This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json) Hash identifier: XyunlprJqoa+l2MSFVIJxSUbfWyp2cMbU9+CkHcgQsw= Subject key identifier: 2B:85:17:70:D7:A3:F4:4C:6E:E2:98:A8:91:BD:13:C3:DA:7B:9D:32 Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b Certificate serial: 019AF31D47593AC37668DA3CDA4CEEF64889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 10:02:53 +0000 Manifest this update: Sat 06 Dec 2025 10:02:53 +0000 Manifest next update: Sun 07 Dec 2025 10:02:53 +0000 Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: E7CXYdt4kciKPrduwsDXEP9agdCPWD5L/Qabmby1X00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:47:59:3a:c3:76:68:da:3c:da:4c:ee:f6:48:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b Validity Not Before: Dec 6 10:02:53 2025 GMT Not After : Dec 7 10:02:53 2025 GMT Subject: CN=2b851770d7a3f44c6ee298a891bd13c3da7b9d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:c1:4e:b4:0f:73:eb:4b:f1:f0:14:cc:2b: 9d:21:28:37:33:fa:27:a9:c8:4a:a1:bc:e5:f9:ae: 8e:1d:67:d1:3f:17:44:99:d1:77:bf:2c:d9:ea:4f: 12:7c:64:47:70:a9:c4:ca:8d:b0:62:06:35:ab:ee: d2:ba:28:25:4d:7b:9d:61:e1:e7:94:f0:af:63:c8: b7:53:f8:48:51:2d:90:53:7b:78:d6:28:03:f6:ba: 27:30:61:31:3c:12:35:e2:66:bd:ea:d5:e0:31:73: d9:d8:f3:01:f4:55:ec:d5:b6:bc:f7:5d:f5:9a:e6: 20:3f:b6:e1:9a:2e:85:80:8b:67:85:5b:ae:46:a0: 47:48:81:4c:8e:61:49:d8:93:73:ec:48:eb:5d:86: c9:c4:3f:1d:11:ea:5f:a0:43:50:05:53:21:7c:3a: fc:43:db:54:82:bd:7d:e0:c7:fa:c5:00:51:2a:85: 02:b0:e3:4c:1d:74:be:e1:1b:3c:d6:38:26:65:80: 3a:b2:c3:05:23:9b:0d:f9:aa:67:7e:69:fe:dc:01: 05:58:57:9e:84:ea:a3:4a:c9:e0:50:f1:4f:3e:36: b4:5d:db:17:b3:73:37:de:70:e0:01:9d:70:7f:45: be:bd:ba:91:a2:e0:ac:46:8a:84:16:5a:45:fe:3c: cb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:85:17:70:D7:A3:F4:4C:6E:E2:98:A8:91:BD:13:C3:DA:7B:9D:32 X509v3 Authority Key Identifier: keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:84:92:d7:f8:96:4b:11:da:eb:a8:8e:3e:eb:50:6d:21:8e: ff:50:8c:8c:c5:ec:c5:32:1d:ce:38:cb:a4:da:06:b5:1d:4f: f3:64:64:17:be:50:c5:8a:26:e8:ce:23:c2:47:9c:52:e7:d9: 43:98:45:9e:13:8d:b5:ab:73:e2:6d:3d:ee:48:1a:62:6f:d3: 42:2a:17:89:d0:24:d3:99:47:99:f1:9c:d0:81:8d:7a:c4:6e: e9:5a:e1:9c:ad:64:20:a5:b1:52:e9:95:eb:3e:b2:d2:72:1b: 56:0f:17:08:a8:a9:21:13:d6:02:5d:72:69:8b:2b:43:e2:ea: 23:05:a3:eb:81:1b:68:cd:ee:f4:85:d4:f7:43:52:0c:66:09: 49:c3:db:4d:25:e0:a0:1f:c6:03:12:e9:8f:6c:dc:b2:22:d2: 61:a8:02:75:41:65:20:bc:35:eb:db:85:32:8a:73:33:19:72: 64:6a:7d:83:d7:87:c7:f7:40:88:00:42:cd:54:82:56:4f:d0: 23:e8:d7:21:d1:36:3f:cd:e8:3b:40:e0:51:d7:5d:5e:73:50: 16:cb:7f:15:33:57:fb:95:72:ee:e0:a2:67:92:20:03:57:4d: 7c:2d:c4:ac:42:f9:50:be:42:f6:3d:82:9a:d9:1a:3d:5e:bb: 86:69:74:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUdZOsN2aNo82kzu9kiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzA0MmViMGM0OGVjYjM3MTllNWMwZWUyZTE5Yzc0ZTI4 ODBmM2IwHhcNMjUxMjA2MTAwMjUzWhcNMjUxMjA3MTAwMjUzWjAzMTEwLwYDVQQD EygyYjg1MTc3MGQ3YTNmNDRjNmVlMjk4YTg5MWJkMTNjM2RhN2I5ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwvBTrQPc+tL8fAUzCudISg3M/on qchKobzl+a6OHWfRPxdEmdF3vyzZ6k8SfGRHcKnEyo2wYgY1q+7SuiglTXudYeHn lPCvY8i3U/hIUS2QU3t41igD9ronMGExPBI14ma96tXgMXPZ2PMB9FXs1ba89131 muYgP7bhmi6FgItnhVuuRqBHSIFMjmFJ2JNz7EjrXYbJxD8dEepfoENQBVMhfDr8 Q9tUgr194Mf6xQBRKoUCsONMHXS+4Rs81jgmZYA6ssMFI5sN+apnfmn+3AEFWFee hOqjSsngUPFPPja0XdsXs3M33nDgAZ1wf0W+vbqRouCsRoqEFlpF/jzLPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuFF3DXo/RMbuKYqJG9E8Pae50yMB8GA1UdIwQY MBaAFNpwQusMSOyzcZ5cDuLhnHTiiA87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMt NTAxZjc3YjQyZTlhLzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMtNTAxZjc3YjQyZTlh LzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKISS1/iW SxHa66iOPutQbSGO/1CMjMXsxTIdzjjLpNoGtR1P82RkF75QxYom6M4jwkecUufZ Q5hFnhONtatz4m097kgaYm/TQioXidAk05lHmfGc0IGNesRu6VrhnK1kIKWxUumV 6z6y0nIbVg8XCKipIRPWAl1yaYsrQ+LqIwWj64EbaM3u9IXU90NSDGYJScPbTSXg oB/GAxLpj2zcsiLSYagCdUFlILw169uFMopzMxlyZGp9g9eHx/dAiABCzVSCVk/Q I+jXIdE2P83oO0DgUdddXnNQFst/FTNX+5Vy7uCiZ5IgA1dNfC3ErEL5UL5C9j2C mtkaPV67hml0Zg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:22 2025 by rpki-client