This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json) Hash identifier: okjpmukRqwNd57LsbqgVMhpUUsL1xR0ffs8NE5mTQn4= Subject key identifier: 8D:35:6A:A0:F6:B9:C5:80:3F:43:D9:A7:86:D1:21:F5:27:4F:7C:BA Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Certificate serial: 019B2B8A38B2C23AF267EA305642C6AB7A08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft Manifest number: 03DA Signing time: Wed 17 Dec 2025 09:00:37 +0000 Manifest this update: Wed 17 Dec 2025 09:00:37 +0000 Manifest next update: Thu 18 Dec 2025 09:00:37 +0000 Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: gGEZcGmEmsZcy2adErhSTxwEGSD25bLDN14SJGJvk4c=) 2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:38:b2:c2:3a:f2:67:ea:30:56:42:c6:ab:7a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Validity Not Before: Dec 17 09:00:37 2025 GMT Not After : Dec 18 09:00:37 2025 GMT Subject: CN=8d356aa0f6b9c5803f43d9a786d121f5274f7cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:27:4c:3f:94:f5:c9:86:1e:c3:b0:e2:a2: 76:1e:2a:d1:24:d1:72:fd:ad:d9:07:24:83:c3:5f: 2d:c9:57:03:e4:19:d3:d9:e8:70:7e:2d:11:32:a8: 24:27:4d:fe:eb:36:d5:d1:3f:fb:a9:6e:06:e8:ad: fb:de:a8:1f:d0:ea:d3:fb:e4:a0:63:5c:71:05:b0: 67:30:ce:e3:03:4f:3a:fc:60:82:2a:fe:af:4c:ba: a3:6e:96:09:4c:dd:37:3a:30:7f:08:9c:e1:10:8a: 85:35:ba:02:26:bf:e8:b2:83:82:52:7e:12:8a:b1: 9a:c7:a3:93:1b:dc:39:97:ae:0c:c8:2f:0f:ac:42: 13:47:20:17:bb:d0:a1:45:4a:2b:aa:4a:10:bb:b4: f9:52:3c:f7:93:db:ec:93:77:c4:97:4b:7a:c1:b3: 71:7b:fb:82:7a:14:4b:7c:c5:dc:76:83:d9:25:b2: d0:4e:be:78:aa:9e:93:45:dc:2a:e3:8c:ac:6f:6f: fd:96:46:9e:eb:d0:31:58:21:3e:f1:cf:46:24:b1: b8:c7:34:11:9d:75:3b:36:2f:69:88:27:83:4f:75: 72:c8:ec:9d:47:eb:12:aa:a3:b4:9f:0a:3d:4b:9e: ae:d7:22:ae:8e:6a:65:5b:25:56:86:28:68:e6:ea: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:35:6A:A0:F6:B9:C5:80:3F:43:D9:A7:86:D1:21:F5:27:4F:7C:BA X509v3 Authority Key Identifier: keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:8f:28:65:fd:50:56:db:18:2f:56:ce:2f:d7:f3:ba:23: 55:c1:9f:05:ed:49:88:e6:f1:37:40:80:75:52:9a:33:1c:c4: 54:30:d3:5d:55:9f:4e:64:ab:e6:97:2a:2b:ee:06:77:6a:13: 8d:a3:34:7c:b7:2e:12:d0:02:5d:15:01:be:7e:5a:7b:a2:ea: c1:cd:a4:89:b7:7e:92:18:cf:7b:8b:15:d5:c0:75:79:2b:45: 01:19:05:f2:3c:f3:0d:63:dd:dd:23:f2:ef:9f:7f:87:ae:d4: 2e:6f:23:81:0a:91:8e:86:a6:62:fc:ab:f2:2e:5e:d6:ad:0c: df:e0:35:e0:5d:d3:76:0f:4d:50:5b:dc:88:99:d2:9f:51:f9: e7:65:5c:17:8a:2e:e2:6b:af:e0:90:7f:59:8f:ff:74:3d:e1: f8:f3:d5:0c:fc:7c:c9:f2:64:2f:b6:d3:7d:09:f5:02:f9:c2: 61:34:cf:a0:af:5f:40:26:74:bb:1e:8e:48:cb:fb:b6:da:89: d8:30:45:3e:37:ca:ec:12:09:e2:55:7e:60:05:40:34:54:96: 6a:e7:a3:28:fa:bc:a8:31:a6:b3:17:68:9c:87:f2:be:26:28: 51:12:7d:52:29:29:f6:07:55:c6:f3:98:a2:ea:d7:14:b4:c0: f6:e0:36:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrijiywjryZ+owVkLGq3oIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWUyZGU1NGRhMjhjNzNmMTliM2UwNGVmOTU3NGU5OTA1 N2YxYTIwHhcNMjUxMjE3MDkwMDM3WhcNMjUxMjE4MDkwMDM3WjAzMTEwLwYDVQQD Eyg4ZDM1NmFhMGY2YjljNTgwM2Y0M2Q5YTc4NmQxMjFmNTI3NGY3Y2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj0nTD+U9cmGHsOw4qJ2HirRJNFy /a3ZBySDw18tyVcD5BnT2ehwfi0RMqgkJ03+6zbV0T/7qW4G6K373qgf0OrT++Sg Y1xxBbBnMM7jA086/GCCKv6vTLqjbpYJTN03OjB/CJzhEIqFNboCJr/osoOCUn4S irGax6OTG9w5l64MyC8PrEITRyAXu9ChRUorqkoQu7T5Ujz3k9vsk3fEl0t6wbNx e/uCehRLfMXcdoPZJbLQTr54qp6TRdwq44ysb2/9lkae69AxWCE+8c9GJLG4xzQR nXU7Ni9piCeDT3VyyOydR+sSqqO0nwo9S56u1yKujmplWyVWhiho5uq88QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI01aqD2ucWAP0PZp4bRIfUnT3y6MB8GA1UdIwQY MBaAFNquLeVNooxz8Zs+BO+VdOmQV/GiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMt NjAwOGU2MGNkMzBiLzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMtNjAwOGU2MGNkMzBi LzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmCPKGX9 UFbbGC9Wzi/X87ojVcGfBe1JiObxN0CAdVKaMxzEVDDTXVWfTmSr5pcqK+4Gd2oT jaM0fLcuEtACXRUBvn5ae6Lqwc2kibd+khjPe4sV1cB1eStFARkF8jzzDWPd3SPy 759/h67ULm8jgQqRjoamYvyr8i5e1q0M3+A14F3Tdg9NUFvciJnSn1H552VcF4ou 4muv4JB/WY//dD3h+PPVDPx8yfJkL7bTfQn1AvnCYTTPoK9fQCZ0ux6OSMv7ttqJ 2DBFPjfK7BIJ4lV+YAVANFSWauejKPq8qDGmsxdonIfyviYoURJ9Uikp9gdVxvOY ourXFLTA9uA22g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:35:09 2025 by rpki-client