This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json) Hash identifier: golUjw6WcEccUAuUdMrhogAj71WKV8v/aoNqEzzPfFc= Subject key identifier: 10:06:19:B0:74:24:4D:D9:60:EF:3C:A8:DC:6C:7E:30:0B:52:67:84 Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37 Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337 Certificate serial: 019B25532D0E63B33F9B4AEE7566052D27FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft Manifest number: 13E3 Signing time: Tue 16 Dec 2025 04:02:46 +0000 Manifest this update: Tue 16 Dec 2025 04:02:46 +0000 Manifest next update: Wed 17 Dec 2025 04:02:46 +0000 Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: xCueAg+CKsW/lP9sTBGPIlL2KE8CBN+a2cMk25XejBk=) 2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:2d:0e:63:b3:3f:9b:4a:ee:75:66:05:2d:27:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337 Validity Not Before: Dec 16 04:02:46 2025 GMT Not After : Dec 17 04:02:46 2025 GMT Subject: CN=100619b074244dd960ef3ca8dc6c7e300b526784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:13:74:ed:a5:59:81:d4:4b:9a:fe:16:58: 0a:39:cb:ac:c8:75:23:8c:fe:e2:13:05:48:3c:ad: ed:f0:e5:63:4f:30:c1:78:56:55:16:94:32:e8:98: 1a:b4:58:5e:74:6d:47:7e:77:81:e8:a7:09:5e:e1: de:4f:58:bb:fd:bd:53:07:a6:86:70:9e:a2:52:aa: 9d:f0:a5:8a:dd:7c:a6:5f:5c:a2:11:90:90:83:cb: 93:d2:d7:1b:fd:fd:4e:e7:ec:86:8c:29:60:fd:36: a1:5e:b1:09:e2:a2:57:cc:6d:15:07:d3:ac:5e:8d: 41:15:00:15:25:1e:c9:1b:3a:c5:47:1b:10:1b:1f: 88:96:33:55:f7:7b:38:d2:ef:dd:6e:8c:67:82:6a: 4c:b8:a1:ff:b5:bb:f6:2b:de:53:e0:44:24:ca:3f: b2:8d:a5:8b:66:1b:a3:3d:8b:9a:44:af:9a:b7:db: 93:eb:45:d5:0f:5a:81:5e:e4:a8:4b:a1:c8:d9:85: d8:f5:0c:76:da:c9:7f:0f:96:52:e8:94:56:d3:46: 2c:38:17:df:53:6f:b0:7c:ed:da:92:0b:44:9c:4a: e1:2d:c1:e0:93:84:89:de:6d:61:6b:de:15:b8:87: 2e:7a:21:9a:26:5a:49:44:68:bd:4c:02:d7:43:c5: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:06:19:B0:74:24:4D:D9:60:EF:3C:A8:DC:6C:7E:30:0B:52:67:84 X509v3 Authority Key Identifier: keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f7:1e:10:6c:26:70:5a:62:e5:91:6c:d2:6d:5d:d5:71:03: a3:63:97:8a:d6:70:f9:30:5e:62:08:dd:76:6a:61:d3:5b:90: 71:17:50:dd:b7:fb:61:1f:3a:e1:b0:91:c1:2f:20:d8:5e:09: 9c:23:12:2b:0f:d3:2d:09:e3:b6:3d:15:e8:62:57:93:b5:03: 26:60:fd:3c:50:47:6b:93:4a:79:eb:18:7b:44:39:21:cd:ae: e4:fe:e7:60:fa:44:2e:6c:d7:14:ab:e8:a9:68:1a:e2:62:c0: e8:07:3e:01:ed:f5:8c:fe:2f:5f:8e:7e:44:bb:ea:de:87:ef: 23:5f:04:2b:1e:86:36:e2:ae:73:aa:aa:47:c7:1c:fb:c5:b1: fd:da:4b:c8:aa:b1:67:9c:f3:8e:f5:87:a0:ca:cb:12:ef:2e: 58:0e:7f:1f:14:8a:73:aa:25:45:4b:b8:a8:bf:00:b4:c9:06: 0d:81:f4:58:a9:df:32:c1:79:73:7f:b9:85:4c:16:b0:d9:07: bb:47:2b:78:4d:a6:09:9f:3e:09:e1:1d:59:7e:16:da:de:d6: ee:1b:30:2f:b4:aa:c7:ea:aa:fb:bd:06:18:f4:5c:d2:d0:57: be:a3:9b:2f:36:a4:ed:db:01:a8:6d:05:a1:13:57:0a:71:27: 1d:e8:87:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUy0OY7M/m0rudWYFLSf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZGRkMWI2MzZmZTNkZjFkZjNkODExZjY0NDU4MzMxMmE2 NTEzMzcwHhcNMjUxMjE2MDQwMjQ2WhcNMjUxMjE3MDQwMjQ2WjAzMTEwLwYDVQQD EygxMDA2MTliMDc0MjQ0ZGQ5NjBlZjNjYThkYzZjN2UzMDBiNTI2Nzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur8TdO2lWYHUS5r+FlgKOcusyHUj jP7iEwVIPK3t8OVjTzDBeFZVFpQy6JgatFhedG1HfneB6KcJXuHeT1i7/b1TB6aG cJ6iUqqd8KWK3XymX1yiEZCQg8uT0tcb/f1O5+yGjClg/TahXrEJ4qJXzG0VB9Os Xo1BFQAVJR7JGzrFRxsQGx+IljNV93s40u/dboxngmpMuKH/tbv2K95T4EQkyj+y jaWLZhujPYuaRK+at9uT60XVD1qBXuSoS6HI2YXY9Qx22sl/D5ZS6JRW00YsOBff U2+wfO3akgtEnErhLcHgk4SJ3m1ha94VuIcueiGaJlpJRGi9TALXQ8UdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAGGbB0JE3ZYO88qNxsfjALUmeEMB8GA1UdIwQY MBaAFNrd0bY2/j3x3z2BH2RFgzEqZRM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUt NjMyY2U2N2MwODVhLzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUtNjMyY2U2N2MwODVh LzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfceEGwm cFpi5ZFs0m1d1XEDo2OXitZw+TBeYgjddmph01uQcRdQ3bf7YR864bCRwS8g2F4J nCMSKw/TLQnjtj0V6GJXk7UDJmD9PFBHa5NKeesYe0Q5Ic2u5P7nYPpELmzXFKvo qWga4mLA6Ac+Ae31jP4vX45+RLvq3ofvI18EKx6GNuKuc6qqR8cc+8Wx/dpLyKqx Z5zzjvWHoMrLEu8uWA5/HxSKc6olRUu4qL8AtMkGDYH0WKnfMsF5c3+5hUwWsNkH u0creE2mCZ8+CeEdWX4W2t7W7hswL7Sqx+qq+70GGPRc0tBXvqObLzak7dsBqG0F oRNXCnEnHeiHuw== -----END CERTIFICATE-----Generated at Tue Dec 16 10:51:30 2025 by rpki-client