This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json) Hash identifier: Z6c9q3u/6yUkQdMzkTzC1OtRlNZL60lLyWmoopYGXd0= Subject key identifier: D9:31:A0:B1:33:C2:F2:69:8E:69:C8:F7:BE:3A:16:E4:29:88:D1:99 Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Certificate serial: 019AF0885D3E31730198108462005CDE4765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft Manifest number: 0D52 Signing time: Fri 05 Dec 2025 22:00:59 +0000 Manifest this update: Fri 05 Dec 2025 22:00:59 +0000 Manifest next update: Sat 06 Dec 2025 22:00:59 +0000 Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: lgvJBeL27zwoAb4mmmHc+paFiL6MrEKUOUX2Ifv5ZL4=) 2: YHLRl_WXzdzzbEECoeCuzULL-4o.roa (hash: dgNymUUNR8TTRsR7QDHhCOUwJZ3G729GHYq3cmwXwNE=) 3: _dm0as-nFQQ1bS3pghCSO6ryUwQ.roa (hash: fzQteoaQMk8gRjZgQC3tI6Hb34tGlOG3z2safrXEkbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:5d:3e:31:73:01:98:10:84:62:00:5c:de:47:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c Validity Not Before: Dec 5 22:00:59 2025 GMT Not After : Dec 6 22:00:59 2025 GMT Subject: CN=d931a0b133c2f2698e69c8f7be3a16e42988d199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:92:ea:57:91:4b:32:45:c7:26:9a:55:40: 41:8d:53:68:32:4f:cd:12:6d:23:30:a6:99:e6:61: 1f:c2:40:30:fe:96:39:f6:a6:bd:f0:80:0f:10:11: 71:19:b4:15:02:f7:5b:a5:19:60:2b:e4:c3:f7:95: 8b:1f:68:06:41:98:7b:bd:0a:c9:5c:5b:a3:80:9c: d6:26:62:6d:19:9c:2f:9b:2b:b1:89:39:16:80:d6: 49:41:a0:47:51:a8:27:8f:81:42:e4:22:58:e9:c8: 5c:d8:ce:fb:db:33:8f:da:91:bb:aa:08:d3:1b:fa: d0:70:df:2a:b4:75:80:3b:ad:74:44:a2:a2:20:fc: 6d:0b:bd:28:d2:f5:f9:97:68:61:b1:94:bb:ff:f2: d6:d0:cc:aa:36:11:18:4f:bf:13:71:cb:f9:49:59: a3:16:a9:b6:fd:f0:97:0d:74:3b:70:4d:20:6c:d2: 12:bb:e1:8f:2c:36:32:4a:ea:4f:bc:dc:c3:75:00: f0:0d:f2:10:7f:8c:16:16:95:00:cd:0b:fc:08:f4: f1:ae:9e:b7:40:bf:9b:ba:5f:28:e8:91:f3:5a:3c: 9e:3f:27:4d:7f:fe:11:31:b9:cb:a4:b6:58:c6:82: c6:53:6a:54:ea:95:79:db:fb:d0:c6:4d:9e:c6:65: c8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:A0:B1:33:C2:F2:69:8E:69:C8:F7:BE:3A:16:E4:29:88:D1:99 X509v3 Authority Key Identifier: keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:54:40:12:1e:0a:2d:16:f1:86:e4:92:1c:08:55:5e:f6:9a: 7a:a9:b4:68:52:e9:69:a2:b4:a0:e9:90:b4:3b:27:2b:d4:1e: a9:b4:c2:09:39:0e:4c:a0:58:63:fa:d1:33:e7:eb:20:29:46: 15:8b:52:ca:80:11:4d:c3:5a:48:37:23:19:b7:e0:25:9d:03: 65:fb:43:ec:e5:ea:fd:64:94:af:32:e9:1d:0b:13:7f:8c:10: 8d:de:11:b3:07:3b:c9:ff:bb:8f:3c:1c:30:bd:6e:52:6c:9b: 2f:eb:2f:8d:4c:8e:b9:96:ca:7f:10:8a:3f:3f:32:11:e7:b7: 0a:4f:fa:56:d7:0f:40:46:2f:11:f0:88:13:ea:b8:59:c7:41: 0c:89:28:5c:f9:f8:b7:81:9e:1a:fe:44:92:36:db:86:97:78: fa:ab:89:19:73:9f:e4:a8:c8:9d:a1:22:a4:3e:62:c9:5a:f2: e5:c6:fb:76:6e:42:a1:99:12:38:75:5a:a2:01:a9:3f:30:07: 49:0b:87:01:d9:72:f0:dd:19:a5:ef:c1:ad:85:9a:d2:0b:58: be:f0:f5:26:ca:02:dd:fe:2f:18:e1:48:1c:e4:5b:ee:c2:45: a9:38:92:39:a4:64:c8:22:1a:06:58:72:74:44:4d:25:12:3a: 02:a0:4b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiF0+MXMBmBCEYgBc3kdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjcxMTNkYjU1YjYzYjY3YTRhNjI3YTcwMDhhOGFmYzJi Y2M0MmMwHhcNMjUxMjA1MjIwMDU5WhcNMjUxMjA2MjIwMDU5WjAzMTEwLwYDVQQD EyhkOTMxYTBiMTMzYzJmMjY5OGU2OWM4ZjdiZTNhMTZlNDI5ODhkMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LSS6leRSzJFxyaaVUBBjVNoMk/N Em0jMKaZ5mEfwkAw/pY59qa98IAPEBFxGbQVAvdbpRlgK+TD95WLH2gGQZh7vQrJ XFujgJzWJmJtGZwvmyuxiTkWgNZJQaBHUagnj4FC5CJY6chc2M772zOP2pG7qgjT G/rQcN8qtHWAO610RKKiIPxtC70o0vX5l2hhsZS7//LW0MyqNhEYT78Tccv5SVmj Fqm2/fCXDXQ7cE0gbNISu+GPLDYySupPvNzDdQDwDfIQf4wWFpUAzQv8CPTxrp63 QL+bul8o6JHzWjyePydNf/4RMbnLpLZYxoLGU2pU6pV52/vQxk2exmXI2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkxoLEzwvJpjmnI9746FuQpiNGZMB8GA1UdIwQY MBaAFNonET21W2O2ekpienAIqK/CvMQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTct MjNiMjhmMzlhNjAyLzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hNWY5MzEtNmZhOC00Y2YwLThmOTctMjNiMjhmMzlhNjAy LzEvMmljUlBiVmJZN1o2U21KNmNBaW9yOEs4eEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklRAEh4K LRbxhuSSHAhVXvaaeqm0aFLpaaK0oOmQtDsnK9QeqbTCCTkOTKBYY/rRM+frIClG FYtSyoARTcNaSDcjGbfgJZ0DZftD7OXq/WSUrzLpHQsTf4wQjd4Rswc7yf+7jzwc ML1uUmybL+svjUyOuZbKfxCKPz8yEee3Ck/6VtcPQEYvEfCIE+q4WcdBDIkoXPn4 t4GeGv5Ekjbbhpd4+quJGXOf5KjInaEipD5iyVry5cb7dm5CoZkSOHVaogGpPzAH SQuHAdly8N0Zpe/BrYWa0gtYvvD1JsoC3f4vGOFIHORb7sJFqTiSOaRkyCIaBlhy dERNJRI6AqBLsg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:28 2025 by rpki-client