This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json) Hash identifier: /5hGtGmBfn79NYsexeBz9RCg739Y97hYtJcfe/vFY+g= Subject key identifier: 4A:8F:1C:77:B5:EA:BC:95:6F:73:B4:DF:58:57:6D:33:DB:C3:B8:39 Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c Certificate serial: 019B410048A5FAD56DD099433A3C87998143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft Manifest number: 15A5 Signing time: Sun 21 Dec 2025 13:01:36 +0000 Manifest this update: Sun 21 Dec 2025 13:01:36 +0000 Manifest next update: Mon 22 Dec 2025 13:01:36 +0000 Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: BZFfzZcZBE8wwDD6ab8C5Ck2vcGbktzdYIXu4xd0IWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:48:a5:fa:d5:6d:d0:99:43:3a:3c:87:99:81:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c Validity Not Before: Dec 21 13:01:36 2025 GMT Not After : Dec 22 13:01:36 2025 GMT Subject: CN=4a8f1c77b5eabc956f73b4df58576d33dbc3b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:dd:89:e7:1a:da:56:92:d8:7b:9f:d5:d0: fe:88:92:4d:6c:6f:18:2d:15:a2:2c:39:02:c6:e9: a6:9a:df:81:28:4a:3b:e7:4f:6d:6b:d7:5b:77:b7: 49:18:88:3d:57:ba:c4:b4:d9:2e:97:c8:a0:a0:19: 2c:27:43:d5:23:96:1c:9b:31:00:d2:b9:5d:01:5e: 7e:57:1c:25:ab:8a:47:8f:83:6f:29:94:75:32:54: 7c:1f:33:e1:24:9d:e6:25:43:2e:79:d7:d8:0b:83: 99:2c:ba:31:7c:ae:d0:f8:c4:99:b0:69:15:69:75: be:d9:02:a5:da:ca:b2:1a:7b:b6:de:7b:95:a7:0a: b0:1c:51:0f:8c:e3:40:16:2b:61:45:95:3b:49:96: 85:0e:25:23:58:8e:bc:bd:af:25:69:7d:f0:39:aa: de:95:8a:35:ec:68:c6:d4:95:03:8d:a3:f4:df:c3: d1:d6:c8:82:b3:d8:e1:9d:4f:23:7f:6f:f2:b7:f3: f6:a4:b2:09:23:76:78:3d:35:e6:f0:69:e2:30:d8: 5e:50:2c:e1:a9:9d:72:c1:55:26:b4:46:f1:80:16: 05:9d:08:22:01:ec:6c:4b:b6:44:2e:d6:a2:01:8a: f1:0b:7c:c8:b2:1e:b7:16:47:d8:2b:fb:c6:c6:28: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8F:1C:77:B5:EA:BC:95:6F:73:B4:DF:58:57:6D:33:DB:C3:B8:39 X509v3 Authority Key Identifier: keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6c:e4:09:e8:25:ad:29:f1:56:e9:08:cf:ba:e2:fd:76:09: d3:27:8b:c7:d4:2e:06:93:86:5f:f5:96:e5:08:54:72:fc:cd: 57:72:03:49:77:7f:67:d2:62:e6:79:e9:ce:7c:e9:2a:ee:66: 64:bc:54:4e:ce:cb:b7:52:0b:f1:77:0d:ff:1a:c9:57:4c:3b: 99:5c:49:cd:7b:5f:47:40:22:2c:22:46:bd:fc:77:3e:d8:3c: 31:b5:f0:ad:f3:96:ad:bc:0d:d8:20:d3:8d:3d:05:d5:16:72: f6:cb:52:b2:0d:0f:1c:7f:d1:98:53:56:73:cc:16:43:0d:c3: fa:e4:81:ef:a6:04:5e:45:4f:a9:7c:ca:6d:1b:87:de:a6:6b: a5:94:38:69:fe:81:97:9b:88:84:91:1e:ee:66:92:f9:0a:f2: 69:90:a1:2c:7b:44:33:74:95:6f:f0:3b:4e:6e:c4:db:07:d3: b3:ea:a5:a5:1c:04:d9:25:16:2e:dc:14:33:99:17:f1:82:4c: 64:31:62:0b:ac:d7:07:85:3b:3e:3e:e6:ed:f0:14:02:ec:10: 7c:da:87:b5:46:c3:e1:31:e0:76:df:38:1d:d2:9f:bc:5c:9f: 6e:43:69:12:3f:b9:5f:77:04:d1:6c:7a:f7:ec:36:22:2f:d6: 0b:39:50:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAEil+tVt0JlDOjyHmYFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjM1NjAwMDQ1NWI3YjU4OTRjZWQxNDY5ODVhMGE4ODg5 ZjllNGMwHhcNMjUxMjIxMTMwMTM2WhcNMjUxMjIyMTMwMTM2WjAzMTEwLwYDVQQD Eyg0YThmMWM3N2I1ZWFiYzk1NmY3M2I0ZGY1ODU3NmQzM2RiYzNiODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Ddieca2laS2Huf1dD+iJJNbG8Y LRWiLDkCxummmt+BKEo7509ta9dbd7dJGIg9V7rEtNkul8igoBksJ0PVI5YcmzEA 0rldAV5+Vxwlq4pHj4NvKZR1MlR8HzPhJJ3mJUMuedfYC4OZLLoxfK7Q+MSZsGkV aXW+2QKl2sqyGnu23nuVpwqwHFEPjONAFithRZU7SZaFDiUjWI68va8laX3wOare lYo17GjG1JUDjaP038PR1siCs9jhnU8jf2/yt/P2pLIJI3Z4PTXm8GniMNheUCzh qZ1ywVUmtEbxgBYFnQgiAexsS7ZELtaiAYrxC3zIsh63FkfYK/vGxiitQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqPHHe16ryVb3O031hXbTPbw7g5MB8GA1UdIwQY MBaAFNsjVgAEVbe1iUztFGmFoKiIn55MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEt NDg2MzkxMTQxMmZhLzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEtNDg2MzkxMTQxMmZh LzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2zkCegl rSnxVukIz7ri/XYJ0yeLx9QuBpOGX/WW5QhUcvzNV3IDSXd/Z9Ji5nnpznzpKu5m ZLxUTs7Lt1IL8XcN/xrJV0w7mVxJzXtfR0AiLCJGvfx3Ptg8MbXwrfOWrbwN2CDT jT0F1RZy9stSsg0PHH/RmFNWc8wWQw3D+uSB76YEXkVPqXzKbRuH3qZrpZQ4af6B l5uIhJEe7maS+QryaZChLHtEM3SVb/A7Tm7E2wfTs+qlpRwE2SUWLtwUM5kX8YJM ZDFiC6zXB4U7Pj7m7fAUAuwQfNqHtUbD4THgdt84HdKfvFyfbkNpEj+5X3cE0Wx6 9+w2Ii/WCzlQCw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:29:15 2025 by rpki-client