This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json) Hash identifier: jpGLu9oW7eOVMjM9ag6lfrzFkERGnNBvBzFSjcKCBGE= Subject key identifier: 90:E2:B4:2A:BD:A2:F5:15:0D:55:7B:98:7E:D8:F3:71:CE:82:65:B3 Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511 Certificate serial: 019B0D48F4C712FD08E14C4F503B397B3762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft Manifest number: 0DFD Signing time: Thu 11 Dec 2025 12:00:43 +0000 Manifest this update: Thu 11 Dec 2025 12:00:43 +0000 Manifest next update: Fri 12 Dec 2025 12:00:43 +0000 Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=) 2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: 4eqIWxwn2qu6FY6wRaQP4iYvHRB/5WUIn5g+Xxn5ntQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:48:f4:c7:12:fd:08:e1:4c:4f:50:3b:39:7b:37:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511 Validity Not Before: Dec 11 12:00:43 2025 GMT Not After : Dec 12 12:00:43 2025 GMT Subject: CN=90e2b42abda2f5150d557b987ed8f371ce8265b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:3a:ba:2e:ac:1f:59:9e:73:52:39:a1:7c: fd:28:da:85:35:91:9d:c4:9d:69:43:f2:31:f2:d0: 55:c0:41:a4:91:23:bc:56:80:0d:90:a4:fe:50:90: 8a:84:8a:b3:e6:75:f7:b6:4b:6b:32:54:a2:0d:d9: 8e:31:5f:f2:14:49:7b:59:76:f2:b5:9c:dd:70:2c: 48:d7:58:d6:36:ca:7f:c1:9a:58:ce:a3:9f:87:df: 03:cc:d2:4b:64:48:41:a6:c4:84:e4:7b:d5:d8:1f: a8:0e:a5:d9:4d:58:d5:78:98:e0:e0:bb:38:ba:4a: 21:63:f7:15:cf:91:60:d1:49:a3:3d:1a:86:51:20: 51:4a:e8:b2:04:10:d6:24:da:90:3c:95:75:66:72: 45:3d:d5:17:6a:e2:ed:e1:ee:85:43:55:a1:bc:2c: 57:83:37:c0:2b:24:b5:0a:3e:6e:14:92:ee:37:01: 25:61:21:36:a0:c4:39:47:88:bd:89:74:40:0e:ff: 84:0b:85:e1:62:1f:86:27:02:b1:72:a7:6c:76:a6: be:c2:8b:6a:f5:7d:76:3b:d5:48:6d:83:b4:48:81: 6a:56:82:ac:ff:2b:cc:a7:23:e2:8b:b6:2c:a6:8f: 4f:3e:d9:26:0a:58:2c:38:97:d9:40:44:4c:04:67: dd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E2:B4:2A:BD:A2:F5:15:0D:55:7B:98:7E:D8:F3:71:CE:82:65:B3 X509v3 Authority Key Identifier: keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e8:50:57:d8:03:6d:e5:7d:40:a8:d4:b1:72:90:df:1d:31: 61:28:cd:96:6a:53:97:40:9a:ea:52:74:3c:6e:44:2e:aa:af: 8d:11:be:44:0b:8f:af:a9:11:89:b0:2a:0b:69:7c:f2:31:d6: 60:46:3e:74:33:e6:1b:be:e6:62:c5:5c:9d:c7:aa:98:62:49: 27:11:20:58:5c:55:18:93:12:0f:1a:b8:b6:01:e8:72:41:7a: 26:f2:ae:df:57:a6:cb:da:66:0e:a3:4f:4c:de:00:15:b9:bc: e9:54:d1:42:d0:c7:7b:a6:28:e5:2e:78:8d:93:3d:34:a6:39: 07:56:f6:3f:b0:cb:a7:5c:09:49:57:43:4c:64:bb:64:0d:2e: b1:aa:dc:e5:2b:8c:03:06:5a:a1:41:3a:b8:e2:9d:40:d4:5e: 2a:e1:b9:cf:c2:5f:7d:48:94:65:59:88:50:c1:a5:72:70:59: 87:83:6a:3b:02:d6:03:67:b3:4d:6f:7b:5a:a4:25:44:af:af: 64:d7:20:a6:d1:54:e8:61:74:81:f0:bf:1a:82:87:6f:45:3d: d2:f2:55:f5:5e:df:b4:37:f1:94:a7:03:32:5d:a1:52:60:1a: 71:e0:dd:f1:34:57:ea:e5:db:07:ff:7d:68:ee:be:42:5a:c7: 60:04:d6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNSPTHEv0I4UxPUDs5ezdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl OGM1MTEwHhcNMjUxMjExMTIwMDQzWhcNMjUxMjEyMTIwMDQzWjAzMTEwLwYDVQQD Eyg5MGUyYjQyYWJkYTJmNTE1MGQ1NTdiOTg3ZWQ4ZjM3MWNlODI2NWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr006ui6sH1mec1I5oXz9KNqFNZGd xJ1pQ/Ix8tBVwEGkkSO8VoANkKT+UJCKhIqz5nX3tktrMlSiDdmOMV/yFEl7WXby tZzdcCxI11jWNsp/wZpYzqOfh98DzNJLZEhBpsSE5HvV2B+oDqXZTVjVeJjg4Ls4 ukohY/cVz5Fg0UmjPRqGUSBRSuiyBBDWJNqQPJV1ZnJFPdUXauLt4e6FQ1WhvCxX gzfAKyS1Cj5uFJLuNwElYSE2oMQ5R4i9iXRADv+EC4XhYh+GJwKxcqdsdqa+wotq 9X12O9VIbYO0SIFqVoKs/yvMpyPii7Yspo9PPtkmClgsOJfZQERMBGfd9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDitCq9ovUVDVV7mH7Y83HOgmWzMB8GA1UdIwQY MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0 LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOhQV9gD beV9QKjUsXKQ3x0xYSjNlmpTl0Ca6lJ0PG5ELqqvjRG+RAuPr6kRibAqC2l88jHW YEY+dDPmG77mYsVcnceqmGJJJxEgWFxVGJMSDxq4tgHockF6JvKu31emy9pmDqNP TN4AFbm86VTRQtDHe6Yo5S54jZM9NKY5B1b2P7DLp1wJSVdDTGS7ZA0usarc5SuM AwZaoUE6uOKdQNReKuG5z8JffUiUZVmIUMGlcnBZh4NqOwLWA2ezTW97WqQlRK+v ZNcgptFU6GF0gfC/GoKHb0U90vJV9V7ftDfxlKcDMl2hUmAaceDd8TRX6uXbB/99 aO6+QlrHYATWYA== -----END CERTIFICATE-----Generated at Thu Dec 11 16:08:47 2025 by rpki-client