This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json) Hash identifier: buutWlrqgHViRrA+cllZqwEeUAAYTWya0FvbHaapZAg= Subject key identifier: D9:57:44:69:F1:81:C8:52:55:47:03:B6:BC:40:01:7D:10:B0:A4:44 Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a Certificate serial: 019AF5786DDCE78FF0E2B5D2BEC62EF2545D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 21:01:41 +0000 Manifest this update: Sat 06 Dec 2025 21:01:41 +0000 Manifest next update: Sun 07 Dec 2025 21:01:41 +0000 Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: XXVdKZom6r9epZ6GyT3kfZWRZTje3Pn8mxi2ojDFi+Q=) 2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:6d:dc:e7:8f:f0:e2:b5:d2:be:c6:2e:f2:54:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a Validity Not Before: Dec 6 21:01:41 2025 GMT Not After : Dec 7 21:01:41 2025 GMT Subject: CN=d9574469f181c852554703b6bc40017d10b0a444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:fe:fb:6e:d2:c2:1a:16:2b:d7:30:25:2f: 9e:19:3b:69:7d:0f:a6:4d:5e:3d:20:8e:dd:24:58: 0e:ef:a9:99:cc:5d:58:fe:99:03:4b:62:88:cc:e4: c9:38:09:31:62:4e:5a:a1:23:82:9b:e4:83:20:b5: 57:85:4b:ba:e2:81:45:96:65:20:43:4c:6e:19:9c: 30:72:e6:46:68:dc:27:6b:5b:fa:8c:c3:56:62:42: 0a:09:2c:b2:b7:b3:d0:3d:e8:19:dd:3a:4c:40:2a: 39:af:39:89:ec:ba:08:34:9f:49:d3:ec:62:0a:0c: 8d:61:73:8c:e5:62:32:ab:51:fc:ce:f6:57:ee:12: 28:97:f1:5a:33:b9:a1:c5:0e:41:64:98:f3:f9:ac: 87:1f:ec:db:88:c3:ab:75:1a:4f:65:fd:ec:0c:01: f5:b6:29:68:45:68:d6:f3:97:fa:57:af:3d:1f:b4: 29:42:3c:26:a3:b8:38:bd:b8:d2:8c:95:40:cb:59: 82:e2:a9:4c:9d:dc:c9:2a:93:65:32:74:13:54:e5: 45:dc:7a:0a:05:3e:14:e3:4a:e2:73:ae:60:b7:cc: 33:be:72:89:65:e3:7a:92:f5:fb:71:e1:b3:d3:2e: 2b:97:af:75:09:b1:f4:d3:5d:22:d3:ab:d6:f7:c0: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:44:69:F1:81:C8:52:55:47:03:B6:BC:40:01:7D:10:B0:A4:44 X509v3 Authority Key Identifier: keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:83:a6:99:db:d9:c2:1a:8e:0d:8b:95:b4:fc:38:f1:78:db: 55:25:ee:9d:7a:fb:8f:d0:0a:81:89:9f:f2:94:ea:a1:67:79: 6e:e3:5a:ec:54:27:bd:7d:e6:60:11:f2:42:e0:b5:6e:04:4a: 06:d8:dc:e4:8e:d8:11:a1:af:aa:2d:10:f6:ae:bf:58:ba:d9: 94:49:e2:a5:f9:88:2d:1a:93:dd:08:8b:b7:b4:55:c8:6c:56: 6b:3f:9e:d6:ea:70:34:7c:e6:30:53:6d:e7:b0:b0:7f:ae:3c: 7f:28:92:b6:74:e1:38:e6:ce:4d:fc:cf:c8:3c:45:5e:c4:13: d6:00:22:d4:8e:dc:56:e6:15:df:68:b7:9f:8b:f6:3e:67:a9: 25:c9:da:81:8f:36:1f:dc:2d:4b:53:0e:52:20:88:78:f2:14: 69:ea:c6:6a:88:76:5d:64:55:e6:d9:09:6e:3c:8f:6d:a6:0c: 20:6c:d4:7d:17:3f:14:90:7f:e2:e2:fb:ec:86:f0:e6:72:90: 3d:7c:4d:66:d0:3c:07:81:67:6e:9d:9b:46:18:20:52:c4:d3: f2:15:25:18:5b:f9:30:44:3b:1a:22:db:4f:cf:b0:6b:9e:58: e0:b1:62:af:26:4b:97:89:49:3f:80:51:6a:03:0a:31:9a:fd: a7:65:89:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eG3c54/w4rXSvsYu8lRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTI3MzY4MjA2ZTNlOWE1OTI0MDgxZGY2Mzg4MDI0NmU1 YzU0MWEwHhcNMjUxMjA2MjEwMTQxWhcNMjUxMjA3MjEwMTQxWjAzMTEwLwYDVQQD EyhkOTU3NDQ2OWYxODFjODUyNTU0NzAzYjZiYzQwMDE3ZDEwYjBhNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3L++27SwhoWK9cwJS+eGTtpfQ+m TV49II7dJFgO76mZzF1Y/pkDS2KIzOTJOAkxYk5aoSOCm+SDILVXhUu64oFFlmUg Q0xuGZwwcuZGaNwna1v6jMNWYkIKCSyyt7PQPegZ3TpMQCo5rzmJ7LoINJ9J0+xi CgyNYXOM5WIyq1H8zvZX7hIol/FaM7mhxQ5BZJjz+ayHH+zbiMOrdRpPZf3sDAH1 tiloRWjW85f6V689H7QpQjwmo7g4vbjSjJVAy1mC4qlMndzJKpNlMnQTVOVF3HoK BT4U40ric65gt8wzvnKJZeN6kvX7ceGz0y4rl691CbH0010i06vW98B3jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlXRGnxgchSVUcDtrxAAX0QsKREMB8GA1UdIwQY MBaAFNlSc2ggbj6aWSQIHfY4gCRuXFQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMt MTk2MjA2MTU1NzliLzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMtMTk2MjA2MTU1Nzli LzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoOmmdvZ whqODYuVtPw48XjbVSXunXr7j9AKgYmf8pTqoWd5buNa7FQnvX3mYBHyQuC1bgRK Btjc5I7YEaGvqi0Q9q6/WLrZlEnipfmILRqT3QiLt7RVyGxWaz+e1upwNHzmMFNt 57Cwf648fyiStnThOObOTfzPyDxFXsQT1gAi1I7cVuYV32i3n4v2PmepJcnagY82 H9wtS1MOUiCIePIUaerGaoh2XWRV5tkJbjyPbaYMIGzUfRc/FJB/4uL77Ibw5nKQ PXxNZtA8B4Fnbp2bRhggUsTT8hUlGFv5MEQ7GiLbT8+wa55Y4LFiryZLl4lJP4BR agMKMZr9p2WJTA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:56 2025 by rpki-client