This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json) Hash identifier: w3bgjneMFjaQYH+ygRpnoJI6L+5hcZ8E/YGDTLRh2UU= Subject key identifier: 71:5E:96:B5:8E:A1:97:12:84:72:5D:F5:6C:56:97:15:3F:F5:DD:A2 Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c Certificate serial: 019B42807B02FACB8DAC1704ED9B465A5448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft Manifest number: 04DC Signing time: Sun 21 Dec 2025 20:01:14 +0000 Manifest this update: Sun 21 Dec 2025 20:01:14 +0000 Manifest next update: Mon 22 Dec 2025 20:01:14 +0000 Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: gcSfQJu7p+w8gC+y0s9D4UYYjMbhckQbYXHv17Isb9k=) 2: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (hash: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=) 3: UkLoRo0mP_K3Dh8gkYYP1OxkE_I.roa (hash: Q3D4Rh06gP+xE8oXAtIwLH3P2XhdWnZQyb1Lpy85O7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:7b:02:fa:cb:8d:ac:17:04:ed:9b:46:5a:54:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c Validity Not Before: Dec 21 20:01:14 2025 GMT Not After : Dec 22 20:01:14 2025 GMT Subject: CN=715e96b58ea1971284725df56c5697153ff5dda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:1a:2a:34:65:0f:d5:37:d1:9e:80:f8:9b: 1d:ce:ac:33:1d:e0:55:76:be:2b:30:66:ff:73:c4: 33:34:71:fb:cd:fd:a5:5b:bc:1d:30:4b:49:cd:2c: 3b:96:ba:55:d3:ee:b4:72:be:9c:7a:2d:03:97:d7: 6b:b8:2d:54:91:ed:9d:c6:15:bf:e4:45:2e:37:21: 2d:75:be:82:c3:c4:79:c7:fe:05:54:94:76:3c:9e: ce:27:75:25:19:66:6d:32:09:cd:95:89:b2:3a:5f: a5:31:5f:cd:a9:bb:eb:6e:c2:15:12:fe:05:21:54: d1:f4:38:32:0a:86:7b:eb:36:0b:a5:ae:e0:6c:c0: 94:da:aa:a8:f9:c8:f0:86:3e:67:6f:01:b1:82:7e: fc:36:80:2d:8b:05:23:1a:e6:fc:eb:04:44:77:ae: 5c:32:a6:92:e2:a5:5a:73:ca:11:c1:4b:5b:f6:0b: ff:e7:f2:b6:b2:d4:81:7e:1d:d6:04:4d:1d:61:07: cd:3f:5a:a0:d5:09:b0:00:54:bf:25:a0:1f:cd:db: 08:5e:89:6d:c8:74:ce:f4:cd:84:55:fc:20:e1:a7: ff:b0:f1:d8:90:c3:09:97:a9:ed:a6:5b:67:d8:5c: 30:eb:5a:36:83:ca:bd:03:0c:a6:28:05:70:5e:be: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:96:B5:8E:A1:97:12:84:72:5D:F5:6C:56:97:15:3F:F5:DD:A2 X509v3 Authority Key Identifier: keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1e:69:19:40:c8:34:db:bf:37:63:76:08:8c:ea:d8:0b:81: 2e:17:8f:05:4c:12:43:c2:2a:15:c7:18:56:36:c6:42:fb:df: f5:0c:2f:ba:3b:ef:8c:08:a8:53:c3:a4:24:32:c0:11:8a:2c: f8:a9:0c:82:fb:7a:6f:e4:06:cc:c5:c0:03:89:80:b0:0f:2e: 8f:91:ba:1e:62:2f:be:b9:a8:59:33:c6:8d:53:a5:7e:98:c3: 0e:d7:24:05:6f:e8:c5:e3:d1:1a:9c:32:b2:2e:80:05:0a:57: d4:28:44:46:13:b3:52:41:98:49:5b:46:03:70:7c:11:31:08: 3c:57:34:4f:1a:63:37:46:93:c4:9f:15:86:7d:8c:ef:44:c7: de:f0:64:7b:da:81:69:3f:d6:ed:c0:da:2e:e4:fc:ee:c8:65: 56:6c:1b:c2:97:e8:10:9f:cd:41:fe:c6:f0:dd:c4:0c:52:d9: 1a:cc:da:48:a1:25:b9:67:f7:26:69:9f:b8:ab:75:8c:38:90: 75:ae:1e:44:3f:20:12:3f:07:72:9a:e8:a3:fd:d7:80:8a:dc: b6:10:44:ae:bb:db:db:1f:32:e1:b5:90:c7:a8:40:f3:41:45: 14:00:c7:6a:b4:0c:c2:d2:b3:c4:d3:0b:14:c3:74:04:40:6c: a3:57:80:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgHsC+suNrBcE7ZtGWlRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ODJhMTk3MzQwZDM1ODRlNmFjMTdjMWZiMmE5OTAwYWU0 ZjYwM2MwHhcNMjUxMjIxMjAwMTE0WhcNMjUxMjIyMjAwMTE0WjAzMTEwLwYDVQQD Eyg3MTVlOTZiNThlYTE5NzEyODQ3MjVkZjU2YzU2OTcxNTNmZjVkZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSIaKjRlD9U30Z6A+JsdzqwzHeBV dr4rMGb/c8QzNHH7zf2lW7wdMEtJzSw7lrpV0+60cr6cei0Dl9druC1Uke2dxhW/ 5EUuNyEtdb6Cw8R5x/4FVJR2PJ7OJ3UlGWZtMgnNlYmyOl+lMV/NqbvrbsIVEv4F IVTR9DgyCoZ76zYLpa7gbMCU2qqo+cjwhj5nbwGxgn78NoAtiwUjGub86wREd65c MqaS4qVac8oRwUtb9gv/5/K2stSBfh3WBE0dYQfNP1qg1QmwAFS/JaAfzdsIXolt yHTO9M2EVfwg4af/sPHYkMMJl6ntpltn2Fww61o2g8q9AwymKAVwXr44OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFelrWOoZcShHJd9WxWlxU/9d2iMB8GA1UdIwQY MBaAFNiCoZc0DTWE5qwXwfsqmQCuT2A8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUt YjA1YWU1Y2EyZDVlLzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NDFjNDMtMDI2OS00Mjg5LThmYTUtYjA1YWU1Y2EyZDVl LzEvMklLaGx6UU5OWVRtckJmQi15cVpBSzVQWUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB5pGUDI NNu/N2N2CIzq2AuBLhePBUwSQ8IqFccYVjbGQvvf9QwvujvvjAioU8OkJDLAEYos +KkMgvt6b+QGzMXAA4mAsA8uj5G6HmIvvrmoWTPGjVOlfpjDDtckBW/oxePRGpwy si6ABQpX1ChERhOzUkGYSVtGA3B8ETEIPFc0TxpjN0aTxJ8Vhn2M70TH3vBke9qB aT/W7cDaLuT87shlVmwbwpfoEJ/NQf7G8N3EDFLZGszaSKEluWf3JmmfuKt1jDiQ da4eRD8gEj8Hcproo/3XgIrcthBErrvb2x8y4bWQx6hA80FFFADHarQMwtKzxNML FMN0BEBso1eAhQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:09:42 2025 by rpki-client