This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json) Hash identifier: noutjvWw6B2bQM0B90FQ2o7i5CV1ylpz40aDF0sNuQo= Subject key identifier: 8A:1E:CA:CF:33:7D:D7:24:60:6F:6C:CA:A4:02:B1:35:4C:81:8F:53 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019AF2E456CC8C7DB087A1698AD5ED2282EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 09:00:41 +0000 Manifest this update: Sat 06 Dec 2025 09:00:41 +0000 Manifest next update: Sun 07 Dec 2025 09:00:41 +0000 Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=) 2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: 53LaV0vHlc7F/ZPZQbnOr32YQlnGr3q1pUoSeymE6I4=) 3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=) 4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=) 5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=) 6: S-JnIhmXL5e2DsjQFgno_k2Vz8E.roa (hash: /YQsaxBTg9/GiAQu4cI2KHBUoCqKcZjkOS7l2+NOeWg=) 7: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=) 8: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:56:cc:8c:7d:b0:87:a1:69:8a:d5:ed:22:82:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Dec 6 09:00:41 2025 GMT Not After : Dec 7 09:00:41 2025 GMT Subject: CN=8a1ecacf337dd724606f6ccaa402b1354c818f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:cf:cf:1c:2e:67:9a:43:e6:37:13:94:1c: 8f:c5:66:64:cc:84:c8:59:c0:58:9e:4d:39:07:ff: 00:cd:e5:7b:dd:30:9f:34:3f:4a:5c:8f:ca:da:a5: 3b:3f:85:39:04:7e:de:61:41:9d:68:42:03:8a:ee: 4d:ad:06:4e:81:32:9d:ba:49:77:b1:1b:2c:30:dc: 6b:0d:5b:49:9d:4a:25:f2:c2:f8:08:a0:02:73:bf: 3b:fe:36:55:eb:4d:f5:a6:7d:bf:67:ba:68:ff:fa: 7f:36:78:15:7f:54:d4:4a:58:cc:9e:29:92:c5:34: 1a:d6:16:e3:e2:99:d5:60:ff:22:d8:88:b5:31:a2: 2f:32:bc:30:6b:27:35:a6:1c:66:95:0a:6a:aa:41: 6a:20:b1:51:2a:56:30:f0:c7:11:03:81:d4:13:1a: bc:e2:a0:8e:d0:30:b3:29:b3:6c:ab:30:1c:19:60: 44:50:2d:20:37:6d:f5:5c:f3:83:c9:24:c2:81:1e: 19:8f:7b:8b:bc:0c:ec:d7:90:b6:6f:1b:30:ec:ba: 7b:f5:b8:16:95:e2:c2:15:06:f0:5f:f0:2d:36:f1: 7c:5c:53:27:eb:12:20:c9:c9:12:cb:57:ea:cd:dd: 2d:09:f5:ef:99:07:87:93:81:53:d7:f5:d3:48:c8: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:CA:CF:33:7D:D7:24:60:6F:6C:CA:A4:02:B1:35:4C:81:8F:53 X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a9:ba:2b:74:a5:e0:43:b8:52:90:2d:9a:28:3a:54:91:43: 34:16:70:7c:aa:23:8d:93:f9:13:8a:5c:fe:52:ec:c7:ac:dd: f1:b0:a1:6e:60:e0:5e:95:18:3d:64:3b:b3:66:3d:5a:6f:25: c7:04:5d:c1:26:83:30:bc:5a:cc:3e:aa:da:5a:56:9d:63:ee: cb:ea:ed:0f:a8:ec:54:07:90:46:11:cc:91:48:53:d6:21:18: ed:94:0e:51:3e:48:1f:d2:84:60:06:bb:0c:a4:85:d6:60:e8: 21:18:e7:6c:19:aa:b5:53:51:3d:0e:46:bc:3f:0d:af:80:8d: 77:24:06:22:fd:f8:49:ac:bd:35:e3:14:bb:ad:c0:e3:c5:5d: 4c:95:c8:aa:48:33:1b:51:2f:85:e0:76:97:1a:21:88:ec:51: 9e:b9:54:43:de:b4:c6:ee:ec:dc:fe:d1:f7:e3:4d:a0:1b:71: b6:46:f6:b5:8c:83:9d:31:5b:eb:39:02:3d:27:64:91:1f:71: a2:91:3c:c9:7a:5b:0f:75:d4:e1:0c:95:b7:4b:d3:7d:23:90: a8:10:27:41:e1:80:3d:ca:d0:91:e4:34:30:7a:74:0c:d2:d2: 8a:e5:58:8d:99:69:72:1e:39:7c:15:ed:01:db:b6:6a:90:53: 9c:94:ff:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FbMjH2wh6FpitXtIoLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjUxMjA2MDkwMDQxWhcNMjUxMjA3MDkwMDQxWjAzMTEwLwYDVQQD Eyg4YTFlY2FjZjMzN2RkNzI0NjA2ZjZjY2FhNDAyYjEzNTRjODE4ZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXDPzxwuZ5pD5jcTlByPxWZkzITI WcBYnk05B/8AzeV73TCfND9KXI/K2qU7P4U5BH7eYUGdaEIDiu5NrQZOgTKdukl3 sRssMNxrDVtJnUol8sL4CKACc787/jZV6031pn2/Z7po//p/NngVf1TUSljMnimS xTQa1hbj4pnVYP8i2Ii1MaIvMrwwayc1phxmlQpqqkFqILFRKlYw8McRA4HUExq8 4qCO0DCzKbNsqzAcGWBEUC0gN231XPODySTCgR4Zj3uLvAzs15C2bxsw7Lp79bgW leLCFQbwX/AtNvF8XFMn6xIgyckSy1fqzd0tCfXvmQeHk4FT1/XTSMgKaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoeys8zfdckYG9syqQCsTVMgY9TMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqm6K3Sl 4EO4UpAtmig6VJFDNBZwfKojjZP5E4pc/lLsx6zd8bChbmDgXpUYPWQ7s2Y9Wm8l xwRdwSaDMLxazD6q2lpWnWPuy+rtD6jsVAeQRhHMkUhT1iEY7ZQOUT5IH9KEYAa7 DKSF1mDoIRjnbBmqtVNRPQ5GvD8Nr4CNdyQGIv34Say9NeMUu63A48VdTJXIqkgz G1EvheB2lxohiOxRnrlUQ960xu7s3P7R9+NNoBtxtkb2tYyDnTFb6zkCPSdkkR9x opE8yXpbD3XU4QyVt0vTfSOQqBAnQeGAPcrQkeQ0MHp0DNLSiuVYjZlpch45fBXt Adu2apBTnJT/MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:45 2025 by rpki-client