This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json) Hash identifier: Kwr4QZjF51vYPHysCsMpJq+G7hqOHnfRXNi60K4Finw= Subject key identifier: 8E:1C:E1:78:05:EA:E1:35:BE:66:57:B7:8F:83:C0:A3:D9:13:35:BD Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7 Certificate serial: 019AF12DED2D3F61A4851041D2167964549D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft Manifest number: 10FE Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: njj5NDZDLqEx5R+jx2AEPuUMOGR2FeSYOC8GrYE63aE=) 2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ed:2d:3f:61:a4:85:10:41:d2:16:79:64:54:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7 Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=8e1ce17805eae135be6657b78f83c0a3d91335bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:f7:15:86:02:3a:6c:ad:b0:69:17:a4:38: dd:41:b8:2a:d7:a5:31:90:a6:44:47:1c:cd:37:a1: 91:16:8d:70:24:75:47:cf:39:5b:a2:ee:06:9d:2f: ce:91:86:b5:f9:ed:70:c4:00:89:dd:6f:e5:bd:6f: 41:de:3c:ca:cd:7f:dc:ec:49:40:1e:70:55:b9:5f: 2d:99:67:e5:6a:b1:f8:c2:d8:c2:a4:aa:59:ce:2c: dc:de:99:23:0f:ce:7c:4f:b1:ab:97:bd:0c:51:41: 10:5c:fe:7a:02:f8:9c:47:48:e9:b4:00:47:f9:03: 0c:c7:4e:66:6c:64:ec:7a:cd:af:a8:90:3c:92:00: dd:d4:90:e8:93:6d:d2:05:84:fc:6b:13:55:c4:b1: bd:a2:64:04:e6:f9:c1:88:c0:8e:12:1c:97:c5:c9: 1f:9e:fc:1f:23:a2:35:c3:68:8a:ff:ce:14:a1:a1: e6:c0:a9:7a:6a:9a:55:0a:a5:68:0f:4c:9a:52:49: ec:7d:eb:47:13:d0:c6:43:af:59:d8:8e:2b:81:68: b5:ee:2a:fb:6a:81:c6:56:2c:42:5e:7b:a2:71:ba: 92:f6:ac:af:4a:a3:4e:0a:0f:05:68:2a:5b:88:54: 48:14:98:08:72:01:72:18:62:be:aa:20:8b:d5:01: 15:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:E1:78:05:EA:E1:35:BE:66:57:B7:8F:83:C0:A3:D9:13:35:BD X509v3 Authority Key Identifier: keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:99:5a:b4:07:58:6a:66:b2:7a:1f:7d:22:e8:dc:11:0b:79: b8:6b:2e:f1:d4:f5:0d:6f:fa:56:d8:48:40:13:5c:75:2f:40: 61:03:e4:1a:25:1b:78:f1:1c:1b:e0:46:fe:3f:95:84:a5:cf: 32:52:71:9e:47:e2:25:3b:8a:e1:3a:f8:24:94:6f:4d:e4:22: 24:e2:79:5e:2d:2a:b4:8d:08:84:3b:d8:d2:97:12:b6:5c:9c: 97:75:c3:f6:e3:6f:36:0b:b7:fe:18:6a:fd:70:b3:61:7b:dd: 9f:1b:e9:e1:2f:d7:1a:a6:97:ce:b7:66:70:8e:6a:d5:5a:a4: e8:4a:2f:9c:fd:0b:d2:3b:f4:4e:2f:5f:90:49:ae:fa:44:43: 40:17:6d:15:73:83:58:db:25:49:9e:3f:49:31:c6:ee:ec:73: e7:cd:c9:63:97:4f:e4:c4:5f:9b:7a:50:c6:e1:a6:6b:93:b5: 31:fe:93:92:56:b9:93:ca:21:8e:cc:f6:aa:5f:75:05:63:51: 64:0b:1f:71:85:f7:ec:28:52:ac:cd:2b:35:b1:d6:07:19:f7: 68:5c:44:43:61:d1:20:ba:48:dc:93:ed:f9:c2:5e:1a:59:87: 17:33:40:5f:20:7f:15:fe:af:ba:98:ff:93:d0:e3:68:76:43: 7d:da:22:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe0tP2GkhRBB0hZ5ZFSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWU1YTRjOWYzMDQ5ODY4MGU0ZDdiNTlkZGIwOGY4MmJj NmY0YzcwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD Eyg4ZTFjZTE3ODA1ZWFlMTM1YmU2NjU3Yjc4ZjgzYzBhM2Q5MTMzNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfr3FYYCOmytsGkXpDjdQbgq16Ux kKZERxzNN6GRFo1wJHVHzzlbou4GnS/OkYa1+e1wxACJ3W/lvW9B3jzKzX/c7ElA HnBVuV8tmWflarH4wtjCpKpZzizc3pkjD858T7Grl70MUUEQXP56AvicR0jptABH +QMMx05mbGTses2vqJA8kgDd1JDok23SBYT8axNVxLG9omQE5vnBiMCOEhyXxckf nvwfI6I1w2iK/84UoaHmwKl6appVCqVoD0yaUknsfetHE9DGQ69Z2I4rgWi17ir7 aoHGVixCXnuicbqS9qyvSqNOCg8FaCpbiFRIFJgIcgFyGGK+qiCL1QEVRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4c4XgF6uE1vmZXt4+DwKPZEzW9MB8GA1UdIwQY MBaAFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMt N2RiOWRmYmM0YWU5LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMtN2RiOWRmYmM0YWU5 LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbplatAdY amayeh99IujcEQt5uGsu8dT1DW/6VthIQBNcdS9AYQPkGiUbePEcG+BG/j+VhKXP MlJxnkfiJTuK4Tr4JJRvTeQiJOJ5Xi0qtI0IhDvY0pcStlycl3XD9uNvNgu3/hhq /XCzYXvdnxvp4S/XGqaXzrdmcI5q1Vqk6EovnP0L0jv0Ti9fkEmu+kRDQBdtFXOD WNslSZ4/STHG7uxz583JY5dP5MRfm3pQxuGma5O1Mf6Tkla5k8ohjsz2ql91BWNR ZAsfcYX37ChSrM0rNbHWBxn3aFxEQ2HRILpI3JPt+cJeGlmHFzNAXyB/Ff6vupj/ k9DjaHZDfdoiCw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:50 2025 by rpki-client