This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json) Hash identifier: 661R8D9UXrQ/sA1y/1v/geb5KtNpl2RbXpMV3H8Hi/c= Subject key identifier: 92:1A:DD:5E:C0:EE:8E:49:E9:76:B1:25:0E:CB:CE:E0:E7:7E:76:D7 Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Certificate serial: 019AF72EE05290B71670A1B6CEB47AF6B908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft Manifest number: 0B94 Signing time: Sun 07 Dec 2025 05:00:35 +0000 Manifest this update: Sun 07 Dec 2025 05:00:35 +0000 Manifest next update: Mon 08 Dec 2025 05:00:35 +0000 Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: cQuCsvheG4gQ4h9lUL80Bnceo4D69euYF/prUGD3zQ8=) 2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=) 3: N_353yN0ZVbWs_anZKkB7VFDxu4.roa (hash: hMwRKapbkWsadMleA5KvqY1DK5C4Jjvpw+7CS/Z4ugY=) 4: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=) 5: szebc8-7Bd4DeQn1tSqrBS_dc4M.roa (hash: SIVCM9gif1wAhePpBb3dd2HLPRS90t/xDCg6lweK9EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2e:e0:52:90:b7:16:70:a1:b6:ce:b4:7a:f6:b9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Validity Not Before: Dec 7 05:00:35 2025 GMT Not After : Dec 8 05:00:35 2025 GMT Subject: CN=921add5ec0ee8e49e976b1250ecbcee0e77e76d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:4a:16:dd:9d:ed:e8:8d:cb:40:d9:4b:c6: cf:6a:10:ce:1a:58:0d:a3:79:4d:2a:23:3e:0a:36: 93:9b:03:1e:4f:c9:52:a1:cd:cf:1e:fc:66:82:a4: 1d:db:04:8c:b1:ba:d6:b7:c0:d8:69:fc:60:ca:09: 14:64:d1:75:63:80:dd:f0:b6:f7:80:77:a1:dc:79: 4e:7c:95:aa:1b:8c:6d:e3:d3:45:c5:98:df:28:e7: 3e:f6:a0:e1:93:e5:58:42:5a:82:ea:5c:e2:20:b7: 0d:50:d4:bf:05:91:bd:93:bc:0a:f7:61:d9:1f:52: bf:4e:b3:cf:13:51:fc:1b:0e:af:ff:40:eb:1c:26: 44:96:17:3b:be:94:ed:9f:f4:b0:1a:98:78:d0:6b: f9:ec:10:d2:52:e0:22:6e:95:cc:54:4a:f8:94:a2: 69:b1:03:67:e2:37:74:e8:0c:7f:7d:c9:7d:7e:c3: b3:7f:f0:03:57:ef:c2:df:37:9e:d9:3d:1e:5b:d3: 94:13:aa:ab:30:f0:ff:41:5f:03:31:34:ee:ef:e7: 6e:5a:59:cd:51:26:96:d3:9f:a3:92:ca:1b:6a:e0: b7:98:00:05:b0:b7:d1:15:59:0f:00:bc:93:4e:16: c3:19:36:b2:19:e1:3f:fc:2d:9b:e0:df:4a:fe:8f: 9c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1A:DD:5E:C0:EE:8E:49:E9:76:B1:25:0E:CB:CE:E0:E7:7E:76:D7 X509v3 Authority Key Identifier: keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:68:7e:7e:ff:99:f3:62:01:e0:78:31:c7:c3:cc:58:5e:4d: 11:c6:b3:ab:21:46:42:c0:2d:a1:3a:fb:5e:8f:2f:e0:c1:54: 3c:22:57:de:6f:49:81:66:03:0a:07:55:81:f0:25:04:ba:9b: 0e:29:ba:3b:c8:e4:0f:2e:d2:b0:e4:f6:72:63:1c:21:ee:0c: 26:32:b5:6a:21:3d:c7:47:bd:7f:c2:eb:aa:b8:74:89:cf:1f: 0c:15:a4:cb:60:6d:f9:24:27:78:fa:ab:3c:45:e0:e2:26:6e: bc:a0:0a:6a:fc:2d:dc:8c:98:b1:95:66:9c:0d:ce:38:34:20: 3d:de:50:ef:af:ff:b4:38:a9:04:53:80:2c:e6:5b:97:eb:c2: 7a:a5:54:d3:08:6b:36:d9:34:d4:db:9a:24:b3:dc:01:ad:81: bc:5a:ff:c3:d4:5b:b1:8e:b7:f0:90:bb:6c:37:87:9f:08:69: 0c:63:ad:0a:4e:86:91:a2:8b:8e:3f:0e:a4:8b:30:5e:cb:2e: a6:b3:00:b1:cf:51:e4:23:e7:43:e3:89:17:16:98:e0:db:3b: 0b:ca:bc:f8:58:71:52:6e:b5:5f:4c:eb:e1:b8:5d:eb:77:4c: 7c:95:0b:09:02:79:53:61:6c:51:c8:85:6b:c3:f7:ec:19:99: 9f:cb:b5:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LuBSkLcWcKG2zrR69rkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj ZTNmNmUwHhcNMjUxMjA3MDUwMDM1WhcNMjUxMjA4MDUwMDM1WjAzMTEwLwYDVQQD Eyg5MjFhZGQ1ZWMwZWU4ZTQ5ZTk3NmIxMjUwZWNiY2VlMGU3N2U3NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3VKFt2d7eiNy0DZS8bPahDOGlgN o3lNKiM+CjaTmwMeT8lSoc3PHvxmgqQd2wSMsbrWt8DYafxgygkUZNF1Y4Dd8Lb3 gHeh3HlOfJWqG4xt49NFxZjfKOc+9qDhk+VYQlqC6lziILcNUNS/BZG9k7wK92HZ H1K/TrPPE1H8Gw6v/0DrHCZElhc7vpTtn/SwGph40Gv57BDSUuAibpXMVEr4lKJp sQNn4jd06Ax/fcl9fsOzf/ADV+/C3zee2T0eW9OUE6qrMPD/QV8DMTTu7+duWlnN USaW05+jksobauC3mAAFsLfRFVkPALyTThbDGTayGeE//C2b4N9K/o+cPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIa3V7A7o5J6XaxJQ7LzuDnfnbXMB8GA1UdIwQY MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt MDVkNThmMGNiODhjLzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGh+fv+Z 82IB4Hgxx8PMWF5NEcazqyFGQsAtoTr7Xo8v4MFUPCJX3m9JgWYDCgdVgfAlBLqb Dim6O8jkDy7SsOT2cmMcIe4MJjK1aiE9x0e9f8Lrqrh0ic8fDBWky2Bt+SQnePqr PEXg4iZuvKAKavwt3IyYsZVmnA3OODQgPd5Q76//tDipBFOALOZbl+vCeqVU0whr Ntk01NuaJLPcAa2BvFr/w9RbsY638JC7bDeHnwhpDGOtCk6GkaKLjj8OpIswXssu prMAsc9R5CPnQ+OJFxaY4Ns7C8q8+FhxUm61X0zr4bhd63dMfJULCQJ5U2FsUciF a8P37BmZn8u1eQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:34 2025 by rpki-client