This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json) Hash identifier: FMaTJv6bUhPCyxnYLv7vYsc0+ZY74/kmLaxTC8rvoXw= Subject key identifier: 87:75:C4:7D:DD:70:94:AB:51:E2:14:9E:E1:9B:AA:71:12:C0:71:7A Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8 Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8 Certificate serial: 019AF2098433BB564273EADA9A394BFE07D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft Manifest number: 0387 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: 50wXeboqAutoNm28x9vBwP82KRxXxdqy4KyuPklHAuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:84:33:bb:56:42:73:ea:da:9a:39:4b:fe:07:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=8775c47ddd7094ab51e2149ee19baa7112c0717a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:e8:ba:1f:28:1d:63:81:b6:89:20:c4:eb: d7:ba:74:3d:87:2a:7d:ab:99:d6:7f:ee:18:ee:56: 22:33:bd:e0:b9:af:ea:5c:b9:8b:fa:3c:35:93:06: d9:d2:6f:b8:a7:9f:75:49:78:9e:2b:ab:8b:57:bc: 9b:ca:9d:f8:16:d6:01:a0:ce:c9:76:bb:25:2f:b7: a1:d6:99:cf:d0:eb:28:cc:68:3e:06:a8:2f:23:6a: 7f:58:6d:79:63:15:6a:61:0f:36:a2:3d:a7:94:18: 0a:eb:81:ad:3d:4f:da:ae:55:de:66:6d:9a:05:f3: 77:87:bb:91:12:18:13:e9:98:4f:1a:d4:d0:5f:18: 91:fb:54:a9:2c:fe:ef:fa:9f:20:de:0e:5e:2b:93: 2d:cb:cc:3a:bd:d4:e5:5b:e0:20:5e:f2:e6:ce:71: 2c:e5:85:be:cf:85:e0:7e:b5:10:08:9f:c2:ec:db: a0:f7:ba:bd:eb:c9:08:71:28:07:3f:8a:0c:31:f4: f8:3c:63:fe:a4:8a:8e:7a:63:10:49:34:9a:eb:8e: fb:45:c5:a9:79:d7:88:81:00:7c:f3:af:d5:6b:00: 8a:bf:1e:d1:80:4b:ee:9b:44:8e:71:75:f2:7e:49: 30:9a:6d:fe:de:97:63:e0:23:2d:82:d3:99:bf:c6: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:75:C4:7D:DD:70:94:AB:51:E2:14:9E:E1:9B:AA:71:12:C0:71:7A X509v3 Authority Key Identifier: keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0e:7c:9c:5c:8c:35:66:35:12:0d:35:8a:70:a7:3e:0f:40: da:44:64:42:a2:5a:d1:89:32:2f:7c:00:28:e2:04:9c:bc:0d: d4:bb:c4:6b:17:ec:91:76:b6:c3:82:f7:1f:34:6b:bd:2e:0f: 76:b6:f6:3b:d8:c6:eb:d3:7f:1b:5c:31:91:5b:d2:5f:46:61: 18:ab:10:2f:2c:a9:b4:d9:f3:a0:35:a2:e4:67:05:9c:f4:e4: d0:96:f3:4e:0c:da:e3:94:a6:ce:2f:f7:c5:b2:ed:7a:93:bc: 3d:6c:27:34:da:df:99:a6:df:bb:94:29:e0:08:31:3a:75:04: 2b:a5:82:60:a8:49:6d:8e:48:9f:0b:68:14:b1:74:b4:9a:71: fc:ef:bb:c4:16:5d:dd:2b:45:71:30:39:a3:64:37:f7:b6:20: 17:62:f2:73:cc:4a:ba:8d:d0:7d:62:4c:45:ff:91:db:12:89: 09:b0:9f:61:b5:cf:e4:21:17:b9:30:11:33:6b:65:3f:65:18: f4:8d:72:0b:ed:e4:c8:26:35:9b:48:20:c7:dc:da:cc:87:20: 86:0f:39:13:b1:46:84:2f:96:7f:c3:ed:a8:b0:5e:5a:3f:71: a6:8d:54:3e:cb:58:a3:94:e9:45:96:75:c1:2b:bd:95:d1:5d: ee:d1:cd:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYQzu1ZCc+ramjlL/gfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZmY2MWQ1YzU4ZTZlYTZlYzVjZjdlZTZjZjM1M2E2NjNi MWIzYTgwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD Eyg4Nzc1YzQ3ZGRkNzA5NGFiNTFlMjE0OWVlMTliYWE3MTEyYzA3MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDnouh8oHWOBtokgxOvXunQ9hyp9 q5nWf+4Y7lYiM73gua/qXLmL+jw1kwbZ0m+4p591SXieK6uLV7ybyp34FtYBoM7J drslL7eh1pnP0OsozGg+BqgvI2p/WG15YxVqYQ82oj2nlBgK64GtPU/arlXeZm2a BfN3h7uREhgT6ZhPGtTQXxiR+1SpLP7v+p8g3g5eK5Mty8w6vdTlW+AgXvLmznEs 5YW+z4XgfrUQCJ/C7Nug97q968kIcSgHP4oMMfT4PGP+pIqOemMQSTSa6477RcWp edeIgQB886/VawCKvx7RgEvum0SOcXXyfkkwmm3+3pdj4CMtgtOZv8Z7iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId1xH3dcJSrUeIUnuGbqnESwHF6MB8GA1UdIwQY MBaAFNv/YdXFjm6m7Fz37mzzU6ZjsbOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMt YjhiMzZmODk1NmI3LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lZWQxZDYtNmE3Mi00ODI2LTgzOWMtYjhiMzZmODk1NmI3 LzEvMl85aDFjV09icWJzWFBmdWJQTlRwbU94czZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ58nFyM NWY1Eg01inCnPg9A2kRkQqJa0YkyL3wAKOIEnLwN1LvEaxfskXa2w4L3HzRrvS4P drb2O9jG69N/G1wxkVvSX0ZhGKsQLyyptNnzoDWi5GcFnPTk0JbzTgza45Smzi/3 xbLtepO8PWwnNNrfmabfu5Qp4AgxOnUEK6WCYKhJbY5InwtoFLF0tJpx/O+7xBZd 3StFcTA5o2Q397YgF2Lyc8xKuo3QfWJMRf+R2xKJCbCfYbXP5CEXuTARM2tlP2UY 9I1yC+3kyCY1m0ggx9zazIcghg85E7FGhC+Wf8PtqLBeWj9xpo1UPstYo5TpRZZ1 wSu9ldFd7tHN/w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:20 2025 by rpki-client