This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json) Hash identifier: fh5l+CZjxJWpro2PXgxd3apJ4kBLjtzfzPmnZ46hBPY= Subject key identifier: E6:C7:91:0A:65:D2:21:2D:30:9E:C9:2B:DD:20:79:50:CB:DD:DD:1C Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8 Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8 Certificate serial: 019AF31C8B571EF89CB33B76D1205AD93EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft Manifest number: 0722 Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: t7GCJ/7zyVCtxjQ3uKFGQD1ZEj1KK6/VoovhSQtrJzk=) 2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8b:57:1e:f8:9c:b3:3b:76:d1:20:5a:d9:3e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8 Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=e6c7910a65d2212d309ec92bdd207950cbdddd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:72:4c:f9:dc:92:81:4a:81:0f:40:98:fa: 85:d5:c3:62:12:91:34:8f:33:7a:20:30:ca:12:f4: 88:08:06:23:7d:c0:93:39:e7:de:df:32:36:c2:bd: 0c:22:b9:1c:8b:75:85:17:49:7e:2d:b1:14:1b:b3: ad:db:21:da:9b:65:01:52:ab:04:a0:6e:f9:0d:cf: ef:7b:e4:c6:62:45:87:1b:bd:57:ca:b2:7b:44:34: e7:3c:0f:f0:d6:53:dd:2b:a1:1e:7a:61:6b:9f:be: b9:7c:5d:e3:f4:60:27:47:24:48:20:11:9c:18:33: 3d:1d:99:b8:84:44:cf:7d:4a:2f:43:fb:8e:38:c2: de:1f:f0:73:71:6c:24:5c:3d:ad:94:37:9e:69:ff: 30:2c:54:eb:4a:96:34:03:d5:00:c0:6e:6c:27:09: 8b:7e:b5:62:2c:c9:e4:e3:51:a7:df:bf:85:dd:15: 94:74:37:f8:80:50:7b:86:d5:af:f9:d8:b8:79:15: ec:e2:9a:c8:92:f9:05:be:0b:e3:42:13:67:aa:67: b7:14:14:d2:40:11:05:5e:44:fa:08:24:fc:12:63: 40:26:24:1e:4c:0b:a6:76:f8:90:3c:78:dd:a6:1b: 04:9f:bc:99:fb:42:ca:c0:93:61:54:77:f8:43:f9: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C7:91:0A:65:D2:21:2D:30:9E:C9:2B:DD:20:79:50:CB:DD:DD:1C X509v3 Authority Key Identifier: keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ed:0d:6b:df:27:5a:25:c8:9d:3a:57:cb:b8:21:85:7a:62: 04:47:e6:99:28:27:b3:ab:ea:e8:47:05:60:65:52:ba:5e:bc: 27:4c:7e:72:6b:0c:9a:28:f3:cf:09:c6:50:64:db:81:c2:2a: 94:c7:d8:2b:45:f3:75:31:27:ed:99:5b:de:ea:b1:cb:52:5a: bb:b6:2b:73:71:fd:e6:19:fa:74:c0:a4:76:ef:b1:67:6e:6d: 9f:5c:96:c0:2e:51:09:d8:e1:2f:f7:82:52:ca:36:68:6e:7e: 74:08:f3:0f:ec:b6:9e:19:0a:d7:3b:3c:eb:94:b8:0e:92:9a: 58:b0:ed:7e:19:29:35:bc:a9:f4:f6:13:ff:24:18:75:8b:46: 4e:69:2b:45:44:86:8d:b5:10:11:a9:0f:f2:06:49:96:98:f1: b9:67:80:2a:48:19:fb:8e:ee:6c:eb:71:54:84:82:7c:94:5f: 41:a6:7e:2c:61:60:42:52:a1:c7:24:7c:f5:3e:e3:7d:69:ab: 5c:c1:dc:f9:18:05:9f:93:83:c8:72:a8:c5:72:f7:43:80:d0: 2b:ca:5e:f4:2e:ce:60:b9:a9:3e:f5:72:d2:a0:69:c2:b4:38: 95:ec:3c:88:16:35:cc:78:5f:da:4f:ad:ee:55:ac:e2:db:7b: 2c:7a:b5:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHItXHvicszt20SBa2T7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNGY1NzQ2YTZkYzc0MGI2MWI5OGVmODJkYzZjMzNkZGIy MzhlZDgwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD EyhlNmM3OTEwYTY1ZDIyMTJkMzA5ZWM5MmJkZDIwNzk1MGNiZGRkZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscpyTPnckoFKgQ9AmPqF1cNiEpE0 jzN6IDDKEvSICAYjfcCTOefe3zI2wr0MIrkci3WFF0l+LbEUG7Ot2yHam2UBUqsE oG75Dc/ve+TGYkWHG71XyrJ7RDTnPA/w1lPdK6EeemFrn765fF3j9GAnRyRIIBGc GDM9HZm4hETPfUovQ/uOOMLeH/BzcWwkXD2tlDeeaf8wLFTrSpY0A9UAwG5sJwmL frViLMnk41Gn37+F3RWUdDf4gFB7htWv+di4eRXs4prIkvkFvgvjQhNnqme3FBTS QBEFXkT6CCT8EmNAJiQeTAumdviQPHjdphsEn7yZ+0LKwJNhVHf4Q/l/rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObHkQpl0iEtMJ7JK90geVDL3d0cMB8GA1UdIwQY MBaAFNpPV0am3HQLYbmO+C3Gwz3bI47YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzIt YmQ5NzFlOWM1MTk5LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9iNjdkNmMtOWI5Mi00OTk0LTg0NzItYmQ5NzFlOWM1MTk5 LzEvMms5WFJxYmNkQXRodVk3NExjYkRQZHNqanRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe0Na98n WiXInTpXy7ghhXpiBEfmmSgns6vq6EcFYGVSul68J0x+cmsMmijzzwnGUGTbgcIq lMfYK0XzdTEn7Zlb3uqxy1Jau7Yrc3H95hn6dMCkdu+xZ25tn1yWwC5RCdjhL/eC Uso2aG5+dAjzD+y2nhkK1zs865S4DpKaWLDtfhkpNbyp9PYT/yQYdYtGTmkrRUSG jbUQEakP8gZJlpjxuWeAKkgZ+47ubOtxVISCfJRfQaZ+LGFgQlKhxyR89T7jfWmr XMHc+RgFn5ODyHKoxXL3Q4DQK8pe9C7OYLmpPvVy0qBpwrQ4lew8iBY1zHhf2k+t 7lWs4tt7LHq12A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:28 2025 by rpki-client