This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json) Hash identifier: n5HKrxLJP9WAqe0Jt9vEP5Lvda9EsqnrLghR8wKUZoQ= Subject key identifier: 45:12:64:71:AD:DD:28:B6:5B:48:BB:38:BE:B5:1B:18:DA:21:05:00 Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c Certificate serial: 019AF0BF30AC2368C27FD9A9009F84E3BCAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft Manifest number: 0E48 Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: h9YO4mKj9Lhgb0VhU867EbUIAppdlPG7qJM2kntWZuA=) 2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:30:ac:23:68:c2:7f:d9:a9:00:9f:84:e3:bc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d977120937500eb46696428962e510e02c348e6c Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=45126471addd28b65b48bb38beb51b18da210500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:88:2d:31:26:68:7a:fd:a6:b0:8f:f0:3e: f4:55:ef:53:fb:35:d5:96:fb:ed:8a:3b:53:a0:2f: 20:84:85:bb:0f:d2:64:da:43:86:d7:9e:c1:0c:9b: d1:6f:7b:8d:3c:37:2a:0b:c7:fa:6e:1f:8a:64:5b: 65:ad:0a:c6:5a:c0:87:74:87:95:02:76:5f:0c:e2: 84:85:49:8a:16:df:ea:93:8a:17:bb:2c:dc:3c:e3: 9d:92:a9:e9:39:e9:f7:cb:83:53:ba:3c:ee:77:b8: 56:8d:e3:9c:68:6c:d7:ff:90:db:7c:3e:ce:63:0e: d4:67:2d:51:93:22:4f:ae:46:36:93:ee:f6:a3:7c: 7b:33:de:ab:9b:26:c5:31:3c:a7:f4:c4:59:cd:c9: f7:43:f9:99:2c:de:72:60:96:59:ae:f5:cc:fa:9f: 11:53:83:60:c2:6b:86:bd:6b:e1:a5:1d:44:03:02: 66:83:20:56:6c:c0:f4:8b:2f:fb:41:42:7f:3a:05: ab:62:71:8b:86:b2:ed:17:1e:94:47:9e:94:96:81: 39:e1:d9:d7:12:98:b5:30:4c:d4:1c:10:62:fc:0b: df:bc:63:13:64:a6:80:d7:4b:43:f4:25:4f:6b:ce: 29:d4:01:8b:e2:0c:a7:93:e8:dd:69:c0:82:d2:01: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:12:64:71:AD:DD:28:B6:5B:48:BB:38:BE:B5:1B:18:DA:21:05:00 X509v3 Authority Key Identifier: keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:65:e9:6b:2d:17:a3:96:24:75:c2:1a:fa:08:6e:a6:bf:52: 12:8f:98:5e:db:46:59:ab:9f:91:0b:ce:af:61:d3:87:24:b8: 1c:70:17:07:56:0b:cf:51:da:a8:bf:d9:37:f9:eb:2e:ac:a2: fd:42:0b:32:90:76:ba:85:73:fa:be:f3:0c:b4:4e:37:8d:f9: 19:a6:2c:e2:47:2c:c5:73:47:3d:ff:65:1a:5d:da:b5:2a:59: 64:a4:9b:96:79:18:56:d7:c9:06:d6:4c:89:a6:d8:b5:57:76: 11:b8:46:99:86:8e:bf:8b:93:9a:21:9d:08:68:0e:86:08:eb: a5:f2:4e:d4:5f:5a:5b:cf:26:8a:17:47:1a:b4:09:79:34:33: 5b:24:61:52:81:45:b0:80:0f:9f:2e:76:76:e4:ad:4e:a5:24: d8:7a:90:f0:f0:59:02:3f:c0:bc:e9:b1:59:14:93:2e:58:39: 5b:77:02:c7:2d:8d:a0:03:ad:55:83:7b:8b:cc:1e:0a:57:14: a7:ef:04:0a:fa:25:c9:bc:44:d3:db:82:a4:57:5a:f7:d0:6b: b3:17:33:2c:01:24:c3:21:5f:5d:1d:0b:76:5e:a2:aa:78:a4: f8:4a:f0:14:8e:53:f6:16:35:f6:e7:6a:6e:e7:e0:4e:88:bf: 00:b6:2a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzCsI2jCf9mpAJ+E47ysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NzcxMjA5Mzc1MDBlYjQ2Njk2NDI4OTYyZTUxMGUwMmMz NDhlNmMwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD Eyg0NTEyNjQ3MWFkZGQyOGI2NWI0OGJiMzhiZWI1MWIxOGRhMjEwNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPmILTEmaHr9prCP8D70Ve9T+zXV lvvtijtToC8ghIW7D9Jk2kOG157BDJvRb3uNPDcqC8f6bh+KZFtlrQrGWsCHdIeV AnZfDOKEhUmKFt/qk4oXuyzcPOOdkqnpOen3y4NTujzud7hWjeOcaGzX/5DbfD7O Yw7UZy1RkyJPrkY2k+72o3x7M96rmybFMTyn9MRZzcn3Q/mZLN5yYJZZrvXM+p8R U4NgwmuGvWvhpR1EAwJmgyBWbMD0iy/7QUJ/OgWrYnGLhrLtFx6UR56UloE54dnX Epi1MEzUHBBi/AvfvGMTZKaA10tD9CVPa84p1AGL4gynk+jdacCC0gH3ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUSZHGt3Si2W0i7OL61GxjaIQUAMB8GA1UdIwQY MBaAFNl3Egk3UA60ZpZCiWLlEOAsNI5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEt ZGUzODFkYjQzNmVjLzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZWVkYjktZTU5NC00MTViLWI4OGEtZGUzODFkYjQzNmVj LzEvMlhjU0NUZFFEclJtbGtLSll1VVE0Q3cwam13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2Xpay0X o5YkdcIa+ghupr9SEo+YXttGWaufkQvOr2HThyS4HHAXB1YLz1HaqL/ZN/nrLqyi /UILMpB2uoVz+r7zDLRON435GaYs4kcsxXNHPf9lGl3atSpZZKSblnkYVtfJBtZM iabYtVd2EbhGmYaOv4uTmiGdCGgOhgjrpfJO1F9aW88mihdHGrQJeTQzWyRhUoFF sIAPny52duStTqUk2HqQ8PBZAj/AvOmxWRSTLlg5W3cCxy2NoAOtVYN7i8weClcU p+8ECvolybxE09uCpFda99BrsxczLAEkwyFfXR0Ldl6iqnik+ErwFI5T9hY19udq bufgToi/ALYqwg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:29 2025 by rpki-client