This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json) Hash identifier: 355unZXJCKUd/iXUxYyYl41RaVcrEB9RUdU3OrX+w0A= Subject key identifier: 9E:B7:D5:45:81:CF:33:A0:2B:8B:80:86:73:6F:D6:56:DB:E5:29:48 Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38 Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138 Certificate serial: 019B1A29B5DA5818E7A27AA2F5D7644B8323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 00:01:39 +0000 Manifest this update: Sun 14 Dec 2025 00:01:39 +0000 Manifest next update: Mon 15 Dec 2025 00:01:39 +0000 Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: oKBMsOLHGciOPhWkDTjzbgTTmpxG1Fh49lsnOvTzfk0=) 2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:b5:da:58:18:e7:a2:7a:a2:f5:d7:64:4b:83:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138 Validity Not Before: Dec 14 00:01:39 2025 GMT Not After : Dec 15 00:01:39 2025 GMT Subject: CN=9eb7d54581cf33a02b8b8086736fd656dbe52948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:62:0b:d7:55:4c:2f:3d:f5:e2:bd:c3:e3: 1c:e3:8e:74:2f:0e:b5:b6:31:1b:32:a5:33:e7:b2: 7e:bb:b0:81:12:16:bc:99:8c:d0:88:22:0e:a2:24: 02:67:2d:00:b7:bf:96:30:a6:a6:09:c0:35:98:5b: 31:f3:ca:28:43:4e:4d:7d:0d:7c:02:3e:76:f0:00: 77:dc:ce:65:51:14:1e:cd:77:92:e0:22:41:aa:ca: c0:7f:9b:c5:fe:23:83:46:98:cc:07:3d:13:41:fb: c3:fb:a2:db:d9:4e:e5:21:4c:26:56:0c:db:23:f6: 0b:c9:61:5f:e7:79:a3:ab:cd:60:3c:cf:5b:01:fa: b8:96:d1:e8:30:c6:dc:7a:8b:ee:47:f2:89:dc:f6: b3:5d:ff:2a:21:a6:51:c4:35:75:b4:e7:ec:9f:41: 49:03:5c:e8:1f:22:df:cb:3b:0a:50:f9:73:f8:29: a3:1a:f6:d7:71:18:fe:09:b1:58:04:c8:99:c1:a1: ee:40:55:33:15:a2:e5:89:28:76:6c:5b:fa:aa:22: f4:a1:b3:ac:74:58:30:bc:b2:87:72:ba:f7:b5:b0: 9c:51:00:75:fb:c0:cf:c8:8d:da:47:88:c1:23:0f: c7:10:6d:9d:aa:26:ae:f9:80:10:ba:1d:16:3d:0e: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B7:D5:45:81:CF:33:A0:2B:8B:80:86:73:6F:D6:56:DB:E5:29:48 X509v3 Authority Key Identifier: keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f8:f9:ec:68:ca:87:0a:3e:f1:88:be:f8:91:a7:d9:37:74: d5:f0:60:a2:e9:23:07:99:9a:06:fe:70:41:63:d7:c3:1f:5b: 97:cf:e2:67:70:c9:e7:39:c5:0b:e6:c3:32:26:3b:f0:31:f9: e5:52:a6:bd:d2:66:fb:b1:6b:a0:fc:04:8e:3c:dc:a2:ef:86: d0:ec:0e:01:4f:da:c3:41:e9:a6:c1:0c:93:2e:72:ef:cd:32: 5f:83:10:39:dd:63:7d:9d:65:f2:c9:41:40:50:07:48:1c:0d: 78:33:f0:be:c2:ba:08:b3:5d:0a:f5:d9:79:c2:24:62:09:af: e3:89:fc:6d:de:87:f4:8e:b6:e0:2b:71:8b:0c:4c:fe:8d:a7: 8b:b2:ba:41:ff:87:32:9e:ca:13:12:f1:50:56:f1:32:1f:d5: db:f5:2b:de:09:45:d4:66:17:30:9f:34:f3:95:cd:7c:c9:85: b7:ee:8d:09:b0:6a:18:4c:25:40:77:98:4e:56:e5:60:25:59: e5:d5:f2:1a:ab:23:d9:3b:d4:98:72:3c:15:3f:dc:c4:11:ee: c5:62:50:6a:98:d5:00:1d:fa:af:1c:e6:a3:5c:b0:88:5e:66: 7a:5e:2f:ca:47:84:e6:f6:3f:6d:05:5c:01:17:f1:0a:f0:f9: 3a:a8:9f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKbXaWBjnonqi9ddkS4MjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjc0MGY2NjY1Zjk5ODNmNTQwNjFkY2ExNjUwMjYxYWQ2 ZjIxMzgwHhcNMjUxMjE0MDAwMTM5WhcNMjUxMjE1MDAwMTM5WjAzMTEwLwYDVQQD Eyg5ZWI3ZDU0NTgxY2YzM2EwMmI4YjgwODY3MzZmZDY1NmRiZTUyOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LJiC9dVTC899eK9w+Mc4450Lw61 tjEbMqUz57J+u7CBEha8mYzQiCIOoiQCZy0At7+WMKamCcA1mFsx88ooQ05NfQ18 Aj528AB33M5lURQezXeS4CJBqsrAf5vF/iODRpjMBz0TQfvD+6Lb2U7lIUwmVgzb I/YLyWFf53mjq81gPM9bAfq4ltHoMMbceovuR/KJ3PazXf8qIaZRxDV1tOfsn0FJ A1zoHyLfyzsKUPlz+CmjGvbXcRj+CbFYBMiZwaHuQFUzFaLliSh2bFv6qiL0obOs dFgwvLKHcrr3tbCcUQB1+8DPyI3aR4jBIw/HEG2dqiau+YAQuh0WPQ401wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ631UWBzzOgK4uAhnNv1lbb5SlIMB8GA1UdIwQY MBaAFNq3QPZmX5mD9UBh3KFlAmGtbyE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWIt MWI3YzkyYTYxZGY2LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xMzVjZjQtMDg2Zi00NTE2LWEzZWItMWI3YzkyYTYxZGY2 LzEvMnJkQTltWmZtWVAxUUdIY29XVUNZYTF2SVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfj57GjK hwo+8Yi++JGn2Td01fBgoukjB5maBv5wQWPXwx9bl8/iZ3DJ5znFC+bDMiY78DH5 5VKmvdJm+7FroPwEjjzcou+G0OwOAU/aw0HppsEMky5y780yX4MQOd1jfZ1l8slB QFAHSBwNeDPwvsK6CLNdCvXZecIkYgmv44n8bd6H9I624CtxiwxM/o2ni7K6Qf+H Mp7KExLxUFbxMh/V2/Ur3glF1GYXMJ8085XNfMmFt+6NCbBqGEwlQHeYTlblYCVZ 5dXyGqsj2TvUmHI8FT/cxBHuxWJQapjVAB36rxzmo1ywiF5mel4vykeE5vY/bQVc ARfxCvD5OqifvA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:19 2025 by rpki-client