This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json) Hash identifier: 7gzyeHb53v8gnyw6yY04oyUWyfa0QxGo3/11UAX3fgI= Subject key identifier: D5:28:8A:E6:2D:4F:99:38:BE:AF:16:EF:3E:D6:DF:84:8A:96:ED:18 Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c Certificate serial: 019B307A2F6F8C7F3B6348F7D5BB979FABC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft Manifest number: 0EC8 Signing time: Thu 18 Dec 2025 08:01:12 +0000 Manifest this update: Thu 18 Dec 2025 08:01:12 +0000 Manifest next update: Fri 19 Dec 2025 08:01:12 +0000 Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: TxtCN1PDlCtAFgSr14zyuYy8AUP4nhLwlhVWkj8EzPo=) 2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:2f:6f:8c:7f:3b:63:48:f7:d5:bb:97:9f:ab:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c Validity Not Before: Dec 18 08:01:12 2025 GMT Not After : Dec 19 08:01:12 2025 GMT Subject: CN=d5288ae62d4f9938beaf16ef3ed6df848a96ed18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:af:53:02:b8:0e:29:99:46:01:03:49:48:e2: 15:6e:48:e0:5d:36:00:2f:87:84:d4:37:6b:4c:68: f3:68:a5:0f:24:24:52:a3:2a:fd:4e:4b:31:01:05: 8c:4c:a7:48:9a:b1:0e:d6:58:91:9d:5e:f8:e4:ad: 12:d6:cf:fc:dd:93:08:10:31:ce:29:a3:f1:23:9c: 5e:90:5e:08:e1:d1:46:56:b9:4e:0b:f2:63:c6:74: ac:28:75:68:c2:92:4b:78:95:3f:c1:94:c3:f0:75: 27:93:57:2c:8c:0e:31:f8:fe:6f:32:27:00:40:69: f2:ed:e6:dc:5b:93:53:56:e8:ba:43:3b:4b:e5:cd: b9:c1:49:27:18:89:78:49:d6:d4:25:ca:e5:01:b4: b4:b8:1c:ca:ab:d1:75:f2:e9:f8:22:3f:21:1b:54: 1c:8e:94:56:9d:dd:f6:0b:63:03:c3:a6:72:52:5b: 20:27:3f:24:16:e7:a5:a1:bb:20:db:cb:0d:b3:53: 7f:04:5b:57:f6:96:0f:08:c9:24:8d:77:d5:6b:d9: 99:fb:97:ec:09:1d:00:65:fa:50:0f:8b:cf:46:d8: 1e:63:37:9b:c9:d4:67:f0:78:e5:54:3e:77:28:ac: d1:fa:c1:bd:55:25:61:c3:2e:be:70:ac:ca:57:f0: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:28:8A:E6:2D:4F:99:38:BE:AF:16:EF:3E:D6:DF:84:8A:96:ED:18 X509v3 Authority Key Identifier: keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f9:a7:19:85:43:e2:b6:a1:16:de:60:de:0c:9b:f1:b7:68: 44:d5:a0:30:39:c4:33:59:fd:ae:53:2b:78:4c:18:14:9f:98: 4e:d9:5d:0f:59:15:5e:0e:ea:34:c9:81:8f:77:0b:82:b8:2a: 20:ce:05:9a:a3:ed:62:0f:19:90:1b:d7:a3:0e:58:32:f9:7a: d6:4d:e3:40:e1:f0:e1:39:51:53:88:c0:69:ae:34:4f:9c:d2: dc:d4:3f:8a:7a:b9:b1:5d:3a:35:14:46:eb:ed:00:6f:03:30: 4c:d1:c2:4a:d9:46:1e:32:37:a9:42:29:8b:a7:7f:26:ae:f3: e6:a2:10:a8:20:70:ec:83:b2:a6:6e:44:7e:8f:b5:31:b8:57: 4c:23:6d:34:43:d1:a0:fb:ae:2f:87:28:78:ec:1a:f5:d2:c3: 64:04:46:13:8e:4e:0e:5c:fa:cd:8f:cd:8a:e0:bf:0d:c1:8f: e3:64:eb:29:18:47:29:18:30:41:87:e8:c9:60:5b:ef:ae:08: 34:b4:85:cf:88:f0:f7:7c:d0:c5:ab:b5:b0:49:55:bd:b8:88: 51:3f:e7:ac:4e:50:6c:07:30:f1:c5:9c:c4:d9:fc:29:c2:47: 2b:4b:5c:73:f1:1c:08:0d:54:58:91:3b:73:15:23:bd:56:1c: fe:48:8e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswei9vjH87Y0j31buXn6vIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWM3OTYyNDMzYzJmZTBiZjYyYjhjMzg4MzkyOTk1Zjk0 MmIxNGMwHhcNMjUxMjE4MDgwMTEyWhcNMjUxMjE5MDgwMTEyWjAzMTEwLwYDVQQD EyhkNTI4OGFlNjJkNGY5OTM4YmVhZjE2ZWYzZWQ2ZGY4NDhhOTZlZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q9TArgOKZlGAQNJSOIVbkjgXTYA L4eE1DdrTGjzaKUPJCRSoyr9TksxAQWMTKdImrEO1liRnV745K0S1s/83ZMIEDHO KaPxI5xekF4I4dFGVrlOC/JjxnSsKHVowpJLeJU/wZTD8HUnk1csjA4x+P5vMicA QGny7ebcW5NTVui6QztL5c25wUknGIl4SdbUJcrlAbS0uBzKq9F18un4Ij8hG1Qc jpRWnd32C2MDw6ZyUlsgJz8kFuelobsg28sNs1N/BFtX9pYPCMkkjXfVa9mZ+5fs CR0AZfpQD4vPRtgeYzebydRn8HjlVD53KKzR+sG9VSVhwy6+cKzKV/AHUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUoiuYtT5k4vq8W7z7W34SKlu0YMB8GA1UdIwQY MBaAFNgceWJDPC/gv2K4w4g5KZX5QrFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2Et M2QzNDRjOWMyNmI2LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2EtM2QzNDRjOWMyNmI2 LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfmnGYVD 4rahFt5g3gyb8bdoRNWgMDnEM1n9rlMreEwYFJ+YTtldD1kVXg7qNMmBj3cLgrgq IM4FmqPtYg8ZkBvXow5YMvl61k3jQOHw4TlRU4jAaa40T5zS3NQ/inq5sV06NRRG 6+0AbwMwTNHCStlGHjI3qUIpi6d/Jq7z5qIQqCBw7IOypm5Efo+1MbhXTCNtNEPR oPuuL4coeOwa9dLDZARGE45ODlz6zY/NiuC/DcGP42TrKRhHKRgwQYfoyWBb764I NLSFz4jw93zQxau1sElVvbiIUT/nrE5QbAcw8cWcxNn8KcJHK0tcc/EcCA1UWJE7 cxUjvVYc/kiO+w== -----END CERTIFICATE-----Generated at Thu Dec 18 09:57:07 2025 by rpki-client