This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json) Hash identifier: U27hQAtHhU2TOvQ0x+b/Hoi1wOOFiDHt1Uf2k229wkw= Subject key identifier: A8:6D:11:73:71:7A:FB:A3:5D:D0:CD:E4:F5:1F:E5:1D:57:14:FC:55 Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f Certificate serial: 019AF12D20A48E1F634F1848C885AEC89C9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft Manifest number: 1105 Signing time: Sat 06 Dec 2025 01:00:57 +0000 Manifest this update: Sat 06 Dec 2025 01:00:57 +0000 Manifest next update: Sun 07 Dec 2025 01:00:57 +0000 Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: CQEgECwEgJPEdp+4H6T41CpxvLU9yU/AP4zLBZ6TB+s=) 2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=) 3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:20:a4:8e:1f:63:4f:18:48:c8:85:ae:c8:9c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f Validity Not Before: Dec 6 01:00:57 2025 GMT Not After : Dec 7 01:00:57 2025 GMT Subject: CN=a86d1173717afba35dd0cde4f51fe51d5714fc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:55:9c:97:8e:93:20:d5:ce:4b:47:98:80: 0a:1a:da:e8:fb:f0:76:ee:81:7d:fd:5b:dd:74:4b: 92:f9:1d:54:7b:90:50:b2:3f:72:29:a1:f3:f5:88: 96:e0:51:b2:f1:d7:6f:38:98:6d:19:ef:33:67:1b: 6f:b7:3c:a7:7c:2b:13:32:a0:6e:51:35:2a:07:13: ad:f8:9d:be:03:27:d2:b9:fe:d4:44:1c:ac:fe:b8: d5:ee:09:c8:ce:f9:dd:08:27:38:7d:c4:e9:fb:bd: 57:af:43:83:f6:40:c4:e8:c7:84:c2:78:87:87:97: e8:37:2b:56:c7:99:c3:87:ba:a5:92:44:0f:79:2e: 12:82:f6:80:02:e0:4a:a3:2b:7e:85:cb:84:b5:70: bc:79:55:62:c8:d0:8a:6a:78:0d:7b:f6:3a:0f:69: 18:79:94:56:75:a8:16:8d:fb:b9:39:11:0d:f1:bb: 8e:d3:fb:c2:c5:aa:cb:b7:47:b6:07:f2:72:68:86: 35:63:1c:49:66:b4:bd:ce:76:1b:48:88:bc:32:47: 1a:9e:1d:8b:ed:8e:8a:f3:08:10:8e:73:4a:ee:95: 1c:a5:9e:fd:5e:db:ad:4e:8a:6b:9c:68:8a:9b:1b: 17:e3:8b:53:d7:4f:cb:67:28:6d:7d:fe:71:3f:45: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6D:11:73:71:7A:FB:A3:5D:D0:CD:E4:F5:1F:E5:1D:57:14:FC:55 X509v3 Authority Key Identifier: keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:eb:8c:7b:b3:f5:4d:96:46:ad:1b:fc:17:40:09:30:00:20: b9:40:9d:4b:2c:84:72:71:09:21:ea:4c:40:3e:42:51:79:70: 8b:3c:8e:df:42:cf:38:84:96:54:a0:be:52:47:77:d1:87:43: 48:36:56:3f:dd:c9:b7:33:df:16:a0:dd:4a:95:a8:ed:ca:61: 5d:ad:d3:c1:d0:ef:30:cb:2d:81:8e:d2:be:0e:6e:25:27:0d: 2e:55:0b:be:ab:b7:97:f0:83:2e:28:2a:a0:d2:4c:3f:2b:cf: 3e:13:c8:0a:b3:cd:75:19:53:bd:a7:cd:59:d8:d7:00:5c:51: 71:7f:36:cc:6c:1c:45:69:86:86:60:6b:1a:86:3e:1c:c4:0e: 22:97:f8:72:ed:f2:ec:b3:42:51:c2:42:b5:54:d1:f0:28:8a: a1:d6:40:74:4e:9b:f9:90:0b:94:14:7c:6b:a0:dc:11:5e:9a: 13:4b:9f:d8:82:48:94:d6:aa:89:b5:a2:d4:1e:ae:47:20:26: 88:4c:22:e7:11:32:17:19:50:c1:7b:af:6f:2c:12:1b:5c:7c: aa:1b:ee:ca:09:30:22:9f:45:ca:c0:69:a3:a1:55:5f:b4:b2: d9:ec:18:b6:a9:58:89:04:84:d2:27:e8:d8:86:11:48:2b:f2: 8c:12:88:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSCkjh9jTxhIyIWuyJyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx ODk1MWYwHhcNMjUxMjA2MDEwMDU3WhcNMjUxMjA3MDEwMDU3WjAzMTEwLwYDVQQD EyhhODZkMTE3MzcxN2FmYmEzNWRkMGNkZTRmNTFmZTUxZDU3MTRmYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzZVnJeOkyDVzktHmIAKGtro+/B2 7oF9/VvddEuS+R1Ue5BQsj9yKaHz9YiW4FGy8ddvOJhtGe8zZxtvtzynfCsTMqBu UTUqBxOt+J2+AyfSuf7URBys/rjV7gnIzvndCCc4fcTp+71Xr0OD9kDE6MeEwniH h5foNytWx5nDh7qlkkQPeS4SgvaAAuBKoyt+hcuEtXC8eVViyNCKangNe/Y6D2kY eZRWdagWjfu5OREN8buO0/vCxarLt0e2B/JyaIY1YxxJZrS9znYbSIi8Mkcanh2L 7Y6K8wgQjnNK7pUcpZ79XtutToprnGiKmxsX44tT10/LZyhtff5xP0XSTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhtEXNxevujXdDN5PUf5R1XFPxVMB8GA1UdIwQY MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0 LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeuMe7P1 TZZGrRv8F0AJMAAguUCdSyyEcnEJIepMQD5CUXlwizyO30LPOISWVKC+Ukd30YdD SDZWP93JtzPfFqDdSpWo7cphXa3TwdDvMMstgY7Svg5uJScNLlULvqu3l/CDLigq oNJMPyvPPhPICrPNdRlTvafNWdjXAFxRcX82zGwcRWmGhmBrGoY+HMQOIpf4cu3y 7LNCUcJCtVTR8CiKodZAdE6b+ZALlBR8a6DcEV6aE0uf2IJIlNaqibWi1B6uRyAm iEwi5xEyFxlQwXuvbywSG1x8qhvuygkwIp9FysBpo6FVX7Sy2ewYtqlYiQSE0ifo 2IYRSCvyjBKItQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:24 2025 by rpki-client