This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json) Hash identifier: 6mJsyMVlF7G0UY27XnI4HzxXrG1XL5wXANzTyTaiB8M= Subject key identifier: 14:5A:35:38:59:8F:27:BE:D5:70:21:D2:A1:65:54:D8:1C:DF:6C:41 Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4 Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4 Certificate serial: 019AF088924845FE10888A65D9C6ABF1D40B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft Manifest number: 11D7 Signing time: Fri 05 Dec 2025 22:01:13 +0000 Manifest this update: Fri 05 Dec 2025 22:01:13 +0000 Manifest next update: Sat 06 Dec 2025 22:01:13 +0000 Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: XZU/w6c1fNcPmtq9wFNMJzHduG2nnKG5XU2JGd1A8TQ=) 2: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (hash: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:92:48:45:fe:10:88:8a:65:d9:c6:ab:f1:d4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4 Validity Not Before: Dec 5 22:01:13 2025 GMT Not After : Dec 6 22:01:13 2025 GMT Subject: CN=145a3538598f27bed57021d2a16554d81cdf6c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:fd:e8:c7:30:7d:ea:58:bd:5c:1f:6a:49: 3f:ef:fd:38:4d:3d:ce:c7:73:c5:91:16:18:6e:cb: a2:bf:4b:ec:8d:8a:2b:57:2a:b7:d8:08:60:0b:34: 37:53:64:23:0a:8e:36:3c:bd:18:7b:95:ef:d2:3c: 0a:2b:bf:8b:81:99:2d:4a:16:1d:d7:e9:76:56:e9: 53:f0:65:70:29:04:60:d3:4a:db:21:fd:38:0e:fc: fd:8f:79:20:c8:d3:06:f5:61:8f:72:23:0a:42:64: 10:f9:ac:d3:bf:f0:99:13:7a:9a:4a:52:0c:38:7e: 0d:99:c9:34:ad:28:5f:8a:6f:a7:f2:28:d8:40:03: a3:1b:d9:3c:45:05:0c:e3:d6:35:0a:df:66:23:98: 68:e4:f9:31:dd:63:eb:2b:d3:1f:f1:3c:41:cd:0a: d0:fe:8d:2b:09:ae:44:da:1c:0c:88:ec:0e:6b:8d: 41:5f:b7:71:1e:40:ce:2d:64:23:49:01:c8:4a:b5: 83:42:ea:7a:ad:4e:41:2f:bd:c5:f9:fe:fb:cf:96: bf:ab:d2:b9:8a:64:51:58:04:15:08:a9:ad:fe:44: 1e:d0:05:65:65:57:17:bb:ce:4e:1c:67:94:4c:c0: 6d:73:a4:af:94:f8:4f:f3:0c:17:34:a9:e1:bb:ba: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5A:35:38:59:8F:27:BE:D5:70:21:D2:A1:65:54:D8:1C:DF:6C:41 X509v3 Authority Key Identifier: keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b7:5a:43:e8:a3:8b:93:2f:7b:a7:b9:a3:a3:de:69:8a:3c: cd:eb:42:d0:a4:20:14:bf:d8:08:a3:ac:66:1b:5e:46:89:5a: 6e:95:9a:bb:ff:66:27:e3:4f:d8:10:40:4e:32:6d:b5:f0:94: 03:f8:63:f8:a0:73:90:0f:f3:21:42:1e:65:ed:bd:4d:bf:7a: a7:79:23:4f:a1:a6:29:38:be:5e:d3:b7:a1:50:d9:6d:ba:cb: d8:62:a6:a7:4f:3a:e0:3f:b8:c9:30:b3:c2:12:f8:eb:6c:7f: ea:b7:40:4c:40:d0:a2:86:52:2b:6d:21:c5:86:06:cb:83:43: d2:67:90:d4:20:b3:30:ca:25:4f:5a:65:1b:09:96:ea:e3:ed: 39:62:1a:00:6a:fb:b1:2b:63:5e:56:5b:75:bb:00:80:1b:75: 09:1c:71:63:4b:97:54:5f:ad:1b:f6:8f:87:f5:c5:8b:e0:b3: ef:11:55:e3:e7:b0:64:a3:13:a8:55:c3:86:c1:a6:43:6d:d7: 83:32:99:dc:62:3d:3c:c3:eb:69:a1:c4:4b:f7:ca:52:17:11: f4:6b:77:e0:44:c9:86:51:90:93:93:c3:81:42:96:3d:3f:3e: 88:7f:21:3e:4a:ea:3a:9a:63:20:4a:88:b6:6b:b9:c6:67:84: fa:3e:50:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJJIRf4QiIpl2car8dQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MTgyYTk4ZDZlZjgwZmZiMjkxODI3ZGE4YWNjYTc0NDkx MDgwYjQwHhcNMjUxMjA1MjIwMTEzWhcNMjUxMjA2MjIwMTEzWjAzMTEwLwYDVQQD EygxNDVhMzUzODU5OGYyN2JlZDU3MDIxZDJhMTY1NTRkODFjZGY2YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+P96McwfepYvVwfakk/7/04TT3O x3PFkRYYbsuiv0vsjYorVyq32AhgCzQ3U2QjCo42PL0Ye5Xv0jwKK7+LgZktShYd 1+l2VulT8GVwKQRg00rbIf04Dvz9j3kgyNMG9WGPciMKQmQQ+azTv/CZE3qaSlIM OH4Nmck0rShfim+n8ijYQAOjG9k8RQUM49Y1Ct9mI5ho5Pkx3WPrK9Mf8TxBzQrQ /o0rCa5E2hwMiOwOa41BX7dxHkDOLWQjSQHISrWDQup6rU5BL73F+f77z5a/q9K5 imRRWAQVCKmt/kQe0AVlZVcXu85OHGeUTMBtc6SvlPhP8wwXNKnhu7pgLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRaNThZjye+1XAh0qFlVNgc32xBMB8GA1UdIwQY MBaAFNgYKpjW74D/spGCfaisynRJEIC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTct OWIzNjBlMWJhMzIxLzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kODUyMzUtODA4Yy00YzBhLTljOTctOWIzNjBlMWJhMzIx LzEvMkJncW1OYnZnUC15a1lKOXFLektkRWtRZ0xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7daQ+ij i5Mve6e5o6PeaYo8zetC0KQgFL/YCKOsZhteRolabpWau/9mJ+NP2BBATjJttfCU A/hj+KBzkA/zIUIeZe29Tb96p3kjT6GmKTi+XtO3oVDZbbrL2GKmp0864D+4yTCz whL462x/6rdATEDQooZSK20hxYYGy4ND0meQ1CCzMMolT1plGwmW6uPtOWIaAGr7 sStjXlZbdbsAgBt1CRxxY0uXVF+tG/aPh/XFi+Cz7xFV4+ewZKMTqFXDhsGmQ23X gzKZ3GI9PMPraaHES/fKUhcR9Gt34ETJhlGQk5PDgUKWPT8+iH8hPkrqOppjIEqI tmu5xmeE+j5QLg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:02:53 2025 by rpki-client