This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json) Hash identifier: RCC22/UsehRV4LcXdaWD4LNELLVxOhtJoTEnVea7nIo= Subject key identifier: 13:C4:10:EA:94:AE:ED:C3:C0:47:DC:A3:80:A9:23:E0:D6:A9:AE:31 Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f Certificate serial: 019AF49BD00B5BC41DEC4CE2261E15690941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft Manifest number: 1046 Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: Q6i3S5QaZQLtGnnaywSfvy07x/Gidr+NJwbKovLE1L4=) 2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d0:0b:5b:c4:1d:ec:4c:e2:26:1e:15:69:09:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=13c410ea94aeedc3c047dca380a923e0d6a9ae31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:74:8f:27:e3:96:af:ce:1c:9a:b4:f2:d4: 55:99:e0:cd:3a:d9:10:ae:80:f4:9b:cd:12:0b:f4: 47:b6:6d:06:1b:d3:88:55:43:ec:d1:43:d1:e6:ae: 3a:90:6f:76:91:cd:78:65:73:6b:ef:9d:78:62:d2: c2:70:02:69:72:47:68:a8:f8:e3:81:7d:d7:16:c1: 19:d9:03:bf:b5:12:d9:54:5c:65:35:54:38:ae:91: 53:83:45:f7:46:13:ad:d2:54:61:7d:3d:17:7b:18: 9d:32:bb:89:90:54:d1:29:80:9e:58:d1:f6:07:5c: c5:61:c8:bd:fa:31:68:1c:ef:29:c7:a8:99:ad:51: 1a:13:24:08:3a:7a:7b:22:19:ea:f1:35:59:ad:4e: 94:03:30:bc:6e:4f:3a:0c:55:7e:85:e9:ab:6e:d4: f3:4d:73:4d:2b:f0:63:86:ae:88:a4:a8:fd:36:d2: b5:ce:0b:f8:9c:3f:fb:2d:90:39:64:1d:7e:20:70: 9e:bd:96:78:bb:97:0a:db:74:9c:3a:ed:3a:ae:57: c9:5d:44:98:da:2f:a5:f8:e5:1f:2e:7a:af:d3:06: 62:ae:d4:c7:ba:9f:4f:d8:95:e1:ed:b4:cb:e3:15: 53:65:f7:ea:cb:84:c6:24:b9:a0:c6:d3:64:4e:b9: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C4:10:EA:94:AE:ED:C3:C0:47:DC:A3:80:A9:23:E0:D6:A9:AE:31 X509v3 Authority Key Identifier: keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a5:fe:5b:01:97:9e:d0:b4:82:74:25:0a:1a:79:e8:9b:5f: f6:58:91:40:38:b1:6d:ea:76:8f:59:ed:f1:f9:5c:33:cc:73: ee:45:ec:03:58:50:18:6c:45:f3:a8:a9:45:d8:85:92:49:08: 5d:ac:69:5c:c5:72:af:14:61:59:ef:2d:3b:c3:9c:ca:19:15: 66:f7:ba:e7:2a:ed:90:6a:1e:5d:c7:fa:f2:bf:c1:08:24:19: 64:3d:45:7f:bc:4c:5a:8d:c3:29:29:55:c4:d2:23:88:35:cd: 36:1c:5b:15:88:3d:19:8b:99:af:9a:f1:dd:52:3f:57:d6:bf: c6:ae:c2:83:90:47:2c:56:6e:3c:b8:20:28:9f:fe:a1:ab:1d: 32:96:f7:7c:cc:5c:6a:aa:6c:f3:22:d4:26:06:ca:ca:68:af: 53:e7:02:b4:64:db:15:e1:d0:d6:4b:52:ca:37:6b:4b:9f:1a: 99:f4:73:04:de:9e:2f:b2:a1:83:e7:3f:26:9c:00:ae:57:26: ba:81:e3:ae:be:6f:88:c4:7e:e2:b9:99:a7:6c:1e:2d:b8:74: 13:b3:eb:2e:5a:cc:59:8a:d4:f8:ab:67:88:85:30:cf:9d:ec: c0:9e:c6:c5:7a:fb:dd:27:6c:dc:84:0c:21:4a:8d:a1:0c:23: ec:b9:fe:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9ALW8Qd7EziJh4VaQlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODg0ZjkyYWZlYjU4ZmZhYjI2NDg3YjIzMjA1ZmUwZDVk YThhOWYwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD EygxM2M0MTBlYTk0YWVlZGMzYzA0N2RjYTM4MGE5MjNlMGQ2YTlhZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ll0jyfjlq/OHJq08tRVmeDNOtkQ roD0m80SC/RHtm0GG9OIVUPs0UPR5q46kG92kc14ZXNr7514YtLCcAJpckdoqPjj gX3XFsEZ2QO/tRLZVFxlNVQ4rpFTg0X3RhOt0lRhfT0XexidMruJkFTRKYCeWNH2 B1zFYci9+jFoHO8px6iZrVEaEyQIOnp7Ihnq8TVZrU6UAzC8bk86DFV+hemrbtTz TXNNK/Bjhq6IpKj9NtK1zgv4nD/7LZA5ZB1+IHCevZZ4u5cK23ScOu06rlfJXUSY 2i+l+OUfLnqv0wZirtTHup9P2JXh7bTL4xVTZffqy4TGJLmgxtNkTrkKawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPEEOqUru3DwEfco4CpI+DWqa4xMB8GA1UdIwQY MBaAFNmIT5Kv61j/qyZIeyMgX+DV2oqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYt NzY1MzMyNDVmMmJlLzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83Y2MzZjgtMDA4Yi00MDdjLWJlZWYtNzY1MzMyNDVmMmJl LzEvMlloUGtxX3JXUC1ySmtoN0l5QmY0TlhhaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKX+WwGX ntC0gnQlChp56Jtf9liRQDixbep2j1nt8flcM8xz7kXsA1hQGGxF86ipRdiFkkkI XaxpXMVyrxRhWe8tO8OcyhkVZve65yrtkGoeXcf68r/BCCQZZD1Ff7xMWo3DKSlV xNIjiDXNNhxbFYg9GYuZr5rx3VI/V9a/xq7Cg5BHLFZuPLggKJ/+oasdMpb3fMxc aqps8yLUJgbKymivU+cCtGTbFeHQ1ktSyjdrS58amfRzBN6eL7Khg+c/JpwArlcm uoHjrr5viMR+4rmZp2weLbh0E7PrLlrMWYrU+KtniIUwz53swJ7GxXr73Sds3IQM IUqNoQwj7Ln+Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:55:44 2025 by rpki-client