This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json) Hash identifier: ckXq7i+T/upnywo39b/jToYWhxvKhY6ibWuA0pWILpI= Subject key identifier: C0:0F:8F:BA:67:66:AC:A9:46:C0:F2:59:75:30:B6:C8:93:2A:F0:D1 Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Certificate serial: 019AF1D24EA95A2F0375186F6922EE01623A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft Manifest number: 0EA6 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=) 2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: RyJ/kIdofdSsQsAmdOc/rSOtVQqvOHXvvXIquhewAck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4e:a9:5a:2f:03:75:18:6f:69:22:ee:01:62:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=c00f8fba6766aca946c0f2597530b6c8932af0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:dd:85:26:ef:16:be:1b:53:95:da:6d:e6: ac:de:22:38:9c:27:ed:11:61:21:89:e7:69:9c:2e: fa:61:e5:f5:84:81:31:20:53:c9:b3:62:67:d4:78: 3d:40:cb:79:bf:6b:68:9d:ff:d2:89:13:b1:d3:3a: 6a:4c:bd:de:9b:65:0c:65:48:59:60:5a:b6:cc:d6: f6:ed:62:1d:34:19:e8:be:80:2b:f9:09:94:af:61: d3:21:5e:0d:a8:74:c5:22:1a:f2:fb:29:c3:7c:77: d3:e6:6b:d4:3e:26:72:ac:28:ad:36:4c:fc:66:78: 0a:99:79:20:95:89:c2:d0:ef:95:c5:a2:29:1d:4e: 50:49:44:e7:70:2c:84:4e:d8:7b:3b:95:24:c6:89: dc:9f:38:c0:de:dc:6a:b5:e4:d0:42:c4:89:0b:b7: af:6d:87:8b:68:3b:98:e8:9b:38:ac:33:06:28:ce: 9b:f3:81:c5:06:fb:b8:ef:54:d6:49:e0:54:08:24: c5:82:58:de:40:9e:1f:9e:e5:4e:f9:1b:9e:78:a1: d4:e7:7a:60:f1:2b:d1:71:18:21:93:0b:10:d2:8d: 90:4f:27:b2:ea:69:0c:b7:79:a5:b7:af:8a:a9:f0: 04:51:76:54:e8:f0:17:99:e1:22:43:80:98:cb:5d: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:8F:BA:67:66:AC:A9:46:C0:F2:59:75:30:B6:C8:93:2A:F0:D1 X509v3 Authority Key Identifier: keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:07:f3:87:9e:9c:98:62:f7:be:9f:85:b9:68:0b:47:11:f7: 45:b3:93:e4:13:be:ec:bb:a5:4f:89:6a:c1:14:ff:98:a1:4c: fe:54:39:68:6f:09:39:4b:f3:45:49:69:d1:0b:f4:ef:f0:00: fa:df:84:18:5b:98:d3:92:4e:0a:ca:4a:84:11:08:44:b5:b1: 1a:ab:68:bc:9b:5f:1a:16:a4:6e:d0:12:22:f7:b3:26:aa:df: 16:3f:68:05:d8:5a:ab:42:90:84:6a:7f:ae:01:4a:8d:15:4e: 83:e7:17:e3:4e:48:8c:32:bd:73:e2:4d:fa:62:ec:de:09:bc: e5:9e:38:5a:76:44:ca:ed:f6:26:eb:34:29:97:91:72:1b:b3: 79:4d:6e:be:07:12:d0:ec:58:89:69:10:ff:79:66:04:2c:fd: 70:35:8e:df:d1:89:fa:56:6d:bd:84:32:eb:33:f5:be:52:02: 62:cd:54:ed:0c:07:29:99:4d:6d:a9:3f:b8:a0:04:cc:6d:16: 25:53:73:04:b0:3c:46:25:a1:8f:1a:e8:67:3e:9f:bf:4a:98: 91:cb:4a:18:76:f7:86:ec:8d:85:0d:71:23:30:56:12:ac:07: 33:59:ad:20:08:49:99:99:5c:10:f3:fa:3b:8e:c5:7d:d0:07: aa:f5:6b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k6pWi8DdRhvaSLuAWI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli NjlkZGMwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD EyhjMDBmOGZiYTY3NjZhY2E5NDZjMGYyNTk3NTMwYjZjODkzMmFmMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop3dhSbvFr4bU5Xabeas3iI4nCft EWEhiedpnC76YeX1hIExIFPJs2Jn1Hg9QMt5v2tonf/SiROx0zpqTL3em2UMZUhZ YFq2zNb27WIdNBnovoAr+QmUr2HTIV4NqHTFIhry+ynDfHfT5mvUPiZyrCitNkz8 ZngKmXkglYnC0O+VxaIpHU5QSUTncCyETth7O5UkxoncnzjA3txqteTQQsSJC7ev bYeLaDuY6Js4rDMGKM6b84HFBvu471TWSeBUCCTFgljeQJ4fnuVO+RueeKHU53pg 8SvRcRghkwsQ0o2QTyey6mkMt3mlt6+KqfAEUXZU6PAXmeEiQ4CYy105WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAPj7pnZqypRsDyWXUwtsiTKvDRMB8GA1UdIwQY MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgfzh56c mGL3vp+FuWgLRxH3RbOT5BO+7LulT4lqwRT/mKFM/lQ5aG8JOUvzRUlp0Qv07/AA +t+EGFuY05JOCspKhBEIRLWxGqtovJtfGhakbtASIvezJqrfFj9oBdhaq0KQhGp/ rgFKjRVOg+cX405IjDK9c+JN+mLs3gm85Z44WnZEyu32Jus0KZeRchuzeU1uvgcS 0OxYiWkQ/3lmBCz9cDWO39GJ+lZtvYQy6zP1vlICYs1U7QwHKZlNbak/uKAEzG0W JVNzBLA8RiWhjxroZz6fv0qYkctKGHb3huyNhQ1xIzBWEqwHM1mtIAhJmZlcEPP6 O47FfdAHqvVrCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:55 2025 by rpki-client