This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft File: 2EQvLC-I2fbrLZxd82gL4h7nybM.mft (raw, json) Hash identifier: 9nfkyoUdWoqimJEToWtBlFY1muws6NBlEsMgO8CQXGk= Subject key identifier: D1:3B:6C:D7:C3:4B:5F:53:1E:90:DE:0F:AD:8A:F6:74:38:41:16:7A Authority key identifier: D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3 Certificate issuer: /CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3 Certificate serial: 019AF3F77189C6896E449A60174A51A24811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft Manifest number: 0138 Signing time: Sat 06 Dec 2025 14:01:11 +0000 Manifest this update: Sat 06 Dec 2025 14:01:11 +0000 Manifest next update: Sun 07 Dec 2025 14:01:11 +0000 Files and hashes: 1: 2EQvLC-I2fbrLZxd82gL4h7nybM.crl (hash: EI3XgH+iL4jLJOsYDgFWEAfS1v2xi/P0LxC/CpuY+Lw=) 2: l2jBV0bVg0CQFfEWYmZGcUnNWs8.roa (hash: I43WzSD4plBzSNiTRFYHSTVDaLrtL+SCq1cjo57LmDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:71:89:c6:89:6e:44:9a:60:17:4a:51:a2:48:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8442f2c2f88d9f6eb2d9c5df3680be21ee7c9b3 Validity Not Before: Dec 6 14:01:11 2025 GMT Not After : Dec 7 14:01:11 2025 GMT Subject: CN=d13b6cd7c34b5f531e90de0fad8af6743841167a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:74:43:4d:c5:cb:15:42:ff:83:e7:e9:ca: c6:97:08:ca:17:35:e9:65:a3:01:44:59:3e:d5:c8: 40:b8:22:08:70:e9:29:ec:db:55:ee:11:b1:b5:e3: 26:15:fe:bf:52:ad:54:e6:4f:81:98:e8:c2:2b:a9: 82:56:a1:0f:a2:ed:41:6a:9c:ff:ad:35:f9:ff:d9: 3d:21:9b:3c:52:3a:ff:fd:c8:91:d0:0a:93:30:c2: 6b:04:75:ad:21:17:10:57:44:a6:45:1e:57:ab:91: d7:63:35:9e:f2:43:31:49:6b:e4:f8:a7:77:73:ef: cc:da:94:eb:73:f6:e4:86:60:08:ce:04:94:60:d9: 7e:74:9c:aa:0c:29:97:7c:c2:e4:51:e5:ee:84:9a: 86:52:51:f4:1b:98:a9:8a:7a:b6:21:94:6a:b5:7b: 64:4d:af:40:f8:d5:a9:ab:dd:03:be:74:8f:6a:ba: 8f:53:07:1b:d8:3d:1a:29:8d:fb:7d:37:a8:bd:26: c8:eb:59:10:23:c4:bc:62:dd:5a:10:49:4e:08:8f: 8e:ee:31:5e:80:e6:e3:fa:1d:7e:f6:5e:d6:4c:3d: 6d:7c:f5:7c:4d:23:4b:df:d5:07:a4:94:e3:66:60: 6c:0f:3d:3e:c2:7a:6b:58:0f:26:57:c6:ad:28:0b: e5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3B:6C:D7:C3:4B:5F:53:1E:90:DE:0F:AD:8A:F6:74:38:41:16:7A X509v3 Authority Key Identifier: keyid:D8:44:2F:2C:2F:88:D9:F6:EB:2D:9C:5D:F3:68:0B:E2:1E:E7:C9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EQvLC-I2fbrLZxd82gL4h7nybM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d70b84-3d4b-4f22-8e53-0f546e14eb1d/1/2EQvLC-I2fbrLZxd82gL4h7nybM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4b:34:f8:93:3e:e8:60:70:b0:37:5e:6e:f6:4e:91:cf:41: 