This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft File: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft (raw, json) Hash identifier: D03UdZfvJZ3ImaLjxOeovGLiDahsii0sP8r786HNphg= Subject key identifier: DF:DF:EE:67:82:6C:3C:55:21:13:E5:A2:BC:09:F8:0C:7F:89:DC:A9 Authority key identifier: D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02 Certificate issuer: /CN=d9773d733d1845c41d3f9a362b55b74e686f9c02 Certificate serial: 019AF208AAC7B98118A71F64C6B1F2F8D798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft Manifest number: 162A Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: 2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl (hash: yZ65w351DIgCh+8iWZudzKfOvcZPF/F/uYrk6thl1mk=) 2: jnl0pkc8VZioDFc1rU2LXYR9u10.roa (hash: hBLoItEXtLXi0Hx0eyOzMHvYDZZAUIWBeCW6pZ7dYGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:aa:c7:b9:81:18:a7:1f:64:c6:b1:f2:f8:d7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9773d733d1845c41d3f9a362b55b74e686f9c02 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=dfdfee67826c3c552113e5a2bc09f80c7f89dca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d3:6a:0c:ab:05:26:b8:4e:02:aa:de:af:8b: a9:cc:41:00:53:59:d3:24:cf:8e:25:11:e6:e5:18: 3d:de:02:c7:13:2c:13:ac:89:57:68:3a:97:ff:32: 95:c1:d4:9c:0e:08:e4:1f:73:83:47:9e:ff:44:9c: aa:51:a3:d6:a2:58:95:38:94:f6:b8:4c:1c:c8:f8: fe:24:57:53:4c:dc:e0:57:3c:e1:25:6e:ed:c8:41: 54:46:12:58:b7:9b:f9:b2:ec:ca:ee:cc:b9:a1:31: fc:3a:07:2d:a2:ed:b6:66:46:60:6a:d5:b8:8f:d7: ae:c7:2c:fe:3f:9b:cc:f8:43:7d:ef:d5:06:8d:e1: 41:0f:73:1f:4b:f4:eb:51:bc:b6:0b:19:26:bb:6b: 9a:5b:ed:df:46:45:08:0f:60:4b:ff:8a:3c:12:39: fc:59:d4:b4:ce:27:aa:6e:d9:89:93:19:cf:29:ed: 2b:6e:e8:cb:40:95:4d:2a:0f:80:d4:61:5b:fa:ad: 47:91:5d:4b:14:d2:8e:51:94:a4:94:a3:37:de:b0: 97:eb:d5:3e:5a:9f:bc:06:80:5b:57:27:48:e0:f7: 07:b9:b0:56:24:65:56:09:85:8d:80:7a:ab:d2:40: 80:7f:11:da:5d:9c:5c:0c:42:50:da:aa:33:7f:61: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DF:EE:67:82:6C:3C:55:21:13:E5:A2:BC:09:F8:0C:7F:89:DC:A9 X509v3 Authority Key Identifier: keyid:D9:77:3D:73:3D:18:45:C4:1D:3F:9A:36:2B:55:B7:4E:68:6F:9C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37411e-2b89-4079-8cfc-01a29f5f6dde/1/2Xc9cz0YRcQdP5o2K1W3TmhvnAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f6:48:d0:4b:82:26:57:94:68:a2:26:07:eb:c6:ec:fe:a1: 3f:7b:5e:ce:c9:4c:cb:77:a4:9e:13:87:97:c9:37:cf:d9:2f: 2d:a2:d4:7e:7f:16:dc:c8:ad:fd:fd:85:39:82:37:e3:9b:cf: 48:e5:7e:d7:4c:d1:e2:49:8b:78:d4:35:22:a8:79:ee:73:a4: 18:85:42:af:a8:77:62:0c:fd:2d:09:ae:c3:7a:49:cb:ba:0f: 5e:a5:ca:c2:bd:6b:45:3b:b8:f9:f8:06:45:83:c5:05:b0:de: 56:49:b0:41:d1:fa:ff:70:fd:cc:84:a2:cb:d8:85:74:9b:4d: 9c:3a:be:a6:ce:25:58:3e:0f:63:fb:c4:1c:b4:86:63:7d:92: 57:ed:a2:94:2e:04:01:79:3e:fa:88:a5:c0:7c:73:53:19:94: 27:8f:59:7c:93:c0:1d:28:3d:8a:80:c6:24:3e:b7:75:32:ed: 85:36:13:8c:41:ad:83:fa:33:66:00:67:31:7e:0f:d8:b1:86: c8:c3:ff:ab:22:8a:23:13:28:4e:41:cb:c4:0c:26:bd:63:ec: 34:00:ab:1c:0d:24:d2:7d:90:4c:83:3c:a6:3a:e8:e9:5e:49: 49:c4:8f:21:06:00:d5:93:65:32:31:5a:d9:a5:aa:55:df:a3: 5b:58:0d:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKrHuYEYpx9kxrHy+NeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NzczZDczM2QxODQ1YzQxZDNmOWEzNjJiNTViNzRlNjg2 ZjljMDIwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD EyhkZmRmZWU2NzgyNmMzYzU1MjExM2U1YTJiYzA5ZjgwYzdmODlkY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9NqDKsFJrhOAqrer4upzEEAU1nT JM+OJRHm5Rg93gLHEywTrIlXaDqX/zKVwdScDgjkH3ODR57/RJyqUaPWoliVOJT2 uEwcyPj+JFdTTNzgVzzhJW7tyEFURhJYt5v5suzK7sy5oTH8Ogctou22ZkZgatW4 j9euxyz+P5vM+EN979UGjeFBD3MfS/TrUby2Cxkmu2uaW+3fRkUID2BL/4o8Ejn8 WdS0zieqbtmJkxnPKe0rbujLQJVNKg+A1GFb+q1HkV1LFNKOUZSklKM33rCX69U+ Wp+8BoBbVydI4PcHubBWJGVWCYWNgHqr0kCAfxHaXZxcDEJQ2qozf2HLoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/f7meCbDxVIRPlorwJ+Ax/idypMB8GA1UdIwQY MBaAFNl3PXM9GEXEHT+aNitVt05ob5wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMt MDFhMjlmNWY2ZGRlLzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8zNzQxMWUtMmI4OS00MDc5LThjZmMtMDFhMjlmNWY2ZGRl LzEvMlhjOWN6MFlSY1FkUDVvMksxVzNUbWh2bkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPZI0EuC JleUaKImB+vG7P6hP3tezslMy3eknhOHl8k3z9kvLaLUfn8W3Mit/f2FOYI345vP SOV+10zR4kmLeNQ1Iqh57nOkGIVCr6h3Ygz9LQmuw3pJy7oPXqXKwr1rRTu4+fgG RYPFBbDeVkmwQdH6/3D9zISiy9iFdJtNnDq+ps4lWD4PY/vEHLSGY32SV+2ilC4E AXk++oilwHxzUxmUJ49ZfJPAHSg9ioDGJD63dTLthTYTjEGtg/ozZgBnMX4P2LGG yMP/qyKKIxMoTkHLxAwmvWPsNACrHA0k0n2QTIM8pjro6V5JScSPIQYA1ZNlMjFa 2aWqVd+jW1gNlw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:31 2025 by rpki-client