This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft File: 2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json) Hash identifier: QdbUmrg9yPJro4O1rJs083bqSGFqLjR5dq5MhmACYRw= Subject key identifier: 2C:20:79:A2:F5:AE:4B:35:B2:29:DE:26:84:EE:4B:E8:28:FB:11:95 Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892 Certificate serial: 019AF31C07FAC0EA7757996DC0D9666BFA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 10:01:31 +0000 Manifest this update: Sat 06 Dec 2025 10:01:31 +0000 Manifest next update: Sun 07 Dec 2025 10:01:31 +0000 Files and hashes: 1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: 8mREfQacf/0y/5vml66NocGqwe8z/Wq3CdccYh0EFR8=) 2: 9AJVL74Koo20QslQbsW5LgWmuN0.roa (hash: ywfcVkqztZIsa4yV5w7CN7DaKI/bsZeXQWa9VUzq1PU=) 3: J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa (hash: 44Y8BMgB+sH5b8+axfLWpVcHTARgYoCnMt7xMsge5P8=) 4: _SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa (hash: yLq+2S7VzCleP2MSt8WxD7vanT3ofV/BHsfwwfGB6uA=) 5: k8SmLkdRoGivF16GFM2hqIOouBo.roa (hash: Ktq3us91dVySgQu0CPwEqVesPVx0pk3gPFhcWjBn49E=) 6: qHajeM7KS0OkvXZ6gKIN6UcTzPg.roa (hash: 9Inme+UM24UQgsOmhNMhOS7m0XYuhceY/GRE7b5eI94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:07:fa:c0:ea:77:57:99:6d:c0:d9:66:6b:fa:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892 Validity Not Before: Dec 6 10:01:31 2025 GMT Not After : Dec 7 10:01:31 2025 GMT Subject: CN=2c2079a2f5ae4b35b229de2684ee4be828fb1195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:ae:aa:32:e2:1e:88:d2:83:3d:a6:ef:6e: df:5d:5a:37:fe:e5:eb:a2:ce:d1:12:34:f8:66:03: 34:d9:de:29:56:a5:c2:f2:b6:eb:c1:74:27:fc:97: 96:36:b2:13:a5:21:fb:da:93:af:58:13:fa:9f:df: 48:1d:6b:66:82:c4:43:c6:14:9e:e5:21:b8:02:6d: c4:61:cb:d9:1b:a9:06:d4:20:50:0b:09:3f:d7:96: da:af:e8:57:92:12:20:40:98:20:cd:ee:e9:60:dd: ad:c9:b3:44:31:e7:ac:13:11:2b:09:32:45:83:79: 72:92:a3:ce:9c:b4:7d:b2:be:6c:81:2f:23:df:e0: a1:d9:20:cf:96:da:a3:82:11:61:45:23:24:10:74: 26:03:17:0c:cd:db:f6:9a:06:9e:25:6f:53:8a:b4: 69:08:3d:d0:d6:b9:14:f6:e6:c9:e6:1d:e2:6d:5d: 80:37:3e:78:60:fb:ce:82:63:59:57:43:5a:96:4f: 06:04:d6:22:e0:d7:b0:69:93:95:12:2e:fd:58:be: b9:7a:4b:45:3a:bb:87:eb:40:bc:b0:70:c4:2f:1b: f9:06:8c:b6:92:be:61:a1:a9:24:72:99:e9:22:52: e5:90:cf:38:52:66:7d:49:64:12:fd:cd:ce:98:15: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:20:79:A2:F5:AE:4B:35:B2:29:DE:26:84:EE:4B:E8:28:FB:11:95 X509v3 Authority Key Identifier: keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e8:21:e7:cf:c1:1b:14:d3:f5:2e:ee:fc:d5:6d:e6:a1:78: b3:a6:55:9e:76:64:75:b3:a6:a1:1e:e9:28:5a:78:af:7f:12: 9b:c7:1e:00:93:25:25:8e:a0:75:e7:a1:fb:7c:0a:ff:e3:13: 39:03:c0:87:8a:8d:1f:03:6b:2d:0f:d1:95:18:40:b2:1c:c5: 39:d9:b8:71:f3:85:50:b8:22:53:9c:3e:7e:f9:d5:99:bd:f9: 09:a2:35:2a:2e:22:e4:e3:67:29:41:d6:77:23:d0:ee:cf:38: 94:a9:12:b5:9a:9e:fb:5a:89:0a:12:73:1e:8d:c3:f5:e4:61: 54:ea:7c:30:a6:ad:c5:6e:21:88:44:74:c6:59:9c:b0:c3:05: 8c:00:5b:81:28:bd:6c:19:b6:62:50:f3:11:34:58:2b:7f:c9: d3:70:6a:dc:4e:a3:ad:c7:86:dc:89:08:f9:50:39:44:6f:fc: 9d:4e:b8:b2:4d:1a:39:1b:f8:07:5d:a6:69:dd:f7:eb:3f:c8: 68:5f:77:b7:37:1b:4f:30:13:eb:e9:dc:b6:e3:08:02:6d:3b: d2:08:68:7d:ca:b1:6b:fd:a6:de:0e:78:ac:8b:7b:75:b5:01: e4:51:d3:77:16:06:0b:6b:97:73:82:6d:a8:16:cd:96:c4:22: f1:18:df:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAf6wOp3V5ltwNlma/qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3 MWQ4OTIwHhcNMjUxMjA2MTAwMTMxWhcNMjUxMjA3MTAwMTMxWjAzMTEwLwYDVQQD EygyYzIwNzlhMmY1YWU0YjM1YjIyOWRlMjY4NGVlNGJlODI4ZmIxMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8uuqjLiHojSgz2m727fXVo3/uXr os7REjT4ZgM02d4pVqXC8rbrwXQn/JeWNrITpSH72pOvWBP6n99IHWtmgsRDxhSe 5SG4Am3EYcvZG6kG1CBQCwk/15bar+hXkhIgQJggze7pYN2tybNEMeesExErCTJF g3lykqPOnLR9sr5sgS8j3+Ch2SDPltqjghFhRSMkEHQmAxcMzdv2mgaeJW9TirRp CD3Q1rkU9ubJ5h3ibV2ANz54YPvOgmNZV0Nalk8GBNYi4NewaZOVEi79WL65ektF OruH60C8sHDELxv5Boy2kr5hoakkcpnpIlLlkM84UmZ9SWQS/c3OmBXdwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwgeaL1rks1sineJoTuS+go+xGVMB8GA1UdIwQY MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt MmVmNDQ3ZTFiMDhjLzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOgh58/B GxTT9S7u/NVt5qF4s6ZVnnZkdbOmoR7pKFp4r38Sm8ceAJMlJY6gdeeh+3wK/+MT OQPAh4qNHwNrLQ/RlRhAshzFOdm4cfOFULgiU5w+fvnVmb35CaI1Ki4i5ONnKUHW dyPQ7s84lKkStZqe+1qJChJzHo3D9eRhVOp8MKatxW4hiER0xlmcsMMFjABbgSi9 bBm2YlDzETRYK3/J03Bq3E6jrceG3IkI+VA5RG/8nU64sk0aORv4B12mad336z/I aF93tzcbTzAT6+nctuMIAm070ghofcqxa/2m3g54rIt7dbUB5FHTdxYGC2uXc4Jt qBbNlsQi8RjfTA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:11 2025 by rpki-client