This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft File: MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft (raw, json) Hash identifier: zTti/7ORD80YnLV4f33uqgBLBR83oVzTPTdKhLzuONE= Subject key identifier: FC:E0:4F:53:50:E8:CC:5E:40:6F:74:4A:00:9A:75:E5:2A:2A:AD:F1 Authority key identifier: 31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F Certificate issuer: /CN=313da19357cbc67da7d55fa35aab3695bc04d04f Certificate serial: 019AF50B5BA20D1736E2F496ABAD8734CA62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft Manifest number: 0AD2 Signing time: Sat 06 Dec 2025 19:02:33 +0000 Manifest this update: Sat 06 Dec 2025 19:02:33 +0000 Manifest next update: Sun 07 Dec 2025 19:02:33 +0000 Files and hashes: 1: MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl (hash: fRBCmLMhnRgjwgF/lGNUzkTYXTF0lovSokhgQCx+lF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:5b:a2:0d:17:36:e2:f4:96:ab:ad:87:34:ca:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=313da19357cbc67da7d55fa35aab3695bc04d04f Validity Not Before: Dec 6 19:02:33 2025 GMT Not After : Dec 7 19:02:33 2025 GMT Subject: CN=fce04f5350e8cc5e406f744a009a75e52a2aadf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:d9:eb:c4:92:6a:c5:9a:55:70:60:9d:dd: 01:85:30:d8:10:06:fb:61:ba:80:34:bd:6d:c3:22: 22:14:68:c6:88:3c:95:7e:e8:4c:81:ec:05:db:79: f0:67:ef:43:dd:7c:18:3d:33:b6:1f:db:e9:5d:bb: ec:0f:83:6d:ed:8d:c9:98:c2:e9:84:0d:c1:75:a5: d7:8b:0d:43:51:4c:45:9c:c0:e7:10:e5:40:03:50: 04:0e:a7:0d:94:b3:74:d0:d4:62:f1:f3:36:ac:62: 86:e8:c9:5e:5c:bb:79:97:cd:f3:06:00:3d:dd:83: 32:83:d6:65:8a:07:40:f9:a8:36:b7:52:58:b1:b0: e5:67:85:ae:40:01:86:14:c2:fa:2b:14:47:6b:13: 34:5d:26:b4:2f:4c:73:22:64:f1:31:af:be:24:e8: a5:de:86:b7:23:99:2e:c1:02:5a:9b:6f:4b:8b:4a: 70:c0:2c:c7:eb:7d:0c:dd:60:24:5c:94:ca:e9:5c: 7a:87:5c:21:91:da:b0:d9:d8:82:71:44:0d:87:93: df:b9:e9:1b:bc:24:c5:e6:ba:3e:48:f2:7b:ea:25: 8f:13:aa:95:7c:35:84:8a:13:82:49:ba:9e:f6:f0: 55:b3:c6:52:94:9a:48:82:2b:6b:5c:9e:ac:31:10: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E0:4F:53:50:E8:CC:5E:40:6F:74:4A:00:9A:75:E5:2A:2A:AD:F1 X509v3 Authority Key Identifier: keyid:31:3D:A1:93:57:CB:C6:7D:A7:D5:5F:A3:5A:AB:36:95:BC:04:D0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT2hk1fLxn2n1V-jWqs2lbwE0E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/063bc3-8c76-475e-b9f1-f0bbbebbd6a9/1/MT2hk1fLxn2n1V-jWqs2lbwE0E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:98:37:4b:5c:04:eb:60:39:a8:49:70:2e:48:5d:1f:11:06: 