This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json) Hash identifier: /OUyEgmbCUfsjvshsz+Q0BecMTB+ujiq0O2bthh5Iyg= Subject key identifier: 12:CE:F4:CD:0A:A5:B2:76:FF:C3:6A:B2:C9:B2:8D:8B:FF:2B:80:BC Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37 Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337 Certificate serial: 019AF12E2BCAD6E006C19BE865FBAAFBE197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft Manifest number: 13C8 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: gtpBz/BS1sgySKhWG151D40T8Ai026cjBabc22St6sk=) 2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2b:ca:d6:e0:06:c1:9b:e8:65:fb:aa:fb:e1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=12cef4cd0aa5b276ffc36ab2c9b28d8bff2b80bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:80:ff:b2:ce:af:2d:8c:ba:98:67:b7:ae: 83:eb:f3:71:4a:ad:aa:8a:71:2a:4c:32:0e:63:a0: d1:57:28:25:49:ef:c8:14:62:dc:96:b7:5f:33:f7: 2c:ee:87:dc:cb:05:40:13:e0:92:4c:01:bd:2c:fe: 1e:75:b0:0e:09:ec:59:db:72:8d:64:a9:43:c6:6c: c8:79:82:95:bf:8d:85:46:a8:1a:55:07:a1:09:9a: 1e:e2:1e:5a:31:b0:93:9f:ac:79:37:d0:15:cb:84: 8b:d3:da:fb:fa:ca:66:b8:6d:d9:08:32:2c:47:95: f9:c0:a5:3d:fd:71:41:e9:38:99:ed:6f:e6:47:26: 61:1a:84:7b:22:90:12:e1:86:70:3e:45:99:b2:96: 1d:6e:89:45:d1:83:93:f3:c5:ab:95:99:66:9c:1e: 94:70:af:95:f4:f3:5e:07:e9:56:8c:4e:1d:a1:0b: 7f:03:4b:d3:2c:c4:1d:b2:02:9b:74:07:32:e6:68: 18:59:7f:20:63:59:e3:81:95:29:8e:57:2c:74:e4: 09:90:5b:80:2b:78:aa:4c:31:73:35:19:e3:22:50: e9:33:ef:64:84:12:4b:a4:bb:dc:d8:c6:1d:44:f2: df:6d:f9:91:6b:76:87:ac:a7:bd:21:47:a6:82:7a: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CE:F4:CD:0A:A5:B2:76:FF:C3:6A:B2:C9:B2:8D:8B:FF:2B:80:BC X509v3 Authority Key Identifier: keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9d:86:e8:97:3c:56:9d:97:b4:54:64:0d:2c:f1:3d:9c:0b: cd:81:c9:f3:ab:b2:ed:1b:90:fb:4a:1d:2a:77:b7:78:93:de: 70:3f:21:ee:f3:86:7a:d7:ae:1e:6c:14:f0:ed:0c:8b:35:65: 1c:60:0b:46:91:0d:3c:c6:dd:22:de:44:1b:a1:79:86:0b:ad: af:ca:bd:1c:b5:4e:62:3f:53:50:10:b9:44:6f:5e:98:32:2f: db:45:7a:1a:14:7a:b7:aa:6c:13:0f:0c:16:e5:b6:6d:a2:73: 2b:78:b8:7d:d7:90:ba:5f:8b:67:50:0e:2f:e4:a7:e1:7b:65: 96:97:e6:0a:bc:07:53:b1:df:d0:ba:b3:1c:6a:ed:3c:7c:f6: f0:ae:62:5d:1a:4b:ed:be:f8:31:16:43:39:85:a1:8a:3c:c3: 17:57:29:ea:ea:a0:a3:23:e2:19:56:42:63:13:b0:f2:0f:57: b0:1f:23:46:9e:e7:22:3c:6e:6c:fe:9c:51:47:8e:50:19:ac: f0:be:ee:c9:c8:8f:5b:42:a4:8e:cd:4a:4f:48:b4:eb:28:62: e6:04:a2:b5:41:7c:18:b8:b9:12:3d:f2:65:8e:58:96:3b:76: c6:42:2b:9d:36:42:c9:73:07:e2:0d:6c:c2:b2:9d:3a:ee:7c: 6b:4e:60:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLivK1uAGwZvoZfuq++GXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZGRkMWI2MzZmZTNkZjFkZjNkODExZjY0NDU4MzMxMmE2 NTEzMzcwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EygxMmNlZjRjZDBhYTViMjc2ZmZjMzZhYjJjOWIyOGQ4YmZmMmI4MGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSGA/7LOry2Muphnt66D6/NxSq2q inEqTDIOY6DRVyglSe/IFGLclrdfM/cs7ofcywVAE+CSTAG9LP4edbAOCexZ23KN ZKlDxmzIeYKVv42FRqgaVQehCZoe4h5aMbCTn6x5N9AVy4SL09r7+spmuG3ZCDIs R5X5wKU9/XFB6TiZ7W/mRyZhGoR7IpAS4YZwPkWZspYdbolF0YOT88WrlZlmnB6U cK+V9PNeB+lWjE4doQt/A0vTLMQdsgKbdAcy5mgYWX8gY1njgZUpjlcsdOQJkFuA K3iqTDFzNRnjIlDpM+9khBJLpLvc2MYdRPLfbfmRa3aHrKe9IUemgnpJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLO9M0KpbJ2/8NqssmyjYv/K4C8MB8GA1UdIwQY MBaAFNrd0bY2/j3x3z2BH2RFgzEqZRM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUt NjMyY2U2N2MwODVhLzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80NjQzZDctMzdkNy00YjNjLWExYTUtNjMyY2U2N2MwODVh LzEvMnQzUnRqYi1QZkhmUFlFZlpFV0RNU3BsRXpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp2G6Jc8 Vp2XtFRkDSzxPZwLzYHJ86uy7RuQ+0odKne3eJPecD8h7vOGeteuHmwU8O0MizVl HGALRpENPMbdIt5EG6F5hgutr8q9HLVOYj9TUBC5RG9emDIv20V6GhR6t6psEw8M FuW2baJzK3i4fdeQul+LZ1AOL+Sn4XtllpfmCrwHU7Hf0LqzHGrtPHz28K5iXRpL 7b74MRZDOYWhijzDF1cp6uqgoyPiGVZCYxOw8g9XsB8jRp7nIjxubP6cUUeOUBms 8L7uyciPW0Kkjs1KT0i06yhi5gSitUF8GLi5Ej3yZY5Yljt2xkIrnTZCyXMH4g1s wrKdOu58a05g8A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:32 2025 by rpki-client