This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft File: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft (raw, json) Hash identifier: XzEhf90O3U/SRpx0NSjQRMhLmqo6ROwoHIjNm0R+fd0= Subject key identifier: 32:BA:50:21:23:CC:E3:5C:FE:43:FE:61:71:E6:F7:F7:CF:A9:E7:31 Authority key identifier: D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 Certificate issuer: /CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Certificate serial: 019AF2AD503277B3443BCBC2463DFF8A656F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft Manifest number: 02E1 Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: 2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl (hash: 8Ke86IQKm2qyaOoivsa+jnpKLzRC66grNwnxJA3I0lc=) 2: KMiAWUFXj2wWr5kXXxFA1hwCzJs.roa (hash: zRXksS88o1vhBVFHCpjB+UTg+AP7it+76VFloakWdKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:50:32:77:b3:44:3b:cb:c2:46:3d:ff:8a:65:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98c4e8a0ea297d67b431aac438a1c20675ef867 Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=32ba502123cce35cfe43fe6171e6f7f7cfa9e731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:99:52:79:ad:7f:ed:6c:1e:ae:e8:66:a2: cb:29:fd:83:4c:4d:c9:e3:2c:29:ae:37:f4:63:52: 41:4e:3c:bc:34:9b:d2:08:16:db:18:72:28:8b:ae: ad:aa:29:5e:01:71:a3:eb:a9:26:e8:62:61:99:f1: 85:ee:e8:36:04:aa:9a:02:80:53:fe:22:30:f4:20: 4a:63:09:16:ab:4a:0e:28:e6:cd:42:94:29:2c:94: b0:6f:d3:39:ee:94:6a:dd:49:94:05:90:26:91:37: d8:48:8a:4f:c1:e3:fa:34:ab:47:93:aa:fb:01:22: 9e:91:33:47:fc:c7:aa:5e:fb:90:7a:53:ca:92:4a: 2b:53:8c:54:d2:88:d4:80:54:0c:ba:90:20:c6:fe: 1a:ac:13:42:0a:6b:90:94:2a:79:f7:dd:9c:59:f8: 71:19:a0:9e:61:f1:e1:ba:4b:0d:51:a3:47:ef:4f: 21:5e:e2:22:fa:b7:0c:e6:40:d8:4e:15:8b:4d:0f: e2:7b:f3:2a:fc:7a:57:6a:11:0d:a6:90:e8:17:16: ba:cb:1b:a7:10:dc:c5:cf:9f:60:83:26:f9:61:1f: 91:a7:14:86:e8:8e:68:dc:d7:77:58:ee:3a:48:37: b2:21:e5:57:2e:b5:f5:a8:15:dc:9a:1d:d6:2d:34: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BA:50:21:23:CC:E3:5C:FE:43:FE:61:71:E6:F7:F7:CF:A9:E7:31 X509v3 Authority Key Identifier: keyid:D9:8C:4E:8A:0E:A2:97:D6:7B:43:1A:AC:43:8A:1C:20:67:5E:F8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxOig6il9Z7QxqsQ4ocIGde-Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5a352e-5bca-4468-b8d6-ba06e74db91c/1/2YxOig6il9Z7QxqsQ4ocIGde-Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4e:6d:11:88:c5:50:8a:23:07:1a:1e:6c:5d:fa:19:9a:06: 6c:6c:0d:f8:4a:b2:8c:c9:81:5c:5c:27:6a:13:77:6a:7d:b8: ed:29:dc:48:48:4b:08:18:33:a9:7e:e1:86:a8:02:6f:62:be: 31:00:3a:8d:b3:9c:95:f7:08:70:9d:c2:96:1a:45:58:ab:f0: 24:b3:ec:d7:c9:b9:34:2e:24:29:e6:0d:c0:8d:ab:37:bf:14: 7d:b2:da:67:e7:9f:6b:86:7f:99:f0:39:f6:3b:f0:97:cc:95: 09:81:a7:40:4c:dc:ae:36:8b:3a:c8:2b:e1:99:13:67:62:11: 6a:89:1e:ef:9e:fb:ef:e7:3e:af:9d:f4:df:7c:e7:9e:8d:29: 7e:70:ea:5f:b1:57:b5:7e:b3:99:07:13:58:74:9d:0b:4e:31: 84:80:26:0a:e5:48:0f:3a:34:75:38:76:b3:dd:75:48:e7:b2: b1:aa:91:df:53:c6:d9:7c:06:77:a5:19:35:fb:cc:c1:91:d3: 96:1c:39:00:9a:f5:c5:d7:4c:dd:c1:92:47:82:ec:bb:24:3f: b4:2a:d2:3b:a1:e5:f6:73:e0:6b:49:29:be:6a:40:5c:be:17: 1d:cf:dc:c1:b5:ad:b4:94:05:23:a6:02:ec:80:5a:07:39:65: bb:85:82:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVAyd7NEO8vCRj3/imVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OGM0ZThhMGVhMjk3ZDY3YjQzMWFhYzQzOGExYzIwNjc1 ZWY4NjcwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EygzMmJhNTAyMTIzY2NlMzVjZmU0M2ZlNjE3MWU2ZjdmN2NmYTllNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr+ZUnmtf+1sHq7oZqLLKf2DTE3J 4ywprjf0Y1JBTjy8NJvSCBbbGHIoi66tqileAXGj66km6GJhmfGF7ug2BKqaAoBT /iIw9CBKYwkWq0oOKObNQpQpLJSwb9M57pRq3UmUBZAmkTfYSIpPweP6NKtHk6r7 ASKekTNH/MeqXvuQelPKkkorU4xU0ojUgFQMupAgxv4arBNCCmuQlCp5992cWfhx GaCeYfHhuksNUaNH708hXuIi+rcM5kDYThWLTQ/ie/Mq/HpXahENppDoFxa6yxun ENzFz59ggyb5YR+RpxSG6I5o3Nd3WO46SDeyIeVXLrX1qBXcmh3WLTQLrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK6UCEjzONc/kP+YXHm9/fPqecxMB8GA1UdIwQY MBaAFNmMTooOopfWe0MarEOKHCBnXvhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYt YmEwNmU3NGRiOTFjLzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81YTM1MmUtNWJjYS00NDY4LWI4ZDYtYmEwNmU3NGRiOTFj LzEvMll4T2lnNmlsOVo3UXhxc1E0b2NJR2RlLUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdE5tEYjF UIojBxoebF36GZoGbGwN+EqyjMmBXFwnahN3an247SncSEhLCBgzqX7hhqgCb2K+ MQA6jbOclfcIcJ3ClhpFWKvwJLPs18m5NC4kKeYNwI2rN78UfbLaZ+efa4Z/mfA5 9jvwl8yVCYGnQEzcrjaLOsgr4ZkTZ2IRaoke75777+c+r53033znno0pfnDqX7FX tX6zmQcTWHSdC04xhIAmCuVIDzo0dTh2s911SOeysaqR31PG2XwGd6UZNfvMwZHT lhw5AJr1xddM3cGSR4LsuyQ/tCrSO6Hl9nPga0kpvmpAXL4XHc/cwbWttJQFI6YC 7IBaBzllu4WC8w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:46 2025 by rpki-client