This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: oRmiglDMaAamLOJkVEB365rV7kLFIOtAVTbbuFW9nhk= Subject key identifier: 94:DD:7C:4D:52:83:1F:3A:EF:56:0B:B0:E6:E4:64:C9:3E:4A:0D:38 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019AF0886143CF978FA54085EEB2C077AE7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 0345 Signing time: Fri 05 Dec 2025 22:01:00 +0000 Manifest this update: Fri 05 Dec 2025 22:01:00 +0000 Manifest next update: Sat 06 Dec 2025 22:01:00 +0000 Files and hashes: 1: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: aYrAfGZc+gn+dKizV5Daq1cgJv5qorTHSiKp9OOxPMU=) 2: 7YxrmczVFpaeBMBQOkdecPyU13g.roa (hash: ldyrR2pk0wwrAcATlluvhy35oOBdxvxckCQpFcLrUa0=) 3: IK6BLrV0EEpKCWmR8y07wOSk68U.roa (hash: 2f+csqFlNzMlLrmcJAwXYvsvPfVBQ0wkksbKjz0lRi0=) 4: Z7zYg0UKWOu3I7v4pemSPhkT-8Q.roa (hash: 2HDljRveeQxMYwclc1swW9g1JCkhHlo1eeNjxRkdL8I=) 5: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:61:43:cf:97:8f:a5:40:85:ee:b2:c0:77:ae:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Dec 5 22:01:00 2025 GMT Not After : Dec 6 22:01:00 2025 GMT Subject: CN=94dd7c4d52831f3aef560bb0e6e464c93e4a0d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:74:e3:10:af:13:c3:c2:4d:68:da:0f:21:81: e2:3d:27:e4:5a:d7:0c:54:b1:30:24:29:33:1b:9a: c1:c4:c8:14:38:b7:5b:89:21:5a:ac:c6:b6:0c:15: 9a:0a:d9:fb:c1:3d:fa:28:54:3d:aa:45:09:da:9b: 27:b7:b3:f4:50:f4:5e:a8:2b:28:1a:30:f6:78:64: 0a:b6:52:a4:7a:0e:0a:e4:5b:12:4d:3c:c7:0e:d7: 4e:8f:e6:3d:44:7b:84:86:bc:d5:33:e9:68:67:37: 8a:fd:8c:74:db:db:0d:4e:9b:82:04:4b:6e:08:be: df:2c:33:26:ab:fa:06:9d:b7:52:3f:f6:b3:88:e7: c1:d5:a6:e9:45:04:19:87:2e:ba:aa:9d:92:9d:05: 89:eb:1c:da:2a:65:47:75:77:3b:40:5a:07:b2:41: 8d:35:0f:e0:9b:70:84:59:bc:d9:3f:a1:63:29:4f: b8:b1:4b:79:15:30:38:10:61:ae:77:c1:60:2f:e4: e6:3b:1e:ec:1f:41:50:9b:d1:0a:0e:3f:d5:41:7f: e3:e6:c6:68:8b:ef:ea:ab:ef:00:a5:44:ed:42:48: 3f:9c:99:df:bd:23:98:1c:7b:0d:90:ca:54:39:f7: ba:15:6f:9d:d5:ea:6a:1c:f2:d0:63:5a:f3:28:86: b6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DD:7C:4D:52:83:1F:3A:EF:56:0B:B0:E6:E4:64:C9:3E:4A:0D:38 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a4:37:ff:31:78:03:4a:c1:59:29:68:9b:1d:45:d4:09:f3: a6:e1:11:9c:75:40:32:ee:9a:df:e6:5c:6f:c6:2d:09:99:c1: 28:cd:15:5c:90:a3:14:c8:6e:02:05:3f:34:76:52:f3:f4:36: d7:e2:a8:b8:52:a8:13:f4:27:83:a0:5a:6c:af:23:4a:7c:9e: 20:fb:19:f3:9a:9c:35:ef:48:6d:4d:9c:87:48:6d:a5:11:cc: 39:9c:bf:a1:7e:82:c6:1a:7a:af:42:45:46:1d:a8:5c:2f:3d: 3c:8b:22:d4:20:f6:18:f9:a9:61:e8:ee:e2:d9:85:2a:88:29: b0:89:d8:b1:0b:9a:62:e2:f1:da:24:f8:ce:41:f7:fd:f5:53: 3d:ee:48:73:f3:27:d5:42:48:73:67:1f:ae:34:93:56:24:56: ea:90:8d:0f:f4:0c:94:46:ce:93:37:ce:a3:2c:77:21:27:2a: f9:25:c8:d5:af:43:79:92:ff:60:2c:a8:81:7f:ca:b5:a9:7e: ae:f6:f3:cb:b0:62:24:1e:81:f9:5b:0b:10:ee:c1:35:0a:40: 1d:8f:23:34:12:40:f8:21:59:7a:a8:e5:3c:56:0c:e4:58:23: b1:42:e8:60:8a:cf:e2:e9:1a:64:67:da:39:d1:65:7f:dc:5b: d4:36:84:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGFDz5ePpUCF7rLAd657MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjUxMjA1MjIwMTAwWhcNMjUxMjA2MjIwMTAwWjAzMTEwLwYDVQQD Eyg5NGRkN2M0ZDUyODMxZjNhZWY1NjBiYjBlNmU0NjRjOTNlNGEwZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43TjEK8Tw8JNaNoPIYHiPSfkWtcM VLEwJCkzG5rBxMgUOLdbiSFarMa2DBWaCtn7wT36KFQ9qkUJ2psnt7P0UPReqCso GjD2eGQKtlKkeg4K5FsSTTzHDtdOj+Y9RHuEhrzVM+loZzeK/Yx029sNTpuCBEtu CL7fLDMmq/oGnbdSP/aziOfB1abpRQQZhy66qp2SnQWJ6xzaKmVHdXc7QFoHskGN NQ/gm3CEWbzZP6FjKU+4sUt5FTA4EGGud8FgL+TmOx7sH0FQm9EKDj/VQX/j5sZo i+/qq+8ApUTtQkg/nJnfvSOYHHsNkMpUOfe6FW+d1epqHPLQY1rzKIa2YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTdfE1Sgx8671YLsObkZMk+Sg04MB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6Q3/zF4 A0rBWSlomx1F1AnzpuERnHVAMu6a3+Zcb8YtCZnBKM0VXJCjFMhuAgU/NHZS8/Q2 1+KouFKoE/Qng6BabK8jSnyeIPsZ85qcNe9IbU2ch0htpRHMOZy/oX6Cxhp6r0JF Rh2oXC89PIsi1CD2GPmpYeju4tmFKogpsInYsQuaYuLx2iT4zkH3/fVTPe5Ic/Mn 1UJIc2cfrjSTViRW6pCND/QMlEbOkzfOoyx3IScq+SXI1a9DeZL/YCyogX/Ktal+ rvbzy7BiJB6B+VsLEO7BNQpAHY8jNBJA+CFZeqjlPFYM5FgjsULoYIrP4ukaZGfa OdFlf9xb1DaEBg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:40:39 2025 by rpki-client