This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json) Hash identifier: yfwCFVf4mSD09fwPjGFLPGLQ6TDFQc5QlwzRVuMWWHc= Subject key identifier: EE:82:EA:5D:DD:63:D1:91:94:3F:67:0C:71:8F:1C:6D:E6:19:FD:7D Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6 Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6 Certificate serial: 019B32D7C1B765CF3708E9F373AB164351A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft Manifest number: 0A1A Signing time: Thu 18 Dec 2025 19:02:39 +0000 Manifest this update: Thu 18 Dec 2025 19:02:39 +0000 Manifest next update: Fri 19 Dec 2025 19:02:39 +0000 Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: jCDJDSJcppzx7cNiLgiqFWDObxaIzXEIWB9HYMPfZb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:c1:b7:65:cf:37:08:e9:f3:73:ab:16:43:51:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6 Validity Not Before: Dec 18 19:02:39 2025 GMT Not After : Dec 19 19:02:39 2025 GMT Subject: CN=ee82ea5ddd63d191943f670c718f1c6de619fd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:e8:85:61:38:c0:cb:71:70:61:db:81:0a: 3c:df:8b:80:e7:17:c8:98:0c:af:0b:82:88:10:e2: f3:34:37:95:e4:7c:36:24:6f:e0:09:a2:1f:09:69: a3:63:0f:cb:2e:13:ef:4d:ae:5a:2e:21:df:db:7f: da:c2:b5:00:0d:1c:a7:29:c4:cf:cf:0b:4f:8c:de: a2:d2:e1:07:fe:88:91:8e:1c:e2:fb:8b:ac:cc:41: 45:a6:3b:35:37:cf:ee:e4:c2:5b:09:41:c1:a1:34: d0:18:7f:a0:38:03:77:9b:47:f3:01:46:3c:1c:5f: 19:10:4d:ee:f5:e9:02:43:57:5f:90:8b:4c:32:9f: 60:be:d9:81:9b:8f:dc:09:3f:2a:a9:ce:0e:e3:f8: c1:74:75:1e:c8:cb:f5:0e:d2:4f:1c:a2:b5:5f:50: 1e:c9:84:2a:17:8f:73:19:86:45:cd:f9:23:a5:5b: 4d:b6:55:a8:de:83:3d:03:07:7a:49:b4:d9:8c:20: d0:c8:9a:cc:b5:e8:f2:27:fd:25:8c:8b:de:7b:61: e9:cf:81:1b:4b:18:8e:0f:f0:1d:fd:34:17:c3:03: c1:7e:26:40:bd:b5:a2:00:d2:48:d2:26:de:c3:ff: cc:2e:61:bb:ea:be:3c:32:f3:91:7f:12:b4:77:4b: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:EA:5D:DD:63:D1:91:94:3F:67:0C:71:8F:1C:6D:E6:19:FD:7D X509v3 Authority Key Identifier: keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a7:bd:7b:2f:09:a6:f9:66:d9:3d:62:a9:78:60:a4:ce:20: 3c:5e:d6:ef:37:3d:5e:af:da:c7:86:84:41:dd:ad:2f:e1:96: e6:6b:03:1d:7d:95:e0:97:1a:31:cc:88:f6:f1:51:5a:95:01: db:2e:77:ec:18:3c:85:4f:ee:26:d9:a0:be:46:f7:81:40:e6: 90:74:f4:1e:5b:00:61:5c:15:d4:af:6e:0b:78:ca:49:17:27: 81:21:d7:83:26:e6:5b:b3:a5:23:01:03:43:e8:49:9c:d0:99: 05:05:6c:35:da:98:7a:f2:19:0d:ae:c2:cf:e7:e1:1c:20:c9: ac:1c:aa:36:3b:4f:aa:75:3a:8a:da:41:03:e5:ad:19:c5:4d: 5a:41:32:75:b0:61:97:46:6d:08:95:37:8f:eb:21:4e:29:57: af:e8:5b:29:1b:f7:d9:96:71:14:9e:fc:83:3d:8b:ad:9b:7a: 4e:a0:5e:fb:26:9c:21:8e:1c:92:2e:fe:7c:a8:bf:7e:6a:3c: 4f:a2:e2:12:1b:ba:70:37:6b:e2:4a:ab:fe:6f:97:88:1a:4d: 72:ec:19:24:09:1b:36:d2:a7:c0:7d:ca:56:77:d1:85:bc:7b: 84:ed:8c:e5:dc:42:3b:65:0c:35:fe:17:b9:be:6e:3f:73:0d: 5a:d3:7a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy18G3Zc83COnzc6sWQ1GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWRjZDdhZWE4OTIzYThhYWZkMmEzOGQxZGMzZDA2Njg0 MDc5YTYwHhcNMjUxMjE4MTkwMjM5WhcNMjUxMjE5MTkwMjM5WjAzMTEwLwYDVQQD EyhlZTgyZWE1ZGRkNjNkMTkxOTQzZjY3MGM3MThmMWM2ZGU2MTlmZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrzohWE4wMtxcGHbgQo834uA5xfI mAyvC4KIEOLzNDeV5Hw2JG/gCaIfCWmjYw/LLhPvTa5aLiHf23/awrUADRynKcTP zwtPjN6i0uEH/oiRjhzi+4uszEFFpjs1N8/u5MJbCUHBoTTQGH+gOAN3m0fzAUY8 HF8ZEE3u9ekCQ1dfkItMMp9gvtmBm4/cCT8qqc4O4/jBdHUeyMv1DtJPHKK1X1Ae yYQqF49zGYZFzfkjpVtNtlWo3oM9Awd6SbTZjCDQyJrMtejyJ/0ljIvee2Hpz4Eb SxiOD/Ad/TQXwwPBfiZAvbWiANJI0ibew//MLmG76r48MvORfxK0d0suCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6C6l3dY9GRlD9nDHGPHG3mGf19MB8GA1UdIwQY MBaAFNsdzXrqiSOoqv0qONHcPQZoQHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngzTmV1cUpJNmlxX1NvNDBkdzlCbWhBZWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zNWFkNmUtNGQ2Yi00ZjljLTkwZjMt OTBiMThjYThjMjBjLzEvMngzTmV1cUpJNmlxX1NvNDBkdzlCbWhBZWFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zNWFkNmUtNGQ2Yi00ZjljLTkwZjMtOTBiMThjYThjMjBj LzEvMngzTmV1cUpJNmlxX1NvNDBkdzlCbWhBZWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqe9ey8J pvlm2T1iqXhgpM4gPF7W7zc9Xq/ax4aEQd2tL+GW5msDHX2V4JcaMcyI9vFRWpUB 2y537Bg8hU/uJtmgvkb3gUDmkHT0HlsAYVwV1K9uC3jKSRcngSHXgybmW7OlIwED Q+hJnNCZBQVsNdqYevIZDa7Cz+fhHCDJrByqNjtPqnU6itpBA+WtGcVNWkEydbBh l0ZtCJU3j+shTilXr+hbKRv32ZZxFJ78gz2LrZt6TqBe+yacIY4cki7+fKi/fmo8 T6LiEhu6cDdr4kqr/m+XiBpNcuwZJAkbNtKnwH3KVnfRhbx7hO2M5dxCO2UMNf4X ub5uP3MNWtN6wg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:09:58 2025 by rpki-client