This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json) Hash identifier: KMEh80MS2988LHDTWlPKVFshR/q/Tow1ZDJhFGCD+uQ= Subject key identifier: F0:8D:CD:4D:DC:90:A5:79:6A:16:E2:E0:DA:B7:1D:B3:AD:2B:FE:93 Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91 Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591 Certificate serial: 019AF2772EE818EFBB45B56BB7105C1F18B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: KkiPUTqu2r8J3ASJt7hNeF6Uug0ntrF4BvrbbvfVwiw=) 2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2e:e8:18:ef:bb:45:b5:6b:b7:10:5c:1f:18:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=f08dcd4ddc90a5796a16e2e0dab71db3ad2bfe93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d8:6e:b7:68:7a:e5:c1:49:57:e3:f7:48:e9: 96:37:61:d1:72:d7:9a:36:15:e9:24:d7:a5:4a:57: d4:13:d3:bc:51:47:64:99:5a:19:55:22:c7:b5:30: 83:0f:23:f9:3a:e6:4f:9c:b0:d8:d0:ef:c6:34:2b: a1:83:0e:e6:2b:17:4f:ef:79:ca:2e:36:45:38:13: 1a:cc:31:e8:2f:2c:e6:14:da:db:e7:d7:63:32:6c: 2b:2e:0b:78:e9:44:0b:0a:36:d1:b5:5d:07:43:74: 82:dc:4e:13:6f:3f:eb:7d:f1:e5:9d:d2:12:11:c1: 49:7f:94:75:76:24:f8:3a:bc:5a:d1:ea:7d:6b:4b: f8:c3:fd:03:2a:85:0b:44:47:e5:12:d3:c0:71:b3: 24:0b:a7:02:7b:39:e1:46:62:ad:af:d6:1d:73:f0: 05:a7:c0:f0:03:48:aa:a8:d4:9c:ba:a4:14:38:cc: cc:e9:65:e9:d6:24:f1:04:39:1a:95:e6:71:72:4c: aa:f2:f7:80:80:6e:a8:7a:0d:25:81:6e:8f:a5:35: 3e:66:16:60:5d:f5:70:df:8c:01:a9:3b:45:a9:e0: 3f:b2:c3:a3:66:34:77:10:44:72:2f:b2:50:4a:09: 3c:80:2e:25:cb:55:08:8b:37:7c:4c:08:3e:aa:4d: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8D:CD:4D:DC:90:A5:79:6A:16:E2:E0:DA:B7:1D:B3:AD:2B:FE:93 X509v3 Authority Key Identifier: keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2f:f2:df:9a:dc:78:08:c3:6e:0c:56:e3:7c:36:77:50:a8: c0:f9:d2:17:14:d8:e7:2a:2f:a1:12:e4:31:73:14:57:91:93: 31:ce:da:c4:7e:5a:62:39:0f:e5:d8:ce:1e:6e:43:b3:4e:92: 32:a9:03:d2:53:a0:0b:33:20:dc:b6:17:5e:a2:6f:62:c9:52: 76:7f:65:b0:2a:ff:1d:e1:fd:8e:01:85:35:8b:b2:ec:64:a4: 89:19:d3:7c:be:83:95:3b:c4:2c:54:6b:2e:76:42:de:92:82: 01:ac:29:69:a6:5d:89:e8:b4:8c:9f:c9:da:cd:b9:f5:de:78: 7a:88:84:de:1b:54:b3:89:d8:27:57:f0:40:2f:c4:07:29:c1: d4:4a:99:2f:e7:4a:c7:1f:2a:7f:47:b2:92:19:01:85:44:e3: 61:ec:80:a3:c3:e9:b9:f3:28:33:c5:a1:0f:dc:92:9f:12:5b: 19:31:08:c9:e9:b3:97:18:ed:1b:24:42:8b:ab:d2:ab:3f:04: 4a:c6:72:ef:5f:d2:ce:24:71:ca:66:a4:ab:98:f5:89:32:f9: dc:65:23:9e:36:3c:7f:4b:ff:c0:93:d6:ba:d8:16:af:8c:3c: 66:02:32:98:a6:e2:a6:f7:21:8b:50:f8:7b:e5:75:4a:6c:8d: d3:48:fa:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy7oGO+7RbVrtxBcHxi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWNmMzRiZTJiMDRjN2NjZWYyMjIxZThkMWZjYjZjYWJi NDE1OTEwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EyhmMDhkY2Q0ZGRjOTBhNTc5NmExNmUyZTBkYWI3MWRiM2FkMmJmZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hut2h65cFJV+P3SOmWN2HRctea NhXpJNelSlfUE9O8UUdkmVoZVSLHtTCDDyP5OuZPnLDY0O/GNCuhgw7mKxdP73nK LjZFOBMazDHoLyzmFNrb59djMmwrLgt46UQLCjbRtV0HQ3SC3E4Tbz/rffHlndIS EcFJf5R1diT4Orxa0ep9a0v4w/0DKoULREflEtPAcbMkC6cCeznhRmKtr9Ydc/AF p8DwA0iqqNScuqQUOMzM6WXp1iTxBDkaleZxckyq8veAgG6oeg0lgW6PpTU+ZhZg XfVw34wBqTtFqeA/ssOjZjR3EERyL7JQSgk8gC4ly1UIizd8TAg+qk03TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCNzU3ckKV5ahbi4Nq3HbOtK/6TMB8GA1UdIwQY MBaAFNis80visEx8zvIiHo0fy2yrtBWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjct NDRkNjRiOWRhNDU5LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjctNDRkNjRiOWRhNDU5 LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmy/y35rc eAjDbgxW43w2d1CowPnSFxTY5yovoRLkMXMUV5GTMc7axH5aYjkP5djOHm5Ds06S MqkD0lOgCzMg3LYXXqJvYslSdn9lsCr/HeH9jgGFNYuy7GSkiRnTfL6DlTvELFRr LnZC3pKCAawpaaZdiei0jJ/J2s259d54eoiE3htUs4nYJ1fwQC/EBynB1EqZL+dK xx8qf0eykhkBhUTjYeyAo8PpufMoM8WhD9ySnxJbGTEIyemzlxjtGyRCi6vSqz8E SsZy71/SziRxymakq5j1iTL53GUjnjY8f0v/wJPWutgWr4w8ZgIymKbipvchi1D4 e+V1SmyN00j6Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:35 2025 by rpki-client