35:87:6c:4a:45:b9:f4:c5:f8:b1:73:72:d6:86:c0:1d:c2:5b: 6e:59:75:ad:14:f8:14:00:ef:21:50:57:f3:45:67:d6:4b:68: 42:46:01:af:c5:2b:f0:e1:4b:21:47:fd:56:5e:8f:4f:02:f2: 2d:84:39:99:9c:5b:20:97:a9:31:6c:d0:78:b5:3d:de:3d:1f: 56:36:6a:92:11:97:32:96:4f:53:f7:93:f3:9e:f6:41:93:8f: b5:dc:82:7c:fe:8a:09:36:99:fa:50:7b:11:db:1d:ef:92:b9: 14:4c:f3:94:2e:df:52:14:f9:0f:ac:ef:c0:ae:b9:55:dc:62: 0c:ba:39:d4:bf:9a:1f:4e:7b:34:e3:d8:df:d6:a6:f4:73:11: e3:f6:58:b0:2f:ab:ff:62:a2:64:c8:4b:aa:bb:67:ca:1d:fe: 8e:cc:17:77:9e:c2:11:de:2e:cd:4b:ac:fc:1c:96:a6:be:75: d3:28:28:e5:4d:44:8f:8c:ef:82:fb:17:5b:d6:bf:bb:ba:72: 1b:c5:59:05:e0:3d:3a:07:19:09:05:ec:6a:52:d5:47:a2:96: d2:a2:60:0c:7c:d9:5d:c2:4c:03:68:1f:54:dd:2a:97:ee:a1: 5a:17:ee:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93GJxoluRJpgF0pRokgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NDQyZjJjMmY4OGQ5ZjZlYjJkOWM1ZGYzNjgwYmUyMWVl N2M5YjMwHhcNMjUxMjA2MTQwMTExWhcNMjUxMjA3MTQwMTExWjAzMTEwLwYDVQQD EyhkMTNiNmNkN2MzNGI1ZjUzMWU5MGRlMGZhZDhhZjY3NDM4NDExNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviV0Q03FyxVC/4Pn6crGlwjKFzXp ZaMBRFk+1chAuCIIcOkp7NtV7hGxteMmFf6/Uq1U5k+BmOjCK6mCVqEPou1Bapz/ rTX5/9k9IZs8Ujr//ciR0AqTMMJrBHWtIRcQV0SmRR5Xq5HXYzWe8kMxSWvk+Kd3 c+/M2pTrc/bkhmAIzgSUYNl+dJyqDCmXfMLkUeXuhJqGUlH0G5ipinq2IZRqtXtk Ta9A+NWpq90DvnSParqPUwcb2D0aKY37fTeovSbI61kQI8S8Yt1aEElOCI+O7jFe gObj+h1+9l7WTD1tfPV8TSNL39UHpJTjZmBsDz0+wnprWA8mV8atKAvlBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE7bNfDS19THpDeD62K9nQ4QRZ6MB8GA1UdIwQY MBaAFNhELywviNn26y2cXfNoC+Ie58mzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMt MGY1NDZlMTRlYjFkLzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNzBiODQtM2Q0Yi00ZjIyLThlNTMtMGY1NDZlMTRlYjFk LzEvMkVRdkxDLUkyZmJyTFp4ZDgyZ0w0aDdueWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEs0+JM+ 6GBwsDdebvZOkc9BNYdsSkW59MX4sXNy1obAHcJbbll1rRT4FADvIVBX80Vn1kto QkYBr8Ur8OFLIUf9Vl6PTwLyLYQ5mZxbIJepMWzQeLU93j0fVjZqkhGXMpZPU/eT 8572QZOPtdyCfP6KCTaZ+lB7Edsd75K5FEzzlC7fUhT5D6zvwK65VdxiDLo51L+a H057NOPY39am9HMR4/ZYsC+r/2KiZMhLqrtnyh3+jswXd57CEd4uzUus/ByWpr51 0ygo5U1Ej4zvgvsXW9a/u7pyG8VZBeA9OgcZCQXsalLVR6KW0qJgDHzZXcJMA2gf VN0ql+6hWhfutw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:34 2025 by rpki-client