This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json) Hash identifier: Z6k/nyISvxuz/PXNAZ8/l2H/VTy8qHZ8HfflsiZ3fgI= Subject key identifier: 04:D0:D2:2F:8B:FA:B4:81:7C:1B:FE:77:02:C4:39:B3:28:39:60:29 Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019AF0F5CB3CC02A82CADED2EBA8265C68A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft Manifest number: 03D0 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: CiKwG4nEZefBBs9Evx6NrgBFbFzC/8sKkdqOEDTnM4M=) 2: IKiKBtqV8aj5bEB_07uOzUdtWLk.roa (hash: bQ7k6i8N3tX0GvUq5MJyPUTOMxjiiyFXgrbUPEnTVIc=) 3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=) 4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cb:3c:c0:2a:82:ca:de:d2:eb:a8:26:5c:68:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=04d0d22f8bfab4817c1bfe7702c439b328396029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:90:04:84:bd:41:32:cb:20:4a:5a:70:06: 18:ec:3a:ac:10:d5:44:9f:64:45:c3:29:6d:e1:8b: e2:a1:f9:14:a5:bb:01:aa:c3:fc:2b:3f:6c:f4:48: ca:44:08:fa:77:8a:aa:8e:7d:e2:44:c7:28:05:29: 3b:1f:66:d5:81:5a:63:4d:75:9e:02:c0:37:22:ec: a6:62:26:79:c6:94:3d:fd:d6:61:a4:6e:28:94:c1: 38:23:56:8d:b1:4c:46:07:60:1b:50:28:8c:10:e6: 6c:d9:17:f0:d0:b7:24:b8:4f:a4:8b:1a:c8:89:a1: b8:08:ab:84:5c:97:01:d0:88:eb:85:41:b7:04:5d: 97:b4:86:89:89:3f:1c:d0:6b:ea:87:db:b6:94:15: 5f:21:2d:e3:6c:f8:d7:e9:d0:db:16:fa:64:23:88: 45:47:55:ee:f5:f8:b5:97:1f:a2:c4:94:40:3b:ea: 14:ee:fd:30:a7:f6:09:08:2a:d3:01:a6:7e:01:07: ef:05:2d:d8:6f:8f:40:69:bb:89:55:4f:75:bb:2f: 11:e6:d7:ac:cd:92:66:c9:82:75:3d:84:5f:fd:36: 48:a6:03:3f:98:11:e6:6a:3f:7e:8e:14:02:e4:ee: dc:83:52:01:35:e8:47:ae:e8:9c:f5:0b:2e:9e:a4: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D0:D2:2F:8B:FA:B4:81:7C:1B:FE:77:02:C4:39:B3:28:39:60:29 X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:dd:14:e9:15:85:8f:e7:02:38:55:33:31:53:b7:d9:3a:4c: 2d:9d:69:e7:d8:30:86:77:2b:50:27:43:9e:5a:4e:62:c5:1f: 68:44:06:bf:c6:e5:24:a0:c6:71:cc:d1:2c:8b:02:26:c1:e9: a1:04:e7:8c:d1:52:00:bf:ab:2e:0c:25:b6:c7:87:d2:a1:d0: 9c:bb:3e:94:38:9c:b1:09:a1:d2:46:18:f3:42:66:4b:72:9e: 4c:b1:eb:4f:37:1d:1e:b0:69:4c:fa:18:94:3d:7f:bf:cd:24: b6:c6:58:4c:e5:a9:9b:17:2a:df:94:48:ed:f4:98:1e:9c:3b: 3f:61:70:fc:74:97:02:57:a9:6e:0a:ed:e3:6d:ec:1d:83:72: 42:01:21:0b:f2:b4:77:80:1f:5a:f4:47:eb:8b:3f:29:79:05: a7:29:c6:cd:44:17:61:91:85:94:1f:65:eb:47:f4:2b:da:38: 57:4c:bc:8c:4a:99:06:80:94:c0:c1:ec:26:a5:a3:d8:db:4b: 84:24:b1:e5:8d:10:8d:c4:1b:3f:e6:5c:d4:47:7d:2f:69:ad: 78:52:58:09:5a:ca:28:00:16:4f:b9:9a:46:8c:b4:78:9b:83: e9:79:95:39:13:9f:47:93:0d:93:e7:f8:f0:d3:3a:a8:44:f8: 45:25:c5:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cs8wCqCyt7S66gmXGiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD EygwNGQwZDIyZjhiZmFiNDgxN2MxYmZlNzcwMmM0MzliMzI4Mzk2MDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7yQBIS9QTLLIEpacAYY7DqsENVE n2RFwylt4YviofkUpbsBqsP8Kz9s9EjKRAj6d4qqjn3iRMcoBSk7H2bVgVpjTXWe AsA3IuymYiZ5xpQ9/dZhpG4olME4I1aNsUxGB2AbUCiMEOZs2Rfw0LckuE+kixrI iaG4CKuEXJcB0IjrhUG3BF2XtIaJiT8c0Gvqh9u2lBVfIS3jbPjX6dDbFvpkI4hF R1Xu9fi1lx+ixJRAO+oU7v0wp/YJCCrTAaZ+AQfvBS3Yb49AabuJVU91uy8R5tes zZJmyYJ1PYRf/TZIpgM/mBHmaj9+jhQC5O7cg1IBNehHruic9QsunqTcgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATQ0i+L+rSBfBv+dwLEObMoOWApMB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArd0U6RWF j+cCOFUzMVO32TpMLZ1p59gwhncrUCdDnlpOYsUfaEQGv8blJKDGcczRLIsCJsHp oQTnjNFSAL+rLgwltseH0qHQnLs+lDicsQmh0kYY80JmS3KeTLHrTzcdHrBpTPoY lD1/v80ktsZYTOWpmxcq35RI7fSYHpw7P2Fw/HSXAlepbgrt423sHYNyQgEhC/K0 d4AfWvRH64s/KXkFpynGzUQXYZGFlB9l60f0K9o4V0y8jEqZBoCUwMHsJqWj2NtL hCSx5Y0QjcQbP+Zc1Ed9L2mteFJYCVrKKAAWT7maRoy0eJuD6XmVOROfR5MNk+f4 8NM6qET4RSXFVg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:29 2025 by rpki-client