This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft File: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json) Hash identifier: 6dzfwvIZ6tiQ5Fnz7qBvAQFGlD3XiXdRBHbezcEzGw8= Subject key identifier: A2:66:BB:AE:6B:52:B5:64:43:C2:FF:0E:8A:DF:16:48:BF:FA:5F:2F Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38 Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738 Certificate serial: 019AF19A900766CCF2CEBB6B4212252B4505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:29 +0000 Manifest this update: Sat 06 Dec 2025 03:00:29 +0000 Manifest next update: Sun 07 Dec 2025 03:00:29 +0000 Files and hashes: 1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: 75wiPo4kRVLLzdlGLbuTnUFzvzv+pv6y+dfcvHAWtMM=) 2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=) 3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=) 4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:90:07:66:cc:f2:ce:bb:6b:42:12:25:2b:45:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738 Validity Not Before: Dec 6 03:00:29 2025 GMT Not After : Dec 7 03:00:29 2025 GMT Subject: CN=a266bbae6b52b56443c2ff0e8adf1648bffa5f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:08:b5:79:52:c2:a5:f2:3d:a9:f5:55:ee: 47:f4:94:66:d0:f5:e1:f1:af:58:cf:8b:9b:63:05: dd:7a:6a:4c:a4:0b:6b:84:81:e3:86:34:7a:44:8a: ca:9a:b2:64:fc:a5:81:bd:ed:33:20:d0:dd:f5:af: f8:f9:a7:d1:3d:e2:bf:83:0f:7c:57:e5:e4:2c:42: da:cb:af:43:28:40:a9:cd:d1:8e:54:5d:c4:9b:7a: 6e:22:0b:8f:12:20:b5:36:56:05:5e:21:bd:c1:15: 2f:5d:af:8c:66:28:35:65:45:52:da:c0:a0:e8:71: 54:70:48:8f:28:0b:7e:e1:a9:ab:da:74:34:04:5d: 83:9f:b4:ea:c5:56:a5:df:18:f8:cf:30:91:07:48: 1c:91:35:80:96:7f:dd:d1:59:53:45:be:07:1d:80: 6b:2b:bf:d7:67:b6:5c:b3:76:d6:1d:d5:47:55:17: c6:74:f9:cb:43:c7:e9:60:cf:7f:08:3f:86:68:33: 38:c4:41:47:39:7d:44:6b:8e:6b:85:7f:96:9d:be: 34:5c:b2:f2:fe:9c:1d:f8:33:52:14:71:0a:47:2f: 75:86:a8:6e:c9:c6:66:91:f6:20:b8:76:03:1a:20: 76:0f:bf:5e:93:04:ab:f3:30:56:6f:4b:03:db:7e: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:66:BB:AE:6B:52:B5:64:43:C2:FF:0E:8A:DF:16:48:BF:FA:5F:2F X509v3 Authority Key Identifier: keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cc:22:92:70:20:e8:a2:6d:2d:01:f6:d5:dd:e6:d8:33:15: 1a:6e:71:c3:52:e1:08:5a:f7:49:f5:62:c2:29:af:9f:c8:79: d0:77:4c:d3:d5:0f:e5:69:a0:4d:fe:5e:2b:b5:13:50:1e:a1: 40:41:c9:d6:66:58:f0:93:43:bc:7f:a4:42:06:b4:16:ac:0b: e3:28:3d:b2:86:67:b7:a8:e2:ed:a4:70:22:8e:51:f4:d2:1e: 0a:e1:45:b4:19:65:81:1d:7d:e6:b5:07:a8:08:2b:3c:cf:4c: 0f:bf:b4:9c:ee:b7:64:5d:df:85:4b:07:48:6c:b7:be:c7:6b: d3:7c:66:26:83:66:81:b7:c4:7f:9c:33:43:a8:cd:f3:35:cc: c3:16:4d:74:2a:d6:25:f6:d8:aa:c5:a8:3b:32:e1:f6:07:85: 25:2d:bb:27:92:c7:44:0e:12:a0:c1:4c:a9:68:3d:3b:30:2a: ff:44:24:80:af:6a:10:a1:fc:96:5d:8c:87:68:a9:6f:db:e1: bf:9e:7b:37:ef:fc:07:d2:56:7d:8e:aa:9a:ae:14:57:93:73: 0d:a1:bf:3e:b1:f7:7f:0d:d5:1a:d7:b9:84:ee:67:06:b0:b0: a0:c0:f1:c1:c8:80:69:b4:a7:74:39:cb:85:3e:38:df:81:21: 35:22:28:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpAHZszyzrtrQhIlK0UFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDAzMThmMjY4NWUzMmQyZGJhOTIzZjY2NjI3NzE0Mjcz NTk3MzgwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD EyhhMjY2YmJhZTZiNTJiNTY0NDNjMmZmMGU4YWRmMTY0OGJmZmE1ZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQgItXlSwqXyPan1Ve5H9JRm0PXh 8a9Yz4ubYwXdempMpAtrhIHjhjR6RIrKmrJk/KWBve0zINDd9a/4+afRPeK/gw98 V+XkLELay69DKECpzdGOVF3Em3puIguPEiC1NlYFXiG9wRUvXa+MZig1ZUVS2sCg 6HFUcEiPKAt+4amr2nQ0BF2Dn7TqxVal3xj4zzCRB0gckTWAln/d0VlTRb4HHYBr K7/XZ7Zcs3bWHdVHVRfGdPnLQ8fpYM9/CD+GaDM4xEFHOX1Ea45rhX+Wnb40XLLy /pwd+DNSFHEKRy91hqhuycZmkfYguHYDGiB2D79ekwSr8zBWb0sD234C1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJmu65rUrVkQ8L/DorfFki/+l8vMB8GA1UdIwQY MBaAFNnQMY8mheMtLbqSP2ZidxQnNZc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEt OTZkZGQ1YTAyMzlkLzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84Y2U2MDktZGIxZC00OTk3LTlkOGEtOTZkZGQ1YTAyMzlk LzEvMmRBeGp5YUY0eTB0dXBJX1ptSjNGQ2MxbHpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8wiknAg 6KJtLQH21d3m2DMVGm5xw1LhCFr3SfViwimvn8h50HdM09UP5WmgTf5eK7UTUB6h QEHJ1mZY8JNDvH+kQga0FqwL4yg9soZnt6ji7aRwIo5R9NIeCuFFtBllgR195rUH qAgrPM9MD7+0nO63ZF3fhUsHSGy3vsdr03xmJoNmgbfEf5wzQ6jN8zXMwxZNdCrW JfbYqsWoOzLh9geFJS27J5LHRA4SoMFMqWg9OzAq/0QkgK9qEKH8ll2Mh2ipb9vh v557N+/8B9JWfY6qmq4UV5NzDaG/PrH3fw3VGte5hO5nBrCwoMDxwciAabSndDnL hT4434EhNSIoqA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:13 2025 by rpki-client