This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json) Hash identifier: H04FughfrTteAuQ75MEkKZ5hJGyzSGD39qr93qKa+mo= Subject key identifier: C8:0F:32:1C:57:30:70:3D:E2:77:EA:AD:55:D6:D5:17:49:C3:44:BF Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Certificate serial: 019AF23F7857BB203EF77FD507635E463ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft Manifest number: 02FA Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=) 2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: ylOE2xOzMJdFpfxBAgqpwn+HkFOEaWTCyFZC8A8RM1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:78:57:bb:20:3e:f7:7f:d5:07:63:5e:46:3e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=c80f321c5730703de277eaad55d6d51749c344bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:34:8d:32:ac:20:c3:5a:c9:90:af:69:cf: 9b:ff:fa:0a:82:05:57:0c:c0:cc:15:dd:ea:07:73: 8f:56:b5:e7:1d:a6:e5:f5:87:54:4d:8d:4c:56:74: 19:51:c6:5c:b0:f3:40:6c:68:c0:8d:30:2d:1d:00: 05:5a:1f:37:72:8d:e1:eb:6a:1a:a3:14:f3:8a:40: e2:d0:46:c4:a9:2b:ef:f3:c4:ea:f3:73:d8:2a:df: 08:5c:9a:2f:7d:89:30:4a:27:69:f1:ec:73:4a:4d: 63:3b:d3:c0:37:23:76:e4:89:ae:cc:c1:73:5d:69: 53:0d:f8:86:af:92:72:73:99:5c:bb:98:47:d3:c3: d5:91:3c:cc:cd:6f:8c:45:68:d3:af:0e:79:b1:7b: 26:d8:a2:5f:7f:e3:5b:84:64:5e:ea:50:56:ef:a2: 00:6e:77:86:de:0a:cf:85:4a:a5:a6:b3:8e:d5:06: 38:93:27:3d:e0:c4:f3:6f:cd:ce:34:b9:13:90:c1: 4b:1f:ed:1b:86:34:45:a9:2f:69:c0:22:fc:d5:66: 30:d8:29:7f:79:61:92:8c:06:fe:3f:de:ff:47:9c: 9c:1a:ab:f7:16:02:4c:6c:6e:dc:c3:f2:bc:db:d9: 4b:b9:8a:be:58:40:0e:d3:d0:f9:0b:14:cb:a1:09: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0F:32:1C:57:30:70:3D:E2:77:EA:AD:55:D6:D5:17:49:C3:44:BF X509v3 Authority Key Identifier: keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b4:79:03:42:e1:2a:5d:0a:e7:a3:25:bf:f5:17:91:d1:5f: 7f:e7:6a:62:7f:eb:9c:fd:e5:dc:7a:f2:ec:81:4c:91:2f:b9: 3a:7f:62:6e:de:be:ca:df:8e:80:52:3e:50:01:97:97:a4:9a: 88:79:8c:57:3a:9e:7a:0a:68:5d:ca:01:a5:87:ef:a1:68:e1: b7:b7:d5:aa:5b:36:76:d3:36:92:30:99:1e:d1:a2:e1:dd:0c: 5a:f8:eb:c0:1e:e5:46:f2:c6:d2:6f:3a:34:e7:d5:54:64:46: 17:71:6c:b9:dc:61:b1:21:7a:02:69:ee:9b:51:42:f0:14:85: b1:b0:0b:53:64:eb:59:a0:59:ed:21:29:6e:76:38:d0:60:64: 8a:96:13:9f:5f:0b:61:5d:2e:42:68:cb:5f:3a:b2:1e:46:34: 8b:df:03:b7:f1:c0:f9:91:90:11:d6:fc:31:4a:e3:6d:0f:e8: 6a:8d:6d:70:93:89:b2:51:0f:4f:66:8d:c4:4f:66:95:ef:2c: 57:6e:3e:7c:51:99:2b:3d:90:7d:f9:c5:21:67:39:78:99:89: 8a:ee:9c:60:90:e3:97:d5:13:7f:f6:37:d1:67:3c:5a:b5:7e: ce:de:f6:fa:5e:98:6e:00:3c:a8:3f:99:08:35:90:fb:57:d9: 60:0e:15:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3hXuyA+93/VB2NeRj7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjI2NDhlOTEzYTM2NDBmMDMxYjYzYTZiZDkyYjBlMjhl MTM5ZmIwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EyhjODBmMzIxYzU3MzA3MDNkZTI3N2VhYWQ1NWQ2ZDUxNzQ5YzM0NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyk0jTKsIMNayZCvac+b//oKggVX DMDMFd3qB3OPVrXnHabl9YdUTY1MVnQZUcZcsPNAbGjAjTAtHQAFWh83co3h62oa oxTzikDi0EbEqSvv88Tq83PYKt8IXJovfYkwSidp8exzSk1jO9PANyN25ImuzMFz XWlTDfiGr5Jyc5lcu5hH08PVkTzMzW+MRWjTrw55sXsm2KJff+NbhGRe6lBW76IA bneG3grPhUqlprOO1QY4kyc94MTzb83ONLkTkMFLH+0bhjRFqS9pwCL81WYw2Cl/ eWGSjAb+P97/R5ycGqv3FgJMbG7cw/K829lLuYq+WEAO09D5CxTLoQmGqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgPMhxXMHA94nfqrVXW1RdJw0S/MB8GA1UdIwQY MBaAFJtiZI6ROjZA8DG2OmvZKw4o4Tn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMt OThiZDE1NjAyOWMwLzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ODY1ZDctOWZlYS00N2Y2LWEzZmMtOThiZDE1NjAyOWMw LzEvbTJKa2pwRTZOa0R3TWJZNmE5a3JEaWpoT2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbR5A0Lh Kl0K56Mlv/UXkdFff+dqYn/rnP3l3Hry7IFMkS+5On9ibt6+yt+OgFI+UAGXl6Sa iHmMVzqeegpoXcoBpYfvoWjht7fVqls2dtM2kjCZHtGi4d0MWvjrwB7lRvLG0m86 NOfVVGRGF3FsudxhsSF6Amnum1FC8BSFsbALU2TrWaBZ7SEpbnY40GBkipYTn18L YV0uQmjLXzqyHkY0i98Dt/HA+ZGQEdb8MUrjbQ/oao1tcJOJslEPT2aNxE9mle8s V24+fFGZKz2QffnFIWc5eJmJiu6cYJDjl9UTf/Y30Wc8WrV+zt72+l6YbgA8qD+Z CDWQ+1fZYA4Vvg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:19 2025 by rpki-client