This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json) Hash identifier: WCI1bNvxkJx/GO04fsxPh+ALl8CIIqlG/9w2exvlMvI= Subject key identifier: 0C:10:C1:D7:D4:16:8F:D7:60:57:92:33:DB:22:84:FC:C3:3D:1E:E2 Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Certificate serial: 019AF12F389F43DA2309B5FC3BDB8999F801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft Manifest number: 0E0C Signing time: Sat 06 Dec 2025 01:03:14 +0000 Manifest this update: Sat 06 Dec 2025 01:03:14 +0000 Manifest next update: Sun 07 Dec 2025 01:03:14 +0000 Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: erNzIiNWHW2V4JixRZPFCpwU+0LfeaoY9h5ioi9Gj2c=) 2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:38:9f:43:da:23:09:b5:fc:3b:db:89:99:f8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Validity Not Before: Dec 6 01:03:14 2025 GMT Not After : Dec 7 01:03:14 2025 GMT Subject: CN=0c10c1d7d4168fd760579233db2284fcc33d1ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:a5:40:83:f3:b5:a5:6a:5e:48:b3:b3:ed: 15:7b:38:a2:d2:e4:1e:8e:f9:06:da:94:5f:68:92: 4a:11:00:9d:97:58:46:27:55:aa:13:4d:80:8d:f7: 8d:45:9f:79:02:ad:86:b5:bd:c6:ce:ea:a7:c2:80: f7:9d:7c:28:f3:b1:f6:7d:5d:05:7c:40:7d:47:61: e8:90:c2:74:63:15:d7:05:f5:db:11:9d:7c:a0:d7: 40:43:a2:ec:78:33:0f:3e:16:81:91:0b:5e:5b:95: 9a:4b:b5:8d:69:8b:b6:fb:ed:6b:19:ea:2a:17:c7: e8:6b:31:9a:cf:77:77:89:7a:74:9e:d8:a2:2e:8b: fe:e1:98:8a:74:90:53:49:74:25:16:f1:ff:33:56: 1d:6e:47:a4:94:a4:b4:c5:ab:57:70:70:f7:a0:97: dc:b9:c3:05:ef:05:b1:76:79:c0:f1:1f:9f:4e:50: 49:10:d8:43:1b:5b:77:39:e7:e9:eb:50:d3:07:e9: 15:cf:46:60:31:ee:0e:ee:d4:ae:3a:ba:1a:9d:2b: eb:aa:ec:21:eb:25:02:8d:cc:de:68:fe:5e:92:a2: 96:be:a2:f1:10:43:7c:74:fb:dc:26:ec:f3:21:fa: b5:e9:fd:6c:db:2a:10:c6:54:a7:31:bd:f4:3c:c4: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:10:C1:D7:D4:16:8F:D7:60:57:92:33:DB:22:84:FC:C3:3D:1E:E2 X509v3 Authority Key Identifier: keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3f:18:68:88:55:9a:03:36:47:e9:f1:bc:d1:f0:70:9b:c4: ce:b9:41:39:c3:3b:b8:e1:75:d6:3f:a7:98:fd:f9:8b:76:51: 41:43:7f:6b:64:3a:16:35:43:4e:77:ea:c9:f4:46:70:17:53: b8:23:2d:aa:7b:65:c7:86:12:66:16:be:74:68:4c:60:86:fd: c8:5e:47:7e:5f:b4:85:bd:0e:52:0e:d0:12:64:ff:da:ce:ad: 5d:78:54:d2:02:fb:fb:23:23:04:5d:f0:0f:6f:16:b0:ce:5d: c0:16:91:5e:87:f9:31:28:d6:80:94:e0:ff:cc:6f:82:17:e9: 2c:04:c6:88:87:02:06:3e:fb:6d:57:74:b7:71:10:21:cf:4e: 98:78:70:0b:f5:22:c3:a4:c5:80:6a:5a:f6:b3:76:09:54:15: 30:e6:f1:4e:3a:96:3e:1a:26:5d:1d:0d:d6:02:c6:52:28:c6: e4:12:d0:fd:b6:91:62:f0:35:cd:a7:31:9f:31:61:78:ca:07: 3b:a6:99:cc:b6:9b:0e:66:8c:77:61:07:c5:a5:02:52:2c:e1: 88:95:44:22:5a:3d:e6:9f:d6:78:a4:72:f1:1e:9c:7f:ee:32: ce:cb:e2:e1:49:56:cb:0e:0d:17:f3:da:40:e7:25:22:52:98: 86:e1:5c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzifQ9ojCbX8O9uJmfgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl ZWNkOWEwHhcNMjUxMjA2MDEwMzE0WhcNMjUxMjA3MDEwMzE0WjAzMTEwLwYDVQQD EygwYzEwYzFkN2Q0MTY4ZmQ3NjA1NzkyMzNkYjIyODRmY2MzM2QxZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogelQIPztaVqXkizs+0Vezii0uQe jvkG2pRfaJJKEQCdl1hGJ1WqE02AjfeNRZ95Aq2Gtb3GzuqnwoD3nXwo87H2fV0F fEB9R2HokMJ0YxXXBfXbEZ18oNdAQ6LseDMPPhaBkQteW5WaS7WNaYu2++1rGeoq F8foazGaz3d3iXp0ntiiLov+4ZiKdJBTSXQlFvH/M1YdbkeklKS0xatXcHD3oJfc ucMF7wWxdnnA8R+fTlBJENhDG1t3Oefp61DTB+kVz0ZgMe4O7tSuOroanSvrquwh 6yUCjczeaP5ekqKWvqLxEEN8dPvcJuzzIfq16f1s2yoQxlSnMb30PMR/LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwQwdfUFo/XYFeSM9sihPzDPR7iMB8GA1UdIwQY MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj8YaIhV mgM2R+nxvNHwcJvEzrlBOcM7uOF11j+nmP35i3ZRQUN/a2Q6FjVDTnfqyfRGcBdT uCMtqntlx4YSZha+dGhMYIb9yF5Hfl+0hb0OUg7QEmT/2s6tXXhU0gL7+yMjBF3w D28WsM5dwBaRXof5MSjWgJTg/8xvghfpLATGiIcCBj77bVd0t3EQIc9OmHhwC/Ui w6TFgGpa9rN2CVQVMObxTjqWPhomXR0N1gLGUijG5BLQ/baRYvA1zacxnzFheMoH O6aZzLabDmaMd2EHxaUCUizhiJVEIlo95p/WeKRy8R6cf+4yzsvi4UlWyw4NF/Pa QOclIlKYhuFcwA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:18 2025 by rpki-client