This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json) Hash identifier: KXg0qVPMDcOQFarh3Ajj7a8VVTkPGE4VV4KGxbkU1vM= Subject key identifier: 3E:9D:7D:7B:D7:EE:A1:25:AE:F5:4D:B2:3F:3B:A0:2E:00:30:A1:B6 Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9 Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9 Certificate serial: 019AF2090575469BAFFB2172DD0165AD4C44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: 48jqhMIx7dTEAopw2oRAEgPERH84wlmu5dbQWdSfEuI=) 2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:05:75:46:9b:af:fb:21:72:dd:01:65:ad:4c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9 Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=3e9d7d7bd7eea125aef54db23f3ba02e0030a1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:0d:96:1d:b8:01:62:73:eb:9a:68:9b:9c: 49:ce:6a:38:af:15:11:86:3f:2e:ca:10:75:88:32: b1:da:4b:94:74:b6:d2:71:3c:1c:e1:b9:de:d1:90: ad:f3:9a:90:df:61:2a:37:cf:88:5b:65:ca:f4:a0: 6f:45:68:99:45:eb:6c:c0:09:92:13:47:da:6b:e4: 75:86:22:b3:c0:c7:2a:f7:bb:e3:88:c0:84:5b:f7: fa:52:85:71:86:f0:b9:8d:34:08:9e:70:38:df:3a: 6a:11:91:ac:68:67:a6:bf:0d:f7:ba:19:e8:c2:c2: 50:33:a5:42:9c:55:47:f9:f8:38:6a:09:98:ae:df: 14:10:79:3c:4a:8f:5b:5b:29:99:8b:cc:6c:50:f1: 7e:1a:dc:c1:3a:84:cd:96:5a:35:ca:de:a9:a8:0b: dd:9f:48:4b:b7:04:7f:e0:d5:13:27:88:12:b4:69: 96:6b:8e:40:28:55:58:d3:fc:47:aa:d3:1d:39:c9: 41:48:0c:f8:b1:aa:b5:74:b1:29:e3:46:19:8f:94: 30:a5:b8:97:74:38:07:b3:a9:d6:7a:8e:1b:5e:5e: be:e9:a4:d3:a9:76:a5:05:5c:28:00:5a:71:69:ad: 99:17:0a:1c:02:3c:eb:00:32:ce:ea:56:05:63:71: 0b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9D:7D:7B:D7:EE:A1:25:AE:F5:4D:B2:3F:3B:A0:2E:00:30:A1:B6 X509v3 Authority Key Identifier: keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0f:a6:6e:b2:c7:c9:95:cf:a5:62:11:2b:ca:68:4c:a3:f4: fc:d5:0f:5d:ec:f1:1f:4a:fa:84:87:aa:bd:cc:02:97:c0:d6: 72:93:aa:57:d1:f8:58:7c:69:a8:1a:6f:cd:78:b4:8c:3a:68: 15:3c:dc:29:16:6c:a8:d2:3b:57:bb:f5:f4:86:0c:b4:27:99: cb:16:10:85:9a:c1:c3:3d:b7:ae:b6:1b:b2:c7:f7:9e:fb:9d: 5c:74:34:98:c7:2f:30:23:de:68:61:c2:14:29:83:98:f0:88: 5b:2b:d1:ae:96:41:82:68:dd:03:01:47:e1:41:69:08:6c:5e: 3b:cd:37:7a:d1:e8:ac:cc:a9:bf:bf:ba:76:2d:ba:ad:1f:e6: 4e:0b:b1:8f:25:ae:f8:b3:ae:73:bd:0e:fd:21:2e:50:59:bb: 52:ef:50:de:87:71:6d:43:24:57:21:b7:97:5d:6e:ff:d8:72: 86:63:4d:1f:51:68:b6:8c:ff:c4:47:62:23:2b:87:e7:ec:9d: c1:af:69:cb:e3:e5:21:38:2e:1b:77:ff:15:05:52:bc:c7:ee: 08:0d:1f:70:92:ab:36:39:f2:bc:00:c3:04:16:76:9a:ea:a6: 0e:5d:c9:e6:2a:f9:95:df:e7:19:11:00:74:1e:a0:56:4f:2d: 26:52:e3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQV1Rpuv+yFy3QFlrUxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjVkMDNmYzE4ZjJmNDJjZGE1MDM4NjlkZTE5NGZkOGNj MjFhYTkwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EygzZTlkN2Q3YmQ3ZWVhMTI1YWVmNTRkYjIzZjNiYTAyZTAwMzBhMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BANlh24AWJz65pom5xJzmo4rxUR hj8uyhB1iDKx2kuUdLbScTwc4bne0ZCt85qQ32EqN8+IW2XK9KBvRWiZRetswAmS E0faa+R1hiKzwMcq97vjiMCEW/f6UoVxhvC5jTQInnA43zpqEZGsaGemvw33uhno wsJQM6VCnFVH+fg4agmYrt8UEHk8So9bWymZi8xsUPF+GtzBOoTNllo1yt6pqAvd n0hLtwR/4NUTJ4gStGmWa45AKFVY0/xHqtMdOclBSAz4saq1dLEp40YZj5QwpbiX dDgHs6nWeo4bXl6+6aTTqXalBVwoAFpxaa2ZFwocAjzrADLO6lYFY3ELeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6dfXvX7qElrvVNsj87oC4AMKG2MB8GA1UdIwQY MBaAFNsl0D/Bjy9CzaUDhp3hlP2MwhqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81YzIyYzYtN2RjMy00YzhjLTgyYWMt OTM2MTc1YWQyZWIwLzEvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81YzIyYzYtN2RjMy00YzhjLTgyYWMtOTM2MTc1YWQyZWIw LzEvMnlYUVA4R1BMMExOcFFPR25lR1VfWXpDR3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcw+mbrLH yZXPpWIRK8poTKP0/NUPXezxH0r6hIeqvcwCl8DWcpOqV9H4WHxpqBpvzXi0jDpo FTzcKRZsqNI7V7v19IYMtCeZyxYQhZrBwz23rrYbssf3nvudXHQ0mMcvMCPeaGHC FCmDmPCIWyvRrpZBgmjdAwFH4UFpCGxeO803etHorMypv7+6di26rR/mTguxjyWu +LOuc70O/SEuUFm7Uu9Q3odxbUMkVyG3l11u/9hyhmNNH1Fotoz/xEdiIyuH5+yd wa9py+PlITguG3f/FQVSvMfuCA0fcJKrNjnyvADDBBZ2muqmDl3J5ir5ld/nGREA dB6gVk8tJlLj5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:20 2025 by rpki-client