This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json) Hash identifier: T/HZCnF05QysEIryFe7e/UadtWlAXxxJBwNeOo80rPM= Subject key identifier: 24:E0:84:A4:BC:31:50:C2:A1:13:6C:3F:97:A7:1C:1C:17:E7:CB:FC Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Certificate serial: 019AF088AA2B1C0C7865B3AA98C5311A6141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft Manifest number: 0EB6 Signing time: Fri 05 Dec 2025 22:01:19 +0000 Manifest this update: Fri 05 Dec 2025 22:01:19 +0000 Manifest next update: Sat 06 Dec 2025 22:01:19 +0000 Files and hashes: 1: 1-IgxnHsFK8oFte8N10P7PK5e7cM.roa (hash: ePOdDmBwQlth5xBvng3CM+ctUv7VLk8att4hDe8d3XM=) 2: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=) 3: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: G7JvWJ0O6431Mui7Hl7wMRPmpGus4tWztko9GIoC29Q=) 4: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=) 5: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=) 6: Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa (hash: o0itDHyiOKdFZunGmNw6h8Z1wOF08DEK5D3hH/0u17w=) 7: jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa (hash: gGJ4wMLSXQ4nt3254hCEsSARPmaiHzOwXZG33svfRBY=) 8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:aa:2b:1c:0c:78:65:b3:aa:98:c5:31:1a:61:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Validity Not Before: Dec 5 22:01:19 2025 GMT Not After : Dec 6 22:01:19 2025 GMT Subject: CN=24e084a4bc3150c2a1136c3f97a71c1c17e7cbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:b6:30:4f:16:be:8e:bd:c4:23:43:31:05: 67:6e:05:15:2e:54:b4:85:3c:86:6c:d2:73:57:ef: 19:f7:da:d9:a4:41:84:37:08:ee:8e:2c:0a:2d:0f: 5a:9e:ae:33:76:88:bd:d4:fa:7f:29:5c:e4:1b:8a: 9d:b6:69:f9:69:14:7a:96:db:83:df:f9:24:51:99: d7:85:c3:d4:45:54:d3:36:56:a8:ad:ae:cd:c8:2f: 82:06:fa:20:79:41:e9:0b:a3:28:53:8f:94:b8:55: d3:4b:ad:92:03:28:65:0d:e1:7a:2b:fb:5b:89:c9: 96:0f:a8:2c:a8:ed:d3:7d:7e:5b:8b:cb:2c:4c:83: 81:9b:17:d1:69:12:61:b6:ff:82:71:97:4e:e6:f9: dc:d3:65:14:b4:28:db:e0:cd:1f:59:b7:5d:cc:ef: 86:12:52:8c:e1:64:ba:56:cd:5c:e3:3a:f9:9f:5b: 02:57:a3:45:a1:04:96:7a:75:47:0b:0e:30:a1:81: bf:c6:f2:58:a1:12:78:32:80:d0:cb:61:81:97:7d: ba:62:1d:7e:ff:1b:24:e3:83:a3:3e:f4:30:1f:f2: 9b:a3:f3:1d:87:9b:e2:6a:df:93:f2:89:37:09:ec: 64:5d:0d:8b:f3:e4:66:77:1e:70:43:7b:05:45:4b: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E0:84:A4:BC:31:50:C2:A1:13:6C:3F:97:A7:1C:1C:17:E7:CB:FC X509v3 Authority Key Identifier: keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c3:17:fb:3b:b7:f7:03:71:91:37:34:6d:28:01:01:18:05: 60:2d:2a:70:7d:b3:89:1e:84:6e:03:24:c8:fd:28:88:c0:2c: 51:55:b5:d0:07:0b:ec:08:e2:81:03:bf:cd:d7:c0:39:78:5b: c9:a1:c8:43:fc:db:fb:8f:aa:a3:82:cf:8a:4b:80:b1:91:30: e0:a1:01:47:4a:44:10:8f:ad:31:03:4b:bf:83:84:44:2d:09: b4:87:e2:45:ef:78:9e:04:50:c1:83:d4:77:b4:80:cf:65:15: 0d:c0:29:42:65:e4:51:06:b2:44:4b:29:dc:13:60:6b:30:e1: 66:55:81:8a:61:b8:eb:da:85:6a:58:5b:49:62:d1:f8:cf:55: 87:f3:99:70:81:54:dd:57:9d:b0:47:b7:62:76:62:62:80:4a: 8c:2f:c8:8b:2a:68:62:10:cf:b1:70:d1:60:63:a3:01:96:83: fa:79:90:05:b9:b1:63:34:90:78:ba:bc:9f:92:82:08:e4:32: b9:40:d2:d7:02:3d:28:7d:94:92:b2:0c:e8:f6:17:e6:62:41: f8:01:f4:61:a2:e9:f7:ad:1a:a3:de:24:7b:75:c3:90:27:f3: 46:d2:e6:8a:3c:a4:06:a3:1c:bc:1d:fa:28:44:4e:7e:7c:e4: c0:45:a9:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKorHAx4ZbOqmMUxGmFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw YWI3NzAwHhcNMjUxMjA1MjIwMTE5WhcNMjUxMjA2MjIwMTE5WjAzMTEwLwYDVQQD EygyNGUwODRhNGJjMzE1MGMyYTExMzZjM2Y5N2E3MWMxYzE3ZTdjYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkK2ME8Wvo69xCNDMQVnbgUVLlS0 hTyGbNJzV+8Z99rZpEGENwjujiwKLQ9anq4zdoi91Pp/KVzkG4qdtmn5aRR6ltuD 3/kkUZnXhcPURVTTNlaora7NyC+CBvogeUHpC6MoU4+UuFXTS62SAyhlDeF6K/tb icmWD6gsqO3TfX5bi8ssTIOBmxfRaRJhtv+CcZdO5vnc02UUtCjb4M0fWbddzO+G ElKM4WS6Vs1c4zr5n1sCV6NFoQSWenVHCw4woYG/xvJYoRJ4MoDQy2GBl326Yh1+ /xsk44OjPvQwH/Kbo/Mdh5viat+T8ok3CexkXQ2L8+Rmdx5wQ3sFRUsSgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTghKS8MVDCoRNsP5enHBwX58v8MB8GA1UdIwQY MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt MzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4 LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsMX+zu3 9wNxkTc0bSgBARgFYC0qcH2ziR6EbgMkyP0oiMAsUVW10AcL7AjigQO/zdfAOXhb yaHIQ/zb+4+qo4LPikuAsZEw4KEBR0pEEI+tMQNLv4OERC0JtIfiRe94ngRQwYPU d7SAz2UVDcApQmXkUQayREsp3BNgazDhZlWBimG469qFalhbSWLR+M9Vh/OZcIFU 3VedsEe3YnZiYoBKjC/IiypoYhDPsXDRYGOjAZaD+nmQBbmxYzSQeLq8n5KCCOQy uUDS1wI9KH2UkrIM6PYX5mJB+AH0YaLp960ao94ke3XDkCfzRtLmijykBqMcvB36 KEROfnzkwEWp6g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:10 2025 by rpki-client