This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json) Hash identifier: t8gzETTlWdpfaRwvXoA45oH5XuYlHYhAxr7HxTFDuA4= Subject key identifier: 63:D9:7E:2A:76:E1:3C:67:11:CF:DB:A4:E0:4A:FB:23:D6:12:74:81 Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68 Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68 Certificate serial: 019AF12E321C791CB80F1D99F2A15821B692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:07 +0000 Manifest this update: Sat 06 Dec 2025 01:02:07 +0000 Manifest next update: Sun 07 Dec 2025 01:02:07 +0000 Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: gLSB6gHlKjBBMHKAXP7TzJJCCOn5ooISALuUJ7xWm+A=) 2: GOXBS-Rw3HoRkpT0tYtP2KL7EpM.roa (hash: ldPZi3nrSd+rsW5kOyvPmQNRmXMd2lIXfH1+hHWV7hQ=) 3: ZH9eOQBS3yZ2mNrRcAi8MSmUqK0.roa (hash: FuScQMcfDGwx602mjPNY0OCTclXZkY7f5k+RJSk2RAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:32:1c:79:1c:b8:0f:1d:99:f2:a1:58:21:b6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68 Validity Not Before: Dec 6 01:02:07 2025 GMT Not After : Dec 7 01:02:07 2025 GMT Subject: CN=63d97e2a76e13c6711cfdba4e04afb23d6127481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:33:27:76:06:4c:df:86:e0:e8:13:0a:0f: 7f:24:3f:08:78:ae:f9:db:38:ee:f9:44:c1:c6:44: 5f:88:bb:5c:98:60:72:0a:f4:77:57:67:c8:27:8d: 97:6d:31:76:7e:d2:e4:bc:47:6a:1f:f8:2a:1a:c9: 6e:60:5d:d1:7c:fc:2b:f8:82:a2:91:03:05:09:65: c1:7a:37:1d:d5:4f:11:d4:a9:ec:ba:97:de:32:4c: b5:ef:57:94:37:48:f3:ff:b0:5b:d0:6f:31:07:5f: db:45:bb:ed:4a:0d:38:e6:16:43:62:9f:4f:e0:4d: f4:6a:7f:df:ec:20:fe:86:e0:5e:2c:ee:d2:c1:ba: 64:15:dc:b6:3e:a2:36:20:ea:25:51:fe:1f:2e:9a: 2e:10:13:d1:f5:1e:b3:2f:4b:5f:17:92:3e:5c:2b: 6d:93:58:62:96:28:a3:49:b8:09:ec:07:c2:96:3d: f3:b3:85:92:e9:ff:81:a0:cc:44:da:8f:58:d3:c8: e1:a3:db:a5:b5:c3:ff:fc:c5:50:99:82:db:fc:ca: 0c:c0:0d:1f:85:ca:51:dc:27:c9:2b:ef:2d:3b:a0: 57:36:a8:a9:fc:c4:70:3d:7c:94:79:57:29:87:eb: 85:17:db:d5:9b:93:d4:e9:c2:e0:9b:92:34:78:d0: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D9:7E:2A:76:E1:3C:67:11:CF:DB:A4:E0:4A:FB:23:D6:12:74:81 X509v3 Authority Key Identifier: keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:61:1b:33:c5:51:a9:a4:e7:c0:17:43:ed:f4:30:1c:09:62: 9c:bd:4a:2d:2a:e6:17:11:bb:93:31:af:6d:0e:e0:1c:01:59: b9:e5:22:78:59:0b:3c:16:18:87:ed:3b:06:1a:ee:6c:3f:c2: dd:b9:96:32:15:f6:48:be:e6:9a:19:ff:08:d0:b7:52:7b:4a: 96:b6:3f:9e:fc:aa:fc:7b:d6:08:81:70:05:67:e9:9f:c9:6e: 80:99:a5:36:db:d4:41:4b:5a:8f:c8:7c:dc:7a:d8:7c:3c:22: e9:59:13:09:76:91:73:a4:ba:40:c7:7e:e0:1a:0e:f5:52:91: fc:d0:6b:3b:07:66:6b:77:2c:c0:0f:c2:8a:01:60:8a:e5:a2: 52:7a:1d:0b:32:c8:08:02:56:05:e2:a4:49:b8:e0:0a:6e:85: 41:f9:94:25:10:8f:6a:1d:fc:14:b2:e3:33:38:a0:eb:49:73: 2f:4b:c3:41:2c:90:45:64:a3:ed:9f:21:ed:72:dd:e1:ce:80: 1c:51:09:b3:a0:72:cb:ce:62:3d:f7:87:66:df:df:37:93:c2: c4:8c:7b:26:20:8d:59:6b:32:46:28:e5:2c:83:0e:d1:50:01: a5:8c:8c:e1:e4:50:5e:61:11:ba:b6:77:50:f1:34:2c:47:7c: fa:3b:7d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjIceRy4Dx2Z8qFYIbaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MjJkOGQ0NWY5ODVkYzM4OTZjOTE3NmE3ZDQ4ZDc2NThj YjRmNjgwHhcNMjUxMjA2MDEwMjA3WhcNMjUxMjA3MDEwMjA3WjAzMTEwLwYDVQQD Eyg2M2Q5N2UyYTc2ZTEzYzY3MTFjZmRiYTRlMDRhZmIyM2Q2MTI3NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUczJ3YGTN+G4OgTCg9/JD8IeK75 2zju+UTBxkRfiLtcmGByCvR3V2fIJ42XbTF2ftLkvEdqH/gqGsluYF3RfPwr+IKi kQMFCWXBejcd1U8R1KnsupfeMky171eUN0jz/7Bb0G8xB1/bRbvtSg045hZDYp9P 4E30an/f7CD+huBeLO7SwbpkFdy2PqI2IOolUf4fLpouEBPR9R6zL0tfF5I+XCtt k1hiliijSbgJ7AfClj3zs4WS6f+BoMxE2o9Y08jho9ultcP//MVQmYLb/MoMwA0f hcpR3CfJK+8tO6BXNqip/MRwPXyUeVcph+uFF9vVm5PU6cLgm5I0eNDj5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPZfip24TxnEc/bpOBK+yPWEnSBMB8GA1UdIwQY MBaAFNki2NRfmF3DiWyRdqfUjXZYy09oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUt NTRkNWQwNGUzNDZkLzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85MDAyZTItZGMwNC00YzM5LTkyMzUtNTRkNWQwNGUzNDZk LzEvMlNMWTFGLVlYY09KYkpGMnA5U05kbGpMVDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWEbM8VR qaTnwBdD7fQwHAlinL1KLSrmFxG7kzGvbQ7gHAFZueUieFkLPBYYh+07BhrubD/C 3bmWMhX2SL7mmhn/CNC3UntKlrY/nvyq/HvWCIFwBWfpn8lugJmlNtvUQUtaj8h8 3HrYfDwi6VkTCXaRc6S6QMd+4BoO9VKR/NBrOwdma3cswA/CigFgiuWiUnodCzLI CAJWBeKkSbjgCm6FQfmUJRCPah38FLLjMzig60lzL0vDQSyQRWSj7Z8h7XLd4c6A HFEJs6Byy85iPfeHZt/fN5PCxIx7JiCNWWsyRijlLIMO0VABpYyM4eRQXmERurZ3 UPE0LEd8+jt9Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:02 2025 by rpki-client