This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json) Hash identifier: G9xt87l9n9ZCenfLWVLxQVmnUv6kdyDa8uWtUbSCAOo= Subject key identifier: BA:CF:06:45:9F:9C:9B:10:4E:F2:17:58:65:C8:95:A5:6E:DB:D3:40 Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43 Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43 Certificate serial: 019AF31DA132A29155B3704EF5DDC8276AE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft Manifest number: 1355 Signing time: Sat 06 Dec 2025 10:03:16 +0000 Manifest this update: Sat 06 Dec 2025 10:03:16 +0000 Manifest next update: Sun 07 Dec 2025 10:03:16 +0000 Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: dFi3HWMqTuwtSO8wWZcJmjCO3q9fR86SEIMkpG7BL2g=) 2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:a1:32:a2:91:55:b3:70:4e:f5:dd:c8:27:6a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43 Validity Not Before: Dec 6 10:03:16 2025 GMT Not After : Dec 7 10:03:16 2025 GMT Subject: CN=bacf06459f9c9b104ef2175865c895a56edbd340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d6:c7:1e:36:cd:78:e1:1e:3e:13:15:cd:55: fc:99:26:b1:bc:4a:2e:e9:98:3a:03:f3:30:2f:8c: cb:e7:b8:54:fa:a5:6c:e6:0e:2e:45:18:ad:ae:34: 73:35:fb:6f:02:99:76:a9:ff:fe:e4:6c:2c:87:61: 5f:3b:db:6c:0f:5a:85:82:9d:24:2f:0c:39:5c:c3: ca:75:b0:bb:1b:73:93:f0:69:4e:97:ca:b9:a4:7e: 44:52:a3:22:61:a5:ac:60:f1:90:1d:f3:c5:fa:a0: ed:99:cc:fa:37:1e:62:62:65:18:19:c9:f2:ac:4d: 22:ab:ef:7c:7c:31:29:1b:7e:47:df:c1:78:16:f8: 72:b3:c3:6b:b2:bb:66:ca:f6:ba:c5:85:0a:1e:ff: d4:09:d9:d0:74:67:a6:52:51:da:7e:d1:cc:64:32: d5:8e:ac:b3:76:67:34:2c:8f:cc:44:22:3c:3f:f3: f5:e4:5d:58:2d:75:1a:06:55:52:ee:57:68:fe:23: 35:f8:9d:05:ee:23:c6:8e:91:79:64:83:1f:a5:63: c6:d7:dd:8a:fc:40:a2:08:84:86:60:6c:9b:81:df: ec:7b:b9:7c:dc:93:f8:a1:5f:f1:0a:70:94:a9:49: 8d:32:5b:32:0a:f6:38:6e:ba:62:8c:21:0c:79:9e: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:06:45:9F:9C:9B:10:4E:F2:17:58:65:C8:95:A5:6E:DB:D3:40 X509v3 Authority Key Identifier: keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a9:d0:9d:b6:d9:f7:2a:77:af:93:85:08:67:6c:13:0b:0d: bc:7d:20:9d:95:b3:9f:2a:92:a1:35:b1:00:9d:9f:5d:69:23: 12:af:43:75:e7:ab:a8:ed:e8:02:f0:0b:e2:e0:9b:e0:91:48: 0e:a3:28:53:63:9c:df:09:ed:e9:8b:88:e7:63:da:fe:5c:9a: f2:e6:f2:f4:f3:f9:b7:f0:19:49:52:0c:33:1b:61:82:53:6a: c1:bc:fa:30:b4:47:87:94:29:d7:9a:52:20:65:07:9e:ce:9b: 30:70:85:ac:33:b6:f0:0c:86:3f:9e:cd:1c:4a:a2:c7:c1:5b: b6:eb:46:f6:c5:a0:5a:37:39:67:5d:a3:13:94:15:c7:33:bf: a4:7f:65:84:d9:26:6f:3a:31:8d:f1:3d:2a:b7:24:4f:52:e9: 23:fe:e8:80:c8:2d:4a:92:85:6e:2e:8a:0a:ff:8e:a8:45:21: d8:e2:da:73:e3:19:e8:7c:c0:5c:86:96:b5:80:92:bd:48:65: 34:20:4f:18:a4:e6:81:e2:a3:c6:dc:9a:96:d5:90:4e:0f:ab: 85:27:65:76:32:0b:25:e9:64:99:7f:cd:60:3f:91:f2:55:66: 0b:8b:64:af:24:52:a6:e6:66:a2:a5:d7:1e:db:77:6d:f5:52: d9:8f:f1:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHaEyopFVs3BO9d3IJ2rnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjY5ZDBlYThjYWE0MGM3YTcwNDM4MmNhYjUzZTFiMDI2 ZDZiNDMwHhcNMjUxMjA2MTAwMzE2WhcNMjUxMjA3MTAwMzE2WjAzMTEwLwYDVQQD EyhiYWNmMDY0NTlmOWM5YjEwNGVmMjE3NTg2NWM4OTVhNTZlZGJkMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtbHHjbNeOEePhMVzVX8mSaxvEou 6Zg6A/MwL4zL57hU+qVs5g4uRRitrjRzNftvApl2qf/+5Gwsh2FfO9tsD1qFgp0k Lww5XMPKdbC7G3OT8GlOl8q5pH5EUqMiYaWsYPGQHfPF+qDtmcz6Nx5iYmUYGcny rE0iq+98fDEpG35H38F4Fvhys8Nrsrtmyva6xYUKHv/UCdnQdGemUlHaftHMZDLV jqyzdmc0LI/MRCI8P/P15F1YLXUaBlVS7ldo/iM1+J0F7iPGjpF5ZIMfpWPG192K /ECiCISGYGybgd/se7l83JP4oV/xCnCUqUmNMlsyCvY4brpijCEMeZ6CpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrPBkWfnJsQTvIXWGXIlaVu29NAMB8GA1UdIwQY MBaAFNsmnQ6oyqQMenBDgsq1PhsCbWtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQt Njk4ZjgxOGJiZDMzLzEvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQtNjk4ZjgxOGJiZDMz LzEvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKnQnbbZ 9yp3r5OFCGdsEwsNvH0gnZWznyqSoTWxAJ2fXWkjEq9DdeerqO3oAvAL4uCb4JFI DqMoU2Oc3wnt6YuI52Pa/lya8uby9PP5t/AZSVIMMxthglNqwbz6MLRHh5Qp15pS IGUHns6bMHCFrDO28AyGP57NHEqix8FbtutG9sWgWjc5Z12jE5QVxzO/pH9lhNkm bzoxjfE9KrckT1LpI/7ogMgtSpKFbi6KCv+OqEUh2OLac+MZ6HzAXIaWtYCSvUhl NCBPGKTmgeKjxtyaltWQTg+rhSdldjILJelkmX/NYD+R8lVmC4tkryRSpuZmoqXX Htt3bfVS2Y/xYw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:58 2025 by rpki-client