This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json) Hash identifier: qc8Tf9bpivdJqZqXFr3cfg5Mx/jkGjee3Pv7hPm2J2M= Subject key identifier: 41:A6:79:EA:F1:FF:43:40:BC:A2:99:51:F1:FD:01:3F:5E:44:B5:D0 Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9 Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9 Certificate serial: 019AF0BF62ED3C11A0F94E601663763ABB89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft Manifest number: 047A Signing time: Fri 05 Dec 2025 23:01:05 +0000 Manifest this update: Fri 05 Dec 2025 23:01:05 +0000 Manifest next update: Sat 06 Dec 2025 23:01:05 +0000 Files and hashes: 1: j5QtHlhxEZZOM5CvXJMLssoxGGc.roa (hash: 8L3ZEU7bcEWssZWSFVojRb4D5wALELFNA26f5J8ZxnI=) 2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: A7cLoKu0SS3EtERKB941pqHepKdjDBJ33a07huI3n0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:62:ed:3c:11:a0:f9:4e:60:16:63:76:3a:bb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9 Validity Not Before: Dec 5 23:01:05 2025 GMT Not After : Dec 6 23:01:05 2025 GMT Subject: CN=41a679eaf1ff4340bca29951f1fd013f5e44b5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:1d:ac:20:17:c8:12:92:a7:9b:94:31:5d: 87:be:4d:e8:0b:6e:aa:6c:1f:76:b3:6f:a5:e3:12: 5f:9b:b9:d5:19:6f:58:37:14:9c:45:27:dc:54:c3: de:b2:12:c1:ea:6f:b2:8e:ff:8c:e8:02:c2:af:a3: aa:c1:4c:ac:c8:31:56:f4:13:55:5e:f9:f5:e7:37: 3c:b5:92:e3:a1:7c:08:42:55:ea:93:40:ed:62:66: f7:45:c1:17:d4:7c:01:9b:16:bb:15:28:00:d4:38: ce:d1:67:9c:67:14:38:c5:cd:cc:df:97:93:f9:d4: 2c:3b:1d:9d:3c:67:5b:84:6f:6b:74:7c:17:0e:92: 6a:4f:e9:e1:95:75:df:cd:93:d6:c6:8c:9c:cb:cb: d3:95:97:f8:6e:5c:99:8d:03:1d:47:8d:8f:eb:49: b6:bd:28:3a:a4:4b:cc:1e:3f:b3:20:99:65:87:e4: 3e:5b:de:fa:3c:70:ef:2d:57:cd:de:e5:06:89:02: 9c:8c:b6:c2:4a:5e:5d:03:f4:73:4e:bc:36:a3:b0: ce:af:d7:c8:66:0e:5b:12:8b:f3:7d:16:dd:77:db: 89:39:95:a2:45:79:55:74:18:a6:9b:a0:3f:ba:17: 91:ae:95:94:f0:c7:7a:53:20:49:f0:ee:23:2e:c5: d5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:79:EA:F1:FF:43:40:BC:A2:99:51:F1:FD:01:3F:5E:44:B5:D0 X509v3 Authority Key Identifier: keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4d:f2:02:d3:3b:69:4e:71:94:64:46:0f:cf:46:89:cc:6d: aa:6d:1a:aa:29:ba:ce:71:bf:67:66:8f:ba:39:de:d7:38:f3: 68:3f:82:f6:4c:a9:43:f1:e9:d5:cf:ca:95:76:a7:ce:e6:6e: 47:e2:a3:50:14:fa:e7:d0:9a:36:f7:25:10:96:b9:2f:7f:04: 32:7c:6f:92:fc:70:0f:a5:11:9f:d1:26:45:7b:2b:c1:38:cb: 4b:d8:6c:4f:37:8d:bf:80:72:f9:34:cb:ed:3e:2c:17:13:5c: b0:6f:17:1f:2c:6c:40:42:fb:05:96:8c:d7:bf:3b:d9:2b:51: bf:04:63:9b:c0:20:63:55:33:11:93:d2:5a:50:74:a0:5c:bc: ad:a2:79:55:1e:a7:98:c4:b9:5f:2d:65:69:9a:b5:af:d3:2a: 5b:1c:ee:86:08:e0:94:2d:54:01:d3:50:f0:56:2d:63:bb:04: 9d:b7:d2:d4:fd:70:b6:5d:90:4c:4d:43:f7:5b:30:09:da:91: f7:b0:62:13:c3:e0:63:b1:23:21:d0:f7:a9:86:d4:9a:5e:da: ee:8a:29:b5:90:1b:ae:94:d0:b5:03:3d:a2:23:e6:95:ca:4b: be:3b:72:a2:b8:54:32:d1:30:41:e8:f5:11:17:42:d2:b0:cc: 3d:09:e7:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2LtPBGg+U5gFmN2OruJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNjAzNDZkMDgxYjFjNWM4MTBiMzk0YzY2ZTEwNTEyYmJm NGQ4YzkwHhcNMjUxMjA1MjMwMTA1WhcNMjUxMjA2MjMwMTA1WjAzMTEwLwYDVQQD Eyg0MWE2NzllYWYxZmY0MzQwYmNhMjk5NTFmMWZkMDEzZjVlNDRiNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF4drCAXyBKSp5uUMV2Hvk3oC26q bB92s2+l4xJfm7nVGW9YNxScRSfcVMPeshLB6m+yjv+M6ALCr6OqwUysyDFW9BNV Xvn15zc8tZLjoXwIQlXqk0DtYmb3RcEX1HwBmxa7FSgA1DjO0WecZxQ4xc3M35eT +dQsOx2dPGdbhG9rdHwXDpJqT+nhlXXfzZPWxoycy8vTlZf4blyZjQMdR42P60m2 vSg6pEvMHj+zIJllh+Q+W976PHDvLVfN3uUGiQKcjLbCSl5dA/RzTrw2o7DOr9fI Zg5bEovzfRbdd9uJOZWiRXlVdBimm6A/uheRrpWU8Md6UyBJ8O4jLsXVUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGmeerx/0NAvKKZUfH9AT9eRLXQMB8GA1UdIwQY MBaAFK9gNG0IGxxcgQs5TGbhBRK79NjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iNjYwZjQtODhjYi00NWYzLWE3MWEt MjYzOTgzOWY4MjhkLzEvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iNjYwZjQtODhjYi00NWYzLWE3MWEtMjYzOTgzOWY4Mjhk LzEvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANU3yAtM7 aU5xlGRGD89Gicxtqm0aqim6znG/Z2aPujne1zjzaD+C9kypQ/Hp1c/KlXanzuZu R+KjUBT659CaNvclEJa5L38EMnxvkvxwD6URn9EmRXsrwTjLS9hsTzeNv4By+TTL 7T4sFxNcsG8XHyxsQEL7BZaM17872StRvwRjm8AgY1UzEZPSWlB0oFy8raJ5VR6n mMS5Xy1laZq1r9MqWxzuhgjglC1UAdNQ8FYtY7sEnbfS1P1wtl2QTE1D91swCdqR 97BiE8PgY7EjIdD3qYbUml7a7ooptZAbrpTQtQM9oiPmlcpLvjtyorhUMtEwQej1 ERdC0rDMPQnnCw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:25 2025 by rpki-client