This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json) Hash identifier: 5JkPWtxU3XO9fiT7TRaXYlTX7m2INoipY2h/ZK5mr2E= Subject key identifier: 19:BE:2E:75:26:5E:AF:2C:A7:49:E9:8D:2A:86:DA:2A:E7:61:9E:18 Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26 Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426 Certificate serial: 019AF1D1E91C6BD5578E4BEC91B654980F31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: UZ7Kaiwr/43ciPrB+xJJJPezav+ZPJmBfw6ZT9xhewo=) 2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e9:1c:6b:d5:57:8e:4b:ec:91:b6:54:98:0f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=19be2e75265eaf2ca749e98d2a86da2ae7619e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:44:8d:3c:b2:45:38:b8:30:00:25:d0:8e:99: 92:56:2b:b5:da:2b:68:ee:ce:b6:a3:41:fb:1b:06: 3a:eb:5f:bc:62:88:0d:5f:88:ca:bf:06:29:10:d5: ab:73:52:06:4e:9a:60:0d:69:9f:97:73:3f:d4:43: 29:12:57:2a:f3:a9:e5:0c:5a:00:ac:61:e4:a8:2e: fb:69:43:a2:36:b0:e3:95:41:2b:17:80:91:09:2f: e5:bc:ee:77:cd:c6:de:41:95:6f:55:97:23:03:f1: f0:27:86:7e:30:2b:46:3c:64:7c:a2:16:be:23:88: 38:56:6e:11:02:d5:f2:39:ce:24:97:78:22:76:a2: 75:14:a2:83:15:39:fe:77:e0:ae:c5:2f:2a:3b:0d: 5b:dc:29:c5:0e:99:02:68:be:21:9d:69:31:81:ba: 5f:90:4a:dd:94:23:50:26:f9:27:81:52:f7:fd:23: 18:dc:e5:dc:14:36:a8:86:ce:12:34:85:4e:89:ff: 24:f0:f5:79:d4:6f:1e:e2:2b:54:d3:6e:cf:ef:9e: ff:87:c1:f6:a1:02:51:28:36:de:03:c6:3e:b6:68: 6e:31:27:be:17:d8:7c:17:be:d6:28:2c:39:87:b9: dc:0c:33:db:65:3c:fa:43:89:66:2d:97:63:b9:74: 6d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BE:2E:75:26:5E:AF:2C:A7:49:E9:8D:2A:86:DA:2A:E7:61:9E:18 X509v3 Authority Key Identifier: keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b4:f6:d0:8f:d1:36:89:7d:f2:69:ab:b4:80:74:55:f4:27: d7:78:18:60:5b:0a:ea:20:12:af:27:6d:73:49:13:0e:a9:c2: 07:da:a8:08:1c:90:25:dd:26:33:49:e5:4e:e3:ce:0a:8e:4a: 42:3e:73:be:33:3a:ab:2b:af:60:3a:d7:a3:52:d2:30:ad:d7: d5:6a:16:b8:01:f7:57:33:8c:6c:05:bc:f9:51:c0:27:cc:e4: a1:1b:21:4b:d3:20:f8:c8:d3:b5:1e:ca:18:4b:08:51:c5:61: cc:0b:8a:6b:f7:11:b1:35:9a:89:bb:2c:d5:e3:4e:2a:87:13: 22:37:7c:25:4b:8e:f6:da:5f:8b:b6:55:cb:18:fd:26:ea:76: 24:30:9e:38:c3:21:99:34:19:36:fc:bc:bf:f6:f8:86:da:9f: 54:3c:ae:e3:e2:4f:bf:dd:41:11:3e:db:f5:67:3c:ea:eb:a5: 73:6d:7a:75:a3:a7:0a:b3:ed:47:af:a4:81:ee:23:31:88:af: 96:7b:c8:92:fc:ab:f0:5a:87:84:04:e7:2c:1a:83:2b:9f:be: 12:ed:b3:17:fb:d7:4c:c3:0a:94:25:01:ab:29:11:6c:38:4f: a4:b8:27:00:92:30:f1:99:17:62:5f:42:4d:6a:85:21:41:de: b3:09:3b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ekca9VXjkvskbZUmA8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjkwNDQ5NTA5ZWJmOWUzYjBmNDJjMWNkYzIyZTNlZjQw MDc0MjYwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EygxOWJlMmU3NTI2NWVhZjJjYTc0OWU5OGQyYTg2ZGEyYWU3NjE5ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/0SNPLJFOLgwACXQjpmSViu12ito 7s62o0H7GwY661+8YogNX4jKvwYpENWrc1IGTppgDWmfl3M/1EMpElcq86nlDFoA rGHkqC77aUOiNrDjlUErF4CRCS/lvO53zcbeQZVvVZcjA/HwJ4Z+MCtGPGR8oha+ I4g4Vm4RAtXyOc4kl3gidqJ1FKKDFTn+d+CuxS8qOw1b3CnFDpkCaL4hnWkxgbpf kErdlCNQJvkngVL3/SMY3OXcFDaohs4SNIVOif8k8PV51G8e4itU027P757/h8H2 oQJRKDbeA8Y+tmhuMSe+F9h8F77WKCw5h7ncDDPbZTz6Q4lmLZdjuXRtGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm+LnUmXq8sp0npjSqG2irnYZ4YMB8GA1UdIwQY MBaAFNn5BElQnr+eOw9Cwc3CLj70AHQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUt YmI0ODgyOGM5ZjA1LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My85YzVjZWYtZDRlNC00NGUxLWFiZjUtYmI0ODgyOGM5ZjA1 LzEvMmZrRVNWQ2V2NTQ3RDBMQnpjSXVQdlFBZENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbT20I/R Nol98mmrtIB0VfQn13gYYFsK6iASrydtc0kTDqnCB9qoCByQJd0mM0nlTuPOCo5K Qj5zvjM6qyuvYDrXo1LSMK3X1WoWuAH3VzOMbAW8+VHAJ8zkoRshS9Mg+MjTtR7K GEsIUcVhzAuKa/cRsTWaibss1eNOKocTIjd8JUuO9tpfi7ZVyxj9Jup2JDCeOMMh mTQZNvy8v/b4htqfVDyu4+JPv91BET7b9Wc86uulc216daOnCrPtR6+kge4jMYiv lnvIkvyr8FqHhATnLBqDK5++Eu2zF/vXTMMKlCUBqykRbDhPpLgnAJIw8ZkXYl9C TWqFIUHeswk7nA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:15 2025 by rpki-client