This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json) Hash identifier: 0djOoZ6skenW5Ocyf0hYGhGOXL+OZmwStNLMI8HweIo= Subject key identifier: B6:3C:D0:90:B5:D7:1F:FD:A2:03:83:B7:FD:F3:9F:39:D1:2B:82:E4 Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0 Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0 Certificate serial: 019AF276F343218AF7D668148A3588D8013A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft Manifest number: 10BD Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: b5m5RsF/SaLxghzOo1KPOminMfu6ypx61O40uU2KCv8=) 2: t0yBm1hFtLLJBLZuRWFSy1DPMfs.roa (hash: j8/P6OOBiK4e2CmSebJ2V2wOYlJSy/jx7/iDkS26Tbo=) 3: wpUZVReQHXzsn_DPk2ck08lBo6E.roa (hash: uqt9xMeCs/4H5VzlZsIDbAr0gO/Vsft4k85bkU/+qVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f3:43:21:8a:f7:d6:68:14:8a:35:88:d8:01:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0 Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=b63cd090b5d71ffda20383b7fdf39f39d12b82e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:56:6b:ee:ef:ca:a7:2c:ef:0b:1d:49:78: 37:44:e3:59:d5:42:5e:38:ab:6a:44:b7:40:87:cb: 0b:97:d1:49:f0:1f:3b:ff:f5:cd:b9:78:16:3f:72: 47:21:cf:6e:70:46:bc:4a:9a:f3:06:18:a8:eb:6c: 30:14:f6:99:a0:ef:8e:02:c5:4a:de:68:ba:48:8f: 2b:43:2b:ff:95:7e:fe:2f:c2:fb:a6:a2:0f:5c:88: 92:e5:2a:32:25:e3:b3:aa:34:04:e3:68:c4:55:f4: b0:0e:44:d0:58:8b:5e:d3:48:22:64:14:c6:87:18: d7:0b:29:6b:62:b9:f4:3c:76:f9:84:b4:0e:2f:4b: b7:8f:11:8c:ea:49:c5:7c:d2:1d:35:13:87:92:09: e6:ce:28:dc:3b:b0:2a:61:55:f7:43:76:50:4c:a3: 0c:07:84:36:4a:f0:d5:e4:34:fb:70:83:a2:06:0c: 51:95:5f:32:65:ab:ef:f5:05:a3:6a:49:08:ce:05: 6c:a7:a2:68:06:3c:4d:25:7a:20:1a:b8:7f:03:38: b3:af:72:10:fa:8f:f6:d0:21:aa:cb:d7:cf:3f:39: 75:c0:85:11:ba:52:00:24:fb:a5:01:a2:f2:f3:6c: 13:f4:f6:f4:8c:bb:ef:0d:3d:8c:4c:ff:82:ba:2f: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:D0:90:B5:D7:1F:FD:A2:03:83:B7:FD:F3:9F:39:D1:2B:82:E4 X509v3 Authority Key Identifier: keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:69:a5:f2:e7:98:ee:4f:17:be:01:78:f8:f9:f8:2c:53:7c: 64:18:94:4d:9b:fc:9d:f4:8e:6a:64:2b:59:5f:eb:96:71:5f: 0a:6f:c8:90:db:6e:1f:bf:36:d1:58:74:9e:4e:49:cf:60:f0: b2:f7:ec:ec:fb:eb:76:ea:d6:59:97:54:a3:5c:21:9c:ba:e8: b3:bc:70:68:c8:df:cc:e3:a9:f3:05:21:cd:8d:3a:e5:4f:3c: 42:de:02:a1:09:95:b6:e2:a7:71:bf:3a:b4:ab:2b:ad:68:2c: b9:85:c6:61:6e:f6:67:70:e6:4d:bf:f6:c2:82:8d:fd:50:bf: 30:42:aa:d7:74:3c:b7:32:b2:30:49:74:ee:f4:33:a5:79:e0: 08:e6:b8:3f:78:e3:ad:7c:a2:87:45:a2:d3:19:cf:60:3b:d4: be:97:40:1c:00:bc:82:5d:e1:23:17:58:39:14:b1:ec:54:5d: 52:7d:b9:3c:a6:bf:a4:2a:56:4d:ed:27:90:42:7a:d7:33:31: a5:5d:12:b5:90:73:b2:ba:77:0f:52:3e:fd:e5:26:ee:b5:fe: 15:1b:6f:3c:1d:84:96:7a:df:77:27:21:62:c2:78:de:08:43: eb:18:6e:f4:51:5d:4e:97:aa:cd:ec:84:6e:83:54:88:ec:8a: 40:40:02:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvNDIYr31mgUijWI2AE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MGI1NjVkNzczNjc1M2RiZTdmNjYyNGJkZjFkMmJjMTg5 NmY3YzAwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhiNjNjZDA5MGI1ZDcxZmZkYTIwMzgzYjdmZGYzOWYzOWQxMmI4MmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+VWa+7vyqcs7wsdSXg3RONZ1UJe OKtqRLdAh8sLl9FJ8B87//XNuXgWP3JHIc9ucEa8SprzBhio62wwFPaZoO+OAsVK 3mi6SI8rQyv/lX7+L8L7pqIPXIiS5SoyJeOzqjQE42jEVfSwDkTQWIte00giZBTG hxjXCylrYrn0PHb5hLQOL0u3jxGM6knFfNIdNROHkgnmzijcO7AqYVX3Q3ZQTKMM B4Q2SvDV5DT7cIOiBgxRlV8yZavv9QWjakkIzgVsp6JoBjxNJXogGrh/Azizr3IQ +o/20CGqy9fPPzl1wIURulIAJPulAaLy82wT9Pb0jLvvDT2MTP+Cui+EuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY80JC11x/9ogODt/3znznRK4LkMB8GA1UdIwQY MBaAFNgLVl13NnU9vn9mJL3x0rwYlvfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkF0V1hYYzJkVDItZjJZa3ZmSFN2QmlXOThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mNzYzMzktMTcxNC00MDNiLTk5Mjct MjMyNzc4MjJmZWZhLzEvMkF0V1hYYzJkVDItZjJZa3ZmSFN2QmlXOThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mNzYzMzktMTcxNC00MDNiLTk5MjctMjMyNzc4MjJmZWZh LzEvMkF0V1hYYzJkVDItZjJZa3ZmSFN2QmlXOThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2ml8ueY 7k8XvgF4+Pn4LFN8ZBiUTZv8nfSOamQrWV/rlnFfCm/IkNtuH7820Vh0nk5Jz2Dw svfs7PvrdurWWZdUo1whnLros7xwaMjfzOOp8wUhzY065U88Qt4CoQmVtuKncb86 tKsrrWgsuYXGYW72Z3DmTb/2woKN/VC/MEKq13Q8tzKyMEl07vQzpXngCOa4P3jj rXyih0Wi0xnPYDvUvpdAHAC8gl3hIxdYORSx7FRdUn25PKa/pCpWTe0nkEJ61zMx pV0StZBzsrp3D1I+/eUm7rX+FRtvPB2ElnrfdychYsJ43ghD6xhu9FFdTpeqzeyE boNUiOyKQEAC9A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:42 2025 by rpki-client