This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json) Hash identifier: kWDZUgVsnb0DF9UQiPXxU7PN9LBIp6sy3DnNNiw7l4Y= Subject key identifier: D8:95:56:8A:F7:07:99:0F:D5:11:B3:B0:AA:C7:8E:22:40:A4:29:89 Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Certificate serial: 019B59ACE3245AC8086A42C8186BD7515DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft Manifest number: 0F06 Signing time: Fri 26 Dec 2025 08:01:01 +0000 Manifest this update: Fri 26 Dec 2025 08:01:01 +0000 Manifest next update: Sat 27 Dec 2025 08:01:01 +0000 Files and hashes: 1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=) 2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=) 3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: xzNpNMJSuSDTyMmzA0wtUV4IHR7xNWGkAsWAoKnxe2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e3:24:5a:c8:08:6a:42:c8:18:6b:d7:51:5d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6 Validity Not Before: Dec 26 08:01:01 2025 GMT Not After : Dec 27 08:01:01 2025 GMT Subject: CN=d895568af707990fd511b3b0aac78e2240a42989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:54:9d:af:85:96:7b:3c:bd:fb:86:c6:f4: 5a:11:f0:66:ae:a3:fc:15:2e:24:0f:43:7c:d3:dd: 09:bb:76:7e:ee:13:7d:23:38:29:3f:68:39:33:76: 4b:5e:6a:7f:b5:fc:93:f2:7d:88:7a:05:02:fb:f2: c7:d0:83:e9:4c:1c:f2:c7:65:15:18:10:a8:7b:12: cb:fc:28:94:21:2c:dc:e6:67:70:69:60:5f:1e:d2: aa:18:66:b1:87:6b:73:4c:a6:6b:c9:7c:0c:45:93: b2:12:13:94:e6:3f:35:1c:dc:3a:d3:f2:d9:a5:ab: fa:7b:9d:8a:75:e3:ed:50:13:bf:ed:0a:9a:66:b3: 5e:7d:48:0e:13:72:4c:12:88:f5:79:8e:4c:0c:7b: 84:02:ff:41:c6:0b:b2:65:bc:05:cd:d2:9e:86:56: 48:ce:64:2f:a8:05:a8:60:7f:f3:e9:7c:b8:c9:9d: ad:44:cc:2d:f4:11:e5:79:9e:86:ae:5c:81:23:f4: 07:a5:b5:0d:51:8b:31:28:10:8b:a6:2f:e2:3d:74: 02:3f:6b:3b:2c:9e:c3:1d:93:46:dd:39:12:6e:cb: 59:c3:58:e1:09:d1:36:ca:3a:10:d8:ac:bc:b9:09: 7b:e3:15:b2:1c:34:1f:6c:83:f1:53:7e:db:cf:d9: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:95:56:8A:F7:07:99:0F:D5:11:B3:B0:AA:C7:8E:22:40:A4:29:89 X509v3 Authority Key Identifier: keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:62:e4:1c:78:9a:70:98:8b:84:b2:a2:25:45:19:f8:8a:70: 6a:bb:ef:14:98:52:b8:71:d9:0b:e7:4e:c9:f9:8a:ac:ce:58: 32:1d:2e:c9:d3:87:cd:61:4a:7e:d1:58:02:ea:c2:97:45:e2: 0e:49:6b:17:4f:2d:9c:30:b7:78:63:fe:c5:79:5d:9a:ef:cf: c6:94:17:c4:ab:5b:70:95:48:34:cc:3b:3d:54:d0:ce:23:2b: e6:7d:c0:5b:28:97:22:f7:1a:35:2f:96:cf:cd:ed:07:51:d3: eb:2a:04:0d:39:9a:ea:a2:24:9d:ef:90:34:32:6b:23:cb:c8: 32:6a:0f:56:35:5b:f4:35:35:aa:f1:7c:bc:08:19:c7:12:85: ea:2d:db:5a:4c:55:a5:99:c3:bf:99:d8:14:6f:14:5b:5d:f3: 95:65:a5:96:2a:09:a6:a8:31:3c:89:f7:60:38:30:b3:14:a0: ea:4f:d8:12:07:4e:ee:eb:c9:2b:b5:77:ea:87:5d:8a:1c:48: 64:42:60:88:73:f8:78:3a:8a:59:e2:05:a4:c5:a8:c9:7c:77: c4:18:94:be:98:28:a5:93:7d:08:54:f5:88:ff:fc:f5:25:b3: 9a:4f:02:da:1c:fd:22:6f:2d:8a:7f:c1:d4:33:2a:f0:b9:a1: 67:8a:aa:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOMkWsgIakLIGGvXUV3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi MjBmYTYwHhcNMjUxMjI2MDgwMTAxWhcNMjUxMjI3MDgwMTAxWjAzMTEwLwYDVQQD EyhkODk1NTY4YWY3MDc5OTBmZDUxMWIzYjBhYWM3OGUyMjQwYTQyOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkshUna+Flns8vfuGxvRaEfBmrqP8 FS4kD0N8090Ju3Z+7hN9IzgpP2g5M3ZLXmp/tfyT8n2IegUC+/LH0IPpTBzyx2UV GBCoexLL/CiUISzc5mdwaWBfHtKqGGaxh2tzTKZryXwMRZOyEhOU5j81HNw60/LZ pav6e52KdePtUBO/7QqaZrNefUgOE3JMEoj1eY5MDHuEAv9BxguyZbwFzdKehlZI zmQvqAWoYH/z6Xy4yZ2tRMwt9BHleZ6GrlyBI/QHpbUNUYsxKBCLpi/iPXQCP2s7 LJ7DHZNG3TkSbstZw1jhCdE2yjoQ2Ky8uQl74xWyHDQfbIPxU37bz9lEPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiVVor3B5kP1RGzsKrHjiJApCmJMB8GA1UdIwQY MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmLkHHia cJiLhLKiJUUZ+IpwarvvFJhSuHHZC+dOyfmKrM5YMh0uydOHzWFKftFYAurCl0Xi DklrF08tnDC3eGP+xXldmu/PxpQXxKtbcJVINMw7PVTQziMr5n3AWyiXIvcaNS+W z83tB1HT6yoEDTma6qIkne+QNDJrI8vIMmoPVjVb9DU1qvF8vAgZxxKF6i3bWkxV pZnDv5nYFG8UW13zlWWllioJpqgxPIn3YDgwsxSg6k/YEgdO7uvJK7V36oddihxI ZEJgiHP4eDqKWeIFpMWoyXx3xBiUvpgopZN9CFT1iP/89SWzmk8C2hz9Im8tin/B 1DMq8LmhZ4qqUQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:39 2025 by rpki-client