This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json) Hash identifier: rGko1PkhpvJuK+Tvinx5r4EK3oCjakwN2Is5ctvOpp8= Subject key identifier: 78:7E:7E:CD:30:A6:D7:98:60:AE:6E:0B:48:A0:41:99:8F:61:F2:8B Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f Certificate serial: 019AF1D1E5DA9CFD4C59E7F4EECBF57734EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft Manifest number: 0FCC Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: CsALoa16XqPx8D14m6RlEwHbDyCmU2rzp85jL3l29TQ=) 2: 787WsGeG_PtOH4NifJLvSRcdjKE.roa (hash: LXK7T54I67xPwZvLYoiPIC1z9h7T9ebkz0cAqwvP0HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e5:da:9c:fd:4c:59:e7:f4:ee:cb:f5:77:34:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=787e7ecd30a6d79860ae6e0b48a041998f61f28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:5f:7a:6e:51:1d:8e:0f:ee:4e:76:24:35: d6:96:0f:6d:73:de:fb:fb:56:85:15:bc:0e:a1:fd: 9b:7a:d3:ef:f7:64:8f:25:6f:91:08:15:31:2a:ae: 6e:ae:f8:44:cd:fa:e1:2e:a5:a2:75:99:69:f4:bb: 9a:e9:c3:99:b1:70:98:16:e3:86:2e:48:fa:aa:a2: 13:0a:15:44:4c:30:19:92:69:79:0e:cc:f7:f2:9b: e8:7e:3e:16:24:37:8b:6b:8f:d0:eb:a1:6a:e9:54: fe:31:2a:31:45:c2:0f:5f:ee:04:1f:1a:67:c1:42: f3:0f:a2:10:b1:ab:3f:5d:f5:86:3d:d3:7f:61:23: 1e:f5:32:c8:a9:ee:4d:26:ea:6e:5a:a8:b8:54:71: 93:02:e8:fd:ed:ad:2d:33:36:f6:c3:ea:dc:b8:da: e4:1c:f6:ff:be:fe:b4:40:7b:57:19:97:a9:8d:4b: f2:e2:b5:74:7a:86:b6:f1:83:3c:7d:a7:aa:20:92: 52:c6:32:bf:ae:cc:b6:4c:e2:26:3e:66:5e:73:79: f5:d1:11:c8:bd:a1:ff:65:e3:c1:23:cb:0f:f2:ed: f8:95:1c:ea:df:a5:21:fd:f3:57:17:c9:2d:1d:e8: 17:e6:4b:93:61:67:39:7b:f6:4b:ee:fc:be:08:23: ef:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7E:7E:CD:30:A6:D7:98:60:AE:6E:0B:48:A0:41:99:8F:61:F2:8B X509v3 Authority Key Identifier: keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fa:da:2c:d5:cf:eb:aa:2f:a7:43:7b:72:04:b2:e3:88:a4: 52:c8:f1:2c:37:a6:fb:d9:62:07:64:e1:6c:9a:06:5c:57:e2: 39:47:7c:89:82:7c:b7:25:6d:1c:0a:1d:b9:6a:96:ce:14:f6: 0c:4a:a1:ea:30:97:b8:76:1f:7a:cf:0b:d0:d3:12:20:ce:d7: 85:64:95:a4:0d:17:fe:14:0d:9a:62:c4:1b:33:d7:93:94:ab: 5f:73:ee:de:3d:8a:36:0c:28:e9:cd:da:7d:99:e7:24:b6:b5: 1c:72:3e:69:07:e7:45:0e:81:13:54:b7:28:44:ee:9e:e7:02: 67:3d:43:b7:2c:25:16:8a:6f:f2:8f:6b:29:57:cd:ef:55:52: e5:8d:ea:93:dc:ec:a3:0f:d6:13:91:f3:6a:45:df:7c:f9:7c: 1f:0b:6c:76:7e:b7:a2:14:26:14:0f:59:43:d9:c6:e2:f6:4d: 67:3a:fa:c9:52:10:0d:9a:b5:26:d5:f6:c1:90:0d:37:68:90: 40:de:6e:4e:61:0d:01:c8:6e:ea:f1:f9:5e:c5:f5:18:54:89: b2:88:8c:2d:bd:cc:5d:97:41:42:cb:0c:a8:41:f9:60:1d:6d: a3:82:5a:a4:61:ab:c9:19:25:81:c8:e0:3f:1f:47:24:34:19: e4:21:d0:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eXanP1MWef07sv1dzTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYmIxZDAxNjAyZjE1MjExMTMyZWQ0ODE4NWE5OWIzNjIy NTExN2YwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD Eyg3ODdlN2VjZDMwYTZkNzk4NjBhZTZlMGI0OGEwNDE5OThmNjFmMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV5fem5RHY4P7k52JDXWlg9tc977 +1aFFbwOof2betPv92SPJW+RCBUxKq5urvhEzfrhLqWidZlp9Lua6cOZsXCYFuOG Lkj6qqITChVETDAZkml5Dsz38pvofj4WJDeLa4/Q66Fq6VT+MSoxRcIPX+4EHxpn wULzD6IQsas/XfWGPdN/YSMe9TLIqe5NJupuWqi4VHGTAuj97a0tMzb2w+rcuNrk HPb/vv60QHtXGZepjUvy4rV0eoa28YM8faeqIJJSxjK/rsy2TOImPmZec3n10RHI vaH/ZePBI8sP8u34lRzq36Uh/fNXF8ktHegX5kuTYWc5e/ZL7vy+CCPv/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh+fs0wpteYYK5uC0igQZmPYfKLMB8GA1UdIwQY MBaAFNq7HQFgLxUhETLtSBhambNiJRF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJzZEFXQXZGU0VSTXUxSUdGcVpzMklsRVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MzMwYmYtYWI2Yy00NDJjLWIzYjUt NmEzOWQwZWY3MmMwLzEvMnJzZEFXQXZGU0VSTXUxSUdGcVpzMklsRVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85MzMwYmYtYWI2Yy00NDJjLWIzYjUtNmEzOWQwZWY3MmMw LzEvMnJzZEFXQXZGU0VSTXUxSUdGcVpzMklsRVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPraLNXP 66ovp0N7cgSy44ikUsjxLDem+9liB2ThbJoGXFfiOUd8iYJ8tyVtHAoduWqWzhT2 DEqh6jCXuHYfes8L0NMSIM7XhWSVpA0X/hQNmmLEGzPXk5SrX3Pu3j2KNgwo6c3a fZnnJLa1HHI+aQfnRQ6BE1S3KETunucCZz1DtywlFopv8o9rKVfN71VS5Y3qk9zs ow/WE5HzakXffPl8Hwtsdn63ohQmFA9ZQ9nG4vZNZzr6yVIQDZq1JtX2wZANN2iQ QN5uTmENAchu6vH5XsX1GFSJsoiMLb3MXZdBQssMqEH5YB1to4JapGGryRklgcjg Px9HJDQZ5CHQGg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:50 2025 by rpki-client