This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft File: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json) Hash identifier: ttZztY13p0C7YlLYPWhTCH29QIHoFJcr6cZwU8Z0aLI= Subject key identifier: 69:68:0A:64:5D:72:45:3F:78:2A:61:D7:DC:63:00:78:91:F4:6B:91 Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64 Certificate issuer: /CN=d99becd088794b11daf34c7f54e59f6939fe9864 Certificate serial: 019AF23FE066D05B7C6FB5EC4534BCCC2F1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft Manifest number: 047F Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: iaLsmsQO3wpms4NO+PEJQq1A4iMMD9qcB9tsNfMFwHQ=) 2: P6mLuYTWcn0KuLmD43cJ982GF44.roa (hash: lthkyf0qk/Tj3D6L/66lHDSOVo0evf5q6TD/uKiHGiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e0:66:d0:5b:7c:6f:b5:ec:45:34:bc:cc:2f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=69680a645d72453f782a61d7dc63007891f46b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:57:42:ef:8d:11:63:5a:70:c9:c2:cb:84: 65:58:52:91:6a:7b:d9:60:8f:4d:88:12:37:fb:17: 75:55:24:d5:2e:27:7a:89:ea:01:5b:b4:37:12:68: 02:d7:57:16:6c:a4:26:2f:da:7f:c6:82:92:02:e1: fe:b6:0c:4b:ba:2a:d3:f0:f8:c1:e3:3b:86:b4:a9: 70:fa:5a:f4:c6:05:2d:8f:13:f1:e8:f2:99:97:a2: 5a:b0:f9:d8:54:20:db:87:c8:df:27:ce:9c:dd:ff: 47:fa:bb:7f:73:ed:79:7d:ea:fb:0a:c0:65:f7:80: 09:b3:ab:f8:96:de:54:66:44:84:8b:5b:17:19:ef: 7b:f0:5f:00:51:15:82:91:3c:7d:ac:15:f2:3c:00: c3:ca:3d:8d:3d:23:e3:90:42:30:c9:00:b1:a7:e1: a9:a3:16:00:4e:49:05:97:af:fc:d9:db:88:47:d2: 2d:9d:47:77:f5:56:cb:ed:ef:d7:3c:dc:98:8a:21: a0:fd:23:42:06:61:ea:21:61:7d:1e:88:80:33:b0: 6c:f0:94:30:e2:17:ad:26:97:55:13:26:e5:9b:a0: 1a:38:cb:e2:89:1d:f3:aa:49:a9:f0:c1:ee:58:0b: 51:b9:69:63:85:14:d0:63:1a:13:3a:5a:84:5b:62: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:0A:64:5D:72:45:3F:78:2A:61:D7:DC:63:00:78:91:F4:6B:91 X509v3 Authority Key Identifier: keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a8:14:82:29:a2:f7:07:aa:db:45:b6:a2:36:a0:d2:b9:30: f4:35:8d:56:a8:c2:ff:87:af:51:69:fc:b0:31:d3:9d:7b:e2: b0:4b:a1:2d:b1:61:f4:a6:2d:13:24:ba:5d:ae:06:2d:c3:ec: 8f:2c:e7:63:e4:30:6d:e2:48:c4:5a:62:60:9b:c8:7c:68:49: e7:45:a3:5b:59:a9:dc:b3:33:47:6d:2b:bf:0d:db:c8:3e:46: 5e:b7:2f:3a:63:42:1a:db:9d:be:3a:dc:bb:da:f7:d5:6f:89: de:16:40:a6:5b:96:1e:4f:ca:ac:01:7b:0a:4b:12:d3:6b:d1: 8d:43:60:c9:05:4c:05:c6:ed:34:f3:65:7f:d2:e0:04:e0:fc: 4d:ea:e7:21:e1:44:f9:b2:00:3f:1b:5f:33:42:49:4f:82:37: d2:06:28:eb:2b:60:78:33:41:a7:ae:2e:60:91:f8:36:d3:ef: 05:d2:ec:6c:b6:d8:8b:ec:79:e7:bb:6a:ca:ed:31:4f:8f:69: 2c:54:92:7c:97:9c:a9:b3:ec:61:36:02:85:60:81:d2:ad:0f: e2:15:bc:c1:e5:c8:ae:05:f9:e3:ad:2f:77:21:51:ec:f1:bc: 4e:48:30:db:1e:9e:38:81:a6:15:e5:60:87:89:2e:56:b7:3a: 63:16:84:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+Bm0Ft8b7XsRTS8zC8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWJlY2QwODg3OTRiMTFkYWYzNGM3ZjU0ZTU5ZjY5Mzlm ZTk4NjQwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD Eyg2OTY4MGE2NDVkNzI0NTNmNzgyYTYxZDdkYzYzMDA3ODkxZjQ2YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI9XQu+NEWNacMnCy4RlWFKRanvZ YI9NiBI3+xd1VSTVLid6ieoBW7Q3EmgC11cWbKQmL9p/xoKSAuH+tgxLuirT8PjB 4zuGtKlw+lr0xgUtjxPx6PKZl6JasPnYVCDbh8jfJ86c3f9H+rt/c+15fer7CsBl 94AJs6v4lt5UZkSEi1sXGe978F8AURWCkTx9rBXyPADDyj2NPSPjkEIwyQCxp+Gp oxYATkkFl6/82duIR9ItnUd39VbL7e/XPNyYiiGg/SNCBmHqIWF9HoiAM7Bs8JQw 4hetJpdVEyblm6AaOMviiR3zqkmp8MHuWAtRuWljhRTQYxoTOlqEW2J2mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGloCmRdckU/eCph19xjAHiR9GuRMB8GA1UdIwQY MBaAFNmb7NCIeUsR2vNMf1Tln2k5/phkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2It MjQyYjU4MTQwZTM3LzEvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2ItMjQyYjU4MTQwZTM3 LzEvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6gUgimi 9weq20W2ojag0rkw9DWNVqjC/4evUWn8sDHTnXvisEuhLbFh9KYtEyS6Xa4GLcPs jyznY+QwbeJIxFpiYJvIfGhJ50WjW1mp3LMzR20rvw3byD5GXrcvOmNCGtudvjrc u9r31W+J3hZApluWHk/KrAF7CksS02vRjUNgyQVMBcbtNPNlf9LgBOD8TernIeFE +bIAPxtfM0JJT4I30gYo6ytgeDNBp64uYJH4NtPvBdLsbLbYi+x557tqyu0xT49p LFSSfJecqbPsYTYChWCB0q0P4hW8weXIrgX5460vdyFR7PG8Tkgw2x6eOIGmFeVg h4kuVrc6YxaEGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:01 2025 by rpki-client