This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json) Hash identifier: uIAj+IcskEp5exgQ0U4GoaT++PLwM0mdf9gnHLdBeKI= Subject key identifier: DA:AB:FE:4C:11:90:65:C7:E1:26:39:9D:67:65:88:43:2E:27:6D:AA Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Certificate serial: 019AF240110F142CB24A2990F9426729BFDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft Manifest number: 0AE4 Signing time: Sat 06 Dec 2025 06:01:16 +0000 Manifest this update: Sat 06 Dec 2025 06:01:16 +0000 Manifest next update: Sun 07 Dec 2025 06:01:16 +0000 Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: i7oPWPJ0+/1ZqecYRguaksSObaCjuTL3sQz3xoygwxQ=) 2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=) 3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=) 4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:11:0f:14:2c:b2:4a:29:90:f9:42:67:29:bf:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Validity Not Before: Dec 6 06:01:16 2025 GMT Not After : Dec 7 06:01:16 2025 GMT Subject: CN=daabfe4c119065c7e126399d676588432e276daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:52:41:78:6c:37:2f:e9:46:bd:a8:11:5f: 20:08:6e:e5:fb:32:b1:f7:51:cc:b2:b4:b3:37:12: d9:e0:da:0a:66:f8:91:9c:6e:a1:55:18:73:06:92: e9:da:af:c4:0a:73:a9:59:f9:a5:2f:89:86:5c:b1: 02:bb:c0:d8:12:63:26:6c:9f:3c:b9:7b:ae:31:3b: 58:57:0d:b8:2e:82:80:c2:33:fb:ab:96:5a:53:5c: 41:65:2e:26:45:1f:9e:d2:80:f0:03:a1:02:94:97: 8a:85:af:95:de:1f:b3:d7:3e:ed:58:86:8f:4a:43: 45:e6:1d:2a:2f:82:8c:56:71:29:e7:40:00:55:b0: 49:70:f3:22:ba:e7:0a:bd:59:6d:bc:e3:94:2a:b0: 07:d6:cc:68:2c:a6:ff:c1:de:67:76:76:a8:6e:09: 09:34:05:e0:b8:9b:e8:a4:58:20:a3:59:53:d8:5d: 94:1d:86:18:5d:8e:54:78:7c:23:7f:36:92:e9:cf: 5c:91:9a:a2:7a:ab:2f:7f:5b:b1:4a:04:a3:eb:a7: 5e:df:86:bc:78:0b:fb:34:46:6f:9b:92:ec:89:6a: 5f:0b:e1:46:ae:66:dc:e5:92:19:2c:83:e6:c9:b2: ff:42:50:49:b8:ab:23:6c:98:80:a6:cd:61:00:01: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:FE:4C:11:90:65:C7:E1:26:39:9D:67:65:88:43:2E:27:6D:AA X509v3 Authority Key Identifier: keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c2:cd:25:f7:1a:1e:38:cf:47:2d:45:77:f6:1f:09:99:e1: ba:3b:b4:43:bc:29:92:85:12:c0:4e:70:af:8c:ea:b2:61:dc: 95:89:f3:5e:e2:5a:ad:7b:85:ab:ab:e2:c1:1e:9f:9e:5a:8a: 3b:ec:f9:1c:a1:d5:25:f8:54:db:27:2f:7a:25:93:d9:80:f8: 4d:61:0f:72:75:21:12:19:9b:4e:e0:a3:38:3d:9e:21:22:09: 7b:33:d0:1a:46:8f:82:6e:f2:40:00:b0:18:e6:4a:dc:9f:85: 01:d3:7a:9a:3d:b6:71:f8:b6:29:53:b4:59:90:02:9a:c7:13: dc:e9:21:db:14:83:56:b3:2f:46:d9:42:45:5f:e6:3f:35:9e: 37:f0:36:67:99:d7:7a:82:3f:cd:47:a0:08:f8:63:f4:41:90: be:25:c9:4d:65:89:0a:ee:07:3b:58:9f:7a:ab:3b:2a:87:db: 63:61:50:50:57:24:f5:38:17:92:d0:fe:91:b4:40:0d:b0:59: 98:53:0d:26:9b:22:a8:94:10:0b:aa:00:eb:53:61:ae:93:d6: 3a:0b:a9:02:17:01:56:f1:89:cc:bd:43:6d:64:1c:39:f7:53: 37:2e:cf:44:a8:a5:e1:66:53:18:7a:2b:14:cc:a3:29:bb:93: 6d:71:57:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBEPFCyySimQ+UJnKb/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5 MWJlYjAwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD EyhkYWFiZmU0YzExOTA2NWM3ZTEyNjM5OWQ2NzY1ODg0MzJlMjc2ZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkZSQXhsNy/pRr2oEV8gCG7l+zKx 91HMsrSzNxLZ4NoKZviRnG6hVRhzBpLp2q/ECnOpWfmlL4mGXLECu8DYEmMmbJ88 uXuuMTtYVw24LoKAwjP7q5ZaU1xBZS4mRR+e0oDwA6EClJeKha+V3h+z1z7tWIaP SkNF5h0qL4KMVnEp50AAVbBJcPMiuucKvVltvOOUKrAH1sxoLKb/wd5ndnaobgkJ NAXguJvopFggo1lT2F2UHYYYXY5UeHwjfzaS6c9ckZqieqsvf1uxSgSj66de34a8 eAv7NEZvm5LsiWpfC+FGrmbc5ZIZLIPmybL/QlBJuKsjbJiAps1hAAEAEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqr/kwRkGXH4SY5nWdliEMuJ22qMB8GA1UdIwQY MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMLNJfca HjjPRy1Fd/YfCZnhuju0Q7wpkoUSwE5wr4zqsmHclYnzXuJarXuFq6viwR6fnlqK O+z5HKHVJfhU2ycveiWT2YD4TWEPcnUhEhmbTuCjOD2eISIJezPQGkaPgm7yQACw GOZK3J+FAdN6mj22cfi2KVO0WZACmscT3Okh2xSDVrMvRtlCRV/mPzWeN/A2Z5nX eoI/zUegCPhj9EGQviXJTWWJCu4HO1ifeqs7KofbY2FQUFck9TgXktD+kbRADbBZ mFMNJpsiqJQQC6oA61NhrpPWOgupAhcBVvGJzL1DbWQcOfdTNy7PRKil4WZTGHor FMyjKbuTbXFXeA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:09 2025 by rpki-client