This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json) Hash identifier: JogrjLOpwA7xaoiPOY4ecGV2kn/C10E6jwukx9dNg1A= Subject key identifier: 7F:17:E0:63:4E:E8:FD:AD:AF:0F:9E:FC:AF:0C:2D:BC:CF:E0:87:64 Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0 Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0 Certificate serial: 019AF31D225B1D58D3D06CD5F50BE9F86CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft Manifest number: 0E09 Signing time: Sat 06 Dec 2025 10:02:43 +0000 Manifest this update: Sat 06 Dec 2025 10:02:43 +0000 Manifest next update: Sun 07 Dec 2025 10:02:43 +0000 Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: ovOBYAwAsr4MDzWiO7sS097IQuqcIky4YnRVyjJ0Fic=) 2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=) 3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=) 4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:22:5b:1d:58:d3:d0:6c:d5:f5:0b:e9:f8:6c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0 Validity Not Before: Dec 6 10:02:43 2025 GMT Not After : Dec 7 10:02:43 2025 GMT Subject: CN=7f17e0634ee8fdadaf0f9efcaf0c2dbccfe08764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:8f:97:dd:a6:8a:5a:ba:63:00:49:a5:fa: a3:30:ca:27:69:1a:2c:1d:d4:e1:b4:4d:49:07:5d: 9e:84:fb:1f:49:a4:27:a4:30:72:72:bb:43:4c:a0: b0:b3:49:87:ee:44:eb:0c:bb:88:5c:3e:dc:48:d7: 39:dc:6c:a0:11:b0:19:08:e9:2a:b5:c9:04:a0:44: a5:e9:7a:9d:b2:98:ba:b7:82:98:ed:47:80:0f:e6: 81:3b:d9:c8:b8:90:c4:1f:b8:2c:61:bc:b9:5e:ef: 5b:de:54:f0:43:b1:0c:c8:e7:cf:17:52:0e:ef:c9: cc:9d:09:8a:06:3f:ce:eb:02:46:b3:d5:45:58:d4: 3a:1e:9a:94:83:bd:53:e3:ac:ed:3c:89:68:fc:8a: c6:20:5e:ce:28:eb:59:ed:bb:ff:42:ca:be:b6:ec: 70:fc:f0:d5:50:50:1f:0b:11:02:21:c6:f8:f9:08: b9:e2:c4:3d:a1:51:88:07:8c:9e:e9:ce:de:49:4e: 6d:c6:70:3c:03:70:7e:57:42:22:93:e7:76:33:0e: fa:6d:97:cc:d5:84:a2:9c:c0:b6:52:37:c3:04:e9: 60:c4:cd:57:ba:be:da:70:c6:35:be:24:ae:a2:76: b0:4d:66:8e:c4:97:bf:d2:71:20:b3:f9:4d:b1:6c: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:17:E0:63:4E:E8:FD:AD:AF:0F:9E:FC:AF:0C:2D:BC:CF:E0:87:64 X509v3 Authority Key Identifier: keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:14:4c:3c:27:b0:ac:4a:fe:03:9b:00:ef:8c:4a:68:8c:fd: 1d:b2:11:6c:e6:96:5a:e8:84:4e:b9:ca:3c:b5:70:f3:a6:af: e6:87:00:be:2d:c5:c7:f1:b6:ec:64:12:ef:01:70:94:b2:3d: 72:32:f0:e3:68:db:93:cc:5a:40:d5:1f:bf:6b:ab:96:d5:7c: e8:fe:b0:cd:74:ce:4f:de:41:8d:3a:8b:eb:2c:0c:c5:28:52: 96:1e:64:e1:ec:6c:ac:38:e5:29:e6:21:b3:70:df:b0:59:b9: 2f:1a:4c:7b:dd:40:78:18:0a:75:94:7b:36:01:47:ac:4a:0a: 8c:d4:ec:12:65:86:38:5b:1c:0a:cb:c1:3d:8c:52:58:24:dc: d0:67:90:6c:db:de:d5:a9:c1:36:bb:cf:32:d5:4d:34:9d:4a: 14:8a:56:cf:96:23:cd:ec:65:67:a4:fa:4a:a9:66:46:72:fe: f9:f0:d5:12:d1:da:af:c4:fd:af:15:5c:08:1a:dd:ba:73:f7: f8:eb:24:61:c8:e6:2d:5e:57:a7:0a:7c:49:fa:d7:ec:62:c1: 21:a3:4d:c5:89:3b:fb:6d:02:a8:f5:07:ca:bf:16:4f:01:6d: 0a:34:d0:13:b8:36:ee:b4:cc:ba:5c:23:59:13:fe:bf:03:a5: 2c:d6:a2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSJbHVjT0GzV9Qvp+GylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz NzZlZjAwHhcNMjUxMjA2MTAwMjQzWhcNMjUxMjA3MTAwMjQzWjAzMTEwLwYDVQQD Eyg3ZjE3ZTA2MzRlZThmZGFkYWYwZjllZmNhZjBjMmRiY2NmZTA4NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDKPl92milq6YwBJpfqjMMonaRos HdThtE1JB12ehPsfSaQnpDBycrtDTKCws0mH7kTrDLuIXD7cSNc53GygEbAZCOkq tckEoESl6Xqdspi6t4KY7UeAD+aBO9nIuJDEH7gsYby5Xu9b3lTwQ7EMyOfPF1IO 78nMnQmKBj/O6wJGs9VFWNQ6HpqUg71T46ztPIlo/IrGIF7OKOtZ7bv/Qsq+tuxw /PDVUFAfCxECIcb4+Qi54sQ9oVGIB4ye6c7eSU5txnA8A3B+V0Iik+d2Mw76bZfM 1YSinMC2UjfDBOlgxM1Xur7acMY1viSuonawTWaOxJe/0nEgs/lNsWxEcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8X4GNO6P2trw+e/K8MLbzP4IdkMB8GA1UdIwQY MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct YzgxM2NlMGY1ZTQ3LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3 LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExRMPCew rEr+A5sA74xKaIz9HbIRbOaWWuiETrnKPLVw86av5ocAvi3Fx/G27GQS7wFwlLI9 cjLw42jbk8xaQNUfv2urltV86P6wzXTOT95BjTqL6ywMxShSlh5k4exsrDjlKeYh s3DfsFm5LxpMe91AeBgKdZR7NgFHrEoKjNTsEmWGOFscCsvBPYxSWCTc0GeQbNve 1anBNrvPMtVNNJ1KFIpWz5YjzexlZ6T6SqlmRnL++fDVEtHar8T9rxVcCBrdunP3 +OskYcjmLV5Xpwp8SfrX7GLBIaNNxYk7+20CqPUHyr8WTwFtCjTQE7g27rTMulwj WRP+vwOlLNaiTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:55 2025 by rpki-client