This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json) Hash identifier: FzzyIQIx71B4p/16x/WmbGrjtkAEuU2gYVywFShpXK4= Subject key identifier: 73:3E:11:12:35:AC:75:2B:3E:FF:C9:9A:B2:5A:42:4F:7A:F6:A4:6B Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06 Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606 Certificate serial: 019AFB7A1C8F4FD079062D4DB21DD0BC25DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft Manifest number: 16C3 Signing time: Mon 08 Dec 2025 01:01:15 +0000 Manifest this update: Mon 08 Dec 2025 01:01:15 +0000 Manifest next update: Tue 09 Dec 2025 01:01:15 +0000 Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: ZnNXQ32n+omyhYpuBxREhoqENUBKs+Gk1v943DDF/4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:7a:1c:8f:4f:d0:79:06:2d:4d:b2:1d:d0:bc:25:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606 Validity Not Before: Dec 8 01:01:15 2025 GMT Not After : Dec 9 01:01:15 2025 GMT Subject: CN=733e111235ac752b3effc99ab25a424f7af6a46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:f6:5e:99:e5:da:89:7f:8f:af:10:46:45: a4:70:0c:54:51:45:fd:78:9f:7f:d1:96:2b:37:e8: b7:63:aa:f2:30:49:07:54:fd:04:87:fd:3d:7b:74: 98:94:62:03:fe:26:25:8b:c8:4d:7a:21:e9:7d:28: 7a:18:4f:25:0f:4c:75:31:2c:03:3f:a1:05:0d:50: 86:24:4a:37:f9:37:ef:1f:e4:09:48:af:0d:c2:36: bb:35:d8:fa:4a:9c:5e:60:42:b0:80:eb:ea:61:2f: b4:8f:93:3c:28:36:7a:27:e1:f9:19:7e:61:2d:ce: 33:42:af:e2:30:db:ae:87:37:6d:14:80:16:a4:e9: 63:79:64:a3:3e:45:85:79:38:a2:65:69:cd:54:ea: 73:26:d1:6b:7d:1f:68:51:a6:03:07:c3:a5:a8:1f: 37:41:c7:6b:d9:51:42:aa:b5:da:04:0e:a0:b6:59: b1:69:59:52:b1:b3:8e:01:21:fa:db:dc:20:40:03: ce:6a:d1:ba:2a:39:a1:26:8a:28:6d:20:29:f1:90: 24:85:9c:a6:de:a8:bd:04:fa:10:83:a8:60:74:13: 6b:1f:25:06:c6:58:b4:75:fb:8d:eb:ea:e1:c9:fa: 6c:30:53:48:f2:4d:5d:93:86:40:93:3f:ff:cc:c3: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3E:11:12:35:AC:75:2B:3E:FF:C9:9A:B2:5A:42:4F:7A:F6:A4:6B X509v3 Authority Key Identifier: keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:82:95:f4:16:3b:5a:e0:1c:f7:0e:46:cb:0a:ff:87:d9:68: 93:98:b5:df:5c:6b:b4:17:07:2b:86:a2:8d:a3:dc:25:84:63: bd:f5:ab:3a:db:17:a9:1e:82:4d:66:da:a9:55:bb:52:65:d9: cf:1a:be:7e:ba:d0:24:70:f0:f9:a5:a6:86:1a:6f:f8:1d:10: 44:b1:f0:21:2c:16:9d:ac:b0:d8:3a:59:c5:1e:45:b6:ac:68: 8e:71:7a:7d:1e:05:fa:86:d5:af:10:b4:b8:a9:ff:12:14:12: d2:c4:be:d3:e6:0e:8b:5c:7a:26:a4:35:f3:90:a2:1d:f4:de: 77:e0:ef:e2:9f:4a:b7:3a:ed:53:f6:f6:f2:7a:60:48:09:0e: 51:2a:75:7c:7b:42:3d:89:c6:43:b7:02:fd:b3:6c:f9:bc:f1: 5d:4b:b1:d3:95:41:d8:57:a5:f8:f6:bd:c9:a4:62:2a:fe:d1: 35:67:fb:32:0c:2f:cc:62:1a:9d:ef:cf:45:a6:3c:b2:76:56: b1:ba:30:8b:df:76:d6:50:a3:35:ab:2e:1e:fa:65:f0:17:a4: 8a:c0:3f:86:65:fb:e8:52:4d:82:28:82:21:d6:bf:cd:90:0f: 15:8f:3b:15:c4:f1:79:0f:64:eb:17:80:d1:84:1a:a0:aa:42: 86:f0:41:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7ehyPT9B5Bi1Nsh3QvCXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNGFjZDhhOTcyYzBlNzM3MTFhY2Y0N2UwYzg0NTlhMWNm NzI2MDYwHhcNMjUxMjA4MDEwMTE1WhcNMjUxMjA5MDEwMTE1WjAzMTEwLwYDVQQD Eyg3MzNlMTExMjM1YWM3NTJiM2VmZmM5OWFiMjVhNDI0ZjdhZjZhNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW32Xpnl2ol/j68QRkWkcAxUUUX9 eJ9/0ZYrN+i3Y6ryMEkHVP0Eh/09e3SYlGID/iYli8hNeiHpfSh6GE8lD0x1MSwD P6EFDVCGJEo3+TfvH+QJSK8Nwja7Ndj6SpxeYEKwgOvqYS+0j5M8KDZ6J+H5GX5h Lc4zQq/iMNuuhzdtFIAWpOljeWSjPkWFeTiiZWnNVOpzJtFrfR9oUaYDB8OlqB83 Qcdr2VFCqrXaBA6gtlmxaVlSsbOOASH629wgQAPOatG6KjmhJooobSAp8ZAkhZym 3qi9BPoQg6hgdBNrHyUGxli0dfuN6+rhyfpsMFNI8k1dk4ZAkz//zMPfAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM+ERI1rHUrPv/JmrJaQk969qRrMB8GA1UdIwQY MBaAFNpKzYqXLA5zcRrPR+DIRZoc9yYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYjEzMmUtYjc5ZS00ZTU4LTkzODAt OWU1ZmQ0MzkzNWI3LzEvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xYjEzMmUtYjc5ZS00ZTU4LTkzODAtOWU1ZmQ0MzkzNWI3 LzEvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYKV9BY7 WuAc9w5Gywr/h9lok5i131xrtBcHK4aijaPcJYRjvfWrOtsXqR6CTWbaqVW7UmXZ zxq+frrQJHDw+aWmhhpv+B0QRLHwISwWnayw2DpZxR5FtqxojnF6fR4F+obVrxC0 uKn/EhQS0sS+0+YOi1x6JqQ185CiHfTed+Dv4p9KtzrtU/b28npgSAkOUSp1fHtC PYnGQ7cC/bNs+bzxXUux05VB2Fel+Pa9yaRiKv7RNWf7MgwvzGIane/PRaY8snZW sbowi9921lCjNasuHvpl8BekisA/hmX76FJNgiiCIda/zZAPFY87FcTxeQ9k6xeA 0YQaoKpChvBB3g== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:24 2025 by rpki-client