This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json) Hash identifier: LgOo+/M2GgoL84HFIB5/bokEHNBDqkHwps7BBYLuNr8= Subject key identifier: 81:9B:79:A6:6B:71:95:5E:16:7C:8F:06:1E:F3:96:6D:87:18:7A:9F Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Certificate serial: 019AF276F9C57BEF94E593781F77C64D007F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft Manifest number: 096D Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: gtDuafNQctZhxMIGsgQaZSdeJNr2brj71W/uHwQ1vcY=) 2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f9:c5:7b:ef:94:e5:93:78:1f:77:c6:4d:00:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=819b79a66b71955e167c8f061ef3966d87187a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:89:0f:b0:1b:c2:f8:b1:f4:73:76:8f:bd:55: 03:5f:3c:8d:ef:65:9a:59:1d:6f:37:94:14:ae:bb: 63:6f:3d:12:71:6a:8c:dc:f5:73:51:4d:3f:9c:bd: 9c:a2:68:46:c1:76:b8:6f:37:5c:ba:71:1f:ee:5a: 0a:c8:a9:1d:20:66:84:4b:ab:d3:e8:59:3e:0f:a6: ea:e2:29:28:72:e4:94:a2:99:61:b3:01:00:49:79: df:e4:85:ef:e6:6c:3f:d9:c9:62:4b:df:b4:05:61: a5:4d:e2:35:c5:b9:a1:f9:a8:4b:0f:51:82:5c:98: 41:b3:95:f2:d9:2a:e6:d5:47:e6:ac:f1:2d:3c:cf: a1:c3:7e:49:5a:53:da:36:1f:ca:88:d2:b9:67:62: 7a:29:08:95:f9:76:ec:ed:4a:4e:f6:8a:52:3b:e8: 5c:23:b2:12:2a:ad:0e:49:af:61:ab:cd:f0:ac:12: 45:3c:ab:a6:49:ff:69:66:71:e5:78:9a:51:8a:7a: f9:2f:5e:08:cb:17:f5:b7:e8:18:b2:c3:1a:ba:bb: 35:ca:dc:3d:f7:9a:84:32:36:10:f5:35:e8:55:32: 39:34:93:e0:c0:2c:50:eb:e8:b1:bf:b2:56:6d:c9: c3:00:d8:98:2a:b0:42:09:70:48:4c:97:38:21:32: e2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9B:79:A6:6B:71:95:5E:16:7C:8F:06:1E:F3:96:6D:87:18:7A:9F X509v3 Authority Key Identifier: keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:90:06:26:bf:ef:42:87:93:b0:cb:dc:b6:5c:db:0c:50:67: 8f:3b:75:d5:c4:1a:58:ff:25:1e:f6:d7:c5:ee:2e:80:c1:6e: 41:a3:42:cf:36:ea:a3:e7:7c:1b:13:5b:70:3a:81:d7:3c:f8: 30:97:86:28:c1:12:92:50:1c:df:70:5e:5b:ad:27:cb:bd:97: 31:74:fe:0b:e0:0b:c9:2b:5f:60:1a:c9:47:c1:c3:18:a5:1d: 96:8f:da:1d:da:a7:86:5c:75:3b:4b:b6:56:5f:c9:b2:59:79: e8:77:8d:62:9e:06:7f:8f:22:f7:a3:b8:84:4c:e9:14:17:28: 78:70:33:8b:a8:89:ea:dc:9e:8a:ca:44:5f:4a:90:ed:74:b1: 61:7b:fb:e4:a7:d2:2e:b5:fb:c0:bb:92:6c:66:56:68:1e:93: 99:ec:3f:82:a4:9d:fc:d4:ee:c9:a7:2e:f4:8d:62:ba:86:ea: 14:a8:2e:ad:50:09:98:75:5b:bf:47:f7:a5:e6:54:4e:f5:2a: 88:a0:b2:d3:1e:7a:54:4d:11:b9:87:af:02:c5:09:8f:f1:02: 42:4d:d0:b7:57:cd:11:c7:1f:65:a9:6f:79:a1:1b:d3:a8:b7: c3:e6:f9:fb:6b:e1:75:a1:0d:fe:7a:e7:8a:4b:b7:68:aa:1c: 70:fc:5e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvnFe++U5ZN4H3fGTQB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4 ZmRmY2IwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD Eyg4MTliNzlhNjZiNzE5NTVlMTY3YzhmMDYxZWYzOTY2ZDg3MTg3YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8okPsBvC+LH0c3aPvVUDXzyN72Wa WR1vN5QUrrtjbz0ScWqM3PVzUU0/nL2comhGwXa4bzdcunEf7loKyKkdIGaES6vT 6Fk+D6bq4ikocuSUoplhswEASXnf5IXv5mw/2cliS9+0BWGlTeI1xbmh+ahLD1GC XJhBs5Xy2Srm1UfmrPEtPM+hw35JWlPaNh/KiNK5Z2J6KQiV+Xbs7UpO9opSO+hc I7ISKq0OSa9hq83wrBJFPKumSf9pZnHleJpRinr5L14Iyxf1t+gYssMaurs1ytw9 95qEMjYQ9TXoVTI5NJPgwCxQ6+ixv7JWbcnDANiYKrBCCXBITJc4ITLiBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGbeaZrcZVeFnyPBh7zlm2HGHqfMB8GA1UdIwQY MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZAGJr/v QoeTsMvctlzbDFBnjzt11cQaWP8lHvbXxe4ugMFuQaNCzzbqo+d8GxNbcDqB1zz4 MJeGKMESklAc33BeW60ny72XMXT+C+ALyStfYBrJR8HDGKUdlo/aHdqnhlx1O0u2 Vl/Jsll56HeNYp4Gf48i96O4hEzpFBcoeHAzi6iJ6tyeispEX0qQ7XSxYXv75KfS LrX7wLuSbGZWaB6Tmew/gqSd/NTuyacu9I1iuobqFKgurVAJmHVbv0f3peZUTvUq iKCy0x56VE0RuYevAsUJj/ECQk3Qt1fNEccfZalveaEb06i3w+b5+2vhdaEN/nrn iku3aKoccPxeGA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:22 2025 by rpki-client