This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json) Hash identifier: rA89LUktXCAN+aXfUiOMcQmDGzISAnpqmOxB74zVjbU= Subject key identifier: 88:89:1C:FE:C7:D5:3C:47:4A:3E:6D:88:C9:C5:90:FB:E7:20:71:D4 Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d Certificate serial: 019B30E886FD8EE0379DF368ED826348EC36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft Manifest number: 09BE Signing time: Thu 18 Dec 2025 10:01:43 +0000 Manifest this update: Thu 18 Dec 2025 10:01:43 +0000 Manifest next update: Fri 19 Dec 2025 10:01:43 +0000 Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: FrX2v9GmwNP8jZOz0VVLRV07rurUyWVA7QYFPxit9ps=) 2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:86:fd:8e:e0:37:9d:f3:68:ed:82:63:48:ec:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d Validity Not Before: Dec 18 10:01:43 2025 GMT Not After : Dec 19 10:01:43 2025 GMT Subject: CN=88891cfec7d53c474a3e6d88c9c590fbe72071d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:f1:73:a9:5b:78:85:d2:2a:2e:06:48:0e: f1:70:67:6c:db:7b:b1:6f:ab:fe:47:35:25:f6:d4: 01:48:6f:a8:81:2d:f1:81:38:25:7d:da:3d:d8:94: 19:40:68:c1:01:f3:d9:87:fa:b7:f4:3c:2c:dd:c0: 9a:bb:9d:c8:63:f5:43:5c:ee:cf:a4:f3:17:6b:0a: d8:06:e3:44:2c:6b:66:92:65:65:ee:3c:45:0f:ef: 8e:f1:7c:86:13:04:f4:2e:2e:07:5f:e7:13:d1:54: d3:99:d6:12:47:9b:3e:43:a0:cb:a7:9b:9c:18:6f: bf:61:5b:d6:41:17:33:60:99:08:90:89:a2:6f:30: 5d:f7:79:84:8d:28:54:c2:0f:ee:fc:1f:db:b6:76: ce:c5:27:36:b9:c4:07:e9:17:f3:39:19:5b:f9:0c: 9c:73:d1:e6:bf:cc:0e:2b:15:6f:b6:e9:75:1b:e8: 28:d4:c9:7f:65:b2:a2:15:d7:5e:d6:07:68:d6:af: 75:29:38:89:aa:38:c0:fb:34:e7:ca:d4:fb:26:aa: 40:6d:17:8a:32:a2:79:cc:30:90:4f:6b:50:f0:84: 89:36:be:ea:48:2d:24:ae:87:2c:0e:f6:33:9d:02: 88:a2:45:6a:10:23:9b:19:34:22:d3:b9:cc:59:43: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:89:1C:FE:C7:D5:3C:47:4A:3E:6D:88:C9:C5:90:FB:E7:20:71:D4 X509v3 Authority Key Identifier: keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0c:98:88:22:85:a1:ae:38:97:c2:f3:b9:c7:c1:d8:8e:49: db:ed:e4:cd:98:78:e0:0c:74:2c:f0:f1:88:d5:d6:db:22:a4: 5d:34:85:37:7a:f8:8b:0b:1c:91:5c:ba:50:6f:f3:2d:c8:f8: 23:b4:4e:8d:f9:6e:54:86:b1:29:a2:a5:7f:c8:4f:73:e7:94: 33:ac:1a:32:a4:1f:d5:9e:53:bd:80:cb:e0:c4:fe:cc:27:dc: 08:00:f3:1e:43:69:58:95:54:c6:b7:3d:9f:3e:6f:58:46:0b: 5c:65:01:f4:30:60:82:44:6f:c7:05:51:e5:99:3d:c0:5a:c1: 40:e3:cb:f7:39:e2:13:37:40:19:bb:b9:6c:e3:3c:36:f9:e2: 97:d4:1a:15:1d:fd:60:ba:3e:3d:d6:38:00:49:41:44:da:fc: 6f:ec:81:44:0d:3b:82:d3:c6:a6:31:aa:8e:4d:de:8b:ff:86: 84:72:49:3f:9e:8f:ed:8d:09:5c:72:42:ce:ad:87:c0:04:59: 20:17:e1:6b:59:8d:8e:bf:46:a3:ec:70:d8:82:9e:15:88:52: 5f:d4:ec:29:50:b8:d6:74:56:25:22:4f:5d:77:5c:4c:22:28: 81:24:82:9b:db:6c:d8:aa:20:a1:07:9d:42:43:87:84:fb:63: 0d:3f:09:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Ib9juA3nfNo7YJjSOw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjcwMGVlYjA1Mjc0YjMxZGMxZGFmMzBjZDdjODEzMTBh YjQ1MmQwHhcNMjUxMjE4MTAwMTQzWhcNMjUxMjE5MTAwMTQzWjAzMTEwLwYDVQQD Eyg4ODg5MWNmZWM3ZDUzYzQ3NGEzZTZkODhjOWM1OTBmYmU3MjA3MWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IXxc6lbeIXSKi4GSA7xcGds23ux b6v+RzUl9tQBSG+ogS3xgTglfdo92JQZQGjBAfPZh/q39Dws3cCau53IY/VDXO7P pPMXawrYBuNELGtmkmVl7jxFD++O8XyGEwT0Li4HX+cT0VTTmdYSR5s+Q6DLp5uc GG+/YVvWQRczYJkIkImibzBd93mEjShUwg/u/B/btnbOxSc2ucQH6RfzORlb+Qyc c9Hmv8wOKxVvtul1G+go1Ml/ZbKiFdde1gdo1q91KTiJqjjA+zTnytT7JqpAbReK MqJ5zDCQT2tQ8ISJNr7qSC0krocsDvYznQKIokVqECObGTQi07nMWUM6YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiJHP7H1TxHSj5tiMnFkPvnIHHUMB8GA1UdIwQY MBaAFNj3AO6wUnSzHcHa8wzXyBMQq0UtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMDhhM2EtZDZiOS00YTVkLTlkMzct MzcxYjkwNzQ4ODdmLzEvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iMDhhM2EtZDZiOS00YTVkLTlkMzctMzcxYjkwNzQ4ODdm LzEvMlBjQTdyQlNkTE1kd2RyekROZklFeENyUlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQyYiCKF oa44l8LzucfB2I5J2+3kzZh44Ax0LPDxiNXW2yKkXTSFN3r4iwsckVy6UG/zLcj4 I7ROjfluVIaxKaKlf8hPc+eUM6waMqQf1Z5TvYDL4MT+zCfcCADzHkNpWJVUxrc9 nz5vWEYLXGUB9DBggkRvxwVR5Zk9wFrBQOPL9zniEzdAGbu5bOM8Nvnil9QaFR39 YLo+PdY4AElBRNr8b+yBRA07gtPGpjGqjk3ei/+GhHJJP56P7Y0JXHJCzq2HwARZ IBfha1mNjr9Go+xw2IKeFYhSX9TsKVC41nRWJSJPXXdcTCIogSSCm9ts2KogoQed QkOHhPtjDT8J0Q== -----END CERTIFICATE-----Generated at Thu Dec 18 16:18:16 2025 by rpki-client