This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json) Hash identifier: dEehjzIp+2bw2u8skJsL8PbcpNgPo7781Qw25Cg7O9s= Subject key identifier: 6B:C4:1D:4C:69:74:4C:9D:A5:51:A3:41:A2:BF:27:FA:88:90:A3:47 Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Certificate serial: 019AF31C6A27F4D443EB9812D18A17227F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft Manifest number: 09B0 Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: xuEDDIj3YB/7A7h2pPETOgAacb9EkuCbafyHLPENzTQ=) 2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=) 3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6a:27:f4:d4:43:eb:98:12:d1:8a:17:22:7f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=6bc41d4c69744c9da551a341a2bf27fa8890a347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:3f:ad:21:cc:e2:0a:7c:6e:50:2e:26:c5: 5a:a9:42:ba:4e:75:9d:50:63:6f:80:33:1a:9b:8c: ea:c9:25:47:43:65:27:31:2d:49:b1:98:f2:76:b3: c2:cc:8a:83:25:a4:6a:58:a5:b9:f0:a5:08:13:fe: 37:45:18:86:1f:f9:e8:c8:d0:c0:a9:cb:d4:9e:1e: c9:3f:86:ec:72:fc:69:2c:c0:b0:dd:0e:7a:70:e7: 67:b7:81:82:78:40:3f:59:f7:f6:26:86:21:40:97: c6:fe:65:ac:cb:c7:e0:65:ae:ac:6c:1f:ed:c0:a2: a9:1e:91:2b:71:ee:e8:cf:cd:1c:89:9e:d5:97:5a: 1b:84:b1:81:61:1d:3b:9a:bd:6b:a5:df:c8:0e:01: d8:42:3e:fe:0d:02:d8:ac:50:b3:c4:99:9c:b2:ad: 05:f7:fd:19:84:bd:02:99:a8:4c:07:3b:a5:85:4b: 61:70:31:4a:ba:08:26:c2:8f:1e:d7:16:ce:99:ac: 18:59:b6:a0:40:4a:9b:f1:f9:20:96:8b:14:32:44: 70:29:e3:d3:d4:55:e2:d4:d3:4a:0a:9c:09:5d:9a: 0f:be:9a:18:c2:24:16:80:40:3c:b8:4c:ea:6b:f1: 84:19:9b:ae:65:b0:98:3d:1a:8d:22:e7:ae:82:03: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:1D:4C:69:74:4C:9D:A5:51:A3:41:A2:BF:27:FA:88:90:A3:47 X509v3 Authority Key Identifier: keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ab:58:ee:27:34:ea:84:7f:f8:db:e6:35:1a:1f:d1:57:4d: 66:6e:5c:7a:85:ef:0a:5c:3a:64:6d:6f:63:8f:e8:75:47:4a: 65:86:bb:33:2e:27:97:f0:25:38:87:4e:92:68:41:5b:cd:ab: f8:bf:ce:47:a2:fa:e7:27:07:a7:af:94:25:80:2b:52:61:30: 4d:c7:ef:31:00:cd:57:35:64:12:7b:c7:4e:56:a1:40:9b:1a: 90:d1:20:71:9e:e8:ec:08:d1:5d:72:8c:eb:55:8e:0b:6f:e3: 35:83:8b:e4:20:7a:94:cb:4a:33:1d:37:22:16:15:8a:bf:63: 09:7a:eb:eb:3d:da:1b:a8:9e:a9:9b:0d:6e:0c:0f:6e:ac:03: 97:62:3d:5a:c0:72:92:f9:29:8a:f1:c4:14:60:6e:d0:41:35: 34:af:41:26:bf:de:27:61:77:bb:42:36:54:a1:73:66:4b:60: f3:0a:c8:36:c7:ac:04:7c:1c:dd:35:e0:28:08:9f:ad:d6:74: bf:a6:35:bd:3b:f4:39:04:63:15:f6:d4:a1:4c:c5:89:f6:02: ce:80:37:b4:26:f0:5f:09:23:df:d8:56:d3:a0:ae:d2:4d:85: eb:40:56:67:3c:79:10:d4:4a:de:cc:18:a4:08:ba:2d:a2:1c: 36:d7:d4:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGon9NRD65gS0YoXIn9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4 MzRhMGIwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD Eyg2YmM0MWQ0YzY5NzQ0YzlkYTU1MWEzNDFhMmJmMjdmYTg4OTBhMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxw/rSHM4gp8blAuJsVaqUK6TnWd UGNvgDMam4zqySVHQ2UnMS1JsZjydrPCzIqDJaRqWKW58KUIE/43RRiGH/noyNDA qcvUnh7JP4bscvxpLMCw3Q56cOdnt4GCeEA/Wff2JoYhQJfG/mWsy8fgZa6sbB/t wKKpHpErce7oz80ciZ7Vl1obhLGBYR07mr1rpd/IDgHYQj7+DQLYrFCzxJmcsq0F 9/0ZhL0CmahMBzulhUthcDFKuggmwo8e1xbOmawYWbagQEqb8fkglosUMkRwKePT 1FXi1NNKCpwJXZoPvpoYwiQWgEA8uEzqa/GEGZuuZbCYPRqNIueuggPgIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvEHUxpdEydpVGjQaK/J/qIkKNHMB8GA1UdIwQY MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3 LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqtY7ic0 6oR/+NvmNRof0VdNZm5ceoXvClw6ZG1vY4/odUdKZYa7My4nl/AlOIdOkmhBW82r +L/OR6L65ycHp6+UJYArUmEwTcfvMQDNVzVkEnvHTlahQJsakNEgcZ7o7AjRXXKM 61WOC2/jNYOL5CB6lMtKMx03IhYVir9jCXrr6z3aG6ieqZsNbgwPbqwDl2I9WsBy kvkpivHEFGBu0EE1NK9BJr/eJ2F3u0I2VKFzZktg8wrINsesBHwc3TXgKAifrdZ0 v6Y1vTv0OQRjFfbUoUzFifYCzoA3tCbwXwkj39hW06Cu0k2F60BWZzx5ENRK3swY pAi6LaIcNtfURg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:39 2025 by rpki-client