This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json) Hash identifier: X2ZyPkdqK8mr3kVcL9lZ4a7Zt0Dn+Vm3Qz8nKTqcISo= Subject key identifier: 2A:1B:DF:A1:DF:0A:EA:40:DB:98:48:A6:0E:5E:72:D4:1A:A9:D3:75 Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Certificate serial: 019AF27662DB042E60B35B06613846E3DCC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: zeAnx3fg5vfq9O2LRcUjmjvCAjNo/ZEV05rqLhSUdvg=) 2: I3BClUbx_tYnuY_rgQtQWY87dYI.roa (hash: hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:62:db:04:2e:60:b3:5b:06:61:38:46:e3:dc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=2a1bdfa1df0aea40db9848a60e5e72d41aa9d375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:5e:50:d2:91:10:57:e1:ea:38:f3:5d:0d: ea:79:1c:49:c7:9a:3c:d3:f0:e6:9f:65:36:ea:15: 03:e2:ad:bf:27:af:ab:00:35:1e:5c:44:b9:ff:9b: 97:04:ce:f5:cf:3e:4b:26:0f:e8:6b:2e:15:30:5f: 0a:02:04:d7:e3:ed:af:cb:14:d8:ad:42:c3:ae:14: d3:b4:63:02:48:8a:0f:e6:3b:a7:1b:12:be:4c:e4: 77:fd:98:63:3e:ff:a4:b9:c4:9a:35:08:2b:e9:fe: f5:fb:54:a5:da:0d:67:da:9d:82:5f:5a:34:3f:d7: da:32:3b:7e:fc:47:86:f9:3c:56:16:b6:69:f8:0d: 43:25:41:45:2f:e7:34:df:68:50:34:a9:71:0e:e7: 6a:3a:95:8b:9b:0f:00:70:bb:15:27:1a:2a:f1:cc: f7:6e:9f:96:1e:0c:fc:78:36:b9:22:c1:32:09:d4: 9f:16:04:71:c3:94:a8:9b:a8:11:13:e1:fb:bb:54: fc:34:89:76:39:e8:1f:bc:49:ac:65:63:3b:00:ab: 29:4a:1d:1e:7e:fc:65:a9:45:d3:82:ee:86:8c:c0: a8:e8:f9:f8:bf:9d:d9:45:33:63:89:c6:37:a0:2f: c0:a8:97:21:ad:22:f1:5b:fd:6e:39:a4:09:1c:81: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1B:DF:A1:DF:0A:EA:40:DB:98:48:A6:0E:5E:72:D4:1A:A9:D3:75 X509v3 Authority Key Identifier: keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ef:00:60:0a:25:89:91:2c:ec:07:c9:81:ab:ac:90:a1:f9: db:57:af:9d:6c:77:c5:c2:6b:98:a0:d1:46:d1:97:59:02:09: 89:87:8a:98:a0:cd:75:1d:53:25:d4:1f:38:25:9b:c6:8e:4f: c8:b5:b3:f8:30:87:3f:3c:2c:d4:36:d5:84:6e:eb:4d:08:c0: 10:0c:46:d9:32:21:e9:93:f7:83:d2:f7:0b:7e:c4:13:02:1f: 4d:9d:e2:d0:9b:e4:08:62:2e:a4:95:39:52:63:af:e2:8f:4b: 1b:15:75:09:0e:3c:60:55:59:90:4a:6b:48:57:8a:d5:88:6e: 17:29:51:34:58:39:4e:6a:2c:9b:69:f4:f5:68:c9:55:f4:39: f2:38:82:07:e1:9e:2b:90:89:56:fd:07:3b:9f:01:58:9d:95: 16:89:de:0e:f3:71:d5:0a:13:eb:11:59:b1:8c:c0:bd:dd:3c: cc:8a:21:b0:95:3f:81:49:d6:96:a1:a3:68:f1:37:94:ae:29: 38:f6:9b:cc:87:9d:6e:38:69:04:5b:bb:04:01:61:7b:f7:08: ac:47:ba:9b:be:96:f3:f7:f8:2f:ea:38:13:cf:75:a2:19:80: 80:9e:bd:d6:35:ef:21:9b:e8:45:3f:54:78:c3:9c:d2:35:cf: 09:1e:92:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmLbBC5gs1sGYThG49zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OWI2YTEwOTdiMWYyNTFmOTVjNTZkYTRlNGFhMzExYjk0 NzBiZmYwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EygyYTFiZGZhMWRmMGFlYTQwZGI5ODQ4YTYwZTVlNzJkNDFhYTlkMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosVeUNKREFfh6jjzXQ3qeRxJx5o8 0/Dmn2U26hUD4q2/J6+rADUeXES5/5uXBM71zz5LJg/oay4VMF8KAgTX4+2vyxTY rULDrhTTtGMCSIoP5junGxK+TOR3/ZhjPv+kucSaNQgr6f71+1Sl2g1n2p2CX1o0 P9faMjt+/EeG+TxWFrZp+A1DJUFFL+c032hQNKlxDudqOpWLmw8AcLsVJxoq8cz3 bp+WHgz8eDa5IsEyCdSfFgRxw5Som6gRE+H7u1T8NIl2OegfvEmsZWM7AKspSh0e fvxlqUXTgu6GjMCo6Pn4v53ZRTNjicY3oC/AqJchrSLxW/1uOaQJHIH9qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCob36HfCupA25hIpg5ectQaqdN1MB8GA1UdIwQY MBaAFNibahCXsfJR+VxW2k5KoxG5Rwv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODIt ZDZkMzQyMmJhZWM4LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8yMThkY2ItZDA5Ny00MWZkLThmODItZDZkMzQyMmJhZWM4 LzEvMkp0cUVKZXg4bEg1WEZiYVRrcWpFYmxIQ184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVe8AYAol iZEs7AfJgauskKH521evnWx3xcJrmKDRRtGXWQIJiYeKmKDNdR1TJdQfOCWbxo5P yLWz+DCHPzws1DbVhG7rTQjAEAxG2TIh6ZP3g9L3C37EEwIfTZ3i0JvkCGIupJU5 UmOv4o9LGxV1CQ48YFVZkEprSFeK1YhuFylRNFg5Tmosm2n09WjJVfQ58jiCB+Ge K5CJVv0HO58BWJ2VFoneDvNx1QoT6xFZsYzAvd08zIohsJU/gUnWlqGjaPE3lK4p OPabzIedbjhpBFu7BAFhe/cIrEe6m76W8/f4L+o4E891ohmAgJ691jXvIZvoRT9U eMOc0jXPCR6SCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:57 2025 by rpki-client