This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json) Hash identifier: iY7kxdquo4CAbwkh29H4OFkl3OXpjzX5wdWOljaSx3s= Subject key identifier: 18:66:D4:31:86:D5:F0:61:76:59:07:61:4D:7E:2C:2E:B6:5E:72:D8 Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Certificate serial: 019AF3526DEBDC0DA009773CEBEA58BA7409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft Manifest number: 0D3B Signing time: Sat 06 Dec 2025 11:00:56 +0000 Manifest this update: Sat 06 Dec 2025 11:00:56 +0000 Manifest next update: Sun 07 Dec 2025 11:00:56 +0000 Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: 27NE9KG5ROk+KI4B35cz5MmmpAu5RQ+Uoafjqus34Jc=) 2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=) 3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6d:eb:dc:0d:a0:09:77:3c:eb:ea:58:ba:74:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Validity Not Before: Dec 6 11:00:56 2025 GMT Not After : Dec 7 11:00:56 2025 GMT Subject: CN=1866d43186d5f061765907614d7e2c2eb65e72d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:f7:b1:81:20:45:bc:73:d9:e9:17:24:b1: d3:fa:c0:57:15:db:5d:bf:ff:e5:cd:b7:7d:e5:59: a1:d3:13:d7:95:94:70:4d:06:b2:f5:8a:aa:d2:22: c6:67:3f:ab:93:c4:b6:51:5a:0b:5f:83:d3:56:e4: 52:31:c2:85:b2:26:78:17:a2:e7:c7:3b:b7:c7:f6: 5a:97:2f:f6:62:0b:13:52:0b:40:58:87:c3:20:90: 88:b6:fc:ce:11:85:45:0c:1b:67:dc:1b:6b:23:66: fd:de:10:d3:34:a3:1d:ad:fb:68:2e:e1:87:6b:90: 67:96:5b:0c:24:fa:45:45:6a:27:ff:7d:7b:aa:5e: c9:88:62:c0:24:65:32:7e:b1:0d:0c:dc:18:fb:e5: cc:cf:b9:38:1a:ac:6c:7a:71:6b:12:3a:22:07:f5: 08:22:3b:5e:34:b5:32:aa:de:77:b5:23:46:3e:89: 8e:44:c1:9b:2a:8c:ba:bf:c6:7a:cb:8f:47:27:79: 52:62:fc:95:08:0f:a9:d3:93:3d:1d:a8:4e:f9:9e: 04:3f:2a:91:3c:70:2a:d9:38:d5:21:e0:05:ca:41: d4:46:cb:e0:f3:3f:7d:cf:3d:5e:47:cc:ec:c5:43: 38:e3:71:5a:f4:a2:26:f0:8b:87:b6:32:e9:ae:94: 54:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:D4:31:86:D5:F0:61:76:59:07:61:4D:7E:2C:2E:B6:5E:72:D8 X509v3 Authority Key Identifier: keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b9:ad:31:12:d4:9a:f0:9e:2b:64:88:06:e8:84:02:f4:20: 7d:09:61:3a:28:c0:63:7b:69:f6:68:f0:ee:6d:30:e2:2c:fd: 69:aa:22:8b:d8:34:b9:32:47:33:87:fd:a7:81:5e:83:01:2a: 32:14:c1:1e:13:19:2e:0a:31:81:99:7b:13:a6:4e:cb:20:c6: 03:40:0e:e1:33:74:00:a6:c8:91:6d:57:82:94:ba:22:80:f1: 79:17:45:96:5f:ac:ac:02:be:2e:a8:9d:c2:aa:2f:35:06:c5: 8a:7d:eb:f5:f9:2c:6b:e8:fc:b7:d2:d5:9b:fd:f9:87:d5:9a: d4:31:91:63:38:74:8a:f3:5a:1b:a0:c8:3c:71:53:04:80:89: fa:f4:e5:8e:fe:d5:ac:72:db:9e:bf:07:1f:31:e7:32:61:7f: b6:a7:71:3d:48:5a:8c:52:c7:24:cd:1f:f9:35:cf:0c:a2:d9: c9:93:39:67:d6:31:84:35:87:ac:0e:d2:cb:53:be:cc:07:a8: e6:c1:c0:44:82:82:6f:51:fd:72:9b:8a:bb:00:40:51:8a:6b: 94:e7:be:2c:ae:ab:b3:02:8f:a2:6d:e0:38:61:73:ff:af:02: 42:65:ed:0b:1f:f6:5b:07:a8:3c:36:85:dc:39:0f:7a:a3:e1: 01:f7:7a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUm3r3A2gCXc86+pYunQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzYzM2ExNGNhYzdjN2EwOTIyZmZkOTgwZGU1ZjI3OGEz YmUyNjcwHhcNMjUxMjA2MTEwMDU2WhcNMjUxMjA3MTEwMDU2WjAzMTEwLwYDVQQD EygxODY2ZDQzMTg2ZDVmMDYxNzY1OTA3NjE0ZDdlMmMyZWI2NWU3MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Gr3sYEgRbxz2ekXJLHT+sBXFdtd v//lzbd95Vmh0xPXlZRwTQay9Yqq0iLGZz+rk8S2UVoLX4PTVuRSMcKFsiZ4F6Ln xzu3x/Zaly/2YgsTUgtAWIfDIJCItvzOEYVFDBtn3BtrI2b93hDTNKMdrftoLuGH a5BnllsMJPpFRWon/317ql7JiGLAJGUyfrENDNwY++XMz7k4GqxsenFrEjoiB/UI IjteNLUyqt53tSNGPomORMGbKoy6v8Z6y49HJ3lSYvyVCA+p05M9HahO+Z4EPyqR PHAq2TjVIeAFykHURsvg8z99zz1eR8zsxUM443Fa9KIm8IuHtjLprpRUlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhm1DGG1fBhdlkHYU1+LC62XnLYMB8GA1UdIwQY MBaAFNrGM6FMrHx6CSL/2YDeXyeKO+JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt MjQ1MTVhMTRjNDU2LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2 LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbmtMRLU mvCeK2SIBuiEAvQgfQlhOijAY3tp9mjw7m0w4iz9aaoii9g0uTJHM4f9p4FegwEq MhTBHhMZLgoxgZl7E6ZOyyDGA0AO4TN0AKbIkW1XgpS6IoDxeRdFll+srAK+Lqid wqovNQbFin3r9fksa+j8t9LVm/35h9Wa1DGRYzh0ivNaG6DIPHFTBICJ+vTljv7V rHLbnr8HHzHnMmF/tqdxPUhajFLHJM0f+TXPDKLZyZM5Z9YxhDWHrA7Sy1O+zAeo 5sHARIKCb1H9cpuKuwBAUYprlOe+LK6rswKPom3gOGFz/68CQmXtCx/2WweoPDaF 3DkPeqPhAfd6lg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:18 2025 by rpki-client