This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json) Hash identifier: LtH2qucxMvVdHA3nP8Aata693e9We9Mpl940U+W+Eyg= Subject key identifier: 34:B3:F8:0B:94:1B:10:85:B4:5D:8D:F4:10:96:EF:86:C7:15:1A:09 Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Certificate serial: 019B2EF9871DF1CE22C31B63793FFF8ACDDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft Manifest number: 1618 Signing time: Thu 18 Dec 2025 01:01:03 +0000 Manifest this update: Thu 18 Dec 2025 01:01:03 +0000 Manifest next update: Fri 19 Dec 2025 01:01:03 +0000 Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: efiVQVN8CeQ5ELgjC1/OX9saYJx1zpHBUQZLmcrVwC4=) 2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=) 3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=) 4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:87:1d:f1:ce:22:c3:1b:63:79:3f:ff:8a:cd:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Validity Not Before: Dec 18 01:01:03 2025 GMT Not After : Dec 19 01:01:03 2025 GMT Subject: CN=34b3f80b941b1085b45d8df41096ef86c7151a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:6e:34:3f:14:56:c3:e2:34:5f:1c:4c:89: c9:19:d7:ca:56:f8:a2:ca:2d:1c:76:b2:66:31:72: a9:47:a9:06:bb:07:88:61:8d:43:ca:0b:1e:1e:fc: d3:18:e1:19:bd:a3:07:98:9a:65:50:a9:5d:dd:23: d8:e7:17:64:d9:81:42:42:1c:58:bd:b6:15:e2:4e: c9:e9:d8:e8:e2:6d:05:f1:a0:47:d6:23:49:a4:69: 48:0d:cf:28:2c:92:81:b8:0e:70:6e:85:e1:31:43: ad:b2:f9:d7:b3:ce:af:ea:fe:51:0c:1f:50:91:a6: d9:42:10:a3:b2:a4:30:80:21:62:d2:58:47:a4:d6: 51:c0:8e:f5:9d:c5:ea:56:f8:72:43:30:da:d3:e1: b5:47:75:97:29:1f:4e:4a:13:b4:b8:6a:8d:10:25: 97:6f:a5:44:20:61:1d:a8:2f:e6:0a:06:d6:94:12: 6d:0b:93:00:55:e2:c6:2f:67:6a:d2:8b:bc:af:1e: 26:38:02:ee:2b:9f:7c:63:d0:a5:44:23:2c:6c:9a: 54:17:f7:eb:bb:14:df:51:3d:29:9e:e8:ed:01:e6: a8:ba:69:b7:70:d0:38:dc:93:7c:26:1e:b4:d2:e2: bd:40:28:10:7e:84:e6:77:49:bf:87:16:8b:18:fd: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B3:F8:0B:94:1B:10:85:B4:5D:8D:F4:10:96:EF:86:C7:15:1A:09 X509v3 Authority Key Identifier: keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:08:6e:b7:73:4a:c9:e6:7f:10:09:44:93:54:e4:b7:fb:80: 03:b1:40:9a:a0:9f:e8:52:2f:f1:fa:e5:3f:ac:93:1a:91:7d: 52:21:fc:f3:bb:e9:45:57:d7:d7:4e:5b:14:3d:cb:5e:10:4e: ad:28:9a:50:70:8f:e9:2a:04:3f:34:4a:b7:51:a5:c5:fd:4f: 3b:b7:95:f5:a1:3c:15:e6:d7:44:cc:91:65:c5:ef:5d:03:50: be:35:b5:da:a1:0e:06:7c:59:3d:da:9e:fd:09:b7:88:88:97: c1:7b:a6:da:b9:f5:96:10:b8:bb:35:7c:fe:dd:78:04:c1:dc: 79:85:d5:b7:a6:e8:1e:12:45:dd:01:45:a8:1b:08:db:18:43: 73:ef:3a:32:9f:ab:d1:03:ad:dc:b1:33:5a:26:d1:2d:3a:93: 62:94:99:47:a7:c0:af:6d:fb:cb:9e:83:4e:5c:c7:72:9b:de: 1d:94:8e:f9:d1:9c:ce:05:ba:bc:d9:53:81:bc:96:13:c5:76: 76:9a:56:c4:ef:5b:26:ea:d8:ab:93:e3:80:87:ee:25:ca:ef: ef:a2:5f:29:ca:35:02:a9:5d:ab:dd:a0:bb:12:67:f4:7a:c5: 19:34:32:b7:ad:09:b8:f7:2f:9d:31:ad:df:fe:5d:7a:8a:77: 56:2c:00:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Ycd8c4iwxtjeT//is3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll YmVmMTMwHhcNMjUxMjE4MDEwMTAzWhcNMjUxMjE5MDEwMTAzWjAzMTEwLwYDVQQD EygzNGIzZjgwYjk0MWIxMDg1YjQ1ZDhkZjQxMDk2ZWY4NmM3MTUxYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH1uND8UVsPiNF8cTInJGdfKVvii yi0cdrJmMXKpR6kGuweIYY1DygseHvzTGOEZvaMHmJplUKld3SPY5xdk2YFCQhxY vbYV4k7J6djo4m0F8aBH1iNJpGlIDc8oLJKBuA5wboXhMUOtsvnXs86v6v5RDB9Q kabZQhCjsqQwgCFi0lhHpNZRwI71ncXqVvhyQzDa0+G1R3WXKR9OShO0uGqNECWX b6VEIGEdqC/mCgbWlBJtC5MAVeLGL2dq0ou8rx4mOALuK598Y9ClRCMsbJpUF/fr uxTfUT0pnujtAeaoumm3cNA43JN8Jh600uK9QCgQfoTmd0m/hxaLGP0ELQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSz+AuUGxCFtF2N9BCW74bHFRoJMB8GA1UdIwQY MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut ZGUyZGUxNWY5MGVkLzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzQhut3NK yeZ/EAlEk1Tkt/uAA7FAmqCf6FIv8frlP6yTGpF9UiH887vpRVfX105bFD3LXhBO rSiaUHCP6SoEPzRKt1Glxf1PO7eV9aE8FebXRMyRZcXvXQNQvjW12qEOBnxZPdqe /Qm3iIiXwXum2rn1lhC4uzV8/t14BMHceYXVt6boHhJF3QFFqBsI2xhDc+86Mp+r 0QOt3LEzWibRLTqTYpSZR6fAr237y56DTlzHcpveHZSO+dGczgW6vNlTgbyWE8V2 dppWxO9bJurYq5PjgIfuJcrv76JfKco1Aqldq92guxJn9HrFGTQyt60JuPcvnTGt 3/5deop3ViwAUQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:19 2025 by rpki-client