This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json) Hash identifier: QjcCbJ6q2rBFM57zGr1rwfF3WEI5xZNwMC7KCbobTic= Subject key identifier: 7F:51:C2:58:9A:AA:16:CE:9E:F9:C9:A1:37:50:CA:0E:2F:29:92:F3 Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2 Certificate serial: 019B24E33DB5F1A4ED13125AF0D9EC4B9A99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft Manifest number: 04BA Signing time: Tue 16 Dec 2025 02:00:30 +0000 Manifest this update: Tue 16 Dec 2025 02:00:30 +0000 Manifest next update: Wed 17 Dec 2025 02:00:30 +0000 Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: 1XyM+fDrwUTmoHfs7Zfa0D0W1LQEuxYHk0vDERa3Lhc=) 2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=) 3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:3d:b5:f1:a4:ed:13:12:5a:f0:d9:ec:4b:9a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2 Validity Not Before: Dec 16 02:00:30 2025 GMT Not After : Dec 17 02:00:30 2025 GMT Subject: CN=7f51c2589aaa16ce9ef9c9a13750ca0e2f2992f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:51:de:e7:ed:95:f8:d0:be:08:72:c1:09:23: 84:08:d2:4e:f7:5f:a9:1c:82:cb:f3:5e:0f:64:ab: 42:f4:58:d3:4f:c7:ce:4b:d1:a8:5a:b2:cb:41:0a: 57:65:f8:32:45:13:c7:78:50:7f:97:fe:59:39:5e: 0c:49:94:6e:dd:80:8a:06:42:7f:3a:d1:8d:d1:0a: e3:1d:c4:33:ce:3f:0a:11:b5:ba:50:5b:7f:0b:31: 44:65:b9:ed:e4:84:c0:bd:11:ec:6d:c7:a4:bb:fb: c7:f6:78:4b:a0:aa:e1:8a:b0:70:a9:a7:1a:73:b8: 02:3b:dc:35:dd:5f:1a:1c:9d:29:06:cb:d6:96:bb: 06:f9:33:09:de:ea:74:7e:ef:e6:13:e5:33:e4:9a: 79:6f:11:55:31:a0:d0:a2:6f:76:4e:4c:d2:ae:84: fa:6d:53:6a:2a:29:12:7c:91:62:38:71:60:fa:8d: 41:f1:c1:ca:56:c7:d2:ca:cf:ed:9d:c8:e6:2e:a8: 84:96:19:82:02:46:6c:3a:cf:8d:3f:10:eb:3b:1a: aa:5d:c3:6a:b4:41:71:e4:aa:e6:80:cc:bd:67:95: 5b:00:c3:d3:46:04:d5:27:56:f7:11:02:ac:9d:21: bb:2e:54:eb:4c:1f:a9:54:9c:6a:1f:dc:36:0b:d9: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:51:C2:58:9A:AA:16:CE:9E:F9:C9:A1:37:50:CA:0E:2F:29:92:F3 X509v3 Authority Key Identifier: keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:84:09:a2:69:73:b2:af:95:76:82:61:31:8a:5b:24:08:5a: 7d:23:3e:35:a7:30:aa:0c:32:b5:7a:49:d5:20:a3:46:f8:e3: 35:6d:b6:40:a4:ef:4f:1a:20:20:a3:67:a0:e8:86:ad:6f:6f: 51:ac:a1:82:0f:a4:b2:c7:41:a8:2d:33:a8:42:fb:18:c9:da: 1a:a0:6c:53:15:80:35:b6:9c:c6:b3:0f:fa:e1:bf:fc:b2:8e: d6:f4:8d:ca:ef:ae:9d:6e:88:38:38:0f:df:34:ab:44:35:40: 62:1e:22:74:cb:ad:13:d4:bf:68:01:0b:50:bd:54:a4:b3:9f: 6d:6c:9d:50:b4:95:c0:ed:32:fe:b2:d7:74:23:6d:bc:51:49: 77:cc:ad:28:8b:af:66:f2:f4:89:88:7b:37:0d:a8:47:71:87: 20:45:3b:7d:cb:fe:81:ec:0a:92:1f:a2:80:bd:a9:f3:41:bc: 03:f8:2f:5c:28:da:63:b6:6e:bb:d3:aa:49:08:07:77:31:d9: 1d:9c:fd:a0:0e:bb:98:64:83:e9:31:5e:80:bf:b5:ec:68:36: 03:be:71:13:b4:ad:87:9a:3e:a9:a8:c1:7b:24:c8:94:ca:15: 73:cf:7e:75:22:16:12:fb:d5:3c:74:2d:e7:2a:83:c1:67:1b: db:26:71:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4z218aTtExJa8NnsS5qZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3 MDZjZTIwHhcNMjUxMjE2MDIwMDMwWhcNMjUxMjE3MDIwMDMwWjAzMTEwLwYDVQQD Eyg3ZjUxYzI1ODlhYWExNmNlOWVmOWM5YTEzNzUwY2EwZTJmMjk5MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FHe5+2V+NC+CHLBCSOECNJO91+p HILL814PZKtC9FjTT8fOS9GoWrLLQQpXZfgyRRPHeFB/l/5ZOV4MSZRu3YCKBkJ/ OtGN0QrjHcQzzj8KEbW6UFt/CzFEZbnt5ITAvRHsbceku/vH9nhLoKrhirBwqaca c7gCO9w13V8aHJ0pBsvWlrsG+TMJ3up0fu/mE+Uz5Jp5bxFVMaDQom92TkzSroT6 bVNqKikSfJFiOHFg+o1B8cHKVsfSys/tncjmLqiElhmCAkZsOs+NPxDrOxqqXcNq tEFx5KrmgMy9Z5VbAMPTRgTVJ1b3EQKsnSG7LlTrTB+pVJxqH9w2C9luRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9RwliaqhbOnvnJoTdQyg4vKZLzMB8GA1UdIwQY MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0 LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToQJomlz sq+VdoJhMYpbJAhafSM+NacwqgwytXpJ1SCjRvjjNW22QKTvTxogIKNnoOiGrW9v Uayhgg+kssdBqC0zqEL7GMnaGqBsUxWANbacxrMP+uG//LKO1vSNyu+unW6IODgP 3zSrRDVAYh4idMutE9S/aAELUL1UpLOfbWydULSVwO0y/rLXdCNtvFFJd8ytKIuv ZvL0iYh7Nw2oR3GHIEU7fcv+gewKkh+igL2p80G8A/gvXCjaY7Zuu9OqSQgHdzHZ HZz9oA67mGSD6TFegL+17Gg2A75xE7Sth5o+qajBeyTIlMoVc89+dSIWEvvVPHQt 5yqDwWcb2yZxwg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:42:17 2025 by rpki-client