This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.mft (raw, json) Hash identifier: TfvNKaf/uEIOciuwC0PPamrnyBJHMJlxzJDKtONvS2k= Subject key identifier: 43:3D:A4:1E:72:8A:55:93:73:44:2C:83:0C:05:9D:D3:E6:8F:E8:56 Authority key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED Certificate issuer: /CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed Certificate serial: 019AF0BF9B56F2954068FBCA772C92FD1DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft Manifest number: 01F3 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: 2nf6EA1s0ojlRMfLTH1NGIeQee0.crl (hash: QtYnAEaSyUEPXQRNu0pcwYPDZtESFHdVUXq1Ilf0DZY=) 2: HyAFlnKRYn8v4ck7CUrvJ74oqJw.roa (hash: Cz97E2NkgnmgiZA3PdXbnScz0dyzdjSpjkDb9HLlBcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9b:56:f2:95:40:68:fb:ca:77:2c:92:fd:1d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=433da41e728a559373442c830c059dd3e68fe856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:90:65:88:be:82:4e:ee:52:e4:3a:f7:1f: 3b:2b:48:db:87:8d:c3:ce:6f:06:03:63:96:58:e6: bc:19:a8:8a:33:28:02:ed:7a:09:0a:9b:d3:3f:45: e9:2e:41:94:6d:c8:da:7b:4f:d0:02:49:6c:4e:57: d7:3a:f0:69:06:94:ae:63:72:41:14:7b:cd:26:a8: d5:b3:54:c2:6c:1b:0b:a4:75:19:e6:b2:9d:42:80: 1c:2d:88:8d:fe:7a:f4:fb:9c:ba:09:ef:0a:d5:1e: 6d:d0:5f:fc:fa:df:8c:b2:74:db:0a:49:9c:d5:af: 05:ac:56:09:da:fb:0e:a4:6c:d8:d3:59:dd:ce:a9: c6:9d:ea:e6:f4:36:df:81:ba:32:bf:96:f0:5a:3e: e1:aa:f9:85:d2:52:cb:fc:3f:3d:7a:84:13:6e:36: 39:10:74:48:86:29:cc:d9:ae:af:48:d1:cd:1f:fb: d5:e4:7a:b8:58:1d:5c:b1:d4:0e:32:00:02:d2:81: 31:17:ae:ef:f6:10:53:86:0d:a0:a0:68:89:6e:02: c3:33:55:e8:1c:80:bc:c2:ad:84:64:b0:6f:86:98: 8e:04:a1:e3:ea:74:77:45:fb:61:e3:c8:07:f5:67: 60:cb:fa:d6:ff:e6:7b:c9:ff:01:71:1a:bf:2c:cc: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3D:A4:1E:72:8A:55:93:73:44:2C:83:0C:05:9D:D3:E6:8F:E8:56 X509v3 Authority Key Identifier: keyid:DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b5:49:aa:40:25:8d:c5:29:06:1f:6c:9c:7c:54:52:61:ef: f2:3c:de:97:9f:bb:39:8b:ff:90:03:a0:c3:89:04:43:81:ac: 5b:aa:76:4d:31:9b:b6:9d:c8:f2:46:74:e6:9b:bd:52:38:f1: cc:df:81:e8:c6:3f:34:b7:1f:8d:e7:ff:8a:76:a0:0e:56:9f: bd:c5:b3:89:96:91:e6:c5:1a:89:c8:30:76:68:93:f8:ad:bb: f7:03:ad:e0:a1:81:9b:2e:15:e8:3f:51:6a:54:cb:dd:ee:3f: 25:03:b0:70:10:22:9b:a4:b5:fd:93:c5:77:50:c7:b3:4d:2e: 05:2a:f7:59:8a:95:a0:43:f3:41:b7:a7:70:46:6a:57:e4:34: 81:96:d0:f6:a2:51:b6:72:d1:85:0a:e1:e0:57:c8:68:a7:2d: 9d:54:40:19:e3:49:34:aa:cb:56:7c:30:47:6b:3c:9c:06:72: 7c:4b:bc:8a:1c:21:07:f3:6b:01:83:ca:69:08:e6:4a:c3:eb: 23:00:c1:b2:34:4e:57:67:fd:10:7e:c7:fa:6b:c6:c1:92:61: 20:2b:47:85:14:e1:39:b3:17:e4:ff:8c:28:0e:0b:f4:6c:95: 6d:d6:c6:03:9a:d9:90:ef:22:9f:3b:c6:f2:0e:04:56:ee:17: 17:9e:27:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5tW8pVAaPvKdyyS/R29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzdmYTEwMGQ2Y2QyODhlNTQ0YzdjYjRjN2Q0ZDE4ODc5 MDc5ZWQwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD Eyg0MzNkYTQxZTcyOGE1NTkzNzM0NDJjODMwYzA1OWRkM2U2OGZlODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEKQZYi+gk7uUuQ69x87K0jbh43D zm8GA2OWWOa8GaiKMygC7XoJCpvTP0XpLkGUbcjae0/QAklsTlfXOvBpBpSuY3JB FHvNJqjVs1TCbBsLpHUZ5rKdQoAcLYiN/nr0+5y6Ce8K1R5t0F/8+t+MsnTbCkmc 1a8FrFYJ2vsOpGzY01ndzqnGnerm9Dbfgboyv5bwWj7hqvmF0lLL/D89eoQTbjY5 EHRIhinM2a6vSNHNH/vV5Hq4WB1csdQOMgAC0oExF67v9hBThg2goGiJbgLDM1Xo HIC8wq2EZLBvhpiOBKHj6nR3Rfth48gH9Wdgy/rW/+Z7yf8BcRq/LMyGywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM9pB5yilWTc0QsgwwFndPmj+hWMB8GA1UdIwQY MBaAFNp3+hANbNKI5UTHy0x9TRiHkHntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQt ZGY4NzJmYjI2OWNmLzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lMzFhZDUtZWY3NC00MGE0LTlhMGQtZGY4NzJmYjI2OWNm LzEvMm5mNkVBMXMwb2psUk1mTFRIMU5HSWVRZWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLVJqkAl jcUpBh9snHxUUmHv8jzel5+7OYv/kAOgw4kEQ4GsW6p2TTGbtp3I8kZ05pu9Ujjx zN+B6MY/NLcfjef/inagDlafvcWziZaR5sUaicgwdmiT+K279wOt4KGBmy4V6D9R alTL3e4/JQOwcBAim6S1/ZPFd1DHs00uBSr3WYqVoEPzQbencEZqV+Q0gZbQ9qJR tnLRhQrh4FfIaKctnVRAGeNJNKrLVnwwR2s8nAZyfEu8ihwhB/NrAYPKaQjmSsPr IwDBsjROV2f9EH7H+mvGwZJhICtHhRThObMX5P+MKA4L9GyVbdbGA5rZkO8inzvG 8g4EVu4XF54n+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:16 2025 by rpki-client