This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json) Hash identifier: JwH898+7OBycbfuwzfM19X5LxarUzyf5AoHji8PXtmA= Subject key identifier: D7:59:D4:7E:54:DE:66:F9:91:B6:17:F7:00:75:49:37:F5:72:3B:1E Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68 Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68 Certificate serial: 019AF23F9141A0F1EA5D34F90CCE48796F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: HhNavLZU7IZLamyGJg+ffQeYUMaLr1RzfQs50cVsK+0=) 2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:91:41:a0:f1:ea:5d:34:f9:0c:ce:48:79:6f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=d759d47e54de66f991b617f700754937f5723b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:7e:fc:bb:6b:8b:60:7f:fd:70:fd:1a:76: e7:6e:71:81:22:92:a7:fe:0f:ba:2d:1a:54:13:8d: af:e6:72:64:5f:1b:0c:99:56:05:be:ce:de:d5:0c: 7d:47:3b:54:cc:18:79:2c:67:a1:05:7b:5e:8a:d7: 49:e2:42:00:01:6b:e4:44:3b:79:8c:ca:32:ed:2e: 5e:68:f1:a2:f5:11:8a:67:66:28:95:14:5a:36:58: 61:f1:4d:c1:08:70:48:f6:3e:0a:2f:cf:89:71:45: 87:57:9d:55:6a:e3:7f:93:e6:fc:ea:00:8e:3c:12: b2:6a:de:93:f1:15:25:98:de:10:fb:80:57:5a:9f: 16:8a:6a:0b:7e:5b:15:7c:70:77:f2:c8:94:6b:5c: 9d:d8:f8:a9:e8:70:4d:0c:ee:e7:77:73:d6:ca:95: 30:b6:52:33:9f:a9:97:8b:ad:77:c2:3e:5f:3e:b9: 23:24:0b:e8:0a:83:2b:38:9c:90:09:63:a0:31:0b: 02:d1:38:c0:c3:eb:a3:83:2e:52:cc:67:65:fe:ff: 78:ab:49:d9:c0:02:b7:70:82:56:f5:8d:4a:f7:9a: d6:d9:81:32:af:10:a1:34:54:fa:b3:21:39:fb:d2: de:78:f9:12:77:a7:12:3b:30:7b:c3:4b:c2:52:c1: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:59:D4:7E:54:DE:66:F9:91:B6:17:F7:00:75:49:37:F5:72:3B:1E X509v3 Authority Key Identifier: keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8e:f0:e2:b5:b0:ad:2b:89:f5:bc:b9:bb:6d:6a:1b:e5:ca: 2d:2e:d4:95:9c:3c:c9:1c:ff:a4:70:0e:47:ac:14:bf:f2:56: 46:8b:0f:a8:f0:93:c1:39:6d:c9:7c:63:94:1e:3e:9e:73:ea: 08:e0:30:e9:d4:39:4c:09:c3:9f:1f:1e:fb:ff:21:84:f5:0a: 9a:9e:fe:1d:9f:49:30:94:9e:91:4f:36:d8:56:b8:df:10:35: 34:c2:21:13:09:b6:98:e3:2f:16:1f:76:b3:af:0d:c3:11:59: 0e:90:d7:7a:13:ba:fe:95:6d:86:9f:5d:42:2c:59:9a:7d:32: 86:01:0d:1e:7f:49:25:7e:e6:9c:f6:f2:8f:e7:c7:f8:31:fc: 94:c1:0b:6a:f5:2f:e7:e3:db:00:b0:e7:e8:41:0e:e5:46:6f: 7c:c6:bb:98:dd:2f:35:98:28:7f:fc:7e:a7:e7:f9:b5:a6:04: b0:86:56:8d:e5:39:06:39:d6:e5:2a:25:96:78:b4:e8:76:a7: 74:ad:6b:e3:78:55:b9:46:68:2b:1a:d3:70:8e:9e:fc:cb:85: 30:33:47:3f:3b:62:0b:5b:3c:c9:8a:46:86:10:70:3a:c5:b8: 6e:0c:e6:8b:96:3b:fc:0d:72:4c:f5:de:6f:34:10:f3:6c:63: a3:40:b4:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5FBoPHqXTT5DM5IeW9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDczZDA2YjU4NjUyZjg0OWZhOGJjZjNjZWM2Yjk1MDkw OWJkNjgwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhkNzU5ZDQ3ZTU0ZGU2NmY5OTFiNjE3ZjcwMDc1NDkzN2Y1NzIzYjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk9+/Ltri2B//XD9GnbnbnGBIpKn /g+6LRpUE42v5nJkXxsMmVYFvs7e1Qx9RztUzBh5LGehBXteitdJ4kIAAWvkRDt5 jMoy7S5eaPGi9RGKZ2YolRRaNlhh8U3BCHBI9j4KL8+JcUWHV51VauN/k+b86gCO PBKyat6T8RUlmN4Q+4BXWp8WimoLflsVfHB38siUa1yd2Pip6HBNDO7nd3PWypUw tlIzn6mXi613wj5fPrkjJAvoCoMrOJyQCWOgMQsC0TjAw+ujgy5SzGdl/v94q0nZ wAK3cIJW9Y1K95rW2YEyrxChNFT6syE5+9LeePkSd6cSOzB7w0vCUsHFPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdZ1H5U3mb5kbYX9wB1STf1cjseMB8GA1UdIwQY MBaAFNgHPQa1hlL4SfqLzzzsa5UJCb1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUt MjMyOWQ3OWM0YWUzLzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUtMjMyOWQ3OWM0YWUz LzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY7w4rWw rSuJ9by5u21qG+XKLS7UlZw8yRz/pHAOR6wUv/JWRosPqPCTwTltyXxjlB4+nnPq COAw6dQ5TAnDnx8e+/8hhPUKmp7+HZ9JMJSekU822Fa43xA1NMIhEwm2mOMvFh92 s68NwxFZDpDXehO6/pVthp9dQixZmn0yhgENHn9JJX7mnPbyj+fH+DH8lMELavUv 5+PbALDn6EEO5UZvfMa7mN0vNZgof/x+p+f5taYEsIZWjeU5BjnW5Sollni06Han dK1r43hVuUZoKxrTcI6e/MuFMDNHPztiC1s8yYpGhhBwOsW4bgzmi5Y7/A1yTPXe bzQQ82xjo0C0og== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:42 2025 by rpki-client