This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json) Hash identifier: MS83jZZ2c2ta5wgoNHQbSO3vYPU2KhwbUr7OdxS0ack= Subject key identifier: 1D:FF:EA:4B:02:0E:32:50:35:34:46:A6:E4:8E:09:77:72:07:CC:6D Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Certificate serial: 019B2EFA0D5B0B0DC805DF1EF96FAAB050E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft Manifest number: 06B6 Signing time: Thu 18 Dec 2025 01:01:37 +0000 Manifest this update: Thu 18 Dec 2025 01:01:37 +0000 Manifest next update: Fri 19 Dec 2025 01:01:37 +0000 Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: mBk/LUmxpCeVr18LMXdeUIdWTNG8JqZRxSxaF5WlfkE=) 2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:0d:5b:0b:0d:c8:05:df:1e:f9:6f:aa:b0:50:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7 Validity Not Before: Dec 18 01:01:37 2025 GMT Not After : Dec 19 01:01:37 2025 GMT Subject: CN=1dffea4b020e3250353446a6e48e09777207cc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:f7:65:87:c1:dd:05:3d:11:e1:c0:79:5d: b4:29:3f:d5:34:1e:98:dd:3f:2e:a9:5a:9d:52:48: 08:a3:7c:99:69:cd:7c:c2:7a:0d:7b:c3:71:1e:c8: ce:65:3e:bb:9d:75:99:1a:6c:4e:4e:c7:2f:4f:27: d1:34:e5:15:a1:64:1d:e2:cb:95:60:7a:6f:0f:aa: 6f:2a:ef:cd:f2:d7:fc:84:3c:86:0a:a0:91:30:71: f2:9d:53:ed:0e:33:f9:58:6f:09:3a:8f:81:a3:08: f9:c5:b9:5e:aa:e4:96:1a:f3:0f:c2:44:2d:93:44: 40:97:f9:6d:7d:30:dd:72:50:11:6a:4a:96:90:5f: 8a:f0:58:0a:66:ec:95:d6:a6:bb:ad:9d:a0:ae:aa: 86:15:86:47:0e:7a:12:31:4b:24:ae:3d:3d:7b:aa: 3f:c6:33:da:37:b7:2d:a3:e4:0f:ae:4e:22:59:75: f3:0a:af:f2:ca:df:bd:d5:49:c0:97:6d:c6:ec:b7: 05:f9:a4:3f:ea:e7:3a:d9:a6:16:2d:a0:fa:66:bc: 50:39:8b:bb:68:7f:4a:84:11:2d:c4:72:88:18:24: 5c:05:b0:b4:f6:55:7a:50:f5:13:fa:d0:9c:f0:db: 48:24:d9:f7:6e:49:42:cb:bd:15:2a:01:43:ab:51: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FF:EA:4B:02:0E:32:50:35:34:46:A6:E4:8E:09:77:72:07:CC:6D X509v3 Authority Key Identifier: keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:21:c4:10:36:d7:83:71:4c:26:0e:4b:83:98:78:08:ca:2c: e6:ed:ac:4b:be:98:0e:47:52:2f:5f:24:68:c8:ca:5d:62:43: d1:7a:23:a9:f9:15:96:13:3c:f7:1e:1c:50:f8:ae:35:a4:e9: 6a:10:f4:0a:c6:a5:1d:9b:9f:36:39:b9:62:8b:7b:9e:7e:d7: bd:4c:21:6f:3b:1a:07:eb:71:94:15:69:06:4a:43:bc:b6:1e: 07:bd:1a:b1:8f:94:26:cf:99:28:1c:4f:0f:5f:98:6b:3e:c6: b8:79:76:6f:b7:07:a4:56:54:09:0f:99:e5:1c:e0:e1:58:53: 28:af:67:29:ef:78:66:f3:96:92:83:8d:2f:7c:a9:18:80:19: ed:c1:14:4d:9f:b0:35:76:d2:22:84:cb:40:48:7d:bd:6b:60: fc:7d:80:89:64:8c:f6:65:7b:01:9f:c5:52:d9:f0:fb:40:72: 09:16:ef:2a:c8:7d:19:68:cf:c9:99:ae:dc:80:c7:7e:42:a8: 3f:69:5b:c5:92:fa:2d:51:5f:af:01:b6:de:42:e1:43:55:94: f8:16:30:72:ba:74:e8:73:17:b1:b7:cc:1a:1b:14:ff:6d:5a: e6:58:a7:40:4f:db:27:e3:3a:82:4b:64:82:cb:c5:10:f7:d3: 9c:f8:4c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+g1bCw3IBd8e+W+qsFDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWQ4NmEzNTIzOGQ0ZjJlYjYwY2JkMjE0OTVmODFhMzU3 N2MxYTcwHhcNMjUxMjE4MDEwMTM3WhcNMjUxMjE5MDEwMTM3WjAzMTEwLwYDVQQD EygxZGZmZWE0YjAyMGUzMjUwMzUzNDQ2YTZlNDhlMDk3NzcyMDdjYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriz3ZYfB3QU9EeHAeV20KT/VNB6Y 3T8uqVqdUkgIo3yZac18wnoNe8NxHsjOZT67nXWZGmxOTscvTyfRNOUVoWQd4suV YHpvD6pvKu/N8tf8hDyGCqCRMHHynVPtDjP5WG8JOo+Bowj5xblequSWGvMPwkQt k0RAl/ltfTDdclARakqWkF+K8FgKZuyV1qa7rZ2grqqGFYZHDnoSMUskrj09e6o/ xjPaN7cto+QPrk4iWXXzCq/yyt+91UnAl23G7LcF+aQ/6uc62aYWLaD6ZrxQOYu7 aH9KhBEtxHKIGCRcBbC09lV6UPUT+tCc8NtIJNn3bklCy70VKgFDq1G1RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3/6ksCDjJQNTRGpuSOCXdyB8xtMB8GA1UdIwQY MBaAFNmdhqNSONTy62DL0hSV+Bo1d8GnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEt Mzc1N2QxMGQ4ODllLzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEtMzc1N2QxMGQ4ODll LzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSHEEDbX g3FMJg5Lg5h4CMos5u2sS76YDkdSL18kaMjKXWJD0XojqfkVlhM89x4cUPiuNaTp ahD0CsalHZufNjm5Yot7nn7XvUwhbzsaB+txlBVpBkpDvLYeB70asY+UJs+ZKBxP D1+Yaz7GuHl2b7cHpFZUCQ+Z5Rzg4VhTKK9nKe94ZvOWkoONL3ypGIAZ7cEUTZ+w NXbSIoTLQEh9vWtg/H2AiWSM9mV7AZ/FUtnw+0ByCRbvKsh9GWjPyZmu3IDHfkKo P2lbxZL6LVFfrwG23kLhQ1WU+BYwcrp06HMXsbfMGhsU/21a5linQE/bJ+M6gktk gsvFEPfTnPhMfg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:33:47 2025 by rpki-client