This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json) Hash identifier: Q2Mac0GUIebY8TBLMEEYylyrzfDILdjxM842XcPgzQE= Subject key identifier: F5:E8:94:C6:31:2F:97:54:0F:9B:35:BE:72:C9:13:03:F2:3D:BE:F8 Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9 Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9 Certificate serial: 019AF12ECF08E457010997EA22AA6DAF12AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft Manifest number: 13F0 Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: EgSh+d1iZH/AfaJclSV8jwj9wWJaDFbOgArdK7xd5ys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cf:08:e4:57:01:09:97:ea:22:aa:6d:af:12:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9 Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=f5e894c6312f97540f9b35be72c91303f23dbef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:51:c0:08:fc:b8:a3:3d:5b:fe:cb:72:36:9a: 0d:9d:c4:c1:db:55:f8:a7:5e:ab:18:5b:4d:2c:76: f1:6b:14:3e:72:23:cc:6e:8a:32:90:98:7e:ec:a8: 38:60:6a:d4:a2:ea:a9:b6:43:6a:fb:a9:98:13:bb: bc:a5:a8:1e:da:e3:cf:a2:20:81:66:07:e1:bf:68: 80:43:fd:bf:24:61:23:94:43:52:d1:b0:44:75:e6: 56:4c:e1:e7:6d:6d:ba:e8:dd:bb:c3:e8:e2:d0:67: 78:5c:50:fb:54:31:d5:98:92:6e:e6:a0:5c:e4:09: 93:16:50:29:d3:9c:5c:83:43:d1:eb:27:35:25:d6: 98:73:9d:e2:56:95:71:33:06:2d:42:60:1d:34:a3: 94:08:f5:20:24:b5:af:d7:47:07:31:53:ce:be:6c: 16:65:11:fe:d8:b1:5d:46:32:6e:60:3a:02:3a:1f: 2e:37:1d:c5:2c:e5:70:4a:22:51:91:a7:19:65:1c: c3:9d:60:ac:52:53:34:41:20:44:53:f9:fa:9c:15: ca:89:4e:86:96:13:8d:11:45:07:0c:f1:aa:e4:aa: 70:00:49:d1:35:36:4c:73:73:14:84:50:0d:be:5a: 41:6c:da:e5:11:8d:39:23:e5:26:c7:a4:0a:e5:b0: 83:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:94:C6:31:2F:97:54:0F:9B:35:BE:72:C9:13:03:F2:3D:BE:F8 X509v3 Authority Key Identifier: keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:29:a4:ed:fc:55:17:7a:c2:9f:70:ba:6e:c3:73:10:19:24: 01:83:ac:a3:c9:a6:46:52:86:fd:06:83:a7:bd:db:41:53:23: 25:e1:2a:79:89:36:f0:91:46:df:24:ce:4b:61:68:36:ef:7d: de:42:54:af:f2:43:13:c6:3b:4f:95:81:e3:3a:e2:72:9d:f8: d3:59:0d:f2:2a:1b:2e:41:50:68:e9:d5:86:dd:ea:85:f1:91: 91:b8:0d:e5:22:a7:a7:70:5e:d5:d4:36:f1:9b:b6:e3:bf:a8: 6e:11:2a:6e:4b:90:88:60:61:a7:13:bc:0e:62:03:82:b5:04: 92:09:c3:91:aa:df:dc:d0:5f:07:b9:4a:ce:5a:70:f9:ce:8b: 87:99:7a:da:3a:e8:64:d5:cb:cb:3a:4a:b8:b0:6f:b1:7b:39: 29:b4:66:7d:86:2a:65:b7:d4:53:5f:88:f3:47:39:13:98:c5: 2a:f7:9b:c3:28:f6:7f:de:8e:83:db:d5:67:09:60:be:56:7d: d9:94:a3:f5:47:65:ba:83:75:6e:82:f4:8d:33:85:8c:1a:b2: b9:44:e4:89:d5:86:ae:f0:3d:38:ba:5f:cf:83:48:21:aa:1f: 8d:79:e9:c3:33:60:6c:53:c9:01:b9:80:e5:20:61:4b:32:2d: b1:fb:ef:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLs8I5FcBCZfqIqptrxKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZWU4MGViNWQzMDA0ODU1NGQwYWVmZDQzYmNlZWQzM2Vm ZGQ0YTkwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD EyhmNWU4OTRjNjMxMmY5NzU0MGY5YjM1YmU3MmM5MTMwM2YyM2RiZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lHACPy4oz1b/styNpoNncTB21X4 p16rGFtNLHbxaxQ+ciPMbooykJh+7Kg4YGrUouqptkNq+6mYE7u8page2uPPoiCB Zgfhv2iAQ/2/JGEjlENS0bBEdeZWTOHnbW266N27w+ji0Gd4XFD7VDHVmJJu5qBc 5AmTFlAp05xcg0PR6yc1JdaYc53iVpVxMwYtQmAdNKOUCPUgJLWv10cHMVPOvmwW ZRH+2LFdRjJuYDoCOh8uNx3FLOVwSiJRkacZZRzDnWCsUlM0QSBEU/n6nBXKiU6G lhONEUUHDPGq5KpwAEnRNTZMc3MUhFANvlpBbNrlEY05I+Umx6QK5bCDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXolMYxL5dUD5s1vnLJEwPyPb74MB8GA1UdIwQY MBaAFNrugOtdMASFVNCu/UO87tM+/dSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnU2QTYxMHdCSVZVMEs3OVE3enUwejc5MUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kMjA2NDItOGE1ZC00Nzc4LWE5YTUt NmNhNzYzMjJlMDg0LzEvMnU2QTYxMHdCSVZVMEs3OVE3enUwejc5MUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kMjA2NDItOGE1ZC00Nzc4LWE5YTUtNmNhNzYzMjJlMDg0 LzEvMnU2QTYxMHdCSVZVMEs3OVE3enUwejc5MUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCmk7fxV F3rCn3C6bsNzEBkkAYOso8mmRlKG/QaDp73bQVMjJeEqeYk28JFG3yTOS2FoNu99 3kJUr/JDE8Y7T5WB4zricp3401kN8iobLkFQaOnVht3qhfGRkbgN5SKnp3Be1dQ2 8Zu247+obhEqbkuQiGBhpxO8DmIDgrUEkgnDkarf3NBfB7lKzlpw+c6Lh5l62jro ZNXLyzpKuLBvsXs5KbRmfYYqZbfUU1+I80c5E5jFKvebwyj2f96Og9vVZwlgvlZ9 2ZSj9UdluoN1boL0jTOFjBqyuUTkidWGrvA9OLpfz4NIIaofjXnpwzNgbFPJAbmA 5SBhSzItsfvvKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:01 2025 by rpki-client