This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft File: 2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json) Hash identifier: w0lKaa43VoMjqec3dQ31qFnNq32gnJym/L/FFoHC5EA= Subject key identifier: D4:76:B2:F0:4A:CB:2B:4E:44:38:BF:65:5C:F0:43:BA:63:D3:82:A9 Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F Certificate issuer: /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f Certificate serial: 019AF653229526A7B8676857D1EC132E734F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft Manifest number: 08F9 Signing time: Sun 07 Dec 2025 01:00:34 +0000 Manifest this update: Sun 07 Dec 2025 01:00:34 +0000 Manifest next update: Mon 08 Dec 2025 01:00:34 +0000 Files and hashes: 1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: i3SvBecbcgx+nxvNEdH6swZgGTkklme5BH7Twoyq4oU=) 2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:22:95:26:a7:b8:67:68:57:d1:ec:13:2e:73:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f Validity Not Before: Dec 7 01:00:34 2025 GMT Not After : Dec 8 01:00:34 2025 GMT Subject: CN=d476b2f04acb2b4e4438bf655cf043ba63d382a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:de:52:63:1e:fe:fe:84:59:cf:a4:1e:68: 92:86:33:c4:35:f8:f2:a5:ea:c1:b6:35:6a:a0:a3: 38:e1:b7:f6:57:1c:2a:e1:ee:63:16:5e:82:e3:93: d4:4d:d4:de:d2:fe:c5:79:a4:bd:40:46:61:57:f7: 89:4b:90:27:54:80:1b:6e:83:e1:7e:be:1e:58:cc: f8:8e:92:92:71:52:45:71:71:b3:67:31:90:5d:12: b5:68:d6:e0:8c:f3:0c:ab:31:1f:b2:fe:52:f3:5e: c0:24:c1:ed:66:21:14:63:c8:66:a9:b6:48:f6:a4: 52:11:24:85:ef:77:d8:28:69:b6:58:1e:06:f3:62: e8:0d:45:81:88:33:f1:7a:7d:6d:05:bc:28:5b:42: 0f:ed:89:2d:24:7f:d7:4e:3e:5a:92:13:2d:93:ae: 1c:45:d7:33:68:b1:b6:31:09:58:5e:5a:fa:be:84: e9:c7:23:02:c3:81:22:5f:7f:34:d5:34:10:11:ba: 7c:4b:2d:95:07:5d:9b:77:83:11:41:ad:0d:80:6e: c0:e3:9e:9e:2a:af:a2:91:a9:6d:e6:23:02:d7:23: f5:d0:6e:d2:f9:3d:75:81:0c:b1:cb:af:d1:a9:a8: af:fe:06:31:e7:ee:6e:48:7f:fc:2d:54:58:5f:4d: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:B2:F0:4A:CB:2B:4E:44:38:BF:65:5C:F0:43:BA:63:D3:82:A9 X509v3 Authority Key Identifier: keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ad:23:c7:23:a7:80:c3:c1:14:6b:ac:5e:12:8c:b6:33:ad: be:4d:c5:1f:88:ab:98:c5:5d:6a:9e:df:2a:dd:de:63:f5:29: 51:6a:11:82:97:46:59:2b:65:67:0c:3d:b9:76:03:5b:5c:00: da:ee:ab:6c:21:6e:60:09:6b:a6:e9:7b:ba:f2:78:77:6d:ee: c1:8b:2c:e7:2a:cc:c4:1b:eb:b7:8a:37:3a:7d:79:e2:c7:d8: 17:25:24:4d:e1:b2:8a:b6:d5:96:5d:2e:fa:b0:9d:87:a1:fa: c8:fb:97:c4:48:de:14:24:99:de:ad:52:65:fa:da:7e:30:ff: 86:fd:38:ab:c9:a7:ae:2d:db:f1:e6:94:b4:6c:4a:35:6f:0f: fc:7a:53:95:b2:75:0b:f6:31:5e:97:ab:26:c4:6e:be:80:62: df:18:c2:1f:2d:00:a0:aa:2f:51:9f:ef:ba:71:eb:6e:a8:0d: 15:53:da:33:64:55:89:c9:ea:84:2c:53:29:39:b0:6f:c1:05: 89:f4:13:83:6c:71:01:f1:cf:67:90:96:b0:4c:17:f4:04:ca: b8:8c:1d:8b:f7:42:8e:c3:a6:15:a8:05:ef:ee:f6:9a:93:8a: d4:ec:31:ac:be:ac:9f:85:52:8b:ce:20:15:fb:db:c3:e7:0a: 86:bc:0f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UyKVJqe4Z2hX0ewTLnNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzIwOTZjYzBjNTU1N2NiYWI2YzEwZDYxZDA3N2QwNzhm ZTcxN2YwHhcNMjUxMjA3MDEwMDM0WhcNMjUxMjA4MDEwMDM0WjAzMTEwLwYDVQQD EyhkNDc2YjJmMDRhY2IyYjRlNDQzOGJmNjU1Y2YwNDNiYTYzZDM4MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHHeUmMe/v6EWc+kHmiShjPENfjy perBtjVqoKM44bf2Vxwq4e5jFl6C45PUTdTe0v7FeaS9QEZhV/eJS5AnVIAbboPh fr4eWMz4jpKScVJFcXGzZzGQXRK1aNbgjPMMqzEfsv5S817AJMHtZiEUY8hmqbZI 9qRSESSF73fYKGm2WB4G82LoDUWBiDPxen1tBbwoW0IP7YktJH/XTj5akhMtk64c RdczaLG2MQlYXlr6voTpxyMCw4EiX3801TQQEbp8Sy2VB12bd4MRQa0NgG7A456e Kq+ikalt5iMC1yP10G7S+T11gQyxy6/Rqaiv/gYx5+5uSH/8LVRYX01Z+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR2svBKyytORDi/ZVzwQ7pj04KpMB8GA1UdIwQY MBaAFNjCCWzAxVV8urbBDWHQd9B4/nF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81ZTUxYmEtNTA4Zi00ZjIzLWE3OWYt NDMyODNiMzcxOGRjLzEvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81ZTUxYmEtNTA4Zi00ZjIzLWE3OWYtNDMyODNiMzcxOGRj LzEvMk1JSmJNREZWWHk2dHNFTllkQjMwSGotY1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba0jxyOn gMPBFGusXhKMtjOtvk3FH4irmMVdap7fKt3eY/UpUWoRgpdGWStlZww9uXYDW1wA 2u6rbCFuYAlrpul7uvJ4d23uwYss5yrMxBvrt4o3On154sfYFyUkTeGyirbVll0u +rCdh6H6yPuXxEjeFCSZ3q1SZfrafjD/hv04q8mnri3b8eaUtGxKNW8P/HpTlbJ1 C/YxXperJsRuvoBi3xjCHy0AoKovUZ/vunHrbqgNFVPaM2RVicnqhCxTKTmwb8EF ifQTg2xxAfHPZ5CWsEwX9ATKuIwdi/dCjsOmFagF7+72mpOK1OwxrL6sn4VSi84g Ffvbw+cKhrwPiA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:45 2025 by rpki-client