This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json) Hash identifier: xqenycNpUdObceo55TMRalwpf3SsiyU8mZE/KnR75jw= Subject key identifier: A4:1F:8B:A4:76:13:0B:99:37:CC:4D:4A:69:B8:DC:68:38:54:1B:DD Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6 Certificate serial: 019AF3C00B6A5F1953DAEE50FE8F4C6BE659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft Manifest number: 15C6 Signing time: Sat 06 Dec 2025 13:00:40 +0000 Manifest this update: Sat 06 Dec 2025 13:00:40 +0000 Manifest next update: Sun 07 Dec 2025 13:00:40 +0000 Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: g98gTcnG4PrLWyjN8AW0x7evKwhFT8CCjoPfCe/jDs4=) 2: LP9-87x2sFdExSVGnQl66ksWebM.roa (hash: FCz58YZkBtrnj9bFMj0dGjpjaE2bGxIe0P3tBukrHxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:0b:6a:5f:19:53:da:ee:50:fe:8f:4c:6b:e6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8672105752b982174d1040c103817570b8d34d6 Validity Not Before: Dec 6 13:00:40 2025 GMT Not After : Dec 7 13:00:40 2025 GMT Subject: CN=a41f8ba476130b9937cc4d4a69b8dc6838541bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:eb:c8:d9:47:b2:ec:2e:93:9b:b0:bd:26: 69:f0:26:3a:30:c1:0d:2c:ec:27:92:24:69:5b:e9: 38:a3:97:97:91:1e:ef:a4:b7:21:7c:43:1e:ae:00: d8:a2:1c:37:2b:47:44:a6:70:18:14:3c:6d:17:63: bf:96:b7:bc:98:6b:7d:0c:4a:33:f3:00:97:92:5f: ec:33:28:ad:05:46:e5:f6:1c:7c:f8:5e:8c:18:78: 8d:11:11:5c:34:1e:83:c0:1a:b5:6d:17:64:17:c3: 98:9a:1f:5f:ec:39:09:14:a7:ea:ac:77:b7:80:6f: 54:e7:e4:49:94:e0:17:07:2d:31:89:26:b4:51:1d: 4d:0d:86:3b:fe:96:93:80:34:17:ff:57:40:88:dd: 4d:a3:23:73:43:c6:71:2d:f0:a9:7b:ec:44:01:82: ee:5b:df:70:26:ab:4f:aa:09:a4:34:44:b4:1f:cf: 6e:79:94:e8:5c:9a:34:35:a2:37:87:03:3a:6a:13: f4:33:a3:aa:b6:67:35:dd:94:6a:3c:3f:cd:77:8c: b7:8c:90:b3:11:69:18:02:47:75:9d:70:47:71:21: 64:09:18:c2:26:04:fb:68:81:09:7c:6f:fc:df:26: 2d:bf:94:7f:c7:7b:1e:9d:e1:5b:0a:5a:d5:3b:93: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1F:8B:A4:76:13:0B:99:37:CC:4D:4A:69:B8:DC:68:38:54:1B:DD X509v3 Authority Key Identifier: keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2b:d6:fb:88:c4:78:a5:b6:a6:d6:79:c4:28:0d:a0:1d:96: 23:61:ec:d6:82:09:dd:68:1b:4a:1d:62:42:56:b2:da:b0:97: 99:41:53:e2:2d:1d:f2:29:a6:77:4c:a5:fb:b3:73:aa:b5:62: e1:9f:6c:cd:b8:5d:d4:46:59:49:06:0c:bb:a5:93:4f:3d:d2: 8b:6e:9a:9a:3c:f2:a7:dd:2d:bf:04:7f:8d:80:d5:7e:81:ba: 66:98:f4:3f:d4:de:33:00:ec:6f:46:aa:09:61:62:5a:c4:37: 2e:99:13:3f:b5:d3:6c:1b:f2:a0:8c:66:62:85:0c:5e:62:ed: 15:8e:72:e3:81:b2:e0:dc:fb:fd:8b:b8:05:0e:6e:55:53:f9: 94:a6:d8:38:95:d8:53:03:d6:3a:bf:a6:f1:4a:f1:a0:72:48: 01:32:8e:52:f7:3c:68:5c:9f:d5:48:bd:78:9e:ed:91:cc:f9: ad:bf:bf:44:0f:cd:6b:15:62:ed:15:83:e9:73:77:10:2d:10: 1f:3a:6a:37:1a:a0:28:86:b7:f9:d7:2c:b1:6f:c6:61:39:64: db:07:5f:9a:02:87:34:d2:55:d8:c2:bb:72:90:80:78:d6:f2: 74:d9:38:79:20:38:48:57:b3:e2:fa:d3:5c:fe:a5:d2:8f:9e: a1:5f:d2:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAtqXxlT2u5Q/o9Ma+ZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4 ZDM0ZDYwHhcNMjUxMjA2MTMwMDQwWhcNMjUxMjA3MTMwMDQwWjAzMTEwLwYDVQQD EyhhNDFmOGJhNDc2MTMwYjk5MzdjYzRkNGE2OWI4ZGM2ODM4NTQxYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubrryNlHsuwuk5uwvSZp8CY6MMEN LOwnkiRpW+k4o5eXkR7vpLchfEMergDYohw3K0dEpnAYFDxtF2O/lre8mGt9DEoz 8wCXkl/sMyitBUbl9hx8+F6MGHiNERFcNB6DwBq1bRdkF8OYmh9f7DkJFKfqrHe3 gG9U5+RJlOAXBy0xiSa0UR1NDYY7/paTgDQX/1dAiN1NoyNzQ8ZxLfCpe+xEAYLu W99wJqtPqgmkNES0H89ueZToXJo0NaI3hwM6ahP0M6Oqtmc13ZRqPD/Nd4y3jJCz EWkYAkd1nXBHcSFkCRjCJgT7aIEJfG/83yYtv5R/x3seneFbClrVO5OzFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQfi6R2EwuZN8xNSmm43Gg4VBvdMB8GA1UdIwQY MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt MTUxOGE3MzNmOTcwLzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSvW+4jE eKW2ptZ5xCgNoB2WI2Hs1oIJ3WgbSh1iQlay2rCXmUFT4i0d8immd0yl+7NzqrVi 4Z9szbhd1EZZSQYMu6WTTz3Si26amjzyp90tvwR/jYDVfoG6Zpj0P9TeMwDsb0aq CWFiWsQ3LpkTP7XTbBvyoIxmYoUMXmLtFY5y44Gy4Nz7/Yu4BQ5uVVP5lKbYOJXY UwPWOr+m8UrxoHJIATKOUvc8aFyf1Ui9eJ7tkcz5rb+/RA/NaxVi7RWD6XN3EC0Q HzpqNxqgKIa3+dcssW/GYTlk2wdfmgKHNNJV2MK7cpCAeNbydNk4eSA4SFez4vrT XP6l0o+eoV/SRA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:00:04 2025 by rpki-client