMzU4NjdjYTQxZmY5YmIwNmJmNjY4NDFiNDMzZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yDO63rhWeR9TYGiYTsMWdx39AcP 3/r8pjxozJDdcryk5PTPMo8puTsWmfzILZNCBcVFtSbsNmBLjV8yZPeBK/s6CHiX CZLGslI+UXuP8ySMJqi7IF9HLzt1/jsv4QmKjlzT1yyMBI4vDch8YrSQok/OmL47 iLllhfH7+94LLX5fVuH9QUdZ5KPZSBv0U6bdfqAMJyWXkvGLxIe/e+TbSGLGcFeC +E5Zr/QfCtiARpjQAncXOECEZrIgAK3cU81HCfAmLVCwpJvx9CyrgRgz8xI/pW4O anuit7B47OdmLWGPnXcPOHcrQfWYI+DIUEJJa5JU9WUtJ3azji8asm5uNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+Wa2xgNYZ8pB/5uwa/ZoQbQz44MB8GA1UdIwQY MBaAFNgYQwMhZOC2LtbafGdVe/RoldDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUt NjVkMzczYWI1NzNmLzEvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YzFlZWMtMzcwMC00OWJiLWJmZWUtNjVkMzczYWI1NzNm LzEvMkJoREF5Rms0TFl1MXRwOFoxVjc5R2lWMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg32kE8pw 1ei+wqjYK7amPOnm9sIzmISe2Hca6h5FS6xWWGqowrzZl7jah1qO4WWhhIaOYIMR uQttSCjqVMXBSKRTJiDOtFdrLFzrxRcyPkXUem9Inv8926rJVmvu18bRG9OFn3uU 8K25r+7ccBkqk4PkHAcDMZNYQXDh4bu2jTFYR21BT4Py1bEV5lg32sYBfnl8pAUC jmNB6AhRO6WtuaWoquN9GTcuKvdatGZlk1YpD3DfyTnsO9oUx3RPINewm3ZrzyCC flhiFwyQeSTsd12hhYq4TtpBwp3uLFHxsL/EmixON/Jldq13gCSrf8F62uITcB0v ja3IS+Hzaax8hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:06 2025 by rpki-client