This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json) Hash identifier: fc8lUUoPZ57HZDWQBNbptQwYeWwFVNWaQ+U8iAQyYiQ= Subject key identifier: 81:58:46:42:F8:1B:32:84:DA:82:96:E8:95:33:36:E6:63:B1:7F:28 Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc Certificate serial: 019AF5777F9B35747A617382671D5C49D63E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft Manifest number: 08C2 Signing time: Sat 06 Dec 2025 21:00:40 +0000 Manifest this update: Sat 06 Dec 2025 21:00:40 +0000 Manifest next update: Sun 07 Dec 2025 21:00:40 +0000 Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: ZC+Pq3UcvyMZZp1RrfuwiuhPT8FtM8Lnz1r1LnbsMsU=) 2: ExuO0wU2-ClJDZRwWSRuAs7W0gk.roa (hash: 2j3+sZIfGB/S0w3o+OLoSghT+pM132gfjkW2EjpJ9JQ=) 3: aedVSgDzPN8NSNc0AWT5LWxB0ME.roa (hash: dpDe6aIbJvexkIC5o0dZBz+eF8xcPh7l66sRiS3ImZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:7f:9b:35:74:7a:61:73:82:67:1d:5c:49:d6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc Validity Not Before: Dec 6 21:00:40 2025 GMT Not After : Dec 7 21:00:40 2025 GMT Subject: CN=81584642f81b3284da8296e8953336e663b17f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:b1:39:b2:96:36:c7:c5:45:ce:06:ff:ff: a4:aa:ba:fd:7a:48:b3:6a:e5:65:d6:b6:b3:d5:71: 44:67:b3:1c:1f:17:19:dc:12:13:84:ed:df:86:ac: fa:81:87:b5:01:67:ca:ee:15:9a:89:06:4e:0a:ec: 77:ec:65:6d:1b:17:87:5f:ba:0f:0c:63:e6:7b:ca: 08:1f:8b:23:1d:61:5d:28:fd:75:92:4e:41:ed:10: 4a:c0:a8:20:83:03:03:ee:cc:30:e4:d5:bb:a7:38: 7d:b9:cc:01:1d:44:f1:cf:4b:33:98:36:43:7b:c0: 99:7a:69:96:76:52:4d:4a:f0:df:3b:8a:ba:35:6c: 7c:af:10:4b:a5:0f:2d:14:d7:8e:30:ab:25:0c:30: 3a:5e:e4:e0:3a:d4:60:3a:ef:d0:df:41:aa:cd:87: e1:58:1d:99:94:75:b2:d3:18:69:da:86:46:82:bc: 12:e3:2c:ee:f8:3f:6c:40:6c:9a:4a:23:98:bf:d1: 07:bc:6a:fb:b3:16:de:5e:1d:d6:ba:6c:dc:f1:a1: c9:a9:17:89:24:ca:84:0d:ff:1f:36:b0:c6:fc:e2: a6:57:04:aa:6c:7d:19:c1:e3:78:06:53:ce:35:9c: 2f:64:db:2c:f4:dd:ec:d3:70:9f:31:5c:c3:7f:51: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:58:46:42:F8:1B:32:84:DA:82:96:E8:95:33:36:E6:63:B1:7F:28 X509v3 Authority Key Identifier: keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:96:31:3a:ee:e3:38:8a:ab:d5:2d:c3:e7:57:68:3f:ee:53: f3:5d:0b:d0:db:f7:cd:6f:fd:91:cd:3b:c3:66:ca:ea:fb:81: 6c:13:2c:c1:2a:12:f9:ef:0d:c1:6c:3a:25:e5:e7:78:e2:56: 6a:ee:ff:f2:b3:2b:a1:3e:00:54:a6:0f:98:69:3d:0c:64:d1: 36:6e:d6:4e:ab:32:49:88:25:e7:f1:cb:71:b0:55:08:15:54: fa:37:56:b0:8b:84:5b:a0:e6:f9:87:9e:17:09:5b:bc:aa:27: 31:e1:9f:8d:f6:ea:2c:13:0f:15:a0:74:34:e4:4f:79:30:c3: b6:03:72:83:6b:fc:c6:15:fb:c8:ee:c5:3c:09:ad:61:16:d2: 8c:6e:b6:db:ca:7f:a4:2b:c0:8c:9f:17:fc:91:80:25:77:7b: d7:4c:c4:05:c1:5c:30:07:f7:9d:e3:12:30:56:30:1e:b7:81: 96:7e:5a:eb:58:ea:30:bc:28:f0:72:04:e6:d2:93:90:6b:5d: 39:0a:15:36:ca:ce:9e:57:3e:10:69:e8:ab:e1:d2:46:80:25: 0c:66:03:bf:35:28:99:6b:95:86:71:ba:34:fa:4c:d8:31:8d: 89:c2:01:00:08:cc:f0:c3:d2:ca:28:d0:2a:68:78:40:7e:5a: 7b:14:1e:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3+bNXR6YXOCZx1cSdY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTRhYjk0ZTQ1OTUxOTRkMmMzOWIxZDNmZTZhODkxZjFl YjkyYmMwHhcNMjUxMjA2MjEwMDQwWhcNMjUxMjA3MjEwMDQwWjAzMTEwLwYDVQQD Eyg4MTU4NDY0MmY4MWIzMjg0ZGE4Mjk2ZTg5NTMzMzZlNjYzYjE3ZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnmxObKWNsfFRc4G//+kqrr9ekiz auVl1raz1XFEZ7McHxcZ3BIThO3fhqz6gYe1AWfK7hWaiQZOCux37GVtGxeHX7oP DGPme8oIH4sjHWFdKP11kk5B7RBKwKgggwMD7sww5NW7pzh9ucwBHUTxz0szmDZD e8CZemmWdlJNSvDfO4q6NWx8rxBLpQ8tFNeOMKslDDA6XuTgOtRgOu/Q30GqzYfh WB2ZlHWy0xhp2oZGgrwS4yzu+D9sQGyaSiOYv9EHvGr7sxbeXh3Wumzc8aHJqReJ JMqEDf8fNrDG/OKmVwSqbH0ZweN4BlPONZwvZNss9N3s03CfMVzDf1HJqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFYRkL4GzKE2oKW6JUzNuZjsX8oMB8GA1UdIwQY MBaAFNlUq5TkWVGU0sObHT/mqJHx65K8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82NDc0ODUtNjM1ZS00YWM2LWIwYjkt MzM1MWM1NzdiNDMyLzEvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82NDc0ODUtNjM1ZS00YWM2LWIwYjktMzM1MWM1NzdiNDMy LzEvMlZTcmxPUlpVWlRTdzVzZFAtYW9rZkhya3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5YxOu7j OIqr1S3D51doP+5T810L0Nv3zW/9kc07w2bK6vuBbBMswSoS+e8NwWw6JeXneOJW au7/8rMroT4AVKYPmGk9DGTRNm7WTqsySYgl5/HLcbBVCBVU+jdWsIuEW6Dm+Yee FwlbvKonMeGfjfbqLBMPFaB0NORPeTDDtgNyg2v8xhX7yO7FPAmtYRbSjG6228p/ pCvAjJ8X/JGAJXd710zEBcFcMAf3neMSMFYwHreBln5a61jqMLwo8HIE5tKTkGtd OQoVNsrOnlc+EGnoq+HSRoAlDGYDvzUomWuVhnG6NPpM2DGNicIBAAjM8MPSyijQ Kmh4QH5aexQecQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:29 2025 by rpki-client