This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json) Hash identifier: cPR2PaNcs7f5wlqzY4ODhjR71U2sBDG5ok75iW2wKkg= Subject key identifier: 29:6C:21:CF:3D:FC:60:2D:DA:B5:17:38:15:76:43:16:E1:8E:19:D4 Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6 Certificate serial: 019B0E92C97AC9F990A01DEC5A1AF0B957B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft Manifest number: 0975 Signing time: Thu 11 Dec 2025 18:00:59 +0000 Manifest this update: Thu 11 Dec 2025 18:00:59 +0000 Manifest next update: Fri 12 Dec 2025 18:00:59 +0000 Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: woZj7f4zGgKz+UBltJHH8mSEOU5iMZHTa9GTuWrwWjs=) 2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:c9:7a:c9:f9:90:a0:1d:ec:5a:1a:f0:b9:57:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6 Validity Not Before: Dec 11 18:00:59 2025 GMT Not After : Dec 12 18:00:59 2025 GMT Subject: CN=296c21cf3dfc602ddab5173815764316e18e19d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:e3:42:9b:ac:f8:f9:7c:6e:a4:8e:e5:2a: ae:c1:de:fc:40:29:3d:c9:34:99:2d:46:84:d0:a4: 6b:55:62:68:f6:0d:c9:4c:50:27:2d:e5:ea:2c:85: bb:4d:5b:f4:79:6b:1d:2b:58:ba:7a:f6:35:c6:9f: 48:84:92:3e:c2:19:da:60:18:a0:ff:ef:c9:0c:cb: 12:c7:24:69:cb:1c:4c:d9:00:3e:10:aa:95:68:69: d3:35:65:85:33:0b:da:1a:15:4b:a7:74:bf:b1:ad: 14:4b:58:4c:a7:7f:4f:8d:a8:ab:cb:5a:9d:f2:57: a9:39:a3:67:a8:c4:eb:b2:24:6b:b9:ab:3b:1e:61: cd:19:63:42:d4:2b:2c:56:8d:2a:39:ba:9d:d6:54: 39:4b:45:89:b7:cf:96:59:e2:4d:1c:79:8a:10:15: bf:47:cb:28:7d:9e:d3:d1:0b:0b:1c:72:81:39:83: 1a:ce:5d:ec:96:4f:40:c0:f0:58:ad:24:76:42:9b: 41:74:86:51:9a:e5:1d:9e:e1:77:c4:98:c6:fc:98: b9:49:09:18:30:5f:0d:4c:be:bc:b0:cf:6a:58:80: 68:72:b7:21:15:4d:db:1f:ca:74:6e:51:35:2c:d8: 63:7d:c2:33:2a:d0:75:5f:da:79:37:8f:9e:67:35: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:21:CF:3D:FC:60:2D:DA:B5:17:38:15:76:43:16:E1:8E:19:D4 X509v3 Authority Key Identifier: keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:39:94:d0:17:73:8a:9e:09:fa:00:d5:1e:84:d2:44:ab:33: 42:af:bd:8c:1d:33:c8:39:ac:c9:ea:1d:4c:28:99:4b:02:63: 8f:a6:f7:b6:ce:4c:05:c7:3d:35:d1:19:04:2b:82:19:22:48: 4d:bc:e0:06:c8:2b:9d:87:75:15:15:aa:f0:4f:2b:46:e6:6d: f5:d6:99:cf:29:ae:9f:98:6c:9c:1c:5b:ea:88:ae:22:9a:0e: e5:a1:48:ec:95:15:e9:ea:3e:a0:5a:26:7f:98:52:21:65:2e: e9:7e:b2:13:44:7f:7b:7f:36:b8:c3:98:e6:e6:cb:c2:03:3e: 65:ee:61:2a:80:d4:a6:d8:9e:1a:9d:e8:75:a5:d7:7e:2b:46: 29:44:6c:3e:33:0c:45:8d:47:c7:16:0d:63:5e:70:74:f9:96: fb:6c:de:27:87:a2:7b:e1:92:05:c7:3a:e6:65:65:19:0e:08: b9:a5:ce:c7:34:c5:bd:a3:f7:bd:56:47:0d:80:5f:7f:47:97: b6:a3:fa:bf:11:0b:94:9a:d1:d5:e2:e2:3d:a3:f3:fd:88:cb: 52:04:c7:ec:5e:90:7b:65:cb:0f:3c:fe:aa:34:49:48:56:57: 6d:f4:0d:86:ae:75:12:a4:bb:37:5c:ab:67:ec:4d:8c:fc:b2: b9:00:72:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOksl6yfmQoB3sWhrwuVe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGZmZGJjOTMzMTc4ZDdhMWJiZjk5NjA4ZTNhOTVkNGRl ZThhZTYwHhcNMjUxMjExMTgwMDU5WhcNMjUxMjEyMTgwMDU5WjAzMTEwLwYDVQQD EygyOTZjMjFjZjNkZmM2MDJkZGFiNTE3MzgxNTc2NDMxNmUxOGUxOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt7jQpus+Pl8bqSO5Squwd78QCk9 yTSZLUaE0KRrVWJo9g3JTFAnLeXqLIW7TVv0eWsdK1i6evY1xp9IhJI+whnaYBig /+/JDMsSxyRpyxxM2QA+EKqVaGnTNWWFMwvaGhVLp3S/sa0US1hMp39Pjairy1qd 8lepOaNnqMTrsiRruas7HmHNGWNC1CssVo0qObqd1lQ5S0WJt8+WWeJNHHmKEBW/ R8sofZ7T0QsLHHKBOYMazl3slk9AwPBYrSR2QptBdIZRmuUdnuF3xJjG/Ji5SQkY MF8NTL68sM9qWIBocrchFU3bH8p0blE1LNhjfcIzKtB1X9p5N4+eZzWqqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClsIc89/GAt2rUXOBV2QxbhjhnUMB8GA1UdIwQY MBaAFNoP/byTMXjXobv5lgjjqV1N7ormMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2Ut M2NhZDM3MDY3NDA1LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2UtM2NhZDM3MDY3NDA1 LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjmU0Bdz ip4J+gDVHoTSRKszQq+9jB0zyDmsyeodTCiZSwJjj6b3ts5MBcc9NdEZBCuCGSJI TbzgBsgrnYd1FRWq8E8rRuZt9daZzymun5hsnBxb6oiuIpoO5aFI7JUV6eo+oFom f5hSIWUu6X6yE0R/e382uMOY5ubLwgM+Ze5hKoDUptieGp3odaXXfitGKURsPjMM RY1HxxYNY15wdPmW+2zeJ4eie+GSBcc65mVlGQ4IuaXOxzTFvaP3vVZHDYBff0eX tqP6vxELlJrR1eLiPaPz/YjLUgTH7F6Qe2XLDzz+qjRJSFZXbfQNhq51EqS7N1yr Z+xNjPyyuQBytw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:28:00 2025 by rpki-client