This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json) Hash identifier: ho1Oc7fqP2qaSBD5p77+b9SShr4TTHa34Eda54ziTG4= Subject key identifier: D6:3E:A8:78:E6:A6:D7:94:5A:04:6C:8D:16:3E:5D:CC:70:E4:15:99 Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e Certificate serial: 019B5A888C547FC2B9ED2BA0AAA2F13ECCC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft Manifest number: 020B Signing time: Fri 26 Dec 2025 12:00:56 +0000 Manifest this update: Fri 26 Dec 2025 12:00:56 +0000 Manifest next update: Sat 27 Dec 2025 12:00:56 +0000 Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: a1ZycQ14uAsKR2rWChu+PEF+ECAv68h2rYMwthutTRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:8c:54:7f:c2:b9:ed:2b:a0:aa:a2:f1:3e:cc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e Validity Not Before: Dec 26 12:00:56 2025 GMT Not After : Dec 27 12:00:56 2025 GMT Subject: CN=d63ea878e6a6d7945a046c8d163e5dcc70e41599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:60:c3:be:21:8b:ff:cf:32:d6:3f:cf:36: 90:f9:61:49:28:07:eb:a0:68:15:86:6f:1c:94:8b: 9c:4b:d0:0d:9c:92:23:d3:1a:7e:41:f6:88:b2:6f: 27:f0:a3:47:d4:95:d8:25:5d:32:af:22:e4:ea:32: de:47:73:78:0c:c9:df:5f:37:b1:56:06:f9:8f:2b: 62:b8:5a:37:08:4a:c8:2a:ef:19:09:ee:99:13:b0: 1e:2b:6a:33:7f:dd:d9:99:e8:a7:e0:e6:9f:80:08: aa:fc:cb:69:55:97:71:8d:94:ff:15:44:db:5a:96: 28:e4:db:da:a0:ea:1a:e0:fc:35:fa:47:7e:c3:51: d9:de:d3:81:76:d1:2c:2f:43:ef:3e:4a:27:ce:3a: e1:28:39:f7:c5:b7:9b:24:07:36:94:18:94:d1:e4: 9f:8e:ba:8f:73:69:1b:07:e1:a9:4c:5e:83:ff:c1: dc:28:30:97:86:70:95:38:06:05:d9:41:24:65:3d: fb:59:49:8b:e9:96:50:77:6c:5e:4e:73:8a:b3:bc: cb:cc:4c:70:1b:9f:44:92:33:80:ab:b9:2c:f0:f7: a4:4d:69:6a:ab:2b:e8:9d:8f:5b:a0:9d:f6:c6:77: 1e:5f:49:87:84:3d:80:3a:0a:31:28:21:a2:63:fe: af:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3E:A8:78:E6:A6:D7:94:5A:04:6C:8D:16:3E:5D:CC:70:E4:15:99 X509v3 Authority Key Identifier: keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:58:c4:63:74:72:dc:1f:b4:ba:77:9a:8f:76:29:e2:85:0f: 97:0b:44:cc:96:05:6a:f5:c8:05:99:b9:64:9c:b0:52:0d:b9: 22:b5:a7:15:ae:17:b1:d8:39:c7:d9:a9:08:bd:39:9e:97:be: 2a:31:b4:6c:1c:e1:ac:b8:29:4c:56:e4:fc:7b:86:32:cb:fa: 8f:bf:eb:df:22:6c:f9:db:10:9f:33:2c:a7:96:f6:1b:65:3d: 00:fd:fd:7a:48:7a:7c:c4:e6:53:1c:5d:9a:0c:1c:72:62:32: eb:55:b4:dd:6d:49:83:4c:fe:1e:8a:56:dd:49:59:b4:e2:b2: eb:8f:bb:c3:85:c7:0a:c5:37:54:bb:bd:8d:cf:0e:6a:02:11: 80:f7:23:63:b5:76:84:7a:20:fb:b5:ec:50:d9:91:4a:25:fd: 43:16:26:a6:7c:c6:9b:15:cf:f3:3c:24:99:4e:f8:2d:d0:0a: fb:32:a7:37:f6:d2:88:22:f9:00:8f:64:50:ee:1b:93:60:1c: e3:77:a7:5e:27:b8:c1:e3:e4:9f:f2:39:99:1d:d8:fb:9e:84: 64:b7:02:17:7a:4f:97:52:f1:cc:1f:82:e9:e2:16:8f:0f:85: 9d:fb:92:13:3e:a9:14:9d:ca:14:ca:89:df:aa:da:72:fd:bf: a3:8a:06:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiIxUf8K57SugqqLxPszGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTlmMzFjNjI2ZDM3NzE3NTc4NmUxNDlkMzI2NmM3NTNk MDA2NGUwHhcNMjUxMjI2MTIwMDU2WhcNMjUxMjI3MTIwMDU2WjAzMTEwLwYDVQQD EyhkNjNlYTg3OGU2YTZkNzk0NWEwNDZjOGQxNjNlNWRjYzcwZTQxNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Rgw74hi//PMtY/zzaQ+WFJKAfr oGgVhm8clIucS9ANnJIj0xp+QfaIsm8n8KNH1JXYJV0yryLk6jLeR3N4DMnfXzex Vgb5jytiuFo3CErIKu8ZCe6ZE7AeK2ozf93Zmein4OafgAiq/MtpVZdxjZT/FUTb WpYo5NvaoOoa4Pw1+kd+w1HZ3tOBdtEsL0PvPkonzjrhKDn3xbebJAc2lBiU0eSf jrqPc2kbB+GpTF6D/8HcKDCXhnCVOAYF2UEkZT37WUmL6ZZQd2xeTnOKs7zLzExw G59EkjOAq7ks8PekTWlqqyvonY9boJ32xnceX0mHhD2AOgoxKCGiY/6vSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNY+qHjmpteUWgRsjRY+Xcxw5BWZMB8GA1UdIwQY MBaAFNnp8xxibTdxdXhuFJ0yZsdT0AZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mN2Q4Y2UtMTQwZi00MWQ3LThkYzMt NmRlNWNiZGU2YjRiLzEvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mN2Q4Y2UtMTQwZi00MWQ3LThkYzMtNmRlNWNiZGU2YjRi LzEvMmVuekhHSnROM0YxZUc0VW5USm14MVBRQms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFjEY3Ry 3B+0uneaj3Yp4oUPlwtEzJYFavXIBZm5ZJywUg25IrWnFa4Xsdg5x9mpCL05npe+ KjG0bBzhrLgpTFbk/HuGMsv6j7/r3yJs+dsQnzMsp5b2G2U9AP39ekh6fMTmUxxd mgwccmIy61W03W1Jg0z+HopW3UlZtOKy64+7w4XHCsU3VLu9jc8OagIRgPcjY7V2 hHog+7XsUNmRSiX9QxYmpnzGmxXP8zwkmU74LdAK+zKnN/bSiCL5AI9kUO4bk2Ac 43enXie4wePkn/I5mR3Y+56EZLcCF3pPl1LxzB+C6eIWjw+FnfuSEz6pFJ3KFMqJ 36racv2/o4oGiw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:04 2025 by rpki-client