This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft File: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json) Hash identifier: 2NIgwnIWDSr8oa+XNTF7CnKyqVOxKAeccWAYy1872CM= Subject key identifier: D2:C9:97:84:4E:0C:7C:79:D7:C2:E2:93:5E:86:F9:64:B4:FE:60:AA Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1 Certificate issuer: /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1 Certificate serial: 019AF23FA7EEEB529870E71BA354DFCBC2F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft Manifest number: 11BF Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: KfOoCrwx781o4n6N0krg+loxsaBybiFjpd/JK9jN/L8=) 2: Tzki6iltnTfeWgXmhmNHdvTkXfw.roa (hash: BT59NYOurUOA8F73KnNlObUV8Me+wZDVlkZuurx7DMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a7:ee:eb:52:98:70:e7:1b:a3:54:df:cb:c2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=d2c997844e0c7c79d7c2e2935e86f964b4fe60aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:65:9b:33:9c:cd:2f:37:59:07:b7:34:ab: 38:4b:5d:bc:76:11:04:a3:95:6c:45:fc:65:6a:ef: 2f:e7:c1:97:8c:8a:2e:31:40:0e:7f:20:02:7b:24: 26:66:14:50:ae:b2:a8:5e:54:82:1d:0c:f1:0b:22: 9f:8e:7f:1c:70:6d:ee:30:af:29:8c:43:47:ac:0b: 2e:41:a7:c7:e0:4b:5c:24:61:c1:00:1d:dd:d1:04: 0b:67:02:90:a2:42:cd:9b:8d:87:5d:fc:8b:0e:88: 46:b9:29:9c:82:7f:d5:b2:5e:2d:aa:1e:4f:9a:a3: 6b:78:2b:b9:ac:c6:72:42:e4:50:b2:61:dd:aa:9f: 28:11:2b:7e:63:6a:c5:ca:5b:e4:c1:18:71:02:69: 2b:9c:83:ba:b4:70:32:54:1e:e2:f2:37:ca:fc:03: a8:63:32:4e:24:49:2b:7b:ef:b8:81:a9:59:1d:dc: 20:44:97:74:1c:a1:3c:a2:6d:21:7c:c5:34:f8:a8: fa:c5:09:c5:8b:90:75:15:c5:4c:e0:b6:1f:76:4f: de:ae:ad:62:60:6f:89:43:0f:81:3d:89:10:84:c1: d3:cc:30:6b:fb:76:d9:4d:7e:20:69:7d:2f:88:75: 61:ba:c0:06:6f:9d:f3:88:44:70:ce:19:56:eb:c9: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:97:84:4E:0C:7C:79:D7:C2:E2:93:5E:86:F9:64:B4:FE:60:AA X509v3 Authority Key Identifier: keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:32:0e:23:31:d1:f3:38:73:3d:d5:1b:e2:17:a0:e8:16:89: 93:4d:71:65:9e:65:4c:1b:44:29:6d:b6:2d:34:c8:b0:86:57: 5a:49:6b:f4:62:c6:ad:b4:40:5e:10:87:17:6b:5e:1b:f5:bf: e3:f8:a2:08:00:19:fb:84:9c:37:21:7b:11:62:16:8b:e8:3e: 85:8c:0d:14:7d:66:00:57:1c:4f:a7:97:03:66:f5:4e:2a:a4: 7f:6a:0a:99:f6:ca:76:07:6b:b4:78:ed:25:6c:26:25:de:3f: f5:f3:21:7e:cf:81:4d:bf:1f:39:ea:0a:4b:44:22:e7:d9:7e: 97:fe:6a:dc:89:4c:ff:a4:d8:43:33:b8:76:4c:44:bc:2e:da: c2:6c:5c:e6:75:f7:74:56:ae:96:98:d1:30:e2:96:da:c1:b6: 3f:29:af:78:e2:7f:16:1b:5e:a8:ec:50:55:54:01:29:bc:96: 8b:d3:71:2b:d5:56:d6:ac:d1:1d:fc:26:b0:5e:97:c5:4a:1a: e6:9f:44:5b:89:ea:ee:e2:d7:23:4f:03:34:43:0e:32:26:aa: e9:a9:93:dc:30:6f:3f:cc:c3:be:b3:84:20:3d:e7:62:7c:e0: e4:60:ce:12:4a:fa:86:38:c8:ed:51:12:2e:6b:b2:1e:65:0e: 97:b3:09:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6fu61KYcOcbo1Tfy8L2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NWUwNDZlN2QzOTNjMTRmY2JhZWU3ZjFjNDM5ODBlM2Rh MTFmYjEwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhkMmM5OTc4NDRlMGM3Yzc5ZDdjMmUyOTM1ZTg2Zjk2NGI0ZmU2MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1JlmzOczS83WQe3NKs4S128dhEE o5VsRfxlau8v58GXjIouMUAOfyACeyQmZhRQrrKoXlSCHQzxCyKfjn8ccG3uMK8p jENHrAsuQafH4EtcJGHBAB3d0QQLZwKQokLNm42HXfyLDohGuSmcgn/Vsl4tqh5P mqNreCu5rMZyQuRQsmHdqp8oESt+Y2rFylvkwRhxAmkrnIO6tHAyVB7i8jfK/AOo YzJOJEkre++4galZHdwgRJd0HKE8om0hfMU0+Kj6xQnFi5B1FcVM4LYfdk/erq1i YG+JQw+BPYkQhMHTzDBr+3bZTX4gaX0viHVhusAGb53ziERwzhlW68mn1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLJl4RODHx518Lik16G+WS0/mCqMB8GA1UdIwQY MBaAFNleBG59OTwU/LrufxxDmA49oR+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAt Nzg4YzViNzU3NTRiLzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MWJmNmYtMWUzYy00MDRhLTgyZDAtNzg4YzViNzU3NTRi LzEvMlY0RWJuMDVQQlQ4dXU1X0hFT1lEajJoSDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjIOIzHR 8zhzPdUb4heg6BaJk01xZZ5lTBtEKW22LTTIsIZXWklr9GLGrbRAXhCHF2teG/W/ 4/iiCAAZ+4ScNyF7EWIWi+g+hYwNFH1mAFccT6eXA2b1Tiqkf2oKmfbKdgdrtHjt JWwmJd4/9fMhfs+BTb8fOeoKS0Qi59l+l/5q3IlM/6TYQzO4dkxEvC7awmxc5nX3 dFaulpjRMOKW2sG2PymveOJ/FhteqOxQVVQBKbyWi9NxK9VW1qzRHfwmsF6XxUoa 5p9EW4nq7uLXI08DNEMOMiaq6amT3DBvP8zDvrOEID3nYnzg5GDOEkr6hjjI7VES LmuyHmUOl7MJdg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:56 2025 by rpki-client