This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json) Hash identifier: c7U2TWfC++5P/ycspOCJpBUJbxoNYHrHpo9QQhXZBkg= Subject key identifier: 58:9C:2C:FD:BE:38:05:D3:01:52:CA:5D:F3:FD:F1:07:98:F0:3A:C5 Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16 Certificate serial: 019AF31BC7745C1B17C74323D349E473990E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft Manifest number: 08FD Signing time: Sat 06 Dec 2025 10:01:15 +0000 Manifest this update: Sat 06 Dec 2025 10:01:15 +0000 Manifest next update: Sun 07 Dec 2025 10:01:15 +0000 Files and hashes: 1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=) 2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: RyEM6+j6+JTHXKuElvz3D2S/tdEZYwa3Q9J8viVTMS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c7:74:5c:1b:17:c7:43:23:d3:49:e4:73:99:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16 Validity Not Before: Dec 6 10:01:15 2025 GMT Not After : Dec 7 10:01:15 2025 GMT Subject: CN=589c2cfdbe3805d30152ca5df3fdf10798f03ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:5b:06:2d:de:16:b2:7b:4d:b3:c1:66:60: 88:c7:d1:dd:90:9b:c6:03:70:4a:db:d3:b9:13:59: a3:6d:40:07:0c:01:8f:c1:95:0e:8a:49:a5:39:5d: a4:66:f5:ee:51:b5:4c:c1:2c:f0:6b:1c:d1:f2:48: 60:21:53:a3:c8:11:81:f7:de:18:58:e6:ab:3d:78: 5a:41:ac:fa:92:c0:e0:72:06:af:f4:cb:f7:42:4c: f2:15:3b:e9:5f:90:c1:53:ad:63:66:1b:9e:1c:fc: 0b:cd:8f:c9:7f:42:68:98:ee:79:3a:e6:e4:51:75: 7e:60:57:72:38:d1:73:3e:fc:ca:bf:63:db:81:99: 1b:01:3f:57:75:86:fb:08:82:58:46:1b:9b:3f:10: 0b:e0:de:63:cf:eb:25:b2:00:1f:04:75:2a:79:3e: 7c:70:6a:f2:a0:6a:5d:6c:7f:3f:93:ae:13:13:03: d9:d6:7e:a2:8d:d5:b5:0a:e4:3b:3f:61:69:ae:5d: f8:1a:14:ec:c8:72:8a:c5:58:fd:fe:65:5d:46:9c: 32:2e:6c:ce:f5:27:97:30:53:73:e3:f1:dc:bf:f1: c9:89:06:8f:66:53:71:5b:b0:9c:1d:49:b1:1c:5e: c2:ea:da:43:b2:16:6c:5a:91:3d:8d:67:d8:c2:89: 97:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9C:2C:FD:BE:38:05:D3:01:52:CA:5D:F3:FD:F1:07:98:F0:3A:C5 X509v3 Authority Key Identifier: keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b5:e9:12:80:79:67:53:26:2f:1c:c9:f3:35:ea:f5:16:76: c1:5f:e8:bd:fc:36:ad:3b:2f:a9:07:d0:6d:6f:1e:72:32:b2: 51:7a:ea:9d:65:90:1f:1a:b1:cf:d0:38:d4:c1:06:8b:7e:ed: 63:4d:7d:d6:0a:2e:15:c4:c7:af:37:53:69:2f:0a:4b:73:52: 81:92:73:d7:f8:9f:d3:9b:e0:d3:84:a5:e8:f6:96:63:ae:74: 26:01:9b:db:17:96:e7:e5:83:90:4f:16:0f:81:35:3e:f4:12: f6:ad:f9:7a:d1:c2:3b:d1:50:a4:aa:df:0e:b0:c5:fc:c4:bd: 1c:6e:54:8b:12:ab:91:59:a0:29:eb:1f:8f:ed:b0:42:bc:83: b6:97:d3:e4:ed:75:9e:a1:b9:7b:ae:12:93:bc:ed:a7:02:e2: 0e:bc:ee:e4:b3:37:07:32:6c:4a:16:aa:75:57:4a:59:52:94: f0:1b:e5:dd:dc:8f:82:48:8b:97:de:43:c4:3a:c2:59:30:47: 1e:3c:fd:34:3b:9b:44:d2:4a:f5:78:90:f8:6d:b9:d8:ef:98: 9e:0e:fe:e7:7b:29:56:d8:80:f8:fa:28:3c:02:f7:98:7c:a2: 7f:b1:46:8a:2c:e7:9a:a2:ee:43:79:13:de:2f:94:c1:cf:ae: 92:ea:b1:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8d0XBsXx0Mj00nkc5kOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMmRhZDQ4MWNiYTU0ODNiYWFiMGQ3YTBjY2RjMWFkZTgz MmFkMTYwHhcNMjUxMjA2MTAwMTE1WhcNMjUxMjA3MTAwMTE1WjAzMTEwLwYDVQQD Eyg1ODljMmNmZGJlMzgwNWQzMDE1MmNhNWRmM2ZkZjEwNzk4ZjAzYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b5bBi3eFrJ7TbPBZmCIx9HdkJvG A3BK29O5E1mjbUAHDAGPwZUOikmlOV2kZvXuUbVMwSzwaxzR8khgIVOjyBGB994Y WOarPXhaQaz6ksDgcgav9Mv3QkzyFTvpX5DBU61jZhueHPwLzY/Jf0JomO55Oubk UXV+YFdyONFzPvzKv2PbgZkbAT9XdYb7CIJYRhubPxAL4N5jz+slsgAfBHUqeT58 cGryoGpdbH8/k64TEwPZ1n6ijdW1CuQ7P2Fprl34GhTsyHKKxVj9/mVdRpwyLmzO 9SeXMFNz4/Hcv/HJiQaPZlNxW7CcHUmxHF7C6tpDshZsWpE9jWfYwomX5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFicLP2+OAXTAVLKXfP98QeY8DrFMB8GA1UdIwQY MBaAFJstrUgculSDuqsNegzNwa3oMq0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMt ODVhMmFlYjA3OThkLzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMtODVhMmFlYjA3OThk LzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbXpEoB5 Z1MmLxzJ8zXq9RZ2wV/ovfw2rTsvqQfQbW8ecjKyUXrqnWWQHxqxz9A41MEGi37t Y0191gouFcTHrzdTaS8KS3NSgZJz1/if05vg04Sl6PaWY650JgGb2xeW5+WDkE8W D4E1PvQS9q35etHCO9FQpKrfDrDF/MS9HG5UixKrkVmgKesfj+2wQryDtpfT5O11 nqG5e64Sk7ztpwLiDrzu5LM3BzJsShaqdVdKWVKU8Bvl3dyPgkiLl95DxDrCWTBH Hjz9NDubRNJK9XiQ+G252O+Yng7+53spVtiA+PooPAL3mHyif7FGiiznmqLuQ3kT 3i+Uwc+ukuqxqw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:06 2025 by rpki-client