This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json) Hash identifier: zQVNXsjMQubnYaqE6ppkSxmFREB0afGMqK3lid9qrlQ= Subject key identifier: CA:13:B3:9F:9A:2E:79:F9:13:2C:24:0E:88:F0:60:5A:78:7D:0B:C1 Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Certificate serial: 019B2E8B8C32BE0E05FF9AB1CE6233062138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft Manifest number: 13FC Signing time: Wed 17 Dec 2025 23:00:55 +0000 Manifest this update: Wed 17 Dec 2025 23:00:55 +0000 Manifest next update: Thu 18 Dec 2025 23:00:55 +0000 Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: c1T7veaEKTEl3F4CNxLSFbmSxtpL4KhgvkGO6Jz/jU8=) 2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=) 3: bh26FSDEWHE7GM9y8WYKONSOSrY.roa (hash: Ila3oBxBNWBNEgBFCA9ys1NdnbH6OtXjqF11+XnaK9w=) 4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=) 5: jRVI_eAINH0DHfSbrJ1Lb2a1J0M.roa (hash: 6aHi9LTwWzQ2J8HFQmZN9AhMvjpcOSiPnJAqVLKRvcg=) 6: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=) 7: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:8c:32:be:0e:05:ff:9a:b1:ce:62:33:06:21:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Validity Not Before: Dec 17 23:00:55 2025 GMT Not After : Dec 18 23:00:55 2025 GMT Subject: CN=ca13b39f9a2e79f9132c240e88f0605a787d0bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:05:ce:52:6b:ea:8d:c7:4f:69:62:0e:f6: fe:88:6b:c9:da:f3:9b:16:c7:ff:4f:9a:09:85:ad: 04:e5:99:66:fe:35:b2:8b:dd:11:ed:a3:81:55:d4: 43:7c:89:8e:d4:69:4f:b6:b6:3c:a9:5b:15:81:36: 14:c8:10:de:f4:8f:37:d2:53:34:b7:44:76:49:cd: 50:ee:d0:c3:71:17:1d:c2:ce:91:6e:a3:2c:5a:d0: f3:92:05:bb:03:5a:84:ac:cd:f8:d7:24:1a:d4:fa: 0f:23:e0:2c:bd:c0:d9:7c:40:a2:3d:6e:45:9c:ab: 99:fc:f5:83:da:aa:ea:33:44:ae:18:46:f8:8a:76: cc:ce:e4:f3:c4:46:bf:88:23:e1:f8:d9:fa:99:24: cd:62:42:a2:04:22:d3:af:61:56:67:86:d4:32:14: 91:f6:62:20:26:60:90:78:69:f1:86:38:7d:5d:9f: d3:8e:21:dc:f1:3f:9a:93:4f:1c:49:df:3c:7e:45: c5:dc:e2:4f:82:8c:db:73:93:98:bb:ce:c3:08:9a: 55:d6:3b:91:08:8f:e7:ab:da:f4:4a:c8:31:8c:7f: a0:fe:f0:d1:10:65:19:48:0e:20:a4:68:0d:6a:ac: cd:96:98:2f:8a:56:46:0c:0e:d9:81:cf:78:57:d0: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:B3:9F:9A:2E:79:F9:13:2C:24:0E:88:F0:60:5A:78:7D:0B:C1 X509v3 Authority Key Identifier: keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:59:7c:f9:28:23:4f:6f:1b:72:76:c1:14:30:c9:de:2b:4d: 7e:c3:3f:d8:de:ab:80:9d:8d:28:3a:ae:41:9b:d2:d0:78:29: 47:9f:56:d1:b1:c4:39:be:21:2d:ba:c3:4b:ad:0b:68:fe:87: 1a:8d:7d:80:42:ca:7e:fe:63:62:d4:26:8e:a3:3e:37:c3:01: e6:4d:37:7b:11:e7:cb:bd:17:97:5f:77:5a:ac:03:bb:a3:e2: 8d:ef:60:6f:b2:c8:33:77:02:57:a5:ca:e6:a8:25:d0:38:50: eb:fd:34:4a:71:8c:f3:df:21:6e:71:a0:56:44:99:93:b9:fd: bb:99:15:64:39:14:74:9e:35:19:c8:56:a2:19:15:04:dd:e7: af:67:9c:de:43:9d:91:72:2d:4f:f8:a1:67:5b:1f:f1:fe:76: 59:32:9e:41:77:bb:6e:48:ed:47:7a:63:16:30:e9:bf:2b:df: b6:8d:da:70:88:0a:bf:5f:1f:10:bf:9f:ca:3a:d9:d6:15:5e: ca:89:85:e7:52:21:96:63:03:ed:82:41:84:d8:18:0b:16:99: e8:73:d6:d1:15:c3:48:ae:de:1e:a3:2e:34:c8:59:95:86:51: 3f:b2:e2:b2:53:bc:f5:20:c7:c5:e5:e6:a1:76:38:c9:59:a0: 12:71:1a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui4wyvg4F/5qxzmIzBiE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz MmVhOWIwHhcNMjUxMjE3MjMwMDU1WhcNMjUxMjE4MjMwMDU1WjAzMTEwLwYDVQQD EyhjYTEzYjM5ZjlhMmU3OWY5MTMyYzI0MGU4OGYwNjA1YTc4N2QwYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnkFzlJr6o3HT2liDvb+iGvJ2vOb Fsf/T5oJha0E5Zlm/jWyi90R7aOBVdRDfImO1GlPtrY8qVsVgTYUyBDe9I830lM0 t0R2Sc1Q7tDDcRcdws6RbqMsWtDzkgW7A1qErM341yQa1PoPI+AsvcDZfECiPW5F nKuZ/PWD2qrqM0SuGEb4inbMzuTzxEa/iCPh+Nn6mSTNYkKiBCLTr2FWZ4bUMhSR 9mIgJmCQeGnxhjh9XZ/TjiHc8T+ak08cSd88fkXF3OJPgozbc5OYu87DCJpV1juR CI/nq9r0SsgxjH+g/vDREGUZSA4gpGgNaqzNlpgvilZGDA7Zgc94V9CydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoTs5+aLnn5EywkDojwYFp4fQvBMB8GA1UdIwQY MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt ZmRhMDExZTVjOTcyLzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlll8+Sgj T28bcnbBFDDJ3itNfsM/2N6rgJ2NKDquQZvS0HgpR59W0bHEOb4hLbrDS60LaP6H Go19gELKfv5jYtQmjqM+N8MB5k03exHny70Xl193WqwDu6Pije9gb7LIM3cCV6XK 5qgl0DhQ6/00SnGM898hbnGgVkSZk7n9u5kVZDkUdJ41GchWohkVBN3nr2ec3kOd kXItT/ihZ1sf8f52WTKeQXe7bkjtR3pjFjDpvyvfto3acIgKv18fEL+fyjrZ1hVe yomF51IhlmMD7YJBhNgYCxaZ6HPW0RXDSK7eHqMuNMhZlYZRP7LislO89SDHxeXm oXY4yVmgEnEaeQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:51:02 2025 by rpki-client