This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json) Hash identifier: v8TYLdTR2PkWnWZmL6BJHoM5RKEBZN9cTr9JMvsQBe0= Subject key identifier: E8:64:24:AE:2F:ED:20:C0:AA:C5:00:3F:10:7E:2F:AA:F8:E4:91:72 Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Certificate serial: 019AF6F963E22C8B3098639350167F6FBFAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft Manifest number: 06E8 Signing time: Sun 07 Dec 2025 04:02:10 +0000 Manifest this update: Sun 07 Dec 2025 04:02:10 +0000 Manifest next update: Mon 08 Dec 2025 04:02:10 +0000 Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: FcwihWNWT5KgMJreLYMXm6whPBdX5dTt7vEJAa7rAqU=) 2: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:63:e2:2c:8b:30:98:63:93:50:16:7f:6f:bf:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Validity Not Before: Dec 7 04:02:10 2025 GMT Not After : Dec 8 04:02:10 2025 GMT Subject: CN=e86424ae2fed20c0aac5003f107e2faaf8e49172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e4:02:22:8c:82:b8:83:cb:8c:fe:a8:de:a2: c5:cd:b6:45:4d:a4:2e:57:0c:49:9c:c4:8e:9e:72: 9f:62:84:9b:fe:da:42:68:20:cc:1d:8c:87:1f:ae: 56:49:c7:7f:35:a6:c0:9d:df:f5:7d:08:c5:51:ca: 68:37:59:7a:d4:8d:e7:8c:e0:08:df:72:63:44:6f: 82:a2:c4:e8:ca:24:5b:95:0a:90:54:51:55:2a:76: 05:e9:b2:5d:8b:4f:b4:94:07:a6:b6:ae:1c:98:07: 1e:63:62:09:4a:d2:98:6a:de:15:4d:fb:26:55:67: e3:fc:61:cd:ff:4f:4d:05:77:57:a8:af:c6:13:3a: d1:a6:5b:3d:9f:11:da:62:1c:99:67:29:2d:51:f8: 23:1c:a8:38:69:57:ef:e3:f5:4d:55:76:ab:93:5d: 5c:47:4b:e6:ea:ea:2a:e1:4a:f1:cf:16:ac:ac:25: 3b:6a:94:61:a1:e0:8c:44:ce:fc:46:dd:90:85:a4: 68:c1:d5:56:ec:4f:d3:24:72:1e:a9:b1:b4:34:a9: 18:6e:4f:6c:d3:f5:cd:d9:e1:79:c2:e5:b9:48:ed: 74:e2:c7:cb:37:db:43:ac:4d:9c:b9:c6:4e:2f:fa: ce:06:89:72:f1:55:4f:a4:dc:5d:30:b5:7f:bf:1a: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:64:24:AE:2F:ED:20:C0:AA:C5:00:3F:10:7E:2F:AA:F8:E4:91:72 X509v3 Authority Key Identifier: keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e9:cb:e3:33:e8:a4:c7:21:cb:c2:be:6f:8e:8f:ac:8c:fd: 35:9c:1e:f6:aa:8c:8d:3c:05:7f:f9:b3:f6:15:7d:98:85:85: 4f:14:c5:e6:5b:6b:d3:8d:39:95:71:62:48:81:cf:2a:57:7f: 1b:a1:4d:11:fb:dc:8e:ed:8b:c7:57:e1:8f:67:d1:6e:4e:e1: 8c:37:84:bd:3f:53:d8:c1:89:f2:aa:64:1a:16:90:68:07:e4: 0e:2b:30:83:cb:25:b0:ea:6a:6e:12:b4:6b:72:fb:08:53:14: 5c:51:30:6d:d1:e0:92:89:d4:c6:9e:d2:38:de:d3:ce:9b:ca: 65:03:a3:94:4e:31:c9:8c:50:cd:dd:b9:67:a2:5f:e5:fb:48: 83:a5:d2:1d:6c:8a:85:54:43:62:23:fa:f2:e9:80:d4:f6:da: 50:1b:b0:a3:93:e9:ec:90:5d:84:23:28:fd:5c:3d:fe:2e:c6: f3:99:51:67:e9:1a:ae:53:b3:9f:3e:c0:7f:be:f7:77:db:73: 50:c2:e3:c5:8e:1e:71:19:9a:97:ce:df:50:eb:53:3f:e0:05: 75:d7:e8:a6:9a:d9:5e:45:9c:38:69:93:b3:1b:8c:ee:5e:26: db:63:80:e4:d2:30:cf:ca:53:1d:1c:95:60:85:5b:c3:0d:9c: eb:f0:38:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+WPiLIswmGOTUBZ/b7+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5 ZTQ3YTAwHhcNMjUxMjA3MDQwMjEwWhcNMjUxMjA4MDQwMjEwWjAzMTEwLwYDVQQD EyhlODY0MjRhZTJmZWQyMGMwYWFjNTAwM2YxMDdlMmZhYWY4ZTQ5MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+QCIoyCuIPLjP6o3qLFzbZFTaQu VwxJnMSOnnKfYoSb/tpCaCDMHYyHH65WScd/NabAnd/1fQjFUcpoN1l61I3njOAI 33JjRG+CosToyiRblQqQVFFVKnYF6bJdi0+0lAemtq4cmAceY2IJStKYat4VTfsm VWfj/GHN/09NBXdXqK/GEzrRpls9nxHaYhyZZyktUfgjHKg4aVfv4/VNVXark11c R0vm6uoq4UrxzxasrCU7apRhoeCMRM78Rt2QhaRowdVW7E/TJHIeqbG0NKkYbk9s 0/XN2eF5wuW5SO104sfLN9tDrE2cucZOL/rOBoly8VVPpNxdMLV/vxqzBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhkJK4v7SDAqsUAPxB+L6r45JFyMB8GA1UdIwQY MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt MjAyYTA5ODBjMTc2LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2 LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOnL4zPo pMchy8K+b46PrIz9NZwe9qqMjTwFf/mz9hV9mIWFTxTF5ltr0405lXFiSIHPKld/ G6FNEfvcju2Lx1fhj2fRbk7hjDeEvT9T2MGJ8qpkGhaQaAfkDiswg8slsOpqbhK0 a3L7CFMUXFEwbdHgkonUxp7SON7TzpvKZQOjlE4xyYxQzd25Z6Jf5ftIg6XSHWyK hVRDYiP68umA1PbaUBuwo5Pp7JBdhCMo/Vw9/i7G85lRZ+karlOznz7Af773d9tz UMLjxY4ecRmal87fUOtTP+AFddfopprZXkWcOGmTsxuM7l4m22OA5NIwz8pTHRyV YIVbww2c6/A4jw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:18 2025 by rpki-client