This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft File: 2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json) Hash identifier: J8UEYAHeqb8mTKoPOzFDj5PijSTGtmDdJvx32V7itTQ= Subject key identifier: CC:F0:D7:BD:5B:F4:3B:A4:B3:A9:43:35:A5:31:11:66:C7:27:DF:12 Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Certificate serial: 019AF1647CDAE2E4AA9E69E55BA9F6E89F6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft Manifest number: 11D9 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=) 2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: IL1LkQsiQsBkXKiMl595hMYipOtRVpboMZxmZwSOfDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7c:da:e2:e4:aa:9e:69:e5:5b:a9:f6:e8:9f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=ccf0d7bd5bf43ba4b3a94335a5311166c727df12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:58:87:1a:ba:e0:8c:38:d9:cd:32:b5:44: f5:2a:8c:59:7c:37:4e:1a:4d:2f:74:3d:d1:80:dc: df:75:85:52:47:2d:28:52:38:99:11:f4:a3:14:81: f9:b2:a3:68:d1:8e:79:08:57:54:36:36:c1:b6:4b: 66:6b:7f:9b:89:ba:a2:dd:43:b0:ae:cc:16:0c:a0: 8b:56:63:ea:49:04:a2:9b:f1:a4:60:41:00:82:60: ba:9e:1d:98:29:05:ec:1a:60:26:24:35:57:ca:43: b1:d6:1a:63:57:75:47:68:22:89:a9:e3:7c:05:ce: 11:75:e7:a5:96:49:d3:23:48:8f:71:b6:e4:7d:28: a2:b0:24:35:70:f0:27:76:cb:e5:fa:2a:45:3d:8f: 37:f6:ba:72:f1:8e:43:b3:b0:37:2a:38:7e:58:ac: 95:f1:b3:c2:ef:e1:f2:09:a9:6a:b0:53:e6:24:af: ab:03:97:38:53:9e:91:70:a0:d1:b5:4a:1f:c4:fe: 1a:ef:20:6f:c2:77:2c:5f:38:0b:61:20:6d:04:2c: 9c:53:31:64:b2:73:f8:da:32:af:6b:ac:86:26:26: 22:bb:3e:19:77:ab:77:b1:cb:d0:ca:16:06:bd:e8: 67:fa:cd:de:1a:9c:b3:ea:30:a2:e8:08:b4:c3:9e: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F0:D7:BD:5B:F4:3B:A4:B3:A9:43:35:A5:31:11:66:C7:27:DF:12 X509v3 Authority Key Identifier: keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6b:b3:1c:e7:23:04:fb:42:d3:5b:9a:12:5b:a8:69:dd:b1: a4:60:b3:63:eb:6f:e5:62:0f:96:63:3d:04:56:9c:a0:bb:e0: cb:bc:b1:a3:fd:c8:17:d6:02:6d:19:11:c6:c9:4a:aa:bb:70: a6:43:45:23:38:bd:43:d4:03:f9:82:ef:41:3b:1c:92:ff:2b: 4f:bf:54:d7:4d:55:7f:9d:1e:e6:af:49:7f:43:77:a1:7f:71: 67:6a:9a:44:84:e8:cb:cf:9a:84:c8:14:7d:b4:48:0f:19:aa: dc:03:7c:81:1c:5a:c9:d3:88:ea:0e:3f:41:44:d1:31:53:5f: 32:c9:5d:93:b0:cf:00:63:2e:1e:52:91:27:8d:f0:d2:58:f7: 8f:24:ad:54:3d:49:32:4d:6b:52:84:0d:87:55:4e:24:c5:b2: a8:28:ce:8a:d0:c2:2c:19:35:bc:84:31:bd:35:86:55:09:43: b0:0b:eb:23:33:63:5d:77:a7:38:7c:aa:62:28:84:de:13:ab: 6a:56:f8:a4:a3:e5:58:a7:85:26:fe:b2:e2:c6:89:fd:3a:18: 69:01:25:53:ce:bc:44:cb:c9:f4:a8:45:3c:a2:a1:0a:0b:8c: db:bc:8a:70:d5:52:ae:38:97:7a:88:38:29:5c:41:74:90:17: 10:05:4e:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHza4uSqnmnlW6n26J9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWJlZjVhMWEzMWVmNWNmYzAzNmI5YzJiNzBhNDJhYmQw NDAwN2UwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EyhjY2YwZDdiZDViZjQzYmE0YjNhOTQzMzVhNTMxMTE2NmM3MjdkZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0flYhxq64Iw42c0ytUT1KoxZfDdO Gk0vdD3RgNzfdYVSRy0oUjiZEfSjFIH5sqNo0Y55CFdUNjbBtktma3+bibqi3UOw rswWDKCLVmPqSQSim/GkYEEAgmC6nh2YKQXsGmAmJDVXykOx1hpjV3VHaCKJqeN8 Bc4RdeellknTI0iPcbbkfSiisCQ1cPAndsvl+ipFPY839rpy8Y5Ds7A3Kjh+WKyV 8bPC7+HyCalqsFPmJK+rA5c4U56RcKDRtUofxP4a7yBvwncsXzgLYSBtBCycUzFk snP42jKva6yGJiYiuz4Zd6t3scvQyhYGvehn+s3eGpyz6jCi6Ai0w56umwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzw171b9Duks6lDNaUxEWbHJ98SMB8GA1UdIwQY MBaAFNgb71oaMe9c/ANrnCtwpCq9BAB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQt OWNlZWJhOGJhMjRjLzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQtOWNlZWJhOGJhMjRj LzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWuzHOcj BPtC01uaEluoad2xpGCzY+tv5WIPlmM9BFacoLvgy7yxo/3IF9YCbRkRxslKqrtw pkNFIzi9Q9QD+YLvQTsckv8rT79U101Vf50e5q9Jf0N3oX9xZ2qaRIToy8+ahMgU fbRIDxmq3AN8gRxaydOI6g4/QUTRMVNfMsldk7DPAGMuHlKRJ43w0lj3jyStVD1J Mk1rUoQNh1VOJMWyqCjOitDCLBk1vIQxvTWGVQlDsAvrIzNjXXenOHyqYiiE3hOr alb4pKPlWKeFJv6y4saJ/ToYaQElU868RMvJ9KhFPKKhCguM27yKcNVSrjiXeog4 KVxBdJAXEAVOzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:11 2025 by rpki-client