This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json) Hash identifier: VdYmZHPdIGa2qkXOxrFb604NcxQq7mpHH0EmXVPw7UA= Subject key identifier: DC:81:95:41:02:89:CB:C9:5A:D8:53:AF:57:2C:58:4D:D2:B3:B6:28 Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e Certificate serial: 019B315618347874E8DC69C0B7B0380C52D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 12:01:24 +0000 Manifest this update: Thu 18 Dec 2025 12:01:24 +0000 Manifest next update: Fri 19 Dec 2025 12:01:24 +0000 Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: t4Tp0M+X+VW5Mswo3RPW5ojl/zEXbXoOAerZcVymnSk=) 2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=) 3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:18:34:78:74:e8:dc:69:c0:b7:b0:38:0c:52:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e Validity Not Before: Dec 18 12:01:24 2025 GMT Not After : Dec 19 12:01:24 2025 GMT Subject: CN=dc8195410289cbc95ad853af572c584dd2b3b628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:44:41:3d:d1:33:be:39:4a:21:b4:9c:df: be:05:0c:3a:82:79:8b:de:a9:2f:27:f3:f4:0d:2c: ec:ad:41:14:23:97:21:12:97:c2:4c:62:51:e9:2e: 48:b8:0b:72:dc:21:cb:85:1f:a7:7d:ed:e3:79:91: ba:50:5a:91:39:52:23:dd:3f:ee:10:b0:01:ea:ca: cb:50:0b:6f:33:cd:32:89:9d:db:7b:a5:84:cf:68: c4:dc:d0:05:85:95:75:b8:9a:09:1f:d9:a8:09:81: a7:3f:2d:94:4c:94:fd:59:f3:8e:b9:a4:75:d8:6d: 48:ad:d4:9a:82:e4:15:68:2a:c0:b7:4e:34:fe:8e: 24:c7:57:0f:c2:79:d2:f4:6c:f0:83:ac:9b:f1:47: ec:a7:12:34:06:0b:4a:06:48:ec:34:a7:85:77:6e: 63:d8:7a:4a:78:24:0d:59:b9:28:59:94:75:2f:3b: ae:be:b3:b1:0d:a5:e5:60:4c:60:0e:cc:10:ea:9c: ff:ef:e4:12:12:f3:98:91:ed:6b:7c:fe:a0:5e:a5: 05:e0:5d:ad:bf:7d:81:31:ac:b4:02:b0:92:a7:59: 84:4c:e7:09:57:23:f5:f2:f2:40:be:15:54:9c:9e: ec:37:a5:01:a7:54:c6:01:52:78:d6:20:02:e8:5b: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:81:95:41:02:89:CB:C9:5A:D8:53:AF:57:2C:58:4D:D2:B3:B6:28 X509v3 Authority Key Identifier: keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:89:2a:96:ca:ed:4b:68:0f:d3:5e:34:31:4c:1f:e6:ae:e1: ae:99:c9:b2:7c:f4:71:46:fb:37:f4:46:c2:97:af:b3:4c:17: 7f:ce:5f:17:41:f2:bd:6d:85:38:f5:58:be:cb:ba:ce:3e:82: 0f:dc:97:0b:07:76:91:99:56:6f:ae:8a:75:ab:e9:3d:f8:5d: e8:08:4f:11:df:0e:85:8b:a0:c1:3a:9e:f3:16:1a:9f:38:fb: 7f:0f:22:d2:f2:96:f9:69:3f:03:7d:01:6b:68:e1:4e:f1:11: 28:53:eb:40:06:1d:b1:88:0c:d3:7b:a2:ab:d9:8d:8e:9d:2c: 80:3c:84:f0:a0:0e:6e:b2:cc:72:25:7c:de:20:7e:14:06:07: 79:df:54:eb:33:d5:5e:dd:a2:86:6b:b6:76:ca:74:d8:36:e6: fd:c1:9d:ec:83:f6:e3:5a:f3:e0:13:4a:3d:d5:2e:68:80:c7: d4:be:68:dc:03:64:f0:e5:50:22:73:80:c6:49:6f:f4:f1:47: 43:8d:7f:f0:88:0d:4d:37:23:c5:44:26:54:b1:cc:5d:3b:6a: 16:cf:6c:e7:5c:f3:bc:5e:b7:ff:59:ee:e9:53:1b:f8:1c:7c: de:b7:a9:ae:98:b5:1c:d6:c1:fe:2c:d2:e0:ff:d2:5d:6c:9d: 76:f1:3f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhg0eHTo3GnAt7A4DFLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx MWNkNGUwHhcNMjUxMjE4MTIwMTI0WhcNMjUxMjE5MTIwMTI0WjAzMTEwLwYDVQQD EyhkYzgxOTU0MTAyODljYmM5NWFkODUzYWY1NzJjNTg0ZGQyYjNiNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNtEQT3RM745SiG0nN++BQw6gnmL 3qkvJ/P0DSzsrUEUI5chEpfCTGJR6S5IuAty3CHLhR+nfe3jeZG6UFqROVIj3T/u ELAB6srLUAtvM80yiZ3be6WEz2jE3NAFhZV1uJoJH9moCYGnPy2UTJT9WfOOuaR1 2G1IrdSaguQVaCrAt040/o4kx1cPwnnS9Gzwg6yb8UfspxI0BgtKBkjsNKeFd25j 2HpKeCQNWbkoWZR1LzuuvrOxDaXlYExgDswQ6pz/7+QSEvOYke1rfP6gXqUF4F2t v32BMay0ArCSp1mETOcJVyP18vJAvhVUnJ7sN6UBp1TGAVJ41iAC6FuRYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyBlUECicvJWthTr1csWE3Ss7YoMB8GA1UdIwQY MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYkqlsrt S2gP0140MUwf5q7hrpnJsnz0cUb7N/RGwpevs0wXf85fF0HyvW2FOPVYvsu6zj6C D9yXCwd2kZlWb66KdavpPfhd6AhPEd8OhYugwTqe8xYanzj7fw8i0vKW+Wk/A30B a2jhTvERKFPrQAYdsYgM03uiq9mNjp0sgDyE8KAObrLMciV83iB+FAYHed9U6zPV Xt2ihmu2dsp02Dbm/cGd7IP241rz4BNKPdUuaIDH1L5o3ANk8OVQInOAxklv9PFH Q41/8IgNTTcjxUQmVLHMXTtqFs9s51zzvF63/1nu6VMb+Bx83reprpi1HNbB/izS 4P/SXWyddvE/5w== -----END CERTIFICATE-----Generated at Thu Dec 18 21:49:41 2025 by rpki-client