This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json) Hash identifier: e6fVedKfUKAPn4iPVh1zWKfdtScawMqy8Eyib6sj84s= Subject key identifier: 00:96:5E:C8:B5:83:F2:C9:BB:2A:A8:EF:D5:78:EA:C3:7B:9B:58:EF Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Certificate serial: 019AF19B525BC0CC8657F0B07334CE0A414D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft Manifest number: 03BC Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: fGNMsEXzLq8CTrUV/qBGp70nKeDnyr8xIpS3owfd8i4=) 2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:52:5b:c0:cc:86:57:f0:b0:73:34:ce:0a:41:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=00965ec8b583f2c9bb2aa8efd578eac37b9b58ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:ce:fd:c4:53:a4:60:3d:a0:a8:a0:67:0a: 46:7b:98:f6:76:75:09:9e:77:15:03:28:98:0e:31: e7:68:e6:f5:0b:29:28:6f:ec:41:4b:b2:bc:d5:8a: 79:b2:0e:bd:3f:ae:90:6b:d7:c8:2e:79:33:67:25: ea:86:9c:63:36:df:35:07:ee:2b:1e:7f:96:6a:0a: ae:05:e4:d6:08:40:ae:a5:89:ff:e7:6c:5b:e5:d5: 9c:06:f3:02:f2:6c:f4:3b:15:71:be:81:39:b6:21: ab:4c:cc:4a:02:68:3d:34:46:7d:56:45:e6:a7:fb: 78:be:ad:00:2b:a8:50:75:fe:d9:4f:63:9e:64:4a: 9d:50:d9:cf:a3:b7:72:3e:bf:a4:2c:d7:91:7c:e4: a1:6b:d7:36:e5:8c:4e:50:0e:8d:e8:74:01:9b:8c: 30:0e:a5:68:62:c2:10:5f:d8:d6:4d:bc:35:2f:e8: 32:1d:3a:d6:1d:d9:03:f2:32:53:6c:1b:f5:20:e2: d9:b6:a6:d9:85:04:bc:e0:f3:42:23:19:77:14:0d: aa:d8:a5:a6:83:1a:67:3e:bb:01:96:a3:9e:6f:ec: f4:fa:10:d5:fc:47:e7:61:4e:6d:b7:1d:62:98:4d: a2:db:b8:7e:db:31:a6:27:5a:73:1c:16:97:12:94: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:96:5E:C8:B5:83:F2:C9:BB:2A:A8:EF:D5:78:EA:C3:7B:9B:58:EF X509v3 Authority Key Identifier: keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:30:16:22:86:bb:31:95:b9:61:48:31:f9:ff:f2:05:3f:c6: d4:98:23:ac:47:90:24:3e:44:d2:9e:8c:c7:44:3b:28:ce:f3: 7d:57:b7:3d:86:3b:de:fd:f0:6f:52:6a:64:1c:45:5d:5c:10: c4:8b:98:22:7c:fc:d2:e4:1b:c9:ba:a5:a7:7b:43:be:60:08: 93:d0:a4:d5:1c:36:57:40:7b:32:fb:bb:56:53:1d:98:80:61: 0a:39:14:b9:ef:32:fa:c0:ab:01:ea:30:c9:57:f7:0d:e9:d0: b7:18:dc:1f:47:ea:97:64:a9:9e:d0:e9:92:a9:b2:0d:a7:d5: d9:f2:f9:b2:05:e9:3b:60:4d:77:67:8f:11:d1:d1:6f:2a:d2: 4e:cb:14:45:44:38:50:d8:5f:39:71:9a:b4:3d:55:08:8f:8c: 4d:aa:b5:a2:ac:b4:45:60:c9:9e:f4:7b:9a:79:8d:ef:53:ca: e1:45:d6:d1:63:ba:63:b4:a9:a8:17:ba:43:ae:c4:9a:b5:a0: 20:ae:cf:84:94:13:65:c0:b9:8c:c3:2c:5a:5a:c3:f9:c4:19: 62:71:6b:0e:08:a2:bd:36:48:ef:5b:c1:55:67:11:54:e2:5b: 6d:51:f8:b9:3b:cf:5d:9b:fa:ea:4d:dc:21:57:7f:5b:c9:86: eb:f8:c7:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1JbwMyGV/CwczTOCkFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWUyZGU1NGRhMjhjNzNmMTliM2UwNGVmOTU3NGU5OTA1 N2YxYTIwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EygwMDk2NWVjOGI1ODNmMmM5YmIyYWE4ZWZkNTc4ZWFjMzdiOWI1OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB3O/cRTpGA9oKigZwpGe5j2dnUJ nncVAyiYDjHnaOb1Cykob+xBS7K81Yp5sg69P66Qa9fILnkzZyXqhpxjNt81B+4r Hn+WagquBeTWCECupYn/52xb5dWcBvMC8mz0OxVxvoE5tiGrTMxKAmg9NEZ9VkXm p/t4vq0AK6hQdf7ZT2OeZEqdUNnPo7dyPr+kLNeRfOSha9c25YxOUA6N6HQBm4ww DqVoYsIQX9jWTbw1L+gyHTrWHdkD8jJTbBv1IOLZtqbZhQS84PNCIxl3FA2q2KWm gxpnPrsBlqOeb+z0+hDV/EfnYU5ttx1imE2i27h+2zGmJ1pzHBaXEpQIbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACWXsi1g/LJuyqo79V46sN7m1jvMB8GA1UdIwQY MBaAFNquLeVNooxz8Zs+BO+VdOmQV/GiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMt NjAwOGU2MGNkMzBiLzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMtNjAwOGU2MGNkMzBi LzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDAWIoa7 MZW5YUgx+f/yBT/G1JgjrEeQJD5E0p6Mx0Q7KM7zfVe3PYY73v3wb1JqZBxFXVwQ xIuYInz80uQbybqlp3tDvmAIk9Ck1Rw2V0B7Mvu7VlMdmIBhCjkUue8y+sCrAeow yVf3DenQtxjcH0fql2SpntDpkqmyDafV2fL5sgXpO2BNd2ePEdHRbyrSTssURUQ4 UNhfOXGatD1VCI+MTaq1oqy0RWDJnvR7mnmN71PK4UXW0WO6Y7SpqBe6Q67EmrWg IK7PhJQTZcC5jMMsWlrD+cQZYnFrDgiivTZI71vBVWcRVOJbbVH4uTvPXZv66k3c IVd/W8mG6/jHGA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:57 2025 by rpki-client