This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json) Hash identifier: 9S9uu4ir2eaUPt0CMHa/FZzJjPruoo3m6Bxy3vAu2mw= Subject key identifier: 64:F3:8D:43:D4:FC:62:2D:EA:B0:8C:DE:D7:AE:E1:32:04:33:ED:41 Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c Certificate serial: 019B48B9084E2B63651A7393C9358E4C3679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft Manifest number: 15A9 Signing time: Tue 23 Dec 2025 01:00:44 +0000 Manifest this update: Tue 23 Dec 2025 01:00:44 +0000 Manifest next update: Wed 24 Dec 2025 01:00:44 +0000 Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: mq1ztVfGMAX7KEjJr75v9IIydQxsi+r7LnJcVWf4Qds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:08:4e:2b:63:65:1a:73:93:c9:35:8e:4c:36:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c Validity Not Before: Dec 23 01:00:44 2025 GMT Not After : Dec 24 01:00:44 2025 GMT Subject: CN=64f38d43d4fc622deab08cded7aee1320433ed41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:65:98:45:95:13:29:ca:ab:b2:34:f2:ad:3a: 36:c3:ce:ba:8a:f1:bd:7e:b8:2e:55:6e:29:06:5b: 12:65:b3:a9:8f:69:d0:c4:24:b0:78:ff:74:f9:1a: 8a:ec:02:12:81:e5:79:bf:2c:c5:64:cd:55:26:1c: 25:e2:8e:8b:38:a3:02:4e:e0:14:a4:7d:81:7a:1b: ff:5e:c2:d7:c7:87:b6:e2:13:99:36:dd:34:59:3e: fc:45:93:99:0c:8a:88:17:dc:f1:05:43:87:2c:14: c1:66:b1:ff:91:ba:0d:6d:c7:18:d9:af:42:53:10: fe:63:4f:1f:3a:ff:54:f9:65:8b:7f:82:42:3c:14: 43:bd:cf:b0:ef:1c:e7:46:3d:53:c0:1d:11:60:9e: c4:05:7d:f3:82:7e:ea:3a:4b:46:68:62:10:92:b2: 95:39:91:5d:54:ab:1f:1c:20:be:5f:a0:09:4b:41: 2e:b6:4e:be:b2:ca:07:d2:97:ce:cc:be:66:f2:54: b8:e4:10:a1:19:ba:48:1c:fe:73:c1:ed:7b:0f:b6: df:74:80:0d:47:92:86:c9:05:91:26:48:bc:0e:e1: 40:b6:89:27:d1:39:aa:e9:69:eb:2c:11:00:0f:8b: 69:82:3b:d6:fb:7c:33:73:66:38:72:96:05:24:2e: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F3:8D:43:D4:FC:62:2D:EA:B0:8C:DE:D7:AE:E1:32:04:33:ED:41 X509v3 Authority Key Identifier: keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cd:6b:36:de:b7:17:6c:c6:c8:78:b2:79:6e:47:65:26:52: 22:a8:f9:c2:f0:70:ac:2c:86:47:e0:be:42:af:59:28:c6:e2: 3d:96:75:a6:60:9d:40:3a:82:69:77:e4:1c:c4:61:62:57:31: c2:a4:dd:05:9b:36:3e:cb:47:f8:83:6f:66:31:80:6c:8f:49: a2:b1:2a:1d:91:6e:05:19:19:e0:31:93:0a:1e:52:e0:f1:eb: 92:a1:5f:10:3b:0a:9e:54:cf:c6:35:e2:86:68:85:24:96:d4: da:2c:17:f8:9c:8d:e1:be:6b:02:2c:17:38:a3:1c:cd:3f:17: eb:47:6e:76:20:29:a2:de:80:60:ae:f6:66:6c:35:2d:5e:bf: e0:4d:6a:c8:0d:67:a9:3b:8a:74:9d:f3:6c:99:c3:9f:c4:de: 43:f7:97:42:67:ee:73:8a:d2:c9:b4:3b:f2:00:18:b6:5c:99: dc:7d:b9:88:39:90:6d:20:d4:81:ba:80:10:7a:5a:8c:1d:06: 41:86:b4:9c:79:f5:ca:2c:66:76:ed:a1:a8:81:07:a6:97:16: 88:88:c4:62:d9:25:bf:15:52:fa:29:31:db:af:7b:62:9c:99: c6:46:e0:14:70:ef:38:35:24:93:9a:95:83:17:12:f1:34:4d: b2:f0:f7:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuQhOK2NlGnOTyTWOTDZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjM1NjAwMDQ1NWI3YjU4OTRjZWQxNDY5ODVhMGE4ODg5 ZjllNGMwHhcNMjUxMjIzMDEwMDQ0WhcNMjUxMjI0MDEwMDQ0WjAzMTEwLwYDVQQD Eyg2NGYzOGQ0M2Q0ZmM2MjJkZWFiMDhjZGVkN2FlZTEzMjA0MzNlZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGWYRZUTKcqrsjTyrTo2w866ivG9 frguVW4pBlsSZbOpj2nQxCSweP90+RqK7AISgeV5vyzFZM1VJhwl4o6LOKMCTuAU pH2Behv/XsLXx4e24hOZNt00WT78RZOZDIqIF9zxBUOHLBTBZrH/kboNbccY2a9C UxD+Y08fOv9U+WWLf4JCPBRDvc+w7xznRj1TwB0RYJ7EBX3zgn7qOktGaGIQkrKV OZFdVKsfHCC+X6AJS0Eutk6+ssoH0pfOzL5m8lS45BChGbpIHP5zwe17D7bfdIAN R5KGyQWRJki8DuFAtokn0Tmq6WnrLBEAD4tpgjvW+3wzc2Y4cpYFJC7zeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTzjUPU/GIt6rCM3teu4TIEM+1BMB8GA1UdIwQY MBaAFNsjVgAEVbe1iUztFGmFoKiIn55MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEt NDg2MzkxMTQxMmZhLzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEtNDg2MzkxMTQxMmZh LzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs1rNt63 F2zGyHiyeW5HZSZSIqj5wvBwrCyGR+C+Qq9ZKMbiPZZ1pmCdQDqCaXfkHMRhYlcx wqTdBZs2PstH+INvZjGAbI9JorEqHZFuBRkZ4DGTCh5S4PHrkqFfEDsKnlTPxjXi hmiFJJbU2iwX+JyN4b5rAiwXOKMczT8X60dudiApot6AYK72Zmw1LV6/4E1qyA1n qTuKdJ3zbJnDn8TeQ/eXQmfuc4rSybQ78gAYtlyZ3H25iDmQbSDUgbqAEHpajB0G QYa0nHn1yixmdu2hqIEHppcWiIjEYtklvxVS+ikx2697YpyZxkbgFHDvODUkk5qV gxcS8TRNsvD3tw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:31 2025 by rpki-client