This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json) Hash identifier: aBV3yeoY/tj/UXqdX2f3hKK9k2+DWphO7YpvU67NRRs= Subject key identifier: FC:CD:23:67:6F:6D:10:B5:46:A0:8B:6E:92:34:01:24:E2:84:5C:1D Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25 Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25 Certificate serial: 019B2251129E13B4AE1E4BA220002729313F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft Manifest number: 0363 Signing time: Mon 15 Dec 2025 14:01:37 +0000 Manifest this update: Mon 15 Dec 2025 14:01:37 +0000 Manifest next update: Tue 16 Dec 2025 14:01:37 +0000 Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: Fi46lgn+zlPUZgdZ+ZrFG+vuZOpYYB9Lwzt8I2W8l0k=) 2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:12:9e:13:b4:ae:1e:4b:a2:20:00:27:29:31:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25 Validity Not Before: Dec 15 14:01:37 2025 GMT Not After : Dec 16 14:01:37 2025 GMT Subject: CN=fccd23676f6d10b546a08b6e92340124e2845c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:99:08:0d:5f:10:a3:45:31:fe:a1:e5:b9: 8c:a5:4b:3f:32:5d:9a:37:e5:80:36:4e:fb:24:c0: 1a:18:75:7d:6f:92:66:91:9f:86:a0:06:5a:ea:d6: e5:55:4f:8e:35:33:72:51:1a:78:78:90:ac:fe:f0: a8:35:fb:b9:c3:8b:ba:8d:8b:79:a9:f2:fd:9d:70: c6:77:bf:a2:c8:3c:8c:11:f0:a9:86:69:f1:e7:39: 66:cb:0d:e9:fa:3f:be:b9:2d:5b:64:f5:10:19:56: d5:48:b1:0a:d2:88:3f:65:4b:ae:98:2e:17:6a:1f: ea:af:31:21:f4:b6:01:e4:45:0f:15:b4:c1:24:b8: 39:db:e9:67:ec:25:f2:9c:e4:ab:70:52:c5:ce:65: bd:5d:11:77:b8:c1:93:d0:84:03:58:13:df:99:86: 6b:32:bc:4a:2a:cb:f0:18:50:12:b8:02:72:8b:34: c7:6f:2c:61:0b:c1:69:62:a8:59:a1:78:1a:4d:09: 20:fe:b2:2c:e4:1e:90:54:60:4b:4b:27:d0:a4:b9: 72:e0:06:61:f8:04:1c:1f:8d:4d:b4:7b:84:3e:b7: d9:8e:f2:28:7a:03:eb:d8:1f:82:30:5b:5c:ce:29: 9f:14:01:cb:ad:a0:3d:02:c4:48:e2:40:8b:60:1b: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CD:23:67:6F:6D:10:B5:46:A0:8B:6E:92:34:01:24:E2:84:5C:1D X509v3 Authority Key Identifier: keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:96:dc:d6:93:95:7e:01:13:52:c7:a7:c2:ef:7e:a2:2c:19: 45:58:59:dc:da:6b:78:a0:11:05:33:4e:b8:e8:18:4c:78:66: 1a:5e:4e:02:6c:18:2d:30:68:e7:84:ff:87:76:aa:65:67:29: 3a:e5:c2:19:ae:e1:c3:d1:44:8c:d9:34:b7:18:e8:88:f3:52: 02:51:dd:db:de:6c:43:e0:f4:5f:96:20:9a:70:37:62:c5:07: 73:b7:6e:c3:2b:45:75:8f:86:87:2e:27:00:df:0c:b8:50:39: fd:59:8b:c8:3f:e2:f4:3c:c2:c7:30:90:f1:f4:70:04:9b:90: 30:74:d0:bd:56:00:7b:b8:bf:53:6f:40:4d:cc:b0:cb:c4:12: 5b:06:2c:58:2b:3d:37:02:d5:4a:57:78:20:f3:67:16:91:2e: 26:ba:03:79:68:1c:b8:ee:f3:58:6e:23:99:1a:b1:d6:e7:db: 15:d3:2e:30:82:76:16:3e:ce:e4:69:8f:92:b5:12:0a:fb:bb: 08:1b:0a:6e:03:d7:86:7f:12:63:d3:f1:4f:d9:7f:b7:90:00: f5:57:8d:c4:9b:b4:3b:03:77:6f:93:bb:0e:b4:53:83:5b:de: 0b:ba:ee:e3:ba:9a:95:b2:f4:de:22:26:41:af:37:de:0a:44: ec:2f:75:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiURKeE7SuHkuiIAAnKTE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4 ZDZmMjUwHhcNMjUxMjE1MTQwMTM3WhcNMjUxMjE2MTQwMTM3WjAzMTEwLwYDVQQD EyhmY2NkMjM2NzZmNmQxMGI1NDZhMDhiNmU5MjM0MDEyNGUyODQ1YzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeKZCA1fEKNFMf6h5bmMpUs/Ml2a N+WANk77JMAaGHV9b5JmkZ+GoAZa6tblVU+ONTNyURp4eJCs/vCoNfu5w4u6jYt5 qfL9nXDGd7+iyDyMEfCphmnx5zlmyw3p+j++uS1bZPUQGVbVSLEK0og/ZUuumC4X ah/qrzEh9LYB5EUPFbTBJLg52+ln7CXynOSrcFLFzmW9XRF3uMGT0IQDWBPfmYZr MrxKKsvwGFASuAJyizTHbyxhC8FpYqhZoXgaTQkg/rIs5B6QVGBLSyfQpLly4AZh +AQcH41NtHuEPrfZjvIoegPr2B+CMFtczimfFAHLraA9AsRI4kCLYBuQGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzNI2dvbRC1RqCLbpI0ASTihFwdMB8GA1UdIwQY MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt Y2E2YTFjYzgxYTIyLzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJbc1pOV fgETUsenwu9+oiwZRVhZ3NpreKARBTNOuOgYTHhmGl5OAmwYLTBo54T/h3aqZWcp OuXCGa7hw9FEjNk0txjoiPNSAlHd295sQ+D0X5YgmnA3YsUHc7duwytFdY+Ghy4n AN8MuFA5/VmLyD/i9DzCxzCQ8fRwBJuQMHTQvVYAe7i/U29ATcywy8QSWwYsWCs9 NwLVSld4IPNnFpEuJroDeWgcuO7zWG4jmRqx1ufbFdMuMIJ2Fj7O5GmPkrUSCvu7 CBsKbgPXhn8SY9PxT9l/t5AA9VeNxJu0OwN3b5O7DrRTg1veC7ru47qalbL03iIm Qa833gpE7C91eA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:26:06 2025 by rpki-client