This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json) Hash identifier: y99MzZgbuVPihU3L7WIAFwo5Z5Q+ZxlRDVBq9PwoteQ= Subject key identifier: 1D:7A:46:62:B7:A4:09:D7:3A:70:4F:EA:06:A8:B5:8D:91:40:E7:A5 Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Certificate serial: 019B33E8B7410831FBA947786A08E8722703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft Manifest number: 10FD Signing time: Fri 19 Dec 2025 00:00:47 +0000 Manifest this update: Fri 19 Dec 2025 00:00:47 +0000 Manifest next update: Sat 20 Dec 2025 00:00:47 +0000 Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=) 2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: 9tUrxn0ktSDSxnldvGfN+dTxEgpj81eXf/55QbcMbck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b7:41:08:31:fb:a9:47:78:6a:08:e8:72:27:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Validity Not Before: Dec 19 00:00:47 2025 GMT Not After : Dec 20 00:00:47 2025 GMT Subject: CN=1d7a4662b7a409d73a704fea06a8b58d9140e7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:66:89:60:af:ac:fa:8e:a0:7f:66:a9:30: 41:04:24:25:aa:14:ae:40:12:4e:93:88:60:8c:d8: 43:01:fb:b5:0c:87:12:0c:f9:d4:d5:8d:a1:9a:d8: a4:83:42:0a:8e:d5:7e:e8:c8:f5:d6:75:40:f2:2d: b9:18:cd:93:57:13:8c:5f:10:d9:b3:db:c0:10:a5: bb:37:82:0d:95:5e:31:76:3e:47:a6:d0:93:4c:5a: 4d:24:98:2e:f4:f7:05:d6:21:30:37:f6:c4:07:55: 59:69:7d:c4:74:11:b6:6b:8b:29:dd:f8:26:5c:62: 59:57:a6:62:a8:a6:4e:ab:23:a7:41:53:d4:19:cd: 85:d3:24:6a:9f:72:2f:f5:d7:d9:83:1b:92:de:66: 72:47:d9:84:07:d9:bf:17:49:b0:64:ec:a0:1e:79: ea:8b:f3:2a:92:a3:fa:01:ab:e4:c4:9a:f7:23:d6: f3:1e:26:3e:1b:2b:c2:c0:94:a6:98:c7:9c:76:29: f2:85:fb:33:cd:b9:32:b5:0c:38:f9:f2:f3:ea:25: 4d:ea:aa:2b:9f:d1:44:da:6d:b6:15:31:09:84:95: 83:27:33:2c:f6:30:bb:74:7f:d4:e3:6b:fd:a9:3f: b8:a4:52:1b:c2:0c:58:2a:90:36:e6:a5:a2:33:06: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:46:62:B7:A4:09:D7:3A:70:4F:EA:06:A8:B5:8D:91:40:E7:A5 X509v3 Authority Key Identifier: keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:18:e5:b9:d5:db:89:3d:11:be:75:8c:ba:2a:92:2a:b7:15: db:fb:b6:7a:23:86:2c:20:f0:9f:69:23:f2:b7:72:64:5b:14: 6a:60:f9:5f:3b:a3:85:5c:12:bd:0d:24:30:4a:68:33:87:24: 33:fb:d7:1a:9c:df:50:3b:60:8a:43:ec:73:f9:9a:47:9b:43: ab:a5:bf:56:f2:13:13:01:3e:3a:0f:f0:d0:dd:f0:d2:ce:15: 7e:2b:5e:97:d5:f9:1f:a8:7f:5b:3d:90:f3:a6:7d:84:7b:10: a6:d9:ce:bb:29:f8:51:8b:bf:df:dc:3b:84:4d:ee:05:f4:1d: 77:3f:04:30:a0:f5:70:b2:d8:fb:cc:08:11:a9:c8:ff:af:58: 56:ff:6b:b1:a7:aa:64:41:1b:ae:b4:40:09:8b:0f:b0:6d:d0: c5:45:75:96:22:b4:77:b1:ea:78:28:75:01:1d:7a:13:09:d5: c5:d4:7f:67:58:d2:c2:99:ba:44:a4:cc:d9:83:67:fb:ea:70: 42:60:0a:54:03:84:8f:f8:36:64:d1:e0:c5:be:ea:b9:bc:83: 82:2c:0b:6e:d1:93:52:72:27:6f:64:df:21:4d:bc:3d:8c:6c: 0a:b1:9e:2c:48:0d:6e:ec:80:e0:b8:5d:6b:f0:1c:23:c7:db: 3a:fc:01:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LdBCDH7qUd4agjocicDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw YThlZTkwHhcNMjUxMjE5MDAwMDQ3WhcNMjUxMjIwMDAwMDQ3WjAzMTEwLwYDVQQD EygxZDdhNDY2MmI3YTQwOWQ3M2E3MDRmZWEwNmE4YjU4ZDkxNDBlN2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsBmiWCvrPqOoH9mqTBBBCQlqhSu QBJOk4hgjNhDAfu1DIcSDPnU1Y2hmtikg0IKjtV+6Mj11nVA8i25GM2TVxOMXxDZ s9vAEKW7N4INlV4xdj5HptCTTFpNJJgu9PcF1iEwN/bEB1VZaX3EdBG2a4sp3fgm XGJZV6ZiqKZOqyOnQVPUGc2F0yRqn3Iv9dfZgxuS3mZyR9mEB9m/F0mwZOygHnnq i/MqkqP6AavkxJr3I9bzHiY+GyvCwJSmmMecdinyhfszzbkytQw4+fLz6iVN6qor n9FE2m22FTEJhJWDJzMs9jC7dH/U42v9qT+4pFIbwgxYKpA25qWiMwbjswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB16RmK3pAnXOnBP6gaotY2RQOelMB8GA1UdIwQY MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0 LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBjludXb iT0RvnWMuiqSKrcV2/u2eiOGLCDwn2kj8rdyZFsUamD5XzujhVwSvQ0kMEpoM4ck M/vXGpzfUDtgikPsc/maR5tDq6W/VvITEwE+Og/w0N3w0s4Vfitel9X5H6h/Wz2Q 86Z9hHsQptnOuyn4UYu/39w7hE3uBfQddz8EMKD1cLLY+8wIEanI/69YVv9rsaeq ZEEbrrRACYsPsG3QxUV1liK0d7HqeCh1AR16EwnVxdR/Z1jSwpm6RKTM2YNn++pw QmAKVAOEj/g2ZNHgxb7qubyDgiwLbtGTUnInb2TfIU28PYxsCrGeLEgNbuyA4Lhd a/AcI8fbOvwByw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:48:08 2025 by rpki-client