This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json) Hash identifier: cZOHJ2BYQo/Aum16xktChHDsaJyWE6RIBIoLTjR8JIs= Subject key identifier: 17:F7:A3:64:22:1B:87:68:71:C9:A0:33:EE:21:B5:68:B5:69:A5:2E Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d Certificate serial: 019AF49B9D4FEFAF08000DC04BFD373B2DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:00:30 +0000 Manifest this update: Sat 06 Dec 2025 17:00:30 +0000 Manifest next update: Sun 07 Dec 2025 17:00:30 +0000 Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 37K/cioYB7AwDCgZ41l0/XO0JDnh5qy5M+yyiIOsBMc=) 2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=) 3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:9d:4f:ef:af:08:00:0d:c0:4b:fd:37:3b:2d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d Validity Not Before: Dec 6 17:00:30 2025 GMT Not After : Dec 7 17:00:30 2025 GMT Subject: CN=17f7a364221b876871c9a033ee21b568b569a52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:8e:b1:c1:8c:17:7f:5a:ce:62:f8:74:dc: 6c:d2:34:6f:78:8f:ab:20:f2:37:ff:c1:c1:af:56: b0:be:07:1b:08:8b:ed:39:f0:17:b0:6f:ca:8e:1a: 05:7e:83:b2:67:d2:7e:1b:b0:48:c1:b2:62:26:77: b9:28:67:17:bb:18:bf:e9:f8:ce:4d:e4:3d:33:ef: 14:a6:e2:b9:2a:1e:e9:0d:6a:38:48:b7:b4:a6:ea: af:91:b3:06:7c:d0:39:95:70:bc:7b:1f:5f:43:cc: 65:31:4f:d2:72:3d:4c:32:0b:fa:28:38:e2:d9:30: 3b:b6:52:e8:7f:f1:6d:b6:dd:b3:82:51:46:22:0f: f1:d8:f0:a0:92:71:e6:80:b1:7e:ba:8a:0f:10:24: 51:38:c0:e6:a3:83:81:e6:1e:1e:e7:5c:c7:8b:cb: 4d:a4:47:93:c3:d1:24:b1:c5:53:fa:02:7b:4d:89: 49:d0:cb:fb:a3:ac:66:2a:8b:4a:64:30:57:99:16: d6:e3:46:f6:00:64:7f:38:12:45:13:cf:f5:fe:77: 20:2f:bf:14:95:89:ee:7a:1d:80:d0:e5:44:b5:64: fd:71:03:b0:56:81:5a:33:8b:ae:c4:a0:b8:58:cd: 8e:61:28:a5:aa:8c:c9:7e:90:93:8b:5d:65:e4:b7: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:A3:64:22:1B:87:68:71:C9:A0:33:EE:21:B5:68:B5:69:A5:2E X509v3 Authority Key Identifier: keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2d:a6:98:08:18:90:ec:cc:f2:64:76:39:92:a8:0a:cf:7d: 87:3a:df:39:5c:0f:7f:d2:80:6f:7b:b9:a2:b8:e8:91:bc:87: 4c:ac:19:ba:d7:f3:67:1b:f9:8a:d8:fd:1a:be:9e:46:a6:41: ee:40:cd:85:4b:61:f2:7a:07:80:6c:97:da:55:03:c9:38:4c: c5:05:40:fb:4b:9c:b2:d8:45:1e:59:02:ec:c5:3b:9a:0e:a5: 9b:67:51:94:3b:2f:45:04:32:a9:8c:49:4e:25:e5:21:f8:a1: fd:75:6f:40:3b:6c:ef:fa:8f:5f:93:44:58:1b:d3:c2:db:bc: dc:d4:b2:ab:7e:9b:23:2d:f8:0c:ba:dd:9f:4e:ce:21:70:cf: aa:04:b7:0c:e1:20:3b:e7:91:32:01:f2:ca:62:7f:35:59:fa: b2:42:6c:5f:45:cd:6e:ab:e4:65:df:2c:40:17:1b:3c:8b:60: 21:bb:9b:82:f6:9b:3f:bb:dd:5e:35:32:44:c1:c5:5d:ea:05: 56:00:7b:91:88:ef:82:0d:86:3d:57:25:7d:e5:eb:d9:70:b4: 93:97:25:b6:78:2a:46:b5:5c:9a:d7:17:b7:91:3b:3a:37:d7: 2d:44:8a:75:12:3f:1e:d9:30:22:49:06:fc:ef:e6:4f:04:65: fd:10:32:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m51P768IAA3AS/03Oy3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTVmYTcwZTNmN2RmMzYxMTUxZDU1Mzc5ZDRkOWI4NWRh ZGZkM2QwHhcNMjUxMjA2MTcwMDMwWhcNMjUxMjA3MTcwMDMwWjAzMTEwLwYDVQQD EygxN2Y3YTM2NDIyMWI4NzY4NzFjOWEwMzNlZTIxYjU2OGI1NjlhNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeeOscGMF39azmL4dNxs0jRveI+r IPI3/8HBr1awvgcbCIvtOfAXsG/KjhoFfoOyZ9J+G7BIwbJiJne5KGcXuxi/6fjO TeQ9M+8UpuK5Kh7pDWo4SLe0puqvkbMGfNA5lXC8ex9fQ8xlMU/Scj1MMgv6KDji 2TA7tlLof/Fttt2zglFGIg/x2PCgknHmgLF+uooPECRROMDmo4OB5h4e51zHi8tN pEeTw9EkscVT+gJ7TYlJ0Mv7o6xmKotKZDBXmRbW40b2AGR/OBJFE8/1/ncgL78U lYnueh2A0OVEtWT9cQOwVoFaM4uuxKC4WM2OYSilqozJfpCTi11l5Lcz5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf3o2QiG4doccmgM+4htWi1aaUuMB8GA1UdIwQY MBaAFNiV+nDj9982EVHVU3nU2bhdrf09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUt ZjQ1YjhkYmUyZjk3LzEvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUtZjQ1YjhkYmUyZjk3 LzEvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS2mmAgY kOzM8mR2OZKoCs99hzrfOVwPf9KAb3u5orjokbyHTKwZutfzZxv5itj9Gr6eRqZB 7kDNhUth8noHgGyX2lUDyThMxQVA+0ucsthFHlkC7MU7mg6lm2dRlDsvRQQyqYxJ TiXlIfih/XVvQDts7/qPX5NEWBvTwtu83NSyq36bIy34DLrdn07OIXDPqgS3DOEg O+eRMgHyymJ/NVn6skJsX0XNbqvkZd8sQBcbPItgIbubgvabP7vdXjUyRMHFXeoF VgB7kYjvgg2GPVclfeXr2XC0k5cltngqRrVcmtcXt5E7OjfXLUSKdRI/HtkwIkkG /O/mTwRl/RAyGw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:39 2025 by rpki-client