This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json) Hash identifier: BxjKXdc6NqAyckO8hEsGI7SfdMKNEpjLeWx53LpR6so= Subject key identifier: 6C:3D:D3:7B:89:DB:AC:84:95:BE:DC:8A:97:F9:B6:A4:7F:D0:07:9F Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Certificate serial: 019AF1647A15B35AFB42964693AADE9F2FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft Manifest number: 080D Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: RqUXqt9OqxQzyWeMGNLyc3qvPaFCkF/+NoAeIAmbTzA=) 2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7a:15:b3:5a:fb:42:96:46:93:aa:de:9f:2f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=6c3dd37b89dbac8495bedc8a97f9b6a47fd0079f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:1c:bf:44:da:bc:1c:33:72:1c:81:63:19: b5:36:c5:ce:e8:51:7b:da:49:c2:fd:81:68:bd:c7: 8e:ad:39:fe:6c:4d:85:a3:cf:5d:7e:74:ad:55:8d: 49:18:81:50:a7:22:c1:bd:aa:8a:72:6e:12:3f:36: 7b:23:97:9a:9c:af:41:36:f3:70:d1:ec:b4:52:77: 67:01:5c:90:f7:45:e2:6c:be:10:de:93:58:81:25: 65:df:ea:36:af:ef:c5:20:70:9d:fb:fa:31:b0:97: 1c:17:5d:b1:eb:7b:eb:0a:33:7a:2a:fc:c9:e3:d9: 46:61:a5:b6:db:55:9a:be:ed:47:3e:49:97:e1:32: b5:7b:d6:64:12:cd:46:8f:8c:97:ea:fd:ae:b7:4e: 79:94:7b:c7:82:4d:02:fa:34:2b:47:b5:ee:75:19: eb:b8:a6:de:09:21:4f:4c:ce:ca:32:56:da:3f:bd: 74:03:06:de:55:31:57:e4:8f:ad:21:47:b9:bb:1f: 74:dc:47:d3:ee:f0:24:e8:ac:c9:d4:d9:d8:39:41: fe:c7:9f:cb:78:de:82:21:75:6b:c0:ad:2e:50:b7: 03:2d:6c:03:58:30:ab:5f:e8:69:26:83:61:a0:41: 7f:68:f0:9e:75:dc:f1:97:cf:8f:f4:f1:f6:2f:c9: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3D:D3:7B:89:DB:AC:84:95:BE:DC:8A:97:F9:B6:A4:7F:D0:07:9F X509v3 Authority Key Identifier: keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e8:69:ab:1c:69:b0:91:01:c3:91:91:53:f6:cb:c2:90:0b: 74:c2:6b:86:6e:60:eb:55:03:c8:18:2e:58:cf:73:16:35:a4: 80:2b:c0:97:64:ca:40:1c:64:80:bb:e7:fc:48:9c:f5:43:e9: 15:6a:54:43:ed:f9:aa:0b:64:cb:39:00:00:0d:47:81:58:28: b8:0e:4e:c0:c4:c5:2a:d8:cd:e4:44:b0:fa:23:4c:20:07:71: 76:38:85:a1:ef:1d:3c:c6:d0:4c:de:d5:25:1f:cb:b8:3b:14: 29:72:53:47:f1:c5:9e:90:4c:25:d9:ee:7b:ae:1e:4b:db:37: f4:2b:fe:37:53:09:1e:87:f4:52:4e:83:10:57:8b:b4:a0:2b: e8:c3:a1:b8:fd:d0:c7:cd:bd:dc:95:b9:76:21:69:19:ff:8c: 6d:73:ed:88:0a:43:bb:ce:ef:06:b4:34:a9:ed:86:d0:b1:86: 34:68:53:f4:78:54:8f:d8:2a:47:a0:4c:49:a3:a5:40:5f:58: 3f:af:4c:45:4d:39:6d:a1:b0:0d:ff:9f:71:b7:68:c1:12:b6: 2c:e6:8f:4f:e1:95:1d:89:9b:cf:be:65:f2:14:5b:7c:b4:30: ef:3f:24:17:38:e7:87:e4:f6:a9:88:a2:3b:0a:77:3a:33:3d: af:80:5a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHoVs1r7QpZGk6reny/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh YTA2YTYwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD Eyg2YzNkZDM3Yjg5ZGJhYzg0OTViZWRjOGE5N2Y5YjZhNDdmZDAwNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVocv0TavBwzchyBYxm1NsXO6FF7 2knC/YFovceOrTn+bE2Fo89dfnStVY1JGIFQpyLBvaqKcm4SPzZ7I5eanK9BNvNw 0ey0UndnAVyQ90XibL4Q3pNYgSVl3+o2r+/FIHCd+/oxsJccF12x63vrCjN6KvzJ 49lGYaW221Wavu1HPkmX4TK1e9ZkEs1Gj4yX6v2ut055lHvHgk0C+jQrR7XudRnr uKbeCSFPTM7KMlbaP710AwbeVTFX5I+tIUe5ux903EfT7vAk6KzJ1NnYOUH+x5/L eN6CIXVrwK0uULcDLWwDWDCrX+hpJoNhoEF/aPCeddzxl8+P9PH2L8kCJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw903uJ26yElb7cipf5tqR/0AefMB8GA1UdIwQY MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt MTYxMGEwYzk5M2I0LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0 LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuhpqxxp sJEBw5GRU/bLwpALdMJrhm5g61UDyBguWM9zFjWkgCvAl2TKQBxkgLvn/Eic9UPp FWpUQ+35qgtkyzkAAA1HgVgouA5OwMTFKtjN5ESw+iNMIAdxdjiFoe8dPMbQTN7V JR/LuDsUKXJTR/HFnpBMJdnue64eS9s39Cv+N1MJHof0Uk6DEFeLtKAr6MOhuP3Q x8293JW5diFpGf+MbXPtiApDu87vBrQ0qe2G0LGGNGhT9HhUj9gqR6BMSaOlQF9Y P69MRU05baGwDf+fcbdowRK2LOaPT+GVHYmbz75l8hRbfLQw7z8kFzjnh+T2qYii Owp3OjM9r4Bagg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:43 2025 by rpki-client