This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json) Hash identifier: oGBT5WsoAx/5hS+gO6ivmlinDuxq3622RjqNsuDXfN4= Subject key identifier: 10:2E:51:E5:F9:6C:EA:17:C7:EB:33:21:83:04:53:FB:63:7F:88:8E Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Certificate serial: 019AF31B9B3919642A10179CC1270CACE45D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft Manifest number: 15F9 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: zfHESoMmmHHan36jo5HJw3DL9BUAbLQeY0WemscpQxM=) 2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=) 3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=) 4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9b:39:19:64:2a:10:17:9c:c1:27:0c:ac:e4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=102e51e5f96cea17c7eb3321830453fb637f888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:4b:13:e6:8b:2c:fc:ea:67:16:20:0b:d6: c6:13:8c:04:63:96:9a:98:a1:7c:8f:83:e4:ef:a6: 80:11:93:9c:d6:08:11:be:bf:10:73:85:ad:3f:22: 71:c3:27:3c:1a:15:e2:12:3b:3a:76:cc:6a:eb:3d: 8a:f4:95:5f:7d:8a:19:89:da:d2:02:e7:46:02:06: 97:0e:57:6e:71:d6:e8:cf:04:4e:2d:40:8e:5c:73: 70:3b:06:12:8b:7a:f0:8f:26:be:2f:6c:11:a3:4f: fd:78:e7:a9:34:35:93:9d:46:07:b7:9d:47:28:ae: a4:19:02:f6:8a:51:77:bb:08:a5:90:23:f4:6f:29: 2e:01:13:d2:c4:7f:87:df:2f:36:d2:7e:f3:70:ca: a2:fc:e2:b0:d6:80:b9:61:98:2b:5d:dd:3a:ec:cd: dc:dc:9a:db:7d:6e:8b:55:09:be:8d:b6:c7:7d:8b: 5c:59:4a:fe:bc:7f:35:1e:41:64:35:ec:d6:93:b3: 1c:68:d6:c0:ab:43:e0:2d:f4:19:3a:9a:54:46:8b: 95:2c:5b:8b:f2:c9:6c:cd:a9:15:08:1d:f3:e5:1d: f8:93:6c:87:50:e6:89:84:b5:8e:0d:1f:0d:10:35: e5:2e:60:c0:8b:bb:1d:f3:5b:e7:92:8d:9f:80:59: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2E:51:E5:F9:6C:EA:17:C7:EB:33:21:83:04:53:FB:63:7F:88:8E X509v3 Authority Key Identifier: keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:fa:fc:82:76:ba:04:e1:ca:19:44:70:90:8e:e7:73:c4:c0: 46:8c:8b:a1:b1:36:1e:00:56:2a:41:9c:a7:68:2d:29:e7:d0: d8:8a:80:e2:16:0d:5f:14:43:05:b7:27:a6:30:d2:a3:2b:b2: b7:6c:52:4a:3f:d9:b3:99:e7:a1:37:d6:25:20:6b:6d:0b:55: ad:b8:2d:8e:9b:39:69:e6:bf:95:dd:e5:50:7e:5e:5b:c3:22: e4:78:e2:3e:83:75:d2:09:6d:69:3d:d7:2c:dc:bd:0d:e9:13: b7:ec:01:86:52:d6:7c:88:b5:35:ce:b4:8a:4b:3d:8a:74:12: e3:b2:af:f0:be:ab:f7:39:90:8c:b3:a4:ee:3a:7c:34:86:8f: 69:09:e9:e9:82:5a:13:23:46:72:26:7b:54:98:fd:f5:e1:76: c5:a1:11:fb:f7:50:ad:3a:68:25:d9:4d:f2:45:dc:f2:4c:8b: 51:81:a5:83:22:3f:f1:62:59:af:b1:8f:cb:7a:45:f2:73:d9: 8f:d5:7b:bd:55:aa:a7:62:32:39:a0:08:9e:12:5f:5c:e1:5a: e1:7d:c7:f8:bc:4a:99:68:74:72:dc:9d:33:cf:53:2c:20:ba: 1e:fa:6f:35:6d:b6:0d:94:a8:8b:30:bf:30:e5:97:6b:f7:ae: 05:0a:fc:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5s5GWQqEBecwScMrORdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll YmVmMTMwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EygxMDJlNTFlNWY5NmNlYTE3YzdlYjMzMjE4MzA0NTNmYjYzN2Y4ODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5NLE+aLLPzqZxYgC9bGE4wEY5aa mKF8j4Pk76aAEZOc1ggRvr8Qc4WtPyJxwyc8GhXiEjs6dsxq6z2K9JVffYoZidrS AudGAgaXDlducdbozwROLUCOXHNwOwYSi3rwjya+L2wRo0/9eOepNDWTnUYHt51H KK6kGQL2ilF3uwilkCP0bykuARPSxH+H3y820n7zcMqi/OKw1oC5YZgrXd067M3c 3JrbfW6LVQm+jbbHfYtcWUr+vH81HkFkNezWk7McaNbAq0PgLfQZOppURouVLFuL 8slszakVCB3z5R34k2yHUOaJhLWODR8NEDXlLmDAi7sd81vnko2fgFmDawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAuUeX5bOoXx+szIYMEU/tjf4iOMB8GA1UdIwQY MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut ZGUyZGUxNWY5MGVkLzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5fr8gna6 BOHKGURwkI7nc8TARoyLobE2HgBWKkGcp2gtKefQ2IqA4hYNXxRDBbcnpjDSoyuy t2xSSj/Zs5nnoTfWJSBrbQtVrbgtjps5aea/ld3lUH5eW8Mi5HjiPoN10gltaT3X LNy9DekTt+wBhlLWfIi1Nc60iks9inQS47Kv8L6r9zmQjLOk7jp8NIaPaQnp6YJa EyNGciZ7VJj99eF2xaER+/dQrTpoJdlN8kXc8kyLUYGlgyI/8WJZr7GPy3pF8nPZ j9V7vVWqp2IyOaAInhJfXOFa4X3H+LxKmWh0ctydM89TLCC6HvpvNW22DZSoizC/ MOWXa/euBQr8zg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:45 2025 by rpki-client