This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json) Hash identifier: ErEtTLGDBVdKm//OmYfy28e6lYePaCfj9p7JU4meLAQ= Subject key identifier: EA:D3:40:0A:D0:E0:DD:1A:D3:8F:50:9A:C5:92:57:2A:15:0E:9E:B5 Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67 Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167 Certificate serial: 019AF12D045326F1442716D687E2D7ACE6D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft Manifest number: 0787 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: WN5vOPILPGtN5x/HXA3aocnqSUeJ5ggDol3cX2IDGSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:04:53:26:f1:44:27:16:d6:87:e2:d7:ac:e6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167 Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=ead3400ad0e0dd1ad38f509ac592572a150e9eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:73:f0:cb:b6:22:4b:b7:38:b4:b4:39:15:33: 6d:da:0d:ac:1d:2f:e7:b9:db:16:5b:1b:18:c6:d7: c0:51:4f:5f:8c:7b:99:3f:c8:b8:a9:0f:29:f3:a7: 60:3b:15:7d:de:d6:ca:a2:9e:1d:e9:46:dd:0f:89: f6:46:d2:51:63:70:48:84:f1:c0:a7:5c:f7:27:3b: ef:8d:90:ae:7f:68:1e:c3:09:bd:55:b8:bc:06:45: 74:13:2e:cf:59:d8:fe:7e:5f:c7:63:22:25:89:ee: a5:63:dc:a2:5d:6e:64:8d:d4:51:e4:09:c3:59:ac: 4a:f7:f0:a3:95:fd:13:77:fa:8a:7d:79:d8:df:7b: 12:8f:d7:1e:d3:ff:97:e0:5b:48:1d:a8:f6:0e:34: 27:df:25:c1:9a:19:f8:a6:73:74:e0:f9:59:c6:90: 68:2e:3c:76:fb:b3:34:26:f6:9f:34:34:ac:56:c5: 9e:43:ce:fb:93:7d:ca:05:a4:ba:bb:33:59:c7:1f: 00:68:29:5c:7d:34:79:25:3b:7b:1a:cd:63:05:1b: 3e:68:99:50:33:94:f5:ff:e1:ac:48:c7:f5:7f:8a: bf:b0:16:f7:34:5c:ca:47:88:df:64:69:d4:b6:b7: e7:b0:db:b8:01:9f:2c:1b:71:41:a5:69:43:4b:65: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D3:40:0A:D0:E0:DD:1A:D3:8F:50:9A:C5:92:57:2A:15:0E:9E:B5 X509v3 Authority Key Identifier: keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:64:fc:77:3d:b7:a3:ff:50:31:98:cf:90:76:53:ca:9c:6a: 51:45:30:6a:70:60:78:3c:b3:38:06:1e:b9:01:61:17:b0:aa: 36:f7:04:06:bb:55:f1:09:8f:3b:76:4e:b3:a8:18:6c:e8:b7: 56:4b:26:18:7a:5c:fe:9f:69:07:32:dd:19:78:fa:be:f8:90: 63:04:1f:b7:98:41:5a:10:01:df:2a:30:e3:0a:ee:73:32:09: cd:75:4c:c8:df:f7:df:fb:f2:a0:7b:20:eb:24:6a:d4:6b:d9: 2e:fd:be:8c:a0:78:4c:91:45:ea:2d:18:ba:bb:78:34:9f:bc: f8:d4:11:c0:01:62:1e:f0:99:44:d5:e2:fb:af:f0:93:f4:44: bd:50:e1:96:5c:5d:bd:a6:1c:26:b6:d1:10:4b:8c:3b:65:90: a3:64:50:6d:3a:ea:50:0e:20:f4:6f:f6:fc:6a:1b:93:f2:43: 43:77:f9:45:b2:17:03:34:b7:d0:74:7b:84:92:75:19:44:f2: 8d:6a:4f:01:07:68:e7:55:64:02:20:99:18:ec:04:df:b3:41: a3:17:38:eb:8e:83:f3:c3:c8:44:3e:63:ce:fa:af:46:37:9f: e2:cc:b7:2a:e4:38:89:b0:78:a1:98:2d:ee:b6:4f:17:e6:2b: 9d:0a:c4:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQRTJvFEJxbWh+LXrObUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj ZmIxNjcwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EyhlYWQzNDAwYWQwZTBkZDFhZDM4ZjUwOWFjNTkyNTcyYTE1MGU5ZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nPwy7YiS7c4tLQ5FTNt2g2sHS/n udsWWxsYxtfAUU9fjHuZP8i4qQ8p86dgOxV93tbKop4d6UbdD4n2RtJRY3BIhPHA p1z3JzvvjZCuf2gewwm9Vbi8BkV0Ey7PWdj+fl/HYyIlie6lY9yiXW5kjdRR5AnD WaxK9/Cjlf0Td/qKfXnY33sSj9ce0/+X4FtIHaj2DjQn3yXBmhn4pnN04PlZxpBo Ljx2+7M0JvafNDSsVsWeQ877k33KBaS6uzNZxx8AaClcfTR5JTt7Gs1jBRs+aJlQ M5T1/+GsSMf1f4q/sBb3NFzKR4jfZGnUtrfnsNu4AZ8sG3FBpWlDS2UxPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrTQArQ4N0a049QmsWSVyoVDp61MB8GA1UdIwQY MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt ZjhmZGYwNDNmYTQ3LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3 LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWT8dz23 o/9QMZjPkHZTypxqUUUwanBgeDyzOAYeuQFhF7CqNvcEBrtV8QmPO3ZOs6gYbOi3 VksmGHpc/p9pBzLdGXj6vviQYwQft5hBWhAB3yow4wruczIJzXVMyN/33/vyoHsg 6yRq1GvZLv2+jKB4TJFF6i0Yurt4NJ+8+NQRwAFiHvCZRNXi+6/wk/REvVDhllxd vaYcJrbREEuMO2WQo2RQbTrqUA4g9G/2/Gobk/JDQ3f5RbIXAzS30HR7hJJ1GUTy jWpPAQdo51VkAiCZGOwE37NBoxc4646D88PIRD5jzvqvRjef4sy3KuQ4ibB4oZgt 7rZPF+YrnQrE+A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:10 2025 by rpki-client