This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json) Hash identifier: SvvcLnRpzt5kjwFr6xnudiQvk4HIZC8UkclqIkOgyDE= Subject key identifier: AF:F6:DB:4E:57:2C:3C:9F:47:77:E1:58:3D:92:42:45:D2:E6:04:FB Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773 Certificate serial: 019B2B8B3BA5E52B6431FF3E6C7D22C2921E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft Manifest number: 081A Signing time: Wed 17 Dec 2025 09:01:43 +0000 Manifest this update: Wed 17 Dec 2025 09:01:43 +0000 Manifest next update: Thu 18 Dec 2025 09:01:43 +0000 Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: STgo1JrX8GAK0C/j0QUCI/J2I6qitF+bG48U2B3Xhww=) 2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:3b:a5:e5:2b:64:31:ff:3e:6c:7d:22:c2:92:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773 Validity Not Before: Dec 17 09:01:43 2025 GMT Not After : Dec 18 09:01:43 2025 GMT Subject: CN=aff6db4e572c3c9f4777e1583d924245d2e604fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:9e:81:b6:f0:7d:5f:64:1d:81:6e:eb:66: 1e:a6:60:2c:b4:34:6c:dd:09:b9:bf:95:46:bf:52: 67:ea:c2:0c:b0:4d:1d:43:44:9c:0d:86:66:38:6f: ed:b5:14:57:b4:45:d4:32:d2:50:96:e0:24:ca:9e: 4a:3c:8e:64:c4:4f:df:84:1d:cb:c3:7e:b4:30:f3: e3:eb:5e:24:b2:dd:10:06:9e:4c:61:1d:da:b5:e6: 8f:7c:79:c8:a5:b0:0a:82:af:4c:4a:81:35:8e:48: 4d:d9:ce:09:99:f0:9e:12:4a:0d:9b:0b:57:6e:4d: ea:d7:a5:11:a8:c6:2c:da:01:a2:2c:4f:b9:98:45: cf:5e:cb:f5:72:9a:6d:96:7a:6a:2f:78:ae:ab:28: df:8c:99:7e:cd:ec:af:14:2c:7c:a2:77:38:ff:99: fc:6c:b3:5f:66:2f:9f:91:db:33:96:83:e4:ae:43: 2c:b1:8a:44:cb:a7:52:cd:51:0b:ba:a6:8c:a1:e0: db:dd:99:3b:53:19:dd:01:4e:26:4e:03:41:de:d2: f2:02:8b:a2:5c:01:d9:25:db:0c:0e:6b:d6:fb:fb: 65:a4:90:9d:60:b1:1d:50:0d:a9:b1:9b:ea:42:68: 6b:8b:72:d8:95:67:cf:2e:3c:51:60:70:24:cf:eb: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F6:DB:4E:57:2C:3C:9F:47:77:E1:58:3D:92:42:45:D2:E6:04:FB X509v3 Authority Key Identifier: keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:f8:03:3e:ae:43:6e:00:e3:ce:86:65:5e:2b:f3:fb:fb: 18:74:da:e1:fc:c4:cc:9a:4c:5d:5c:7b:d6:90:f5:e7:f4:f2: 87:8d:45:aa:05:0b:96:18:11:89:69:92:5f:be:77:1b:af:08: 4d:4c:a6:5c:14:e8:c1:44:c3:1b:62:c5:f5:61:54:3d:bb:76: 8f:59:15:28:37:8b:33:d1:c8:e6:f9:97:17:1e:79:2a:01:67: 1d:a6:d3:48:c1:8e:ec:54:45:cb:01:03:56:f5:91:fa:ae:33: 0c:10:7d:45:50:94:ca:36:8f:52:50:79:4a:47:0f:50:08:ce: 23:9c:3f:51:41:19:8a:6a:f5:2c:3a:c9:ff:b2:ac:91:23:84: ba:ea:59:1d:61:54:1a:7c:f6:54:87:6c:8b:7e:a4:0d:12:54: 4b:e3:b1:61:cc:79:b9:38:ca:ff:00:f7:5f:92:57:f6:3e:84: b4:27:27:89:7a:15:fe:3b:92:ef:b6:59:8f:be:bb:6d:c5:e0: d5:62:52:cd:0e:e4:73:09:77:76:90:6e:11:ab:9a:e1:37:19: c5:6e:9a:c9:1a:97:63:d8:92:8d:e8:77:a7:00:55:91:f6:71: fe:10:08:52:3a:35:aa:aa:3d:5f:20:7b:13:e5:a2:b2:22:7f: 3a:4b:5e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrizul5StkMf8+bH0iwpIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0 Mzk3NzMwHhcNMjUxMjE3MDkwMTQzWhcNMjUxMjE4MDkwMTQzWjAzMTEwLwYDVQQD EyhhZmY2ZGI0ZTU3MmMzYzlmNDc3N2UxNTgzZDkyNDI0NWQyZTYwNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0megbbwfV9kHYFu62YepmAstDRs 3Qm5v5VGv1Jn6sIMsE0dQ0ScDYZmOG/ttRRXtEXUMtJQluAkyp5KPI5kxE/fhB3L w360MPPj614kst0QBp5MYR3ateaPfHnIpbAKgq9MSoE1jkhN2c4JmfCeEkoNmwtX bk3q16URqMYs2gGiLE+5mEXPXsv1cpptlnpqL3iuqyjfjJl+zeyvFCx8onc4/5n8 bLNfZi+fkdszloPkrkMssYpEy6dSzVELuqaMoeDb3Zk7UxndAU4mTgNB3tLyAoui XAHZJdsMDmvW+/tlpJCdYLEdUA2psZvqQmhri3LYlWfPLjxRYHAkz+sT9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/2205XLDyfR3fhWD2SQkXS5gT7MB8GA1UdIwQY MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct OGI4NWIyOGZiYjc5LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5 LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuf4Az6u Q24A486GZV4r8/v7GHTa4fzEzJpMXVx71pD15/Tyh41FqgULlhgRiWmSX753G68I TUymXBTowUTDG2LF9WFUPbt2j1kVKDeLM9HI5vmXFx55KgFnHabTSMGO7FRFywED VvWR+q4zDBB9RVCUyjaPUlB5SkcPUAjOI5w/UUEZimr1LDrJ/7KskSOEuupZHWFU Gnz2VIdsi36kDRJUS+OxYcx5uTjK/wD3X5JX9j6EtCcniXoV/juS77ZZj767bcXg 1WJSzQ7kcwl3dpBuEaua4TcZxW6ayRqXY9iSjeh3pwBVkfZx/hAIUjo1qqo9XyB7 E+WisiJ/Okte3g== -----END CERTIFICATE-----Generated at Wed Dec 17 17:07:51 2025 by rpki-client