This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json) Hash identifier: GybsXvDqAsU5/0WfC8vbg/4XAq21Uu3tKtwjdo4oGLo= Subject key identifier: 67:0C:FA:F5:21:E0:2B:FA:E6:7C:91:20:B5:D2:72:89:BA:11:BA:A9 Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05 Certificate serial: 019AF19AC36DC0A532B6F853FD30A0C5C074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft Manifest number: 0F15 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: mDf24vcc3AvzRdeketMCXoWIRzW1brViNDvBQOSB7b4=) 2: anoG2QxpBajiR81r5Nnqj0baENo.roa (hash: KO9yPbtejqfpWJpsarLnmq3okmJ48dSkW7G2+vLUOFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c3:6d:c0:a5:32:b6:f8:53:fd:30:a0:c5:c0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=670cfaf521e02bfae67c9120b5d27289ba11baa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:ab:31:f7:32:bf:cd:e6:cf:32:4d:95:47: 80:8c:55:6f:32:d6:0c:1e:a6:6b:a3:2e:2f:5e:57: ef:f5:03:e5:a9:ba:d3:d8:de:96:3c:8b:b2:f7:38: 34:8e:c3:84:33:e3:f9:ba:35:dd:e3:b1:ba:30:b1: ae:89:40:9f:8a:8a:8f:af:44:04:f0:72:9a:df:7e: 6e:9a:d9:aa:5e:86:93:aa:70:ba:ff:54:48:0a:90: 5c:e3:f6:f2:48:4d:b6:25:0c:0b:35:b4:95:ca:e9: f9:47:8c:ef:8e:f5:27:40:23:66:1e:8a:80:6e:24: a5:5e:de:b3:c2:7e:10:ca:04:b9:53:d0:a3:6a:28: 10:6a:d3:5e:d8:69:82:f1:45:88:c9:ab:2a:74:dc: ef:21:17:c7:e1:d8:a7:07:64:01:df:90:62:ba:8f: e5:6d:03:f6:f5:3f:2d:13:78:0e:66:17:9f:34:b3: 79:3a:3e:4f:ea:d2:1a:f1:5b:28:b5:47:f6:fa:de: cf:75:83:95:32:fd:b3:42:6e:5e:21:8f:9c:af:9e: 09:6d:18:09:a8:e1:ab:9d:a0:9f:03:80:fa:55:81: 34:6b:65:38:c4:40:88:16:df:a9:cf:14:5e:41:6c: cf:2b:e5:c7:cd:fb:99:44:2a:64:91:33:f7:50:ab: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:FA:F5:21:E0:2B:FA:E6:7C:91:20:B5:D2:72:89:BA:11:BA:A9 X509v3 Authority Key Identifier: keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:26:61:ad:8d:9d:f4:20:cd:93:78:0e:25:a9:94:14:36:47: 1a:bc:97:c7:75:54:9e:b9:a9:ff:f4:6c:61:c6:49:c3:93:fd: b0:67:2b:bc:b0:cc:f2:83:b1:34:5e:96:f5:20:59:ce:4a:1e: 88:16:f3:b0:41:32:1c:cd:52:9f:b7:47:bb:fc:ef:56:03:29: 13:70:c7:96:32:75:e2:56:8b:7f:d6:0f:3c:03:2f:65:db:2b: 87:31:5a:90:32:e0:a9:15:20:d5:40:30:45:fa:c8:7d:79:71: 74:57:af:b7:34:be:56:10:61:27:30:3f:6c:ff:38:db:a4:d8: b8:99:8c:c4:c1:ef:52:13:70:65:c3:f0:35:8c:50:05:96:f3: be:8a:ed:48:f9:e1:3a:31:21:4d:91:d2:4e:7f:05:c6:32:57: 35:af:1e:84:b2:bd:48:3e:82:fc:df:8b:17:27:f9:9c:b6:d8: 9b:77:0d:fe:38:38:9a:a4:c1:29:0d:86:39:c3:6b:44:f7:b7: 71:46:d9:2d:0d:c3:98:e9:20:23:9e:d6:17:11:a5:4c:8e:a9: 57:d2:c3:fe:d3:fa:cb:5f:f8:1f:cd:1e:51:b1:9f:d7:2b:a4: ac:5b:bb:6f:74:cf:db:89:0e:3f:4c:9f:b3:d0:a1:05:38:11: 3a:35:ab:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsNtwKUytvhT/TCgxcB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OTY4MDI5ZjEyNDA5NmVhYjk1NWRmOWI3YTgxYzg4Y2Iz MzNhMDUwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD Eyg2NzBjZmFmNTIxZTAyYmZhZTY3YzkxMjBiNWQyNzI4OWJhMTFiYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTerMfcyv83mzzJNlUeAjFVvMtYM HqZroy4vXlfv9QPlqbrT2N6WPIuy9zg0jsOEM+P5ujXd47G6MLGuiUCfioqPr0QE 8HKa335umtmqXoaTqnC6/1RICpBc4/bySE22JQwLNbSVyun5R4zvjvUnQCNmHoqA biSlXt6zwn4QygS5U9CjaigQatNe2GmC8UWIyasqdNzvIRfH4dinB2QB35Biuo/l bQP29T8tE3gOZhefNLN5Oj5P6tIa8VsotUf2+t7PdYOVMv2zQm5eIY+cr54JbRgJ qOGrnaCfA4D6VYE0a2U4xECIFt+pzxReQWzPK+XHzfuZRCpkkTP3UKs9zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcM+vUh4Cv65nyRILXScom6EbqpMB8GA1UdIwQY MBaAFNmWgCnxJAluq5Vd+beoHIjLMzoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMt NmVlYTEyMjA1NzIwLzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMtNmVlYTEyMjA1NzIw LzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSZhrY2d 9CDNk3gOJamUFDZHGryXx3VUnrmp//RsYcZJw5P9sGcrvLDM8oOxNF6W9SBZzkoe iBbzsEEyHM1Sn7dHu/zvVgMpE3DHljJ14laLf9YPPAMvZdsrhzFakDLgqRUg1UAw RfrIfXlxdFevtzS+VhBhJzA/bP8426TYuJmMxMHvUhNwZcPwNYxQBZbzvortSPnh OjEhTZHSTn8FxjJXNa8ehLK9SD6C/N+LFyf5nLbYm3cN/jg4mqTBKQ2GOcNrRPe3 cUbZLQ3DmOkgI57WFxGlTI6pV9LD/tP6y1/4H80eUbGf1yukrFu7b3TP24kOP0yf s9ChBTgROjWrLg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:34 2025 by rpki-client