This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json) Hash identifier: 4wF46p1UOBZB9lZuszQjmplc7CZfXszsNxADE9A04aI= Subject key identifier: 16:EE:B8:4F:CC:EB:18:9F:01:E2:1E:0A:DB:13:90:2A:F2:33:54:CE Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Certificate serial: 019AF3F7C0BE110AEDB7C96BD066E481967E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 14:01:31 +0000 Manifest next update: Sun 07 Dec 2025 14:01:31 +0000 Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: 30eUVyAbRO1c7PVQJ3uKwuTJfUfWez0dS670D/cqKzY=) 2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=) 3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=) 4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c0:be:11:0a:ed:b7:c9:6b:d0:66:e4:81:96:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9 Validity Not Before: Dec 6 14:01:31 2025 GMT Not After : Dec 7 14:01:31 2025 GMT Subject: CN=16eeb84fcceb189f01e21e0adb13902af23354ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:17:2f:a8:4a:ab:67:e1:ef:c0:f5:d7:e7: 29:49:60:08:e6:3c:d0:32:29:28:16:33:a7:2b:87: 63:67:a8:e5:3d:b9:6f:db:18:28:0c:fb:64:be:45: f5:8e:d3:e6:c2:de:2b:ec:fa:a6:3d:28:1c:4e:8e: 72:8a:23:e1:5b:75:3b:bf:ef:3c:7a:e0:fd:29:cd: e5:72:d8:8d:d6:19:78:67:61:e8:bb:63:77:bd:0e: b8:ac:45:3a:59:a4:4b:ed:b3:48:f8:fb:c6:1d:18: 8b:48:97:d1:69:88:84:90:46:22:28:95:72:06:82: 7f:5b:38:19:51:e4:33:fc:ca:81:2a:5c:04:a2:25: 63:60:d7:bb:07:fc:f8:61:9e:26:10:43:58:ea:a8: 9b:9e:4e:b0:b0:48:95:0f:44:8a:b9:67:3f:c1:dd: dc:22:63:9c:0e:10:89:42:8a:5d:0d:01:ed:63:91: c3:37:fa:6a:70:eb:a5:74:42:cd:6b:8f:d9:e2:b5: 55:1a:a2:a4:97:cf:18:49:5f:15:2c:2a:52:86:d3: 15:ac:ef:e8:6e:5b:bd:0f:5d:5f:4e:0c:d0:f0:9e: 99:b2:85:e3:d3:73:c7:a6:18:9d:5e:39:7d:56:cc: 1c:a9:5e:dd:63:a1:0b:75:1b:a3:ea:6f:84:d4:18: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EE:B8:4F:CC:EB:18:9F:01:E2:1E:0A:DB:13:90:2A:F2:33:54:CE X509v3 Authority Key Identifier: keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cf:4a:77:11:2b:34:ef:f6:33:db:0d:0b:a9:c4:e2:71:a3: 55:c5:7e:d4:f1:da:52:22:69:c9:17:95:89:2c:ac:e3:89:a7: 7e:9c:08:41:58:e3:21:2d:c4:c9:ab:bc:5b:28:9f:a2:75:ff: fe:6d:33:fc:9d:65:77:5d:82:c7:26:22:72:4a:07:74:79:70: ec:48:ac:47:5a:62:20:09:23:50:45:3c:42:26:5f:20:d2:ea: dd:2a:9c:9e:8c:cf:8b:fd:1e:c0:5c:84:25:d5:ec:a2:27:29: b3:75:34:c7:28:ef:ea:4b:d1:22:bc:0c:2b:38:1c:d1:b6:b1: 65:48:53:52:1f:d2:f2:dc:2c:2f:e6:f9:fc:9b:19:0b:dc:41: b0:0d:b0:98:82:d4:78:5f:b1:1d:08:f1:ed:ba:84:a4:60:a8: 01:55:ce:be:08:70:f4:17:fb:f1:8d:05:8c:9a:9c:77:12:9c: e4:e9:e1:3c:d2:e0:af:cd:3a:a0:86:01:c0:bb:a0:47:f2:3e: f0:78:d6:6b:f9:e2:d1:e6:48:91:f7:c1:7d:90:74:1e:cd:3d: 77:0f:42:39:3d:e2:36:2c:ca:dd:17:23:bb:f8:43:e6:d2:32: 23:56:8b:ab:1e:3e:f1:bd:86:ec:03:da:15:1b:a6:20:ff:09: 5f:04:fe:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98C+EQrtt8lr0GbkgZZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm MWZmZTkwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD EygxNmVlYjg0ZmNjZWIxODlmMDFlMjFlMGFkYjEzOTAyYWYyMzM1NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KQXL6hKq2fh78D11+cpSWAI5jzQ MikoFjOnK4djZ6jlPblv2xgoDPtkvkX1jtPmwt4r7PqmPSgcTo5yiiPhW3U7v+88 euD9Kc3lctiN1hl4Z2Hou2N3vQ64rEU6WaRL7bNI+PvGHRiLSJfRaYiEkEYiKJVy BoJ/WzgZUeQz/MqBKlwEoiVjYNe7B/z4YZ4mEENY6qibnk6wsEiVD0SKuWc/wd3c ImOcDhCJQopdDQHtY5HDN/pqcOuldELNa4/Z4rVVGqKkl88YSV8VLCpShtMVrO/o blu9D11fTgzQ8J6ZsoXj03PHphidXjl9VswcqV7dY6ELdRuj6m+E1BgmRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbuuE/M6xifAeIeCtsTkCryM1TOMB8GA1UdIwQY MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaM9KdxEr NO/2M9sNC6nE4nGjVcV+1PHaUiJpyReViSys44mnfpwIQVjjIS3Eyau8WyifonX/ /m0z/J1ld12CxyYickoHdHlw7EisR1piIAkjUEU8QiZfINLq3SqcnozPi/0ewFyE JdXsoicps3U0xyjv6kvRIrwMKzgc0baxZUhTUh/S8twsL+b5/JsZC9xBsA2wmILU eF+xHQjx7bqEpGCoAVXOvghw9Bf78Y0FjJqcdxKc5OnhPNLgr806oIYBwLugR/I+ 8HjWa/ni0eZIkffBfZB0Hs09dw9COT3iNizK3Rcju/hD5tIyI1aLqx4+8b2G7APa FRumIP8JXwT+ag== -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:38 2025 by rpki-client