This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json) Hash identifier: CqqgPlYP2kNV3bqi2pok4lJVH+CXFIl+0qVqsFLxeMo= Subject key identifier: D5:7A:41:69:AF:57:E3:64:E9:4F:59:8E:9F:F7:4D:8A:55:DC:88:7E Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Certificate serial: 019AF23FD3279C961A7FF807D291D1BD63EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft Manifest number: 0EF6 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: i+/1kIQTCkLc09tajTRSZiomQWDcEOZc7ODoAHUBJMY=) 2: CW5XXGbSHLy5qht82EbGk600atQ.roa (hash: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=) 3: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (hash: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=) 4: teW-DT8zdzN4G6q3ot7ZU_q2aDU.roa (hash: vMh/kxEkmKzqOFqR68vsoiN3gzaKBX7vYAgPza9p9cw=) 5: xHovsWco0FWia8DWR-GvNsYSrNI.roa (hash: tby+FFpFl1LGlp9XQyXnHjYmVkeUGYGKTrQzTYqHrLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d3:27:9c:96:1a:7f:f8:07:d2:91:d1:bd:63:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=d57a4169af57e364e94f598e9ff74d8a55dc887e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:a2:6b:78:c6:d1:55:04:d9:63:44:7e:5d: db:f3:eb:1a:02:79:b9:f0:ff:15:98:23:22:ae:1f: 4c:a9:42:29:e4:e4:6e:c1:19:a5:28:ec:4b:59:d1: 43:7a:11:54:ba:7e:3c:ec:d3:6d:6f:81:48:f7:c2: 75:2c:52:29:16:f9:3a:2d:92:d1:4b:04:e6:44:af: ea:4c:74:54:64:b3:e4:5e:20:64:ea:65:6c:75:f5: 7f:de:dd:bd:74:5a:71:c8:79:76:e0:ca:7a:8e:75: b5:e8:58:77:e7:48:06:58:2e:ad:f8:0d:e4:e4:88: b2:4c:ad:ba:71:20:9b:4a:50:d9:7f:b0:32:eb:95: 6f:13:28:e8:1f:40:bf:bd:14:41:7d:77:c0:c8:0e: 84:ed:a2:48:7a:8b:97:e7:b7:8b:45:c7:4d:1d:8f: 3c:32:6c:fe:3b:25:80:be:03:2b:c2:96:cc:7e:f9: 0b:5d:67:57:3e:d1:f3:2d:04:5c:8a:60:9b:91:5d: 39:8c:1f:82:d7:74:6e:9f:13:f9:14:69:6c:70:27: 9f:47:0c:45:d0:db:e0:58:f2:44:71:fd:eb:07:d8: 80:2c:19:18:14:45:d7:63:fb:e4:b3:3b:fb:de:21: d7:0c:a3:c5:0d:f1:80:1d:2d:79:29:89:76:1a:d7: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:41:69:AF:57:E3:64:E9:4F:59:8E:9F:F7:4D:8A:55:DC:88:7E X509v3 Authority Key Identifier: keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e8:c2:d1:86:a7:65:36:35:e7:7f:81:cb:98:dc:1f:af:6f: 3d:9f:6a:eb:a0:77:60:c9:1b:77:00:80:96:67:4a:67:c9:23: 41:49:75:42:49:e9:64:10:0a:75:a6:33:9c:15:9a:3c:63:b8: 27:57:ef:bb:af:38:bd:36:a7:e5:97:fc:41:a7:b4:5c:01:82: ba:68:94:27:c9:eb:af:3d:17:8e:7e:f7:0d:48:28:46:53:22: 18:11:ce:1d:03:ad:73:6e:49:5c:92:61:84:d9:88:72:6d:fd: 93:87:8f:f2:44:7b:3b:38:12:8c:b0:fa:8c:6e:42:80:a0:fd: cb:a2:54:d2:5e:9a:fe:5a:cc:b1:c3:fc:17:89:08:36:aa:bf: f3:c2:2e:89:39:ee:ff:32:26:6d:70:cf:2d:c3:17:bd:33:12: 90:94:22:6d:4f:5c:aa:74:eb:66:98:6d:08:c9:d1:b6:e4:f9: fb:af:e9:c6:b0:03:8e:e1:1e:37:81:78:60:b5:8b:48:d7:8c: 59:f8:3e:18:43:6c:76:94:5d:2e:84:69:0b:90:5d:b6:f6:2a: 48:f4:ce:38:29:84:85:15:5b:69:d1:4b:b9:e4:fb:40:d7:69: 2a:c0:30:bb:cc:68:b6:76:0a:66:02:23:9f:1f:c5:40:d7:89: 2b:e1:34:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9MnnJYaf/gH0pHRvWPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi NmJkY2MwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhkNTdhNDE2OWFmNTdlMzY0ZTk0ZjU5OGU5ZmY3NGQ4YTU1ZGM4ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Teia3jG0VUE2WNEfl3b8+saAnm5 8P8VmCMirh9MqUIp5ORuwRmlKOxLWdFDehFUun487NNtb4FI98J1LFIpFvk6LZLR SwTmRK/qTHRUZLPkXiBk6mVsdfV/3t29dFpxyHl24Mp6jnW16Fh350gGWC6t+A3k 5IiyTK26cSCbSlDZf7Ay65VvEyjoH0C/vRRBfXfAyA6E7aJIeouX57eLRcdNHY88 Mmz+OyWAvgMrwpbMfvkLXWdXPtHzLQRcimCbkV05jB+C13RunxP5FGlscCefRwxF 0NvgWPJEcf3rB9iALBkYFEXXY/vkszv73iHXDKPFDfGAHS15KYl2Gtd6QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV6QWmvV+Nk6U9Zjp/3TYpV3Ih+MB8GA1UdIwQY MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct MjQ2NTRlOTQxYzEyLzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+jC0Yan ZTY153+By5jcH69vPZ9q66B3YMkbdwCAlmdKZ8kjQUl1QknpZBAKdaYznBWaPGO4 J1fvu684vTan5Zf8Qae0XAGCumiUJ8nrrz0Xjn73DUgoRlMiGBHOHQOtc25JXJJh hNmIcm39k4eP8kR7OzgSjLD6jG5CgKD9y6JU0l6a/lrMscP8F4kINqq/88IuiTnu /zImbXDPLcMXvTMSkJQibU9cqnTrZphtCMnRtuT5+6/pxrADjuEeN4F4YLWLSNeM Wfg+GENsdpRdLoRpC5BdtvYqSPTOOCmEhRVbadFLueT7QNdpKsAwu8xotnYKZgIj nx/FQNeJK+E09w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:42 2025 by rpki-client