This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json) Hash identifier: raSxJZY3kcJLaqhHJc5zZsP2xr+LeKLAUTcw1WerqnU= Subject key identifier: 34:8A:ED:26:E1:F8:61:CF:1A:8B:65:64:08:07:91:D6:AD:35:4D:B3 Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e Certificate serial: 019AF42E4C78819EC57CAA799E76D2C04B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft Manifest number: 1035 Signing time: Sat 06 Dec 2025 15:01:06 +0000 Manifest this update: Sat 06 Dec 2025 15:01:06 +0000 Manifest next update: Sun 07 Dec 2025 15:01:06 +0000 Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: rslTFwVjiF5gwqd4h6dmPtkbblr2M6nYgcns6sFqzmk=) 2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:4c:78:81:9e:c5:7c:aa:79:9e:76:d2:c0:4b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e Validity Not Before: Dec 6 15:01:06 2025 GMT Not After : Dec 7 15:01:06 2025 GMT Subject: CN=348aed26e1f861cf1a8b6564080791d6ad354db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:45:5c:c1:58:62:31:e8:16:f9:8a:a4:93: 5d:eb:66:d1:5c:47:72:c3:fa:68:a6:ac:24:77:7c: ff:1f:f4:4a:3f:a4:83:d7:c2:86:ac:17:93:90:bb: cf:d4:79:01:f2:b0:3d:1a:24:74:16:8d:8e:5d:03: ce:cf:88:57:14:1b:95:e8:98:6a:ad:c7:1e:7f:49: 55:f6:ae:86:37:36:3f:f2:ef:28:73:35:86:9d:6e: 09:cc:fd:67:58:6e:5d:96:b0:e1:7f:06:20:3f:f8: 3e:1d:ff:bc:49:8c:e5:a2:9d:66:c4:15:94:6b:28: 77:d9:df:0b:f5:b1:ec:8e:55:5c:03:11:ad:12:26: 2c:37:71:21:7b:b7:f7:ef:2c:a2:87:72:23:bc:e3: f3:e9:95:c4:c7:9e:d2:99:6f:42:41:e4:dc:94:a1: aa:b5:4f:4b:2d:a1:35:05:ea:00:5f:33:b3:93:98: 58:38:0c:ca:a0:ab:33:3c:96:0d:43:14:e9:fb:fd: 6c:58:f9:5d:a0:2f:bc:17:0c:86:f6:1c:24:fd:e4: 9e:fc:5f:70:a5:3f:a2:cc:50:34:4c:22:a3:5f:3f: 58:4e:ff:26:5f:c8:eb:b7:5a:46:ec:82:0b:9f:01: 5b:a2:4b:ab:dc:25:70:4d:eb:b7:f7:9d:d9:8c:0c: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:ED:26:E1:F8:61:CF:1A:8B:65:64:08:07:91:D6:AD:35:4D:B3 X509v3 Authority Key Identifier: keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a3:b7:aa:2c:2c:89:dd:1f:72:4b:bf:ed:58:20:cd:63:e8: e6:6b:fb:0b:9f:83:8b:64:70:d3:82:17:7d:18:dc:74:56:25: 3a:22:1d:78:00:48:40:b8:aa:ba:ea:7e:76:7e:e7:35:bb:4d: c8:33:ab:82:dd:66:c6:57:9b:32:25:fe:1d:2e:67:63:7c:f8: 4c:04:ab:06:f4:f2:4b:c9:46:a8:21:66:7b:b3:57:f0:e8:1e: 9a:19:8f:11:96:64:85:00:3f:d1:0c:9b:1c:8e:ca:eb:24:5d: 81:cb:07:bc:e1:a3:92:9d:8a:d7:a6:4a:09:22:bb:bd:b3:c1: a7:7a:36:b1:3a:52:e6:21:88:31:5b:c6:b1:e9:72:b3:d2:08: 85:ff:e0:17:bd:a7:df:f5:9b:25:5a:d7:98:6a:bf:ea:29:21: ed:44:2d:ee:28:88:27:3d:0b:22:7c:84:a6:22:a4:fc:d9:42: 4d:ed:eb:23:67:ee:43:85:c5:f3:72:60:74:a8:6e:4f:d8:30: ba:70:e6:d5:98:cd:b0:45:8b:9e:b2:58:73:40:67:8a:49:ed: 95:39:12:3c:f7:31:53:f7:7d:e7:4d:ce:24:04:32:10:aa:da: b8:24:ca:1c:e7:b7:36:fc:f0:8a:eb:08:4c:39:1f:87:c5:c2: 13:9b:c5:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lkx4gZ7FfKp5nnbSwEuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjkwZGE0MmEzM2ZmZDkxNjRkMGMwNWIwZGU0ZjY1NjI4 NzA3NmUwHhcNMjUxMjA2MTUwMTA2WhcNMjUxMjA3MTUwMTA2WjAzMTEwLwYDVQQD EygzNDhhZWQyNmUxZjg2MWNmMWE4YjY1NjQwODA3OTFkNmFkMzU0ZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthlFXMFYYjHoFvmKpJNd62bRXEdy w/popqwkd3z/H/RKP6SD18KGrBeTkLvP1HkB8rA9GiR0Fo2OXQPOz4hXFBuV6Jhq rccef0lV9q6GNzY/8u8oczWGnW4JzP1nWG5dlrDhfwYgP/g+Hf+8SYzlop1mxBWU ayh32d8L9bHsjlVcAxGtEiYsN3Ehe7f37yyih3IjvOPz6ZXEx57SmW9CQeTclKGq tU9LLaE1BeoAXzOzk5hYOAzKoKszPJYNQxTp+/1sWPldoC+8FwyG9hwk/eSe/F9w pT+izFA0TCKjXz9YTv8mX8jrt1pG7IILnwFbokur3CVwTeu3953ZjAwFvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSK7Sbh+GHPGotlZAgHkdatNU2zMB8GA1UdIwQY MBaAFNj5DaQqM//ZFk0MBbDeT2VihwduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjkt MjNiNDYzYjVlYTc3LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNzNkMzEtNzE4Mi00YWE4LWIwZjktMjNiNDYzYjVlYTc3 LzEvMlBrTnBDb3pfOWtXVFF3RnNONVBaV0tIQjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKO3qiws id0fcku/7VggzWPo5mv7C5+Di2Rw04IXfRjcdFYlOiIdeABIQLiquup+dn7nNbtN yDOrgt1mxlebMiX+HS5nY3z4TASrBvTyS8lGqCFme7NX8OgemhmPEZZkhQA/0Qyb HI7K6yRdgcsHvOGjkp2K16ZKCSK7vbPBp3o2sTpS5iGIMVvGselys9IIhf/gF72n 3/WbJVrXmGq/6ikh7UQt7iiIJz0LInyEpiKk/NlCTe3rI2fuQ4XF83JgdKhuT9gw unDm1ZjNsEWLnrJYc0BnikntlTkSPPcxU/d9503OJAQyEKrauCTKHOe3NvzwiusI TDkfh8XCE5vFQA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:51 2025 by rpki-client