This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft File: 2CsoRvCTvJQWBBvmiix4MWHrBN8.mft (raw, json) Hash identifier: DFHS5Rvp2O4KVR6K6leYzpimBAkdnXlF+bcIErus4mI= Subject key identifier: 11:C0:76:80:25:86:B8:92:BC:A9:F3:9A:98:9C:F7:D8:3C:90:32:EC Authority key identifier: D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF Certificate issuer: /CN=d82b2846f093bc9416041be68a2c783161eb04df Certificate serial: 019AF19AA14A30D436D208443E7D95AA71D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft Manifest number: 0909 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: 2CsoRvCTvJQWBBvmiix4MWHrBN8.crl (hash: xjuNzo4qysruMT121OxsVGbKOtxtliaySXifzyhvnKE=) 2: hTfKaocG3Hu8jZISH8wxDZSDFQU.roa (hash: SPxEv0NQloEq4rpI+CK4+O5Rga0a1/KsmAnYz63xRLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a1:4a:30:d4:36:d2:08:44:3e:7d:95:aa:71:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82b2846f093bc9416041be68a2c783161eb04df Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=11c076802586b892bca9f39a989cf7d83c9032ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:5e:6f:1d:fc:0e:00:18:1d:0c:06:e5:dc: 21:6f:da:6d:a4:0a:68:90:37:2c:38:58:e9:6d:46: 02:12:ab:95:1c:2d:ba:cd:04:0e:8f:c3:8a:b3:b2: a0:68:f9:08:6e:e1:03:4c:ec:32:83:ca:f3:39:a7: 9d:d9:e9:a3:40:d6:90:98:5e:2c:27:fe:03:16:a6: cf:b3:69:06:e8:40:04:71:93:da:b6:2b:93:67:a7: 93:4c:29:f6:89:06:b0:43:75:14:3b:d6:db:95:dc: 3a:a2:c1:22:4c:59:4c:95:ff:54:61:24:19:3b:36: 50:bd:e2:84:ab:25:3c:bd:87:dd:31:fd:89:df:6c: 47:af:d7:cc:d6:03:77:e6:82:3c:75:6f:0e:01:a0: d9:73:ba:d1:59:dc:92:66:0f:f9:5d:28:de:45:2a: 25:bd:cc:2c:ff:bb:b3:3e:07:2b:a8:f8:61:0a:ab: f7:99:72:2f:49:a1:7d:be:cf:80:46:7a:c8:f4:56: ae:ab:a0:37:80:5e:2b:98:72:d1:41:1f:47:15:63: a7:75:43:47:72:12:f0:d4:d7:9b:5d:94:1c:e0:7a: 62:2e:e6:5f:e9:05:33:3c:df:9b:7d:dc:56:6a:ae: 43:05:f5:9e:54:bf:91:78:b6:e4:0d:80:ee:cb:da: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:76:80:25:86:B8:92:BC:A9:F3:9A:98:9C:F7:D8:3C:90:32:EC X509v3 Authority Key Identifier: keyid:D8:2B:28:46:F0:93:BC:94:16:04:1B:E6:8A:2C:78:31:61:EB:04:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CsoRvCTvJQWBBvmiix4MWHrBN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5b2d6e-8247-448f-a358-5473ee1daa9b/1/2CsoRvCTvJQWBBvmiix4MWHrBN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3c:cd:c8:50:e7:30:ff:3f:20:4e:cb:de:52:89:18:4d:e4: ae:0e:91:51:b6:aa:4b:58:57:d3:eb:f2:1c:a3:1b:9d:bc:ad: 02:5d:02:f9:49:ef:50:ee:75:84:e7:37:9b:e4:4d:d9:e3:1c: 9b:d9:6b:48:22:2a:58:28:80:86:85:6f:08:cb:db:2c:58:6b: 5a:e3:3f:16:af:72:e6:e6:6a:54:ff:fc:40:cf:26:43:a5:b7: 1c:ad:9e:e9:87:72:6a:f3:9d:ea:e0:2f:21:cc:05:05:f5:bf: 69:8f:9d:7d:29:36:54:2c:a3:90:95:fd:db:a0:6c:fb:29:6c: 7c:21:88:a0:1d:11:41:51:25:e5:c6:69:87:fc:15:87:58:25: 2e:f9:7c:0d:d2:d4:3d:fb:d0:2c:8d:e5:d0:a3:bd:eb:3b:3c: 2d:94:bb:41:72:d3:d5:75:57:1d:87:89:f5:2d:5f:91:e7:51: 53:ca:09:ae:c3:32:2a:f7:4f:75:4f:87:5a:19:cd:72:10:73: 1e:83:b7:7b:c7:e7:b1:7b:34:9d:64:32:5c:3b:59:99:2e:12: 03:eb:45:f5:15:1d:cf:7e:86:40:21:bc:ea:ec:51:d3:a4:ce: 5b:d3:e9:24:a4:c8:20:f6:27:c4:8c:2f:76:cd:b8:ea:de:4b: b8:5c:a1:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqFKMNQ20ghEPn2VqnHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmIyODQ2ZjA5M2JjOTQxNjA0MWJlNjhhMmM3ODMxNjFl YjA0ZGYwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EygxMWMwNzY4MDI1ODZiODkyYmNhOWYzOWE5ODljZjdkODNjOTAzMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Bebx38DgAYHQwG5dwhb9ptpApo kDcsOFjpbUYCEquVHC26zQQOj8OKs7KgaPkIbuEDTOwyg8rzOaed2emjQNaQmF4s J/4DFqbPs2kG6EAEcZPatiuTZ6eTTCn2iQawQ3UUO9bbldw6osEiTFlMlf9UYSQZ OzZQveKEqyU8vYfdMf2J32xHr9fM1gN35oI8dW8OAaDZc7rRWdySZg/5XSjeRSol vcws/7uzPgcrqPhhCqv3mXIvSaF9vs+ARnrI9Fauq6A3gF4rmHLRQR9HFWOndUNH chLw1NebXZQc4HpiLuZf6QUzPN+bfdxWaq5DBfWeVL+ReLbkDYDuy9pZ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHAdoAlhriSvKnzmpic99g8kDLsMB8GA1UdIwQY MBaAFNgrKEbwk7yUFgQb5ooseDFh6wTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgt NTQ3M2VlMWRhYTliLzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81YjJkNmUtODI0Ny00NDhmLWEzNTgtNTQ3M2VlMWRhYTli LzEvMkNzb1J2Q1R2SlFXQkJ2bWlpeDRNV0hyQk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjzNyFDn MP8/IE7L3lKJGE3krg6RUbaqS1hX0+vyHKMbnbytAl0C+UnvUO51hOc3m+RN2eMc m9lrSCIqWCiAhoVvCMvbLFhrWuM/Fq9y5uZqVP/8QM8mQ6W3HK2e6YdyavOd6uAv IcwFBfW/aY+dfSk2VCyjkJX926Bs+ylsfCGIoB0RQVEl5cZph/wVh1glLvl8DdLU PfvQLI3l0KO96zs8LZS7QXLT1XVXHYeJ9S1fkedRU8oJrsMyKvdPdU+HWhnNchBz HoO3e8fnsXs0nWQyXDtZmS4SA+tF9RUdz36GQCG86uxR06TOW9PpJKTIIPYnxIwv ds246t5LuFyhZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:55 2025 by rpki-client