This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json) Hash identifier: DTLPvMELdTgesiEd4neZklR3ia58RMPsrtbTzVUWEMg= Subject key identifier: 94:DB:2E:B8:0B:AA:11:91:D2:07:C1:01:1A:B7:84:40:93:91:D0:D6 Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a Certificate serial: 019AF389261BBBF9EE0E1881BCFD37DB0CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 12:00:42 +0000 Manifest this update: Sat 06 Dec 2025 12:00:42 +0000 Manifest next update: Sun 07 Dec 2025 12:00:42 +0000 Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: /JnyGtco02ykzCln1juAYNYudNm5AxhOgi6inrBWnBA=) 2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:26:1b:bb:f9:ee:0e:18:81:bc:fd:37:db:0c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a Validity Not Before: Dec 6 12:00:42 2025 GMT Not After : Dec 7 12:00:42 2025 GMT Subject: CN=94db2eb80baa1191d207c1011ab784409391d0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:e7:32:69:40:69:80:d7:74:f1:db:9f:77: c9:d6:2c:b3:c7:8c:c3:db:81:e6:3f:3e:87:2b:f2: 93:b8:52:e3:4f:d0:10:0e:ad:aa:fa:27:64:00:96: 4e:b1:16:bd:22:ca:fa:9a:7c:9e:d7:94:57:03:9b: 70:80:5c:bc:52:c7:0e:06:ea:79:f4:c7:df:70:2d: a8:3f:4b:cb:98:7e:23:35:92:13:dc:cb:aa:ed:36: 0e:76:a9:68:6e:d8:72:b4:8b:17:63:a9:ab:d3:47: e8:38:2d:38:49:8e:b6:c3:73:4a:ee:b5:af:58:ee: ca:1f:4f:8a:f0:1e:a8:6c:c4:83:9a:9d:b4:a3:10: e9:af:e2:fc:bf:b0:e8:1f:e5:12:e5:33:ce:23:f2: a6:10:ae:fc:33:c9:df:2a:18:18:56:b2:52:09:c0: 84:c0:e9:3d:2b:f8:10:0e:a1:b2:43:46:f9:a8:00: 7e:2c:8b:c8:dc:74:0c:77:08:f8:b4:cc:bd:71:9b: fe:e2:55:d7:1a:d1:05:77:09:08:c2:c6:f5:c0:d9: 97:41:7f:84:f4:d2:a3:b8:ea:8e:c4:9f:59:8b:3c: 88:e9:c3:02:a2:6e:56:3c:b8:85:fb:5a:a9:3f:8a: 77:23:cd:f3:2d:7f:35:8d:44:fd:8a:0b:5f:cd:57: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:2E:B8:0B:AA:11:91:D2:07:C1:01:1A:B7:84:40:93:91:D0:D6 X509v3 Authority Key Identifier: keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d3:f1:c3:70:b4:83:44:b8:9a:f4:9f:60:d4:e0:dc:5f:5b: ed:25:34:6d:a7:5a:70:29:e4:ac:3c:8b:2a:b5:20:74:56:f8: 68:ad:6f:c8:61:85:41:57:1d:46:d4:91:80:04:26:fa:bb:d3: cf:0d:c8:f3:33:6a:ea:f9:ed:91:5d:be:a8:66:5b:a7:f2:c5: b2:b5:97:ed:a1:85:1a:53:50:7f:56:6f:72:0a:18:05:b7:b2: c6:fc:1f:b3:9c:28:1d:4b:28:c2:34:4a:6f:14:8e:3c:c4:fc: 70:35:41:43:d9:a4:fd:fb:90:f3:da:6d:94:b3:41:7d:a0:38: 14:6f:c8:0d:2d:7b:07:1c:b1:69:f9:46:bc:0e:cf:93:3e:47: 60:af:8e:01:13:08:a4:05:69:4c:78:9e:7f:0e:eb:a7:1c:fe: e0:2d:62:f4:bb:5b:1f:6a:f6:82:81:07:5c:79:2f:09:ec:ed: 25:40:ca:33:ed:4b:84:3d:52:da:93:47:ad:86:fa:ad:12:8e: 35:6c:93:ce:6c:f1:1a:1a:80:03:5e:89:0c:f8:45:0a:93:88: c0:e3:1b:32:bd:2c:66:91:36:42:fa:12:37:f7:90:14:0b:51: 1f:e1:20:51:d6:19:4f:bb:5b:f8:d1:99:79:f1:6a:04:9a:ed: 58:03:1d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSYbu/nuDhiBvP032wzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTI3MzY4MjA2ZTNlOWE1OTI0MDgxZGY2Mzg4MDI0NmU1 YzU0MWEwHhcNMjUxMjA2MTIwMDQyWhcNMjUxMjA3MTIwMDQyWjAzMTEwLwYDVQQD Eyg5NGRiMmViODBiYWExMTkxZDIwN2MxMDExYWI3ODQ0MDkzOTFkMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rHnMmlAaYDXdPHbn3fJ1iyzx4zD 24HmPz6HK/KTuFLjT9AQDq2q+idkAJZOsRa9Isr6mnye15RXA5twgFy8UscOBup5 9MffcC2oP0vLmH4jNZIT3Muq7TYOdqlobthytIsXY6mr00foOC04SY62w3NK7rWv WO7KH0+K8B6obMSDmp20oxDpr+L8v7DoH+US5TPOI/KmEK78M8nfKhgYVrJSCcCE wOk9K/gQDqGyQ0b5qAB+LIvI3HQMdwj4tMy9cZv+4lXXGtEFdwkIwsb1wNmXQX+E 9NKjuOqOxJ9ZizyI6cMCom5WPLiF+1qpP4p3I83zLX81jUT9igtfzVcFtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTbLrgLqhGR0gfBARq3hECTkdDWMB8GA1UdIwQY MBaAFNlSc2ggbj6aWSQIHfY4gCRuXFQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMt MTk2MjA2MTU1NzliLzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84MjEyOWEtNTI2My00M2QyLWJjNjMtMTk2MjA2MTU1Nzli LzEvMlZKemFDQnVQcHBaSkFnZDlqaUFKRzVjVkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNPxw3C0 g0S4mvSfYNTg3F9b7SU0badacCnkrDyLKrUgdFb4aK1vyGGFQVcdRtSRgAQm+rvT zw3I8zNq6vntkV2+qGZbp/LFsrWX7aGFGlNQf1ZvcgoYBbeyxvwfs5woHUsowjRK bxSOPMT8cDVBQ9mk/fuQ89ptlLNBfaA4FG/IDS17BxyxaflGvA7Pkz5HYK+OARMI pAVpTHiefw7rpxz+4C1i9LtbH2r2goEHXHkvCeztJUDKM+1LhD1S2pNHrYb6rRKO NWyTzmzxGhqAA16JDPhFCpOIwOMbMr0sZpE2QvoSN/eQFAtRH+EgUdYZT7tb+NGZ efFqBJrtWAMd4g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:40 2025 by rpki-client