This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json) Hash identifier: DdwDjDCMvXAwUbAaQG2JMD69CYFitqv8ZETMAX115PU= Subject key identifier: 62:9A:9E:E6:54:17:2F:A9:93:46:DD:78:4E:F6:97:E3:C0:E1:2A:7D Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Certificate serial: 019AF31C48E6B8241C5AD86C1395879D4CFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 10:01:48 +0000 Manifest this update: Sat 06 Dec 2025 10:01:48 +0000 Manifest next update: Sun 07 Dec 2025 10:01:48 +0000 Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: QpdwlP7/xacClmGk4vksN/8v3Ygg4ePH2XrofOxq7/A=) 2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:48:e6:b8:24:1c:5a:d8:6c:13:95:87:9d:4c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Validity Not Before: Dec 6 10:01:48 2025 GMT Not After : Dec 7 10:01:48 2025 GMT Subject: CN=629a9ee654172fa99346dd784ef697e3c0e12a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ec:ad:17:af:b5:6a:0e:67:c4:64:2a:19:95: fd:c8:e0:0a:d0:83:9e:b0:ca:eb:cf:b6:67:15:5a: 0a:2a:10:34:41:f3:c8:cf:d6:0a:d2:06:87:2e:f7: f1:45:c2:c3:21:04:9a:20:8a:63:62:41:41:54:c3: e2:6d:77:96:5f:b0:d2:f6:58:36:ee:a2:c0:43:15: 9b:4e:ba:a9:54:30:a6:5e:cd:86:4d:83:29:37:af: b3:c9:5d:18:40:04:18:3e:5d:3b:b2:7c:31:e7:4a: fc:1e:71:6d:29:ad:61:cf:2f:51:64:02:29:e9:27: 37:43:2f:3a:a3:33:e0:a6:42:5d:d5:b6:13:83:71: 35:08:f5:59:a0:6c:ed:00:88:1c:e1:9e:68:58:d3: b3:18:83:c3:ca:27:75:bc:2d:8c:81:97:78:62:0f: 85:e9:8b:e0:f4:51:fd:a4:ed:e4:3d:e3:ff:c0:5f: ec:1d:a6:1a:22:36:d7:b8:f4:73:76:03:d0:cb:77: ba:86:18:42:47:d3:59:e8:b0:07:5f:62:c3:d7:04: a9:0d:9f:53:5e:e0:1d:ea:4e:7f:14:19:ef:37:dc: d5:8d:be:e0:5f:40:aa:f8:d4:d1:ba:18:f9:4b:87: 4d:e8:3a:50:9f:ef:3d:64:dd:d2:b1:f5:ef:bd:ac: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9A:9E:E6:54:17:2F:A9:93:46:DD:78:4E:F6:97:E3:C0:E1:2A:7D X509v3 Authority Key Identifier: keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e5:2a:ee:b7:39:9f:7c:d9:fa:5b:a9:f5:11:cf:16:b4:4b: 42:4b:4c:c2:49:e6:39:2f:64:7c:53:73:d0:a2:3e:14:e8:5a: 83:c0:77:2c:b6:97:f9:6d:43:81:da:e9:fa:4e:0a:e9:b2:86: 34:a3:e6:eb:0c:ce:f3:3f:73:65:c2:1c:79:97:f3:de:41:c3: 5c:d5:e1:90:27:62:db:79:4f:5b:cf:50:fd:5c:64:13:86:87: 95:d8:09:39:7b:0a:91:4f:92:58:89:46:61:d6:ad:1f:c8:50: 3c:59:c2:64:f5:fc:08:bd:da:ad:f8:5d:44:bf:f0:e7:51:d2: b8:07:a4:9b:37:0e:58:76:fe:86:6c:14:9d:a5:5c:1a:66:31: 22:b0:e0:d0:c6:ca:04:42:49:fc:30:93:10:35:b7:d5:b8:7a: 61:75:cd:c6:df:4c:fe:9c:ab:c0:0a:c0:0b:0e:8f:94:72:1c: a7:66:00:04:30:54:16:60:33:ce:c9:5f:67:9d:0a:7a:22:3c: 27:35:10:20:35:91:46:50:aa:dc:d9:28:64:0a:00:63:4e:58: 88:72:28:67:a6:d2:c0:a4:1d:e8:32:6e:63:1b:7a:ce:e6:38: d1:4f:b5:43:19:a3:a4:a8:7e:22:2a:c6:05:5d:bd:09:a5:54: 70:bf:0a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEjmuCQcWthsE5WHnUz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWQ4NmEzNTIzOGQ0ZjJlYjYwY2JkMjE0OTVmODFhMzU3 N2MxYTcwHhcNMjUxMjA2MTAwMTQ4WhcNMjUxMjA3MTAwMTQ4WjAzMTEwLwYDVQQD Eyg2MjlhOWVlNjU0MTcyZmE5OTM0NmRkNzg0ZWY2OTdlM2MwZTEyYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eytF6+1ag5nxGQqGZX9yOAK0IOe sMrrz7ZnFVoKKhA0QfPIz9YK0gaHLvfxRcLDIQSaIIpjYkFBVMPibXeWX7DS9lg2 7qLAQxWbTrqpVDCmXs2GTYMpN6+zyV0YQAQYPl07snwx50r8HnFtKa1hzy9RZAIp 6Sc3Qy86ozPgpkJd1bYTg3E1CPVZoGztAIgc4Z5oWNOzGIPDyid1vC2MgZd4Yg+F 6Yvg9FH9pO3kPeP/wF/sHaYaIjbXuPRzdgPQy3e6hhhCR9NZ6LAHX2LD1wSpDZ9T XuAd6k5/FBnvN9zVjb7gX0Cq+NTRuhj5S4dN6DpQn+89ZN3SsfXvvaxpYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKanuZUFy+pk0bdeE72l+PA4Sp9MB8GA1UdIwQY MBaAFNmdhqNSONTy62DL0hSV+Bo1d8GnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEt Mzc1N2QxMGQ4ODllLzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEtMzc1N2QxMGQ4ODll LzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuUq7rc5 n3zZ+lup9RHPFrRLQktMwknmOS9kfFNz0KI+FOhag8B3LLaX+W1Dgdrp+k4K6bKG NKPm6wzO8z9zZcIceZfz3kHDXNXhkCdi23lPW89Q/VxkE4aHldgJOXsKkU+SWIlG YdatH8hQPFnCZPX8CL3arfhdRL/w51HSuAekmzcOWHb+hmwUnaVcGmYxIrDg0MbK BEJJ/DCTEDW31bh6YXXNxt9M/pyrwArACw6PlHIcp2YABDBUFmAzzslfZ50KeiI8 JzUQIDWRRlCq3NkoZAoAY05YiHIoZ6bSwKQd6DJuYxt6zuY40U+1QxmjpKh+IirG BV29CaVUcL8KNw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:12 2025 by rpki-client