This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json) Hash identifier: t7z5Pl1nGz8wHlloaYP0D0/1Z0RAI1yH/jSRxEkQCMg= Subject key identifier: 98:C9:0D:5C:52:A0:5E:3F:3C:19:10:86:34:6A:2D:19:F8:CC:69:78 Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3 Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3 Certificate serial: 019AF12ED72BD8880CB6B67DF5BE003F9663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft Manifest number: 0F00 Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: OSyG2or8OT/0N75P4phSmIgxsHbci7vlN/W+3v0Wf+g=) 2: ydjVuxhclCo9WITtZ8reVakuUyk.roa (hash: xSeH/WCDjMoX4ZrZ3Xlx1/Z9w0yzrfN0W1h+i1dlTy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d7:2b:d8:88:0c:b6:b6:7d:f5:be:00:3f:96:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3 Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=98c90d5c52a05e3f3c191086346a2d19f8cc6978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:52:61:6e:a4:6c:91:ad:e4:40:88:b1:f9: 56:75:7c:87:5a:62:2c:e5:05:3f:26:84:a3:80:5d: 1a:9f:2a:f2:a7:fa:bb:0f:54:2d:af:2e:6e:5a:0d: 33:67:67:23:f6:2a:04:aa:2d:cc:fe:26:03:04:9c: e1:cc:19:bf:b7:8e:21:02:b9:45:94:8d:be:af:ef: d8:49:73:dd:15:81:11:65:3f:4a:39:21:24:be:8e: 5f:60:35:a5:f3:fc:c6:e1:92:9a:38:4b:ab:62:4b: fc:5c:ac:c0:03:ec:db:08:46:83:8b:d1:4b:ab:5a: 40:8a:3d:5b:35:fd:08:18:43:a7:5c:d7:8c:3b:02: 83:69:2b:9e:51:fa:0c:d5:74:11:4c:f8:5c:37:fb: 8f:55:b4:0c:3c:28:22:db:b9:d7:c7:0b:4b:8c:e5: e5:3b:fa:cb:9e:4c:c5:8a:ba:d5:f2:01:9d:01:29: ea:ed:1b:bd:64:76:59:10:fd:18:80:40:ca:70:d5: 5c:5a:74:e4:1e:b0:c3:30:40:70:72:84:f7:16:7d: 2e:23:c2:30:35:91:2d:0a:b9:24:cf:05:6a:ea:84: d2:53:e6:fe:98:4b:17:3f:98:45:3e:0a:12:bd:cd: fb:11:b6:35:97:96:65:da:f1:66:9d:68:32:bf:44: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:0D:5C:52:A0:5E:3F:3C:19:10:86:34:6A:2D:19:F8:CC:69:78 X509v3 Authority Key Identifier: keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3d:f2:de:4d:8a:db:dd:a2:db:76:24:63:65:ed:84:ae:61: 69:ca:04:3e:65:88:09:76:43:d6:ae:0c:f8:1c:97:ec:58:c2: e3:cf:10:ee:9f:30:bd:19:44:69:8f:87:42:e8:16:6b:4a:f6: 89:8c:76:c3:df:f0:5f:1c:16:3d:36:05:fc:d5:30:bf:98:3d: 62:5c:11:ed:a7:c0:0d:69:ff:32:f0:11:f1:be:b5:80:6e:a7: 0d:b1:11:23:ce:e1:03:04:7f:4c:09:19:0d:7a:ac:c2:1a:77: fd:f0:e6:10:d0:97:d0:eb:d7:87:7f:85:6d:46:f3:6a:35:95: f8:fa:b9:2b:9e:d9:fe:27:dd:3c:5c:76:21:10:24:21:70:48: 6c:27:58:8e:2d:ef:cc:50:7a:ed:c3:cb:ef:f1:c4:51:0a:ea: 43:b8:dd:26:df:c8:b4:a8:4c:28:24:9c:ea:b3:ef:b5:1b:dc: 33:37:75:6f:c6:b1:66:2b:5b:23:2a:1a:53:e1:e8:58:d4:c8: 3c:60:05:ce:c3:b5:2f:f7:a8:a1:f6:c8:f0:88:0f:b4:33:0c: f0:5c:f6:c2:75:58:8b:34:17:d3:ec:be:69:b0:7a:e8:28:d5: 81:2c:fe:f0:ad:82:60:6b:68:4f:d6:e5:e9:74:d2:ee:30:cf: 26:6e:2e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtcr2IgMtrZ99b4AP5ZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYwZmYzNjVkNGJkOTA4ZGU5MDJlZWRhMDNiMjc5YzJm ODA5ZDMwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD Eyg5OGM5MGQ1YzUyYTA1ZTNmM2MxOTEwODYzNDZhMmQxOWY4Y2M2OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFtSYW6kbJGt5ECIsflWdXyHWmIs 5QU/JoSjgF0anyryp/q7D1Qtry5uWg0zZ2cj9ioEqi3M/iYDBJzhzBm/t44hArlF lI2+r+/YSXPdFYERZT9KOSEkvo5fYDWl8/zG4ZKaOEurYkv8XKzAA+zbCEaDi9FL q1pAij1bNf0IGEOnXNeMOwKDaSueUfoM1XQRTPhcN/uPVbQMPCgi27nXxwtLjOXl O/rLnkzFirrV8gGdASnq7Ru9ZHZZEP0YgEDKcNVcWnTkHrDDMEBwcoT3Fn0uI8Iw NZEtCrkkzwVq6oTSU+b+mEsXP5hFPgoSvc37EbY1l5Zl2vFmnWgyv0SIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjJDVxSoF4/PBkQhjRqLRn4zGl4MB8GA1UdIwQY MBaAFNqvD/Nl1L2QjekC7toDsnnC+AnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAt NDA5MTc2Zjg0NmQzLzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83NzkyNjAtN2JlOS00YjY2LTlkZjAtNDA5MTc2Zjg0NmQz LzEvMnE4UDgyWFV2WkNONlFMdTJnT3llY0w0Q2RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID3y3k2K 292i23YkY2XthK5hacoEPmWICXZD1q4M+ByX7FjC488Q7p8wvRlEaY+HQugWa0r2 iYx2w9/wXxwWPTYF/NUwv5g9YlwR7afADWn/MvAR8b61gG6nDbERI87hAwR/TAkZ DXqswhp3/fDmENCX0OvXh3+FbUbzajWV+Pq5K57Z/ifdPFx2IRAkIXBIbCdYji3v zFB67cPL7/HEUQrqQ7jdJt/ItKhMKCSc6rPvtRvcMzd1b8axZitbIyoaU+HoWNTI PGAFzsO1L/eoofbI8IgPtDMM8Fz2wnVYizQX0+y+abB66CjVgSz+8K2CYGtoT9bl 6XTS7jDPJm4uQw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:21 2025 by rpki-client