39:1d:2b:c6:d3:ea:0c:36:c4:a8:ce:ee:d4:25:93:e8:97:a8: 62:f7:32:16:81:18:e8:ae:0b:65:be:5a:f1:48:2f:fb:0e:91: d4:50:8e:c6:a9:69:3c:a0:df:19:db:f6:27:49:b0:ab:87:01: 75:58:49:8d:9f:82:5e:0c:2d:9b:1b:94:9c:54:dd:ba:d6:84: 6e:55:b8:c1:4a:3d:bb:c5:2d:b3:ac:42:09:43:05:d3:9b:23: 2d:80:8b:15:69:5f:cc:ae:5e:36:8f:5b:17:d2:7b:1e:d2:fb: 39:46:3a:ef:cf:06:47:bf:83:4b:94:fc:f7:ca:9a:af:26:d3: b5:03:00:55:7b:13:30:14:14:93:92:a7:6f:af:b8:03:ba:35: 19:07:0e:7e:a0:f2:1a:21:c5:b5:01:4b:53:aa:63:aa:a9:93: 30:9d:ba:80:93:dd:d5:65:7a:85:d2:34:61:6b:78:14:ad:d1: 18:d4:e6:90:65:e7:a3:0c:8d:08:f0:49:3f:87:85:80:78:6c: ee:6c:fa:51:b3:01:8d:ca:fe:b0:80:3e:ed:d1:76:bd:e5:6b: 6d:8f:01:8d:a6:7e:d3:b9:00:8d:08:ec:05:03:48:b1:10:69: 52:5c:39:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C1uiDRc24vSWq62HNMpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxM2RhMTkzNTdjYmM2N2RhN2Q1NWZhMzVhYWIzNjk1YmMw NGQwNGYwHhcNMjUxMjA2MTkwMjMzWhcNMjUxMjA3MTkwMjMzWjAzMTEwLwYDVQQD EyhmY2UwNGY1MzUwZThjYzVlNDA2Zjc0NGEwMDlhNzVlNTJhMmFhZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY7Z68SSasWaVXBgnd0BhTDYEAb7 YbqANL1twyIiFGjGiDyVfuhMgewF23nwZ+9D3XwYPTO2H9vpXbvsD4Nt7Y3JmMLp hA3BdaXXiw1DUUxFnMDnEOVAA1AEDqcNlLN00NRi8fM2rGKG6MleXLt5l83zBgA9 3YMyg9ZligdA+ag2t1JYsbDlZ4WuQAGGFML6KxRHaxM0XSa0L0xzImTxMa++JOil 3oa3I5kuwQJam29Li0pwwCzH630M3WAkXJTK6Vx6h1whkdqw2diCcUQNh5Pfuekb vCTF5ro+SPJ76iWPE6qVfDWEihOCSbqe9vBVs8ZSlJpIgitrXJ6sMRDCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzgT1NQ6MxeQG90SgCadeUqKq3xMB8GA1UdIwQY MBaAFDE9oZNXy8Z9p9Vfo1qrNpW8BNBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVQyaGsxZkx4bjJuMVYtaldxczJsYndFMEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNjNiYzMtOGM3Ni00NzVlLWI5ZjEt ZjBiYmJlYmJkNmE5LzEvTVQyaGsxZkx4bjJuMVYtaldxczJsYndFMEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wNjNiYzMtOGM3Ni00NzVlLWI5ZjEtZjBiYmJlYmJkNmE5 LzEvTVQyaGsxZkx4bjJuMVYtaldxczJsYndFMEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5g3S1wE 62A5qElwLkhdHxEGOR0rxtPqDDbEqM7u1CWT6JeoYvcyFoEY6K4LZb5a8Ugv+w6R 1FCOxqlpPKDfGdv2J0mwq4cBdVhJjZ+CXgwtmxuUnFTdutaEblW4wUo9u8Uts6xC CUMF05sjLYCLFWlfzK5eNo9bF9J7HtL7OUY6788GR7+DS5T898qarybTtQMAVXsT MBQUk5Knb6+4A7o1GQcOfqDyGiHFtQFLU6pjqqmTMJ26gJPd1WV6hdI0YWt4FK3R GNTmkGXnowyNCPBJP4eFgHhs7mz6UbMBjcr+sIA+7dF2veVrbY8BjaZ+07kAjQjs BQNIsRBpUlw5nw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:52 2025 by rpki-client