This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft File: 2Exdz8P6S_jYD167J3tQmGsEFTQ.mft (raw, json) Hash identifier: 2sRGDenSwDoO41lenXPwuahNdBkwdhLrsphWLg+hSb4= Subject key identifier: 68:A6:F6:80:76:D0:E7:29:6D:8F:6B:C2:A4:8C:EA:B4:90:A0:2C:35 Authority key identifier: D8:4C:5D:CF:C3:FA:4B:F8:D8:0F:5E:BB:27:7B:50:98:6B:04:15:34 Certificate issuer: /CN=d84c5dcfc3fa4bf8d80f5ebb277b50986b041534 Certificate serial: 019AF0F5C5D8FE23E7676C7F059AA2080CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Exdz8P6S_jYD167J3tQmGsEFTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft Manifest number: 20 Signing time: Sat 06 Dec 2025 00:00:29 +0000 Manifest this update: Sat 06 Dec 2025 00:00:29 +0000 Manifest next update: Sun 07 Dec 2025 00:00:29 +0000 Files and hashes: 1: 2Exdz8P6S_jYD167J3tQmGsEFTQ.crl (hash: bD3BjRjC8GGLj+0i/aumSAK1obHkzaFCo3TMjzsDEaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2Exdz8P6S_jYD167J3tQmGsEFTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c5:d8:fe:23:e7:67:6c:7f:05:9a:a2:08:0c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84c5dcfc3fa4bf8d80f5ebb277b50986b041534 Validity Not Before: Dec 6 00:00:29 2025 GMT Not After : Dec 7 00:00:29 2025 GMT Subject: CN=68a6f68076d0e7296d8f6bc2a48ceab490a02c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:0c:8c:29:6a:f0:e9:69:f4:cb:f3:15:47: 1f:c7:cf:0b:3c:33:1d:57:0d:60:d8:fe:09:40:e9: 6d:97:23:3e:ea:c6:45:bc:b3:6f:3a:05:7f:b6:79: 12:f7:41:82:36:f3:61:cb:a4:fd:d2:b2:d2:27:d9: 4b:4a:43:98:cd:b2:b0:2d:82:da:e2:66:ce:1a:27: ea:16:a5:e4:c2:40:25:1c:67:eb:80:e1:f5:90:cf: ff:12:65:ef:ab:d1:45:90:ad:98:de:b7:05:f7:d3: 53:de:5e:30:ca:99:97:30:45:82:7c:4f:73:0a:3e: f5:42:6b:d0:ec:26:c1:11:b5:90:23:d4:4a:46:9b: 1d:35:56:0e:3d:53:46:d3:10:b1:87:30:15:25:dd: 91:d1:1e:fa:cf:ea:74:30:85:de:aa:52:7e:aa:81: 82:d8:2e:14:83:e8:a9:55:ef:67:6b:cc:5d:55:29: 21:21:63:9c:f3:ba:48:16:f0:a4:e5:1a:01:8d:db: 4e:69:a7:a4:62:f6:63:88:d8:a5:75:de:1c:76:df: 4b:70:23:7d:51:aa:15:ec:ea:c7:12:39:03:3f:c9: 36:e0:eb:53:4f:e7:92:6d:87:f0:8c:c3:5f:c5:52: ac:22:f5:c2:34:84:6e:0a:d1:2b:17:9d:1d:6d:2e: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:F6:80:76:D0:E7:29:6D:8F:6B:C2:A4:8C:EA:B4:90:A0:2C:35 X509v3 Authority Key Identifier: keyid:D8:4C:5D:CF:C3:FA:4B:F8:D8:0F:5E:BB:27:7B:50:98:6B:04:15:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Exdz8P6S_jYD167J3tQmGsEFTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/425958-8e23-4927-a7be-8793274cfa34/1/2Exdz8P6S_jYD167J3tQmGsEFTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3f:b1:5c:23:dd:0d:46:b6:e1:6a:23:86:38:8e:09:bc:59: 