This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json) Hash identifier: /sKTkr4N5u75bwVRudIWHuhuwGFXlEUMq3KYdqcs4Ys= Subject key identifier: 9E:40:A3:04:C0:1E:50:C6:47:83:05:C5:59:A2:67:C2:F6:25:CF:FB Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Certificate serial: 019B2BF89594150CDC7C691F0C6B5ADA3C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 11:01:10 +0000 Manifest this update: Wed 17 Dec 2025 11:01:10 +0000 Manifest next update: Thu 18 Dec 2025 11:01:10 +0000 Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: VwqaE4aBVgWz+ivrrP1RG/ucSueTYTSvL5yrPXqOAl8=) 2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=) 3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=) 4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:95:94:15:0c:dc:7c:69:1f:0c:6b:5a:da:3c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Validity Not Before: Dec 17 11:01:10 2025 GMT Not After : Dec 18 11:01:10 2025 GMT Subject: CN=9e40a304c01e50c6478305c559a267c2f625cffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:f6:99:b2:bf:48:a6:df:25:67:57:0a:60: 87:d2:2d:60:8d:cd:49:cf:51:26:b9:7c:65:17:8f: db:69:06:a4:d6:72:4b:81:0a:ea:67:77:7d:30:ec: 9d:15:bc:6e:c5:9f:d4:73:31:f0:e0:f7:78:08:df: 1c:ff:ea:40:ad:2e:f7:5b:80:8c:b3:28:cf:2e:c1: 80:a5:9c:a3:cc:8d:6f:84:4b:11:5b:55:46:04:27: 3d:80:d9:2e:83:dc:c7:ae:da:db:38:a3:c3:85:77: 0c:6c:fb:9e:8b:a6:62:eb:76:8b:9e:62:10:8a:91: 8b:5b:93:3f:61:a9:2f:d3:73:96:7f:3a:a9:0c:bd: 76:94:62:5a:0c:df:04:97:5a:2d:c9:e2:ec:4c:2c: b2:5c:d6:e0:54:40:58:d4:9e:bd:60:56:25:29:ab: 04:92:dd:78:13:7f:91:b3:31:d6:10:6e:51:ab:f6: 1a:1c:80:36:5a:85:63:ac:7b:63:57:b4:b4:be:d2: 94:b2:a8:10:93:92:4a:b1:97:d1:dc:61:f8:ba:31: 5a:c5:85:86:a7:2e:33:31:40:41:3a:16:cc:e9:7d: 6c:ff:d2:8e:db:18:48:b1:01:f7:0a:87:fa:b9:00: 91:ce:a9:b3:1a:b9:0d:89:be:f6:db:b0:a4:b3:b2: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:A3:04:C0:1E:50:C6:47:83:05:C5:59:A2:67:C2:F6:25:CF:FB X509v3 Authority Key Identifier: keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:47:fb:23:c2:f5:f4:28:69:76:d4:40:8a:f0:ae:d0:76:cf: d1:21:f3:c4:5b:c1:48:10:e4:d9:42:79:2b:dd:70:b4:b5:fb: 80:dd:7b:5e:48:6e:c4:74:f1:9c:2c:5b:19:1b:73:b4:82:33: f5:6b:2f:3b:84:5e:ed:9a:96:bb:d3:34:71:b5:3a:ca:af:bb: 61:a1:f1:a3:3a:d6:ba:02:e2:70:28:96:eb:b0:71:c7:33:88: 6d:cf:5b:b5:91:29:c4:97:ac:f1:4e:6b:48:79:31:c4:f5:68: 4a:99:d4:1d:a9:16:4c:1c:9b:1a:6a:c3:19:7c:dd:59:1a:c3: b8:3a:5d:2f:71:02:9c:fa:b0:dc:1b:66:bb:05:f8:c5:13:8a: ff:9e:0e:4e:dd:72:33:fa:98:57:78:c0:c0:4e:64:45:1b:cd: 40:3f:8b:00:40:fc:e4:e6:27:c2:43:0c:24:cc:8a:80:ac:76: 3b:92:fe:06:8c:e3:6a:db:c8:10:0d:e8:fe:d3:09:bc:0a:dd: b4:9c:c9:01:47:e0:36:c4:df:f6:61:5f:95:75:3a:d6:f3:76: e8:3b:36:60:c0:cd:9c:87:5a:87:77:2a:72:30:21:39:3f:b4: c8:a8:fb:ed:87:25:bd:c4:29:a8:d5:71:7c:de:49:32:15:ca: 1d:bb:12:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+JWUFQzcfGkfDGta2jxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm MWZmZTkwHhcNMjUxMjE3MTEwMTEwWhcNMjUxMjE4MTEwMTEwWjAzMTEwLwYDVQQD Eyg5ZTQwYTMwNGMwMWU1MGM2NDc4MzA1YzU1OWEyNjdjMmY2MjVjZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/v2mbK/SKbfJWdXCmCH0i1gjc1J z1EmuXxlF4/baQak1nJLgQrqZ3d9MOydFbxuxZ/UczHw4Pd4CN8c/+pArS73W4CM syjPLsGApZyjzI1vhEsRW1VGBCc9gNkug9zHrtrbOKPDhXcMbPuei6Zi63aLnmIQ ipGLW5M/Yakv03OWfzqpDL12lGJaDN8El1otyeLsTCyyXNbgVEBY1J69YFYlKasE kt14E3+RszHWEG5Rq/YaHIA2WoVjrHtjV7S0vtKUsqgQk5JKsZfR3GH4ujFaxYWG py4zMUBBOhbM6X1s/9KO2xhIsQH3Cof6uQCRzqmzGrkNib7227Cks7LycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5AowTAHlDGR4MFxVmiZ8L2Jc/7MB8GA1UdIwQY MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkf7I8L1 9ChpdtRAivCu0HbP0SHzxFvBSBDk2UJ5K91wtLX7gN17XkhuxHTxnCxbGRtztIIz 9WsvO4Re7ZqWu9M0cbU6yq+7YaHxozrWugLicCiW67BxxzOIbc9btZEpxJes8U5r SHkxxPVoSpnUHakWTBybGmrDGXzdWRrDuDpdL3ECnPqw3BtmuwX4xROK/54OTt1y M/qYV3jAwE5kRRvNQD+LAED85OYnwkMMJMyKgKx2O5L+BozjatvIEA3o/tMJvArd tJzJAUfgNsTf9mFflXU61vN26Ds2YMDNnIdah3cqcjAhOT+0yKj77YclvcQpqNVx fN5JMhXKHbsSkQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:07:12 2025 by rpki-client