This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft File: 2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json) Hash identifier: K1d4+MzZJpBoMKoDa2A0t1EhyPYVZSsIyh1yLWnRfd4= Subject key identifier: F1:37:D8:96:50:5C:57:94:B3:25:25:62:96:9E:E9:1C:4A:9D:7B:D3 Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2 Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2 Certificate serial: 019AF2402A4E38E25B5A0A75E46D460B9864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft Manifest number: 0FE1 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: v2Ick5B2Th2NXihzPpM60G7t5PTEHi23YQ/OwcuhKa0=) 2: HWElXTOzJCjqFvyXqO6Xmn0U0dg.roa (hash: pdtdttEaHfdOrOSAScGkDCQ3+kURXkYRzpOAlorabs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2a:4e:38:e2:5b:5a:0a:75:e4:6d:46:0b:98:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2 Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=f137d896505c5794b3252562969ee91c4a9d7bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:67:3d:52:c5:9a:6d:42:11:e6:6f:6b:3f: 46:4e:65:b3:96:8c:5b:7e:92:5c:27:e9:5e:c9:48: d2:03:df:08:ad:64:ba:50:6c:8e:24:d1:dd:47:a6: 2c:35:1f:19:6d:6c:17:b2:34:d3:07:50:a9:2e:89: de:43:f1:a3:1e:ab:60:81:6b:c1:a7:88:4c:d1:31: 2f:14:29:6c:d6:af:ab:b1:6a:8c:7b:df:85:b1:ab: 30:ff:72:79:04:de:6f:9a:42:34:98:77:2e:9c:21: 25:76:e7:e4:84:d9:2e:a6:df:98:16:94:fb:2e:71: 1b:12:31:7a:21:e2:88:c2:c4:cc:b5:25:89:a2:61: 14:ae:76:c1:e0:9f:77:d2:1a:ce:0d:87:85:c4:de: ad:c7:b8:9f:40:41:85:9d:61:8c:71:d1:e1:ee:ef: 4e:31:d6:f1:62:3d:d7:70:4f:36:38:e3:fc:ac:d7: b4:8c:ab:d6:6b:fe:9c:a4:1f:df:2f:ce:10:54:36: 22:e8:3f:db:48:bf:aa:4c:83:dc:c6:a0:7d:1e:33: 54:a7:49:eb:8d:6f:34:19:4b:14:2b:6e:ae:29:eb: eb:83:e6:1b:1d:c6:28:e2:35:10:5b:8c:af:ab:e1: c8:e5:1f:c5:43:8e:20:b2:d3:f2:01:5f:aa:95:f2: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:37:D8:96:50:5C:57:94:B3:25:25:62:96:9E:E9:1C:4A:9D:7B:D3 X509v3 Authority Key Identifier: keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b8:54:e9:5b:64:72:5d:29:26:72:52:dc:4a:fb:d0:35:72: 65:8f:61:2a:63:de:59:44:ba:42:7c:b3:05:32:0f:79:53:b0: bf:77:4e:5b:d3:68:7a:28:0b:bb:ff:0f:8c:e3:34:96:aa:3a: a5:95:fd:83:d8:49:7b:8e:32:b5:d1:7b:8f:50:d8:5b:48:32: 32:1f:1e:e9:bc:77:81:33:52:c3:28:60:48:72:6e:20:9b:a7: 4c:26:4e:3f:2c:ba:03:22:c4:91:31:db:c2:1f:0b:20:e0:63: dd:51:0a:38:f4:a1:86:e4:d6:88:67:b7:8c:d6:2d:d1:6d:8d: d8:1d:71:71:41:69:81:75:ae:bd:ac:36:2d:fa:56:cf:f5:68: 39:04:4a:de:e9:60:00:dc:d2:1c:7d:18:ce:fa:88:5d:94:ec: 12:dc:83:79:f0:0e:41:32:d1:c7:4d:45:44:f4:ff:33:eb:21: 83:1b:20:39:ff:67:ea:31:ad:79:9d:a3:56:2a:db:c6:2e:8b: 6e:ef:c4:44:4d:50:4b:de:40:e9:83:df:0a:98:b8:3b:81:91: 3f:67:47:79:34:62:e8:21:9e:6e:04:ba:bb:e0:01:cd:e4:dc: ae:04:7e:f1:83:4f:8a:9b:ea:df:9d:ca:88:48:65:cb:a3:52: 4d:b6:a9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCpOOOJbWgp15G1GC5hkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDY0OTE4OGFhYTQzOWQ4NTExZjcwZWJlODJiYTVlNzY2 Yzg1ZDIwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD EyhmMTM3ZDg5NjUwNWM1Nzk0YjMyNTI1NjI5NjllZTkxYzRhOWQ3YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygtnPVLFmm1CEeZvaz9GTmWzloxb fpJcJ+leyUjSA98IrWS6UGyOJNHdR6YsNR8ZbWwXsjTTB1CpLoneQ/GjHqtggWvB p4hM0TEvFCls1q+rsWqMe9+Fsasw/3J5BN5vmkI0mHcunCEldufkhNkupt+YFpT7 LnEbEjF6IeKIwsTMtSWJomEUrnbB4J930hrODYeFxN6tx7ifQEGFnWGMcdHh7u9O MdbxYj3XcE82OOP8rNe0jKvWa/6cpB/fL84QVDYi6D/bSL+qTIPcxqB9HjNUp0nr jW80GUsUK26uKevrg+YbHcYo4jUQW4yvq+HI5R/FQ44gstPyAV+qlfIEywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE32JZQXFeUsyUlYpae6RxKnXvTMB8GA1UdIwQY MBaAFNnWSRiKqkOdhRH3Dr6Cul52bIXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMt MWNjNmEzMWIxNGJmLzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85NzQ4ODEtNGM0ZS00ZDQ4LThmZDMtMWNjNmEzMWIxNGJm LzEvMmRaSkdJcXFRNTJGRWZjT3ZvSzZYblpzaGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLhU6Vtk cl0pJnJS3Er70DVyZY9hKmPeWUS6QnyzBTIPeVOwv3dOW9NoeigLu/8PjOM0lqo6 pZX9g9hJe44ytdF7j1DYW0gyMh8e6bx3gTNSwyhgSHJuIJunTCZOPyy6AyLEkTHb wh8LIOBj3VEKOPShhuTWiGe3jNYt0W2N2B1xcUFpgXWuvaw2LfpWz/VoOQRK3ulg ANzSHH0YzvqIXZTsEtyDefAOQTLRx01FRPT/M+shgxsgOf9n6jGteZ2jVirbxi6L bu/ERE1QS95A6YPfCpi4O4GRP2dHeTRi6CGebgS6u+ABzeTcrgR+8YNPipvq353K iEhly6NSTbapUg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:13 2025 by rpki-client