This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json) Hash identifier: JoQSx75Wkx61m7EhwEowhbt/GMsKdTWvMZK+qjUcc3M= Subject key identifier: C3:AC:B6:87:2D:F6:08:1B:DB:3E:CC:62:21:15:63:26:48:5D:14:23 Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Certificate serial: 019B34FB760AE7D93C4B05FA8B2C791368E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft Manifest number: 11FC Signing time: Fri 19 Dec 2025 05:00:53 +0000 Manifest this update: Fri 19 Dec 2025 05:00:53 +0000 Manifest next update: Sat 20 Dec 2025 05:00:53 +0000 Files and hashes: 1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=) 2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: dTQbUk8XiSnfkuD/uDd6J+1yLWJ+yVguYlGm9q3go9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:76:0a:e7:d9:3c:4b:05:fa:8b:2c:79:13:68:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Validity Not Before: Dec 19 05:00:53 2025 GMT Not After : Dec 20 05:00:53 2025 GMT Subject: CN=c3acb6872df6081bdb3ecc6221156326485d1423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:5a:08:23:02:39:ed:24:fb:00:0d:e0:96: 7f:1c:11:d6:5f:88:90:4c:89:65:ae:73:45:62:01: be:b2:ed:1e:ad:13:fc:e2:10:39:27:2a:ca:4a:e1: fa:4f:a8:55:10:da:64:28:6b:45:3b:91:9f:d2:04: 2a:b0:29:db:ce:d1:c6:5c:1d:7d:9c:e3:cc:d2:53: 97:7e:07:3a:98:20:87:d3:0f:ec:c5:b1:16:90:9a: 9a:b2:4b:05:18:b4:63:6b:26:bf:13:00:a3:24:ef: d5:bc:79:e9:7c:b7:9d:a9:cb:e1:18:da:76:16:5c: 48:52:72:56:2e:93:17:45:70:03:3e:f4:77:ab:31: d1:75:3d:de:a2:9e:59:42:0b:99:91:b9:f6:61:02: 96:6e:24:91:ef:cc:3a:c4:ba:bc:dc:a2:d1:e8:94: 7c:8c:6d:ac:41:2c:bc:36:bb:50:c4:2e:a4:e2:88: ba:8d:f3:bb:b5:90:cb:0d:25:86:83:90:28:bf:8a: 05:eb:a7:c3:a0:a3:36:08:c0:77:30:72:3c:a1:09: ca:70:de:96:88:47:45:3a:64:10:6c:82:9a:97:e2: 73:91:d8:8d:a1:d5:12:77:8b:43:f0:4f:62:9d:ce: 67:4e:be:f3:dd:34:2b:e8:c8:18:52:50:73:74:75: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AC:B6:87:2D:F6:08:1B:DB:3E:CC:62:21:15:63:26:48:5D:14:23 X509v3 Authority Key Identifier: keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:5f:3c:a6:33:f0:28:27:59:08:0e:c3:37:95:b8:cc:9e:e8: e7:49:e0:ac:f1:55:fd:cf:56:4f:0e:69:98:ec:5e:b7:29:ab: 8a:b9:20:b0:ce:b2:5b:a8:15:77:23:c1:ea:a3:73:d4:63:ce: e9:d0:2f:0b:b2:b8:86:86:e6:ff:89:54:10:2d:b5:a7:69:5d: ca:37:90:63:19:0b:ad:d0:22:09:53:eb:3c:36:d2:b3:d9:50: d1:2a:97:cc:ed:38:95:a4:cf:53:8f:b8:8a:65:42:14:0f:8c: 64:ed:84:81:dc:8c:7a:d4:b1:ed:ed:87:58:54:92:5d:c8:ef: dd:da:f9:b8:ea:07:be:79:66:ef:d3:6e:ae:7f:62:1f:c7:b7: b3:01:64:a7:7e:f7:ad:e3:75:7e:de:67:1f:81:d7:03:ee:4a: ee:83:30:76:ba:03:9f:0f:62:5b:bf:3f:5b:e2:1e:7b:b6:bb: a3:c5:55:a4:3d:aa:d3:0c:2d:dd:ec:b5:82:6a:f3:fc:90:fa: e4:49:13:9e:82:5b:bc:77:9f:ea:b2:bb:00:a0:2c:87:a5:16: e0:bc:75:93:e3:e2:db:ee:74:2c:a2:5d:be:f1:e0:b9:11:0d: 6c:21:ee:75:22:6c:c4:17:0d:c8:e9:bd:6f:1a:21:96:0f:ee: 4a:32:39:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+3YK59k8SwX6iyx5E2jhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWJlZjVhMWEzMWVmNWNmYzAzNmI5YzJiNzBhNDJhYmQw NDAwN2UwHhcNMjUxMjE5MDUwMDUzWhcNMjUxMjIwMDUwMDUzWjAzMTEwLwYDVQQD EyhjM2FjYjY4NzJkZjYwODFiZGIzZWNjNjIyMTE1NjMyNjQ4NWQxNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPBaCCMCOe0k+wAN4JZ/HBHWX4iQ TIllrnNFYgG+su0erRP84hA5JyrKSuH6T6hVENpkKGtFO5Gf0gQqsCnbztHGXB19 nOPM0lOXfgc6mCCH0w/sxbEWkJqasksFGLRjaya/EwCjJO/VvHnpfLedqcvhGNp2 FlxIUnJWLpMXRXADPvR3qzHRdT3eop5ZQguZkbn2YQKWbiSR78w6xLq83KLR6JR8 jG2sQSy8NrtQxC6k4oi6jfO7tZDLDSWGg5Aov4oF66fDoKM2CMB3MHI8oQnKcN6W iEdFOmQQbIKal+JzkdiNodUSd4tD8E9inc5nTr7z3TQr6MgYUlBzdHVw6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOstoct9ggb2z7MYiEVYyZIXRQjMB8GA1UdIwQY MBaAFNgb71oaMe9c/ANrnCtwpCq9BAB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQt OWNlZWJhOGJhMjRjLzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQtOWNlZWJhOGJhMjRj LzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl88pjPw KCdZCA7DN5W4zJ7o50ngrPFV/c9WTw5pmOxetymrirkgsM6yW6gVdyPB6qNz1GPO 6dAvC7K4hobm/4lUEC21p2ldyjeQYxkLrdAiCVPrPDbSs9lQ0SqXzO04laTPU4+4 imVCFA+MZO2EgdyMetSx7e2HWFSSXcjv3dr5uOoHvnlm79Nurn9iH8e3swFkp373 reN1ft5nH4HXA+5K7oMwdroDnw9iW78/W+Iee7a7o8VVpD2q0wwt3ey1gmrz/JD6 5EkTnoJbvHef6rK7AKAsh6UW4Lx1k+Pi2+50LKJdvvHguRENbCHudSJsxBcNyOm9 bxohlg/uSjI5Ig== -----END CERTIFICATE-----Generated at Fri Dec 19 13:28:47 2025 by rpki-client