This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json) Hash identifier: TrdDbqroR16R5sAuEApX0M1uUgn+PHNNkrX7acIMGEg= Subject key identifier: 5A:1F:3E:00:7F:BC:D0:93:61:5E:34:2D:17:5B:03:F7:91:75:99:55 Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d Certificate serial: 019AF12EDE7507C8AAC8F879329255E73D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft Manifest number: 099D Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: MB38eXWPW0brlcEwVoGLA/zs+OlGk+RsZLJ32ZAckqY=) 2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:de:75:07:c8:aa:c8:f8:79:32:92:55:e7:3d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=5a1f3e007fbcd093615e342d175b03f791759955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:29:2c:ee:51:bb:45:43:70:89:86:69:78: ab:b3:0c:28:8c:10:44:f9:dc:1b:f0:32:3a:c1:6d: d8:1a:aa:08:7d:fa:50:ec:7e:9a:b5:04:27:b5:59: d8:21:f4:bd:fd:b2:67:5e:e8:f4:7a:76:90:20:48: 51:eb:01:f0:e2:0a:52:52:ae:32:9d:e6:05:74:c1: 23:66:e0:96:0f:23:04:9a:7f:52:a9:bb:a5:5d:82: e2:fd:86:b2:26:53:1b:2a:0b:0c:a3:25:90:56:ba: 9b:0e:4e:18:94:83:52:fc:8f:69:de:05:e1:e9:2f: b6:8c:dc:45:99:0a:27:8c:cb:41:a3:f1:77:ef:5f: e8:14:7c:3a:aa:5a:af:51:44:e9:08:a0:1f:a2:a7: 38:07:2e:bc:22:0a:7c:a6:5d:df:0f:4a:c8:67:99: b2:89:fb:7d:03:d4:2c:46:50:49:5c:77:89:53:b9: 85:b1:f4:ee:5f:08:00:9b:b6:20:56:b8:87:a7:07: 72:f1:a0:df:30:ad:b5:9e:c8:d9:ed:4f:1b:5a:b7: 54:7b:76:2b:41:e7:0d:f6:fc:0e:75:cc:3e:7d:5f: 46:38:a8:7f:cc:3d:d2:9d:2c:fa:67:29:fa:ac:ed: a8:73:d0:ff:dd:a9:f3:80:1f:0d:34:44:ad:4e:21: e7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1F:3E:00:7F:BC:D0:93:61:5E:34:2D:17:5B:03:F7:91:75:99:55 X509v3 Authority Key Identifier: keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:96:46:96:f1:63:13:27:1d:e4:75:de:ef:5f:01:6b:6f: d7:78:6d:b1:67:d1:3f:87:75:4f:bb:aa:b2:79:70:a5:1e:f6: 5b:2c:d3:c0:9e:d9:f7:32:85:f8:bb:ee:a4:a8:bd:2e:ed:c4: 9f:e2:66:e8:ac:a9:1b:97:b5:c5:2f:e5:6d:23:fb:ac:ce:d9: 3a:fb:75:3c:59:bd:fd:4a:e8:9a:ba:f5:3e:10:da:70:3a:5e: 01:0d:65:e0:c9:fa:3a:2c:a4:e3:15:0e:1e:09:c9:85:4c:33: 13:e5:d0:ba:64:77:f6:58:ee:6d:23:2e:e6:a2:92:8e:24:57: c1:b4:60:e0:c3:d2:b1:67:d6:f4:8c:91:80:60:05:d8:90:da: aa:fd:e7:5b:6c:bb:29:87:c3:97:f0:84:df:aa:bd:6c:e2:6a: 7e:2c:95:1f:7b:03:b7:50:73:44:4a:63:29:b4:06:35:28:6d: 7c:02:57:0a:f9:32:d0:ef:f5:c1:54:0d:c9:28:0a:c4:39:48: 7a:ef:a0:cf:3b:5f:ef:de:a3:a2:4b:f4:dc:7c:58:a5:ae:3a: e2:63:ec:34:87:65:06:0f:b5:fa:3a:df:78:6b:ab:be:4e:e8: e9:e9:bd:10:c8:9e:45:10:13:5d:95:be:d9:95:c1:a4:c0:c1: 32:ce:b7:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLt51B8iqyPh5MpJV5z2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjcwMGVlYjA1Mjc0YjMxZGMxZGFmMzBjZDdjODEzMTBh YjQ1MmQwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD Eyg1YTFmM2UwMDdmYmNkMDkzNjE1ZTM0MmQxNzViMDNmNzkxNzU5OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCApLO5Ru0VDcImGaXirswwojBBE +dwb8DI6wW3YGqoIffpQ7H6atQQntVnYIfS9/bJnXuj0enaQIEhR6wHw4gpSUq4y neYFdMEjZuCWDyMEmn9SqbulXYLi/YayJlMbKgsMoyWQVrqbDk4YlINS/I9p3gXh 6S+2jNxFmQonjMtBo/F371/oFHw6qlqvUUTpCKAfoqc4By68Igp8pl3fD0rIZ5my ift9A9QsRlBJXHeJU7mFsfTuXwgAm7YgVriHpwdy8aDfMK21nsjZ7U8bWrdUe3Yr QecN9vwOdcw+fV9GOKh/zD3SnSz6Zyn6rO2oc9D/3anzgB8NNEStTiHn2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFofPgB/vNCTYV40LRdbA/eRdZlVMB8GA1UdIwQY MBaAFNj3AO6wUnSzHcHa8wzXyBMQq0UtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDhhM2EtZDZiOS00YTVkLTlkMzct MzcxYjkwNzQ4ODdmLzEvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMDhhM2EtZDZiOS00YTVkLTlkMzctMzcxYjkwNzQ4ODdm LzEvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANySWRpbx YxMnHeR13u9fAWtv13htsWfRP4d1T7uqsnlwpR72WyzTwJ7Z9zKF+LvupKi9Lu3E n+Jm6KypG5e1xS/lbSP7rM7ZOvt1PFm9/Uromrr1PhDacDpeAQ1l4Mn6Oiyk4xUO HgnJhUwzE+XQumR39ljubSMu5qKSjiRXwbRg4MPSsWfW9IyRgGAF2JDaqv3nW2y7 KYfDl/CE36q9bOJqfiyVH3sDt1BzREpjKbQGNShtfAJXCvky0O/1wVQNySgKxDlI eu+gzztf796jokv03HxYpa464mPsNIdlBg+1+jrfeGurvk7o6em9EMieRRATXZW+ 2ZXBpMDBMs63jA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:08 2025 by rpki-client