This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json) Hash identifier: 2kYCpaYZplNFQX1G9ryABMTsVH6SzBwp4mTjwylY+h0= Subject key identifier: F9:56:C6:B6:B0:99:4E:FC:3C:31:7D:FE:B9:E2:ED:0E:EA:5A:90:E2 Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf Certificate serial: 019AF2771C4A992480046EBBF3BE6DE49AB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft Manifest number: 0A42 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: CvXA/QpDJLBWwtlW17gMNzS6N8vN2tYXohHh8RyO/TE=) 2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1c:4a:99:24:80:04:6e:bb:f3:be:6d:e4:9a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=f956c6b6b0994efc3c317dfeb9e2ed0eea5a90e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:2b:5d:28:38:18:3b:da:79:37:79:72:97: b1:f0:4f:5f:97:68:7a:0b:69:3f:c3:b6:db:6b:e5: 6d:25:b5:ce:97:7a:3f:86:60:c9:14:33:55:83:a9: 6f:45:ce:23:44:9f:b3:91:fc:b5:43:38:93:92:27: c0:94:a4:04:fa:1d:83:a7:4a:7a:5f:d5:3c:b2:26: c2:35:fa:bd:34:83:73:86:16:6e:41:ca:5c:6e:97: d3:c1:4a:85:fb:a7:f7:e5:c1:94:4f:dd:29:90:b7: 1b:26:2e:a3:c5:3e:d8:5b:92:a8:1d:60:c6:63:91: f5:9f:4f:f1:5e:34:c7:e4:69:29:d4:95:3d:e5:e3: 5b:90:1f:c6:70:24:cf:12:d0:d6:cd:1a:b3:da:5f: 32:40:85:7b:54:2a:d2:14:45:96:bc:91:c1:74:f9: 34:21:4e:93:87:70:f5:62:f3:82:3f:bd:2e:bb:76: 0a:8a:df:56:4f:f5:dd:88:93:f8:15:bd:2e:96:9c: 79:41:b5:ae:f4:29:27:5a:0d:87:6e:50:99:ae:13: 6d:69:68:68:4c:8b:87:0e:93:eb:f4:37:f0:f7:16: 74:bd:82:75:1f:04:d4:b2:e4:d3:8f:e1:91:26:d6: 1d:87:b4:7a:84:ae:f5:fe:39:4c:23:d5:ef:43:48: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:56:C6:B6:B0:99:4E:FC:3C:31:7D:FE:B9:E2:ED:0E:EA:5A:90:E2 X509v3 Authority Key Identifier: keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b8:29:08:51:b7:ec:33:27:1c:fa:fa:f9:e5:5b:dd:f3:54: f6:10:e4:58:4f:37:26:5d:25:43:e8:57:4f:85:27:be:5e:38: 6b:78:02:ef:07:cc:66:a5:39:d6:07:4d:02:b2:50:ac:48:70: b6:fc:43:15:e7:75:c8:cf:6c:28:63:76:7b:d4:9e:c9:1e:c2: 57:30:2e:00:61:08:50:f0:11:1e:83:c4:cb:f3:08:79:11:26: 74:c4:2c:53:73:ec:82:80:05:ae:e6:61:31:84:eb:c2:3a:74: 6d:57:64:0e:aa:b8:24:2a:31:a4:4a:93:81:41:ab:0c:53:d3: ed:2c:5b:32:6c:54:fa:ba:3b:ba:70:da:a6:9f:ff:67:e8:a2: a5:41:1b:8e:c3:bd:1c:15:93:8d:cc:d9:10:3d:79:df:d3:55: 4b:7e:7b:c4:c7:f8:9c:39:80:a4:a6:80:a0:17:47:44:db:5a: 67:1f:4b:b1:b7:75:9f:0d:13:05:25:7f:0c:df:50:4f:60:10: 58:b8:ec:26:43:72:aa:f3:83:f5:cd:15:d5:6c:b3:fd:2d:17: 7a:11:14:c3:74:17:d1:ea:50:7e:29:5f:3a:9f:c0:46:05:4c: 8f:96:a3:18:a5:6c:e9:ad:a0:92:df:a2:ac:f0:dd:aa:64:f0: d5:9f:5a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxxKmSSABG67875t5JqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjE1YjU3ZDMzY2IyZjM0YzE3YzBlODEwM2JiMDUxZmY4 MDFlYmYwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD EyhmOTU2YzZiNmIwOTk0ZWZjM2MzMTdkZmViOWUyZWQwZWVhNWE5MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmkrXSg4GDvaeTd5cpex8E9fl2h6 C2k/w7bba+VtJbXOl3o/hmDJFDNVg6lvRc4jRJ+zkfy1QziTkifAlKQE+h2Dp0p6 X9U8sibCNfq9NINzhhZuQcpcbpfTwUqF+6f35cGUT90pkLcbJi6jxT7YW5KoHWDG Y5H1n0/xXjTH5Gkp1JU95eNbkB/GcCTPEtDWzRqz2l8yQIV7VCrSFEWWvJHBdPk0 IU6Th3D1YvOCP70uu3YKit9WT/XdiJP4Fb0ulpx5QbWu9CknWg2HblCZrhNtaWho TIuHDpPr9Dfw9xZ0vYJ1HwTUsuTTj+GRJtYdh7R6hK71/jlMI9XvQ0jWFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlWxrawmU78PDF9/rni7Q7qWpDiMB8GA1UdIwQY MBaAFNghW1fTPLLzTBfA6BA7sFH/gB6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYt NjJkYzQ0N2ZlNDM4LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjA3YTQtNWMwMC00MTQwLTk4OTYtNjJkYzQ0N2ZlNDM4 LzEvMkNGYlY5TThzdk5NRjhEb0VEdXdVZi1BSHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbgpCFG3 7DMnHPr6+eVb3fNU9hDkWE83Jl0lQ+hXT4Unvl44a3gC7wfMZqU51gdNArJQrEhw tvxDFed1yM9sKGN2e9SeyR7CVzAuAGEIUPARHoPEy/MIeREmdMQsU3PsgoAFruZh MYTrwjp0bVdkDqq4JCoxpEqTgUGrDFPT7SxbMmxU+ro7unDapp//Z+iipUEbjsO9 HBWTjczZED1539NVS357xMf4nDmApKaAoBdHRNtaZx9Lsbd1nw0TBSV/DN9QT2AQ WLjsJkNyqvOD9c0V1Wyz/S0XehEUw3QX0epQfilfOp/ARgVMj5ajGKVs6a2gkt+i rPDdqmTw1Z9aHg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:52 2025 by rpki-client