This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json) Hash identifier: 32X1KJHOMSljzzP2UdjiA0g4SjtClKGU+plvI1Hsjjw= Subject key identifier: 15:17:C9:2B:74:6E:B0:D1:E7:8E:F4:CA:7C:E7:15:07:E5:3E:48:40 Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25 Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25 Certificate serial: 019AF208C23AE651C0A75116C1A6E60ADC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft Manifest number: 034A Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: zNK0JDypKK9W4AmFC53dy/gwyC1Qe4vJ979Htm6HeKw=) 2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c2:3a:e6:51:c0:a7:51:16:c1:a6:e6:0a:dc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=1517c92b746eb0d1e78ef4ca7ce71507e53e4840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:80:5a:bb:e8:92:4c:9f:f8:11:61:73:13:40: 53:2e:3d:2e:6d:c4:9f:84:16:df:c6:f0:26:87:7f: 20:24:72:ef:cf:31:54:15:4d:fb:76:45:6d:2a:48: a4:46:f9:a6:59:8b:35:94:8d:39:25:f9:80:c8:02: 48:8d:02:32:c7:9c:64:51:82:f8:49:d0:45:25:90: 07:a5:35:da:63:44:d3:7f:75:ed:85:ae:e2:48:9d: 2f:5a:b5:10:bb:60:78:e5:0b:4f:39:63:c7:62:c7: 3d:c7:5f:dd:21:90:cf:2e:8f:e1:f5:1c:5b:07:85: 1e:e0:b9:83:56:95:d8:ab:5d:a8:e6:2b:3c:d4:6e: e1:29:8a:05:43:6b:a7:1d:88:08:f5:05:4b:11:cd: bc:8b:e9:6f:83:fc:41:14:b4:93:60:78:9f:34:1e: 54:d8:eb:db:4a:64:25:8d:b6:f3:f7:f1:7e:10:ce: 7c:05:49:dc:72:f2:29:e1:0b:96:f0:2c:c7:93:2b: f5:70:77:1d:ef:e5:12:81:72:f4:71:4e:63:f4:20: 31:a4:a5:30:7f:d2:c0:79:2f:93:2f:ba:73:9a:93: 24:35:df:d0:c2:70:53:49:86:9a:4a:8b:13:5f:09: 1d:c0:39:c7:6f:b3:3c:3c:dc:db:31:05:43:df:89: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:C9:2B:74:6E:B0:D1:E7:8E:F4:CA:7C:E7:15:07:E5:3E:48:40 X509v3 Authority Key Identifier: keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:41:cc:39:0f:ff:db:82:7c:6c:ba:46:31:11:86:0d:83: 5b:cb:e8:40:51:30:d5:a5:65:ab:70:9a:68:b6:c4:10:81:b6: 70:43:e6:57:1f:7c:2c:67:44:c7:fa:d9:4e:1d:9f:2b:d5:28: 92:60:53:64:a7:e5:07:dc:38:87:51:83:de:8d:f7:93:d7:88: b5:39:05:60:53:ac:ea:05:42:7b:70:ae:3a:73:88:12:a8:77: 11:01:ee:08:05:31:31:bc:64:2c:55:f9:94:7f:89:64:9b:23: 4f:4e:a8:54:bf:18:5b:35:ae:e9:db:60:52:5a:62:1b:ca:3e: 93:1e:18:90:6e:a9:1f:f4:c7:88:5c:fa:51:8c:cf:1a:5e:30: 9a:f2:69:ed:e1:64:18:2c:12:a1:61:43:0d:a2:67:07:e2:14: dc:2c:27:d5:fe:7c:c8:76:0d:45:80:b5:bd:b6:d9:a9:95:70: 77:1c:f8:19:72:a2:9f:e1:91:77:d3:d5:d1:20:d2:41:5d:cc: 93:48:a4:b8:d8:14:e0:1a:d2:68:2f:7c:76:ab:eb:7a:0f:d4: bc:86:22:be:32:b6:2e:82:a1:b1:a1:26:0b:95:26:ca:c1:d1: 01:00:25:d9:57:ac:c4:eb:cf:09:85:59:8a:02:e9:37:54:c1: 33:a5:e9:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMI65lHAp1EWwabmCtxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4 ZDZmMjUwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD EygxNTE3YzkyYjc0NmViMGQxZTc4ZWY0Y2E3Y2U3MTUwN2U1M2U0ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Bau+iSTJ/4EWFzE0BTLj0ubcSf hBbfxvAmh38gJHLvzzFUFU37dkVtKkikRvmmWYs1lI05JfmAyAJIjQIyx5xkUYL4 SdBFJZAHpTXaY0TTf3Xtha7iSJ0vWrUQu2B45QtPOWPHYsc9x1/dIZDPLo/h9Rxb B4Ue4LmDVpXYq12o5is81G7hKYoFQ2unHYgI9QVLEc28i+lvg/xBFLSTYHifNB5U 2OvbSmQljbbz9/F+EM58BUnccvIp4QuW8CzHkyv1cHcd7+USgXL0cU5j9CAxpKUw f9LAeS+TL7pzmpMkNd/QwnBTSYaaSosTXwkdwDnHb7M8PNzbMQVD34mJxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUXySt0brDR5470ynznFQflPkhAMB8GA1UdIwQY MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt Y2E2YTFjYzgxYTIyLzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6FBzDkP /9uCfGy6RjERhg2DW8voQFEw1aVlq3CaaLbEEIG2cEPmVx98LGdEx/rZTh2fK9Uo kmBTZKflB9w4h1GD3o33k9eItTkFYFOs6gVCe3CuOnOIEqh3EQHuCAUxMbxkLFX5 lH+JZJsjT06oVL8YWzWu6dtgUlpiG8o+kx4YkG6pH/THiFz6UYzPGl4wmvJp7eFk GCwSoWFDDaJnB+IU3Cwn1f58yHYNRYC1vbbZqZVwdxz4GXKin+GRd9PV0SDSQV3M k0ikuNgU4BrSaC98dqvreg/UvIYivjK2LoKhsaEmC5UmysHRAQAl2VesxOvPCYVZ igLpN1TBM6Xpbw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:52 2025 by rpki-client