This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json) Hash identifier: d8VjqkrT3JItN72OBG3Djlbf4qbeXpXLwHnmhsr6XeI= Subject key identifier: 43:FA:68:7F:6E:7B:57:38:5D:51:DA:87:74:DE:3D:D7:10:8F:11:03 Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd Certificate serial: 019AF19B13D13C38318C01C8D8F28B6AE0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft Manifest number: 16BB Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: 8QpgKUV3/SRA6Kvldk+hoe5m5W958xJV9RpBVQIxJvE=) 2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:13:d1:3c:38:31:8c:01:c8:d8:f2:8b:6a:e0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=43fa687f6e7b57385d51da8774de3dd7108f1103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:ac:b5:eb:55:d6:b2:63:af:15:f9:cd:f7: c0:f0:76:3a:2e:33:89:34:0b:30:c5:22:d6:21:3b: 8c:97:1d:e3:f9:8f:ad:19:14:2d:b3:9b:9e:19:5d: 76:70:5f:66:a1:2d:0a:2e:c9:f2:50:ef:c6:1e:52: f0:63:d8:6c:1d:c6:5b:a6:a5:ff:d3:11:f9:36:ea: 32:fe:a4:e0:c9:eb:46:c1:85:9b:19:72:58:92:a4: 38:2c:98:c3:6e:b5:69:c7:d7:ba:6d:9f:3f:d0:2d: 73:58:9a:42:94:b3:b3:b7:38:32:d7:3d:d4:38:c7: 21:5c:75:cb:3c:ae:e9:f0:ad:34:3c:f2:51:a0:62: bf:17:07:a4:6a:74:13:4a:52:18:61:30:a0:d4:4e: ee:18:63:9e:f8:56:9e:0f:cf:05:5b:10:90:8a:2b: 06:54:cf:55:5e:db:74:85:57:fe:03:4f:69:11:a5: b1:25:52:d1:83:e4:96:9e:01:72:8c:6e:37:60:fb: 19:b5:d4:e9:74:4b:93:38:f4:53:44:69:8c:5e:7e: ed:fa:00:23:d6:25:01:ef:f2:0f:bc:1a:99:f8:74: 16:f5:6c:28:2f:2c:03:8c:3f:de:db:54:9e:08:88: b2:b8:bf:67:3a:a1:f7:5c:bc:b9:a2:75:f8:8d:67: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:68:7F:6E:7B:57:38:5D:51:DA:87:74:DE:3D:D7:10:8F:11:03 X509v3 Authority Key Identifier: keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3f:1e:09:c6:6c:b3:43:8e:6e:a2:9c:0e:c1:83:52:98:a7: fe:d1:7e:d7:07:6c:f4:fd:4f:49:9c:34:b1:9b:fd:b3:74:3f: 20:b0:b2:8b:a6:19:60:f1:60:6c:ae:13:13:ae:dc:64:65:7e: 20:c4:c9:a6:b8:c5:1a:a0:c9:d5:00:73:6d:f4:6a:6c:7f:6e: 72:7e:dc:b8:4f:a4:34:8f:72:9d:4a:09:64:06:85:dc:ff:94: b4:96:cc:d4:28:3d:26:59:7d:e7:ea:08:b8:8e:17:0b:2a:53: 80:a0:8d:b6:e5:90:22:21:d1:db:79:44:7e:97:53:ed:70:7e: 79:84:a8:ed:a4:34:f5:31:e6:77:98:8d:91:0e:a7:ff:fc:15: e5:ff:dd:c1:53:24:1d:0a:72:de:06:11:ad:5e:aa:f5:57:43: cc:ab:27:31:c4:99:81:43:b6:24:46:51:b6:7c:2a:d4:0a:e1: b0:65:34:94:c8:14:61:89:4e:68:00:9c:ec:cb:1c:3f:cf:27: 40:13:68:bf:6b:e5:8d:9c:07:51:07:92:82:26:f3:69:25:ea: df:02:e1:39:a0:b6:03:bb:e4:33:81:79:b6:1d:1c:2e:ba:3b: 64:27:a7:1a:e3:1f:98:d8:ff:cc:1a:6d:30:d8:60:90:58:32: 80:f2:b4:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxPRPDgxjAHI2PKLauDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5 MzAyZmQwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD Eyg0M2ZhNjg3ZjZlN2I1NzM4NWQ1MWRhODc3NGRlM2RkNzEwOGYxMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVistetV1rJjrxX5zffA8HY6LjOJ NAswxSLWITuMlx3j+Y+tGRQts5ueGV12cF9moS0KLsnyUO/GHlLwY9hsHcZbpqX/ 0xH5Nuoy/qTgyetGwYWbGXJYkqQ4LJjDbrVpx9e6bZ8/0C1zWJpClLOztzgy1z3U OMchXHXLPK7p8K00PPJRoGK/FwekanQTSlIYYTCg1E7uGGOe+FaeD88FWxCQiisG VM9VXtt0hVf+A09pEaWxJVLRg+SWngFyjG43YPsZtdTpdEuTOPRTRGmMXn7t+gAj 1iUB7/IPvBqZ+HQW9WwoLywDjD/e21SeCIiyuL9nOqH3XLy5onX4jWdczQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP6aH9ue1c4XVHah3TePdcQjxEDMB8GA1UdIwQY MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt Y2NlYWViNWQyZGI5LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5 LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAST8eCcZs s0OObqKcDsGDUpin/tF+1wds9P1PSZw0sZv9s3Q/ILCyi6YZYPFgbK4TE67cZGV+ IMTJprjFGqDJ1QBzbfRqbH9ucn7cuE+kNI9ynUoJZAaF3P+UtJbM1Cg9Jll95+oI uI4XCypTgKCNtuWQIiHR23lEfpdT7XB+eYSo7aQ09THmd5iNkQ6n//wV5f/dwVMk HQpy3gYRrV6q9VdDzKsnMcSZgUO2JEZRtnwq1ArhsGU0lMgUYYlOaACc7MscP88n QBNov2vljZwHUQeSgibzaSXq3wLhOaC2A7vkM4F5th0cLro7ZCenGuMfmNj/zBpt MNhgkFgygPK0fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:21 2025 by rpki-client