5e:cb:d1:b8:fa:63:6a:8c:80:43:31:51:e1:c1:ba:fa:8a:cb: ab:6e:aa:97:93:0e:09:54:57:1c:1b:84:b0:ec:6f:8c:08:7e: 66:e3:b3:b6:e3:ac:01:d9:cd:1e:d7:63:55:dc:54:11:85:4e: d8:c4:9d:12:cf:71:6f:f2:92:72:48:bd:96:16:ee:f7:3f:7c: 09:48:3c:19:49:5f:a8:1b:7f:fc:9e:61:17:35:66:c2:37:57: 33:82:bf:d3:cd:5f:c5:17:0e:4d:5b:08:f0:d0:22:43:b8:7b: 59:d5:8e:59:5f:a4:8e:26:7c:8d:79:da:84:22:aa:3c:4f:85: ba:c8:41:ac:cd:7a:61:97:cc:1d:2f:66:72:ee:b8:f0:ea:61: 80:b4:f8:7b:0e:00:61:1f:9c:a9:bd:b0:41:81:5a:be:4e:28: ae:5b:b8:d4:cf:81:c9:bc:b3:91:37:9f:5b:15:7d:72:04:f9: 79:4f:4f:97:cf:5f:28:e6:b2:1f:c5:cc:b7:3b:90:2a:a1:88: 94:34:cc:e8:22:58:16:f0:e3:cd:1e:48:a4:f9:35:8e:dc:e9: 65:29:e7:14:01:e5:1b:4f:9a:e5:f8:45:3d:16:c1:01:71:3a: 73:fb:7c:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cXY/iPnZ2x/BZqiCAziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NGM1ZGNmYzNmYTRiZjhkODBmNWViYjI3N2I1MDk4NmIw NDE1MzQwHhcNMjUxMjA2MDAwMDI5WhcNMjUxMjA3MDAwMDI5WjAzMTEwLwYDVQQD Eyg2OGE2ZjY4MDc2ZDBlNzI5NmQ4ZjZiYzJhNDhjZWFiNDkwYTAyYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXcMjClq8Olp9MvzFUcfx88LPDMd Vw1g2P4JQOltlyM+6sZFvLNvOgV/tnkS90GCNvNhy6T90rLSJ9lLSkOYzbKwLYLa 4mbOGifqFqXkwkAlHGfrgOH1kM//EmXvq9FFkK2Y3rcF99NT3l4wypmXMEWCfE9z Cj71QmvQ7CbBEbWQI9RKRpsdNVYOPVNG0xCxhzAVJd2R0R76z+p0MIXeqlJ+qoGC 2C4Ug+ipVe9na8xdVSkhIWOc87pIFvCk5RoBjdtOaaekYvZjiNildd4cdt9LcCN9 UaoV7OrHEjkDP8k24OtTT+eSbYfwjMNfxVKsIvXCNIRuCtErF50dbS5N+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGim9oB20OcpbY9rwqSM6rSQoCw1MB8GA1UdIwQY MBaAFNhMXc/D+kv42A9euyd7UJhrBBU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkV4ZHo4UDZTX2pZRDE2N0ozdFFtR3NFRlRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80MjU5NTgtOGUyMy00OTI3LWE3YmUt ODc5MzI3NGNmYTM0LzEvMkV4ZHo4UDZTX2pZRDE2N0ozdFFtR3NFRlRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC80MjU5NTgtOGUyMy00OTI3LWE3YmUtODc5MzI3NGNmYTM0 LzEvMkV4ZHo4UDZTX2pZRDE2N0ozdFFtR3NFRlRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz+xXCPd DUa24WojhjiOCbxZXsvRuPpjaoyAQzFR4cG6+orLq26ql5MOCVRXHBuEsOxvjAh+ ZuOztuOsAdnNHtdjVdxUEYVO2MSdEs9xb/KScki9lhbu9z98CUg8GUlfqBt//J5h FzVmwjdXM4K/081fxRcOTVsI8NAiQ7h7WdWOWV+kjiZ8jXnahCKqPE+FushBrM16 YZfMHS9mcu648OphgLT4ew4AYR+cqb2wQYFavk4orlu41M+BybyzkTefWxV9cgT5 eU9Pl89fKOayH8XMtzuQKqGIlDTM6CJYFvDjzR5IpPk1jtzpZSnnFAHlG0+a5fhF PRbBAXE6c/t80Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:40 2025 by rpki-client