This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json) Hash identifier: 2e4YbyW0LZ2t+wqc2VtFvbWj9t/mDIXgOUSc+bMFRnM= Subject key identifier: 8D:DC:72:5B:E8:53:E7:2E:58:30:39:A3:D3:4F:1F:3B:A6:56:D6:5C Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20 Certificate serial: 019B5ABFC46609966CBF964AA9931F6FFF40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft Manifest number: 0C3F Signing time: Fri 26 Dec 2025 13:01:15 +0000 Manifest this update: Fri 26 Dec 2025 13:01:15 +0000 Manifest next update: Sat 27 Dec 2025 13:01:15 +0000 Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 3T4B1RC35hE0+VISHOvCRdar5QlWfnaHwXhvk5TNQOc=) 2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:c4:66:09:96:6c:bf:96:4a:a9:93:1f:6f:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20 Validity Not Before: Dec 26 13:01:15 2025 GMT Not After : Dec 27 13:01:15 2025 GMT Subject: CN=8ddc725be853e72e583039a3d34f1f3ba656d65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:b5:40:51:cd:42:7b:2f:77:96:0b:62:6e: 7e:47:98:7e:41:0b:2e:d3:57:cb:87:43:38:4e:db: 53:75:f6:9e:ec:fe:16:18:bb:0f:b6:6d:c6:32:a7: e3:a0:49:55:e6:45:28:dd:86:92:f0:59:d7:a4:38: f7:e1:bf:d6:24:52:a9:e3:05:e6:37:50:3f:28:76: 4e:21:ce:c7:04:69:cf:e0:77:f4:66:95:54:6d:77: 3e:b7:9b:cd:9a:db:87:06:aa:76:e6:bf:40:fb:6a: 2e:8f:a5:8e:c9:88:bf:d4:d5:6f:6d:72:87:57:05: e9:af:3d:35:2b:0f:95:e1:85:60:8e:4b:1d:59:0a: 5e:27:ee:5d:49:2e:28:66:80:22:b0:0e:18:3c:dc: c0:18:d6:3a:c1:25:b0:ca:50:d3:3b:90:4d:b3:e3: da:44:40:84:0c:42:b5:1e:de:63:44:41:02:c6:4a: 34:84:fb:d0:b4:41:5d:ac:44:03:a9:34:9f:ac:96: 81:ff:0e:04:41:cd:76:0e:44:ae:a3:22:2d:38:15: 2f:bf:8e:18:0a:c5:8b:67:52:25:36:b1:27:35:09: aa:af:59:a2:a9:09:1c:cf:e1:f3:05:29:33:cf:d5: 6d:8f:16:57:3d:31:03:d6:aa:6e:a5:ca:ae:bb:49: 10:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DC:72:5B:E8:53:E7:2E:58:30:39:A3:D3:4F:1F:3B:A6:56:D6:5C X509v3 Authority Key Identifier: keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:80:52:1e:7f:3c:f8:d8:0f:5f:70:d2:94:1f:f0:6e:19:f1: 16:8c:1a:8d:e2:39:47:71:b0:0c:1d:84:e2:a4:9f:85:a5:48: 00:df:91:31:f9:60:56:c3:40:2c:8d:92:1d:43:f6:8b:0e:98: 3d:60:93:6d:33:3b:66:42:4f:95:0b:ed:c7:cb:0d:15:6b:1b: ed:ff:24:ae:ff:16:a4:d6:b1:7a:cb:cc:69:f9:57:e4:e0:99: 00:e3:46:0b:49:e0:83:ba:eb:bd:2b:44:de:a2:85:51:68:0c: f8:c1:53:a4:af:a2:df:9c:c4:4f:63:51:4e:aa:74:0f:c1:49: fb:cf:a1:e3:43:a2:d9:b6:cb:80:6d:99:a5:95:d9:8b:d7:d5: 16:d2:52:c9:26:7c:1d:70:26:87:bc:4a:af:08:c0:92:61:4e: f7:d8:9b:cb:4a:6f:35:6e:32:86:08:60:a0:8c:11:69:33:df: e2:21:ae:cb:8b:9e:ae:e9:3c:e4:43:ce:28:dc:37:d5:65:a3: f1:4a:95:24:df:98:97:38:97:ca:8a:22:27:22:71:01:90:e0: 72:0d:a2:6e:b9:de:f1:8b:13:7c:03:8a:b4:e1:5e:85:0e:0f: e1:4f:29:5b:09:19:66:d4:db:6c:e0:e6:ad:29:e4:dc:2f:94: fe:90:9a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8RmCZZsv5ZKqZMfb/9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmY5ZTE3YjliNDE5ODhhOTI1OTljYmNhYmEwMzkxZmZi NjFhMjAwHhcNMjUxMjI2MTMwMTE1WhcNMjUxMjI3MTMwMTE1WjAzMTEwLwYDVQQD Eyg4ZGRjNzI1YmU4NTNlNzJlNTgzMDM5YTNkMzRmMWYzYmE2NTZkNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooi1QFHNQnsvd5YLYm5+R5h+QQsu 01fLh0M4TttTdfae7P4WGLsPtm3GMqfjoElV5kUo3YaS8FnXpDj34b/WJFKp4wXm N1A/KHZOIc7HBGnP4Hf0ZpVUbXc+t5vNmtuHBqp25r9A+2ouj6WOyYi/1NVvbXKH VwXprz01Kw+V4YVgjksdWQpeJ+5dSS4oZoAisA4YPNzAGNY6wSWwylDTO5BNs+Pa RECEDEK1Ht5jREECxko0hPvQtEFdrEQDqTSfrJaB/w4EQc12DkSuoyItOBUvv44Y CsWLZ1IlNrEnNQmqr1miqQkcz+HzBSkzz9VtjxZXPTED1qpupcquu0kQ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3cclvoU+cuWDA5o9NPHzumVtZcMB8GA1UdIwQY MBaAFNn/nhe5tBmIqSWZy8q6A5H/thogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYt MzdhMGU0NzRhYjE1LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYtMzdhMGU0NzRhYjE1 LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4BSHn88 +NgPX3DSlB/wbhnxFowajeI5R3GwDB2E4qSfhaVIAN+RMflgVsNALI2SHUP2iw6Y PWCTbTM7ZkJPlQvtx8sNFWsb7f8krv8WpNaxesvMaflX5OCZAONGC0ngg7rrvStE 3qKFUWgM+MFTpK+i35zET2NRTqp0D8FJ+8+h40Oi2bbLgG2ZpZXZi9fVFtJSySZ8 HXAmh7xKrwjAkmFO99iby0pvNW4yhghgoIwRaTPf4iGuy4ueruk85EPOKNw31WWj 8UqVJN+YlziXyooiJyJxAZDgcg2ibrne8YsTfAOKtOFehQ4P4U8pWwkZZtTbbODm rSnk3C+U/pCagA== -----END CERTIFICATE-----Generated at Fri Dec 26 22:36:58 2025 by rpki-client