This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json) Hash identifier: tCzeMcR4oH5XaJ6owfjgqBEVgbOcZo5dnOpjSi6Bye8= Subject key identifier: D7:E8:57:8B:0E:33:40:7A:E8:59:94:C6:39:B8:B3:13:4F:E4:58:CE Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63 Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563 Certificate serial: 019AF163FF9F350AD3B35BB8B2C433C50366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: b4E+tXeuXhdRIuI0mBHYyRytjh4Kli5DsXdlJzvc2gk=) 2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ff:9f:35:0a:d3:b3:5b:b8:b2:c4:33:c5:03:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=d7e8578b0e33407ae85994c639b8b3134fe458ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:77:80:e7:50:aa:99:8e:45:b0:9a:63:2e: 73:d5:87:ae:db:46:4b:c5:c4:b5:40:aa:6c:47:96: c7:a3:88:4e:ee:be:7b:03:6c:ac:6a:fa:26:12:0e: 52:43:24:ca:8f:69:7a:e5:1e:03:80:ad:19:82:ad: 61:a5:02:22:a5:fc:9e:0d:7e:47:a4:3c:49:fa:9a: e1:2c:43:74:ff:6b:7c:ea:75:a6:9b:3b:7c:8c:01: b6:ce:f8:07:90:e0:bd:85:f2:1a:1c:3f:9c:d4:12: ae:9f:0f:7f:bb:da:a9:13:f1:ca:80:6e:50:30:57: f4:00:b2:7c:c5:4a:03:da:a7:87:bd:fc:6a:fc:e0: 7a:20:5b:71:28:d9:f0:fb:5c:92:53:07:fa:ec:ad: 80:1f:20:aa:ca:3f:76:3f:7a:9b:c0:da:98:f7:1d: 0a:e9:a5:36:3c:bf:13:4b:f5:67:04:04:86:8d:6a: 40:8a:19:66:9d:25:7a:8a:e9:b2:2c:13:21:fc:1a: 04:cb:d4:40:d2:59:74:7d:e6:89:51:a3:70:12:68: 20:03:a8:0c:b0:61:e2:71:9a:5a:c9:24:8c:99:9c: 7c:7c:4a:5a:81:c8:1f:bb:20:89:54:ea:78:da:f9: 80:4e:05:82:22:70:61:c2:c1:d1:8c:65:d0:0f:51: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E8:57:8B:0E:33:40:7A:E8:59:94:C6:39:B8:B3:13:4F:E4:58:CE X509v3 Authority Key Identifier: keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d4:30:90:4f:df:a8:b9:91:19:76:83:ba:94:75:62:6e:e5: b2:71:6c:2f:94:ee:19:89:4d:48:c3:90:c9:d8:44:b4:5c:58: 73:91:31:bc:56:8e:75:20:63:2d:2f:4c:78:c2:9b:74:38:db: 8e:82:d7:7a:cd:cc:ae:84:85:bf:f3:84:7f:c6:27:98:f1:ac: c7:c2:be:db:e5:ce:c7:07:42:46:8b:2b:db:79:d2:30:7f:79: 0a:21:fb:d9:81:a2:ed:45:4b:e6:05:60:04:c4:96:96:af:eb: d3:7c:90:7a:7d:17:0a:65:3b:41:8b:66:38:3b:36:2e:2f:20: b8:51:61:15:d7:67:83:02:f2:ec:9b:f4:fb:14:fa:68:c3:bc: d0:5c:68:9b:d6:df:9f:40:e6:a7:f2:44:3a:74:82:4a:46:85: 32:e0:bc:70:2c:52:46:a0:e3:cd:3b:cb:a0:30:0a:b4:61:96: 68:c4:70:58:6b:63:af:fe:0e:3c:e8:1b:73:d0:5f:48:17:47: 14:9b:eb:8e:b0:dc:fb:8a:b5:a3:aa:56:da:b6:85:ef:b3:a1: bf:f1:57:36:81:1c:b4:9b:93:d4:83:ca:53:f4:9c:49:6a:f1: 1a:99:b0:0f:b1:a5:ad:a2:ae:2a:90:de:7c:ad:51:11:58:77: 5e:4d:a7:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/+fNQrTs1u4ssQzxQNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWVhOTU4N2U1ZWE0ZTk2M2FkN2FlN2YxMjU3NjFjMGUy OTI1NjMwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EyhkN2U4NTc4YjBlMzM0MDdhZTg1OTk0YzYzOWI4YjMxMzRmZTQ1OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs613gOdQqpmORbCaYy5z1Yeu20ZL xcS1QKpsR5bHo4hO7r57A2ysavomEg5SQyTKj2l65R4DgK0Zgq1hpQIipfyeDX5H pDxJ+prhLEN0/2t86nWmmzt8jAG2zvgHkOC9hfIaHD+c1BKunw9/u9qpE/HKgG5Q MFf0ALJ8xUoD2qeHvfxq/OB6IFtxKNnw+1ySUwf67K2AHyCqyj92P3qbwNqY9x0K 6aU2PL8TS/VnBASGjWpAihlmnSV6iumyLBMh/BoEy9RA0ll0feaJUaNwEmggA6gM sGHicZpaySSMmZx8fEpagcgfuyCJVOp42vmATgWCInBhwsHRjGXQD1HvEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfoV4sOM0B66FmUxjm4sxNP5FjOMB8GA1UdIwQY MBaAFNmeqVh+XqTpY6165/EldhwOKSVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUt MDdkZjAxNmM0MWI4LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85YzFiMDItZTY3OC00ZTg2LTk5MDUtMDdkZjAxNmM0MWI4 LzEvMlo2cFdINWVwT2xqclhybjhTVjJIQTRwSldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNQwkE/f qLmRGXaDupR1Ym7lsnFsL5TuGYlNSMOQydhEtFxYc5ExvFaOdSBjLS9MeMKbdDjb joLXes3MroSFv/OEf8YnmPGsx8K+2+XOxwdCRosr23nSMH95CiH72YGi7UVL5gVg BMSWlq/r03yQen0XCmU7QYtmODs2Li8guFFhFddngwLy7Jv0+xT6aMO80Fxom9bf n0Dmp/JEOnSCSkaFMuC8cCxSRqDjzTvLoDAKtGGWaMRwWGtjr/4OPOgbc9BfSBdH FJvrjrDc+4q1o6pW2raF77Ohv/FXNoEctJuT1IPKU/ScSWrxGpmwD7GlraKuKpDe fK1REVh3Xk2nUg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:36 2025 by rpki-client