This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json) Hash identifier: GINnZegLUT58gETwuWAZEBuBJSO8H5F5KVpFHLUu+7o= Subject key identifier: 56:FB:E0:C1:D4:44:6E:A7:A1:43:11:63:DC:4E:C3:C9:DE:CC:0F:AE Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1 Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1 Certificate serial: 019B5A885C88A4C702BCCE6F405C0D0BDC55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft Manifest number: 0105 Signing time: Fri 26 Dec 2025 12:00:44 +0000 Manifest this update: Fri 26 Dec 2025 12:00:44 +0000 Manifest next update: Sat 27 Dec 2025 12:00:44 +0000 Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: bDtbEclLVB8Ue37lecBX0RSpfJXoALKrAGulTZQAo7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:5c:88:a4:c7:02:bc:ce:6f:40:5c:0d:0b:dc:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1 Validity Not Before: Dec 26 12:00:44 2025 GMT Not After : Dec 27 12:00:44 2025 GMT Subject: CN=56fbe0c1d4446ea7a1431163dc4ec3c9decc0fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:1c:6b:99:d4:62:17:f3:ed:da:71:9c:aa: 16:3b:df:f8:81:2c:1e:d5:75:aa:6a:34:17:63:35: a6:f2:c6:73:d4:4a:9a:e9:52:de:21:46:6c:60:52: 30:80:47:30:fb:96:9b:ac:23:0a:fe:20:be:f2:ba: 62:06:2e:df:82:23:e6:af:a5:dd:3f:c8:2c:84:38: 1a:31:36:8f:de:59:ea:4a:81:e5:96:7b:55:2c:e8: 59:ca:45:a5:26:65:1b:04:28:88:b0:a5:0b:b4:28: 7a:b9:7a:a4:51:74:c8:a3:eb:e7:53:d9:50:f1:d3: 5b:90:30:43:12:16:18:14:ba:bf:6b:04:d0:07:13: 67:a9:46:12:a2:ca:35:b2:81:04:47:8d:2e:a7:d0: 70:8a:2b:60:39:25:26:a4:a0:fd:f4:03:5b:9a:74: d4:3a:2b:06:cf:e8:dd:cf:ee:bf:a8:d1:f3:1c:74: bc:b6:68:94:10:ab:e3:ba:79:cf:05:fa:ba:7c:87: 27:a1:25:36:b2:37:eb:db:ef:8a:19:31:99:4b:3d: e3:f9:48:41:dc:40:ef:3f:40:60:72:7c:53:c2:eb: 87:9f:29:31:a2:4f:28:92:0d:64:07:e4:8c:52:c3: e0:57:0e:4a:47:54:cb:60:fb:db:2a:86:7d:6c:01: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FB:E0:C1:D4:44:6E:A7:A1:43:11:63:DC:4E:C3:C9:DE:CC:0F:AE X509v3 Authority Key Identifier: keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ca:ad:9b:44:fd:c1:52:5e:42:d1:19:78:5a:4e:ee:c2:67: b8:e2:c0:e9:9d:e1:05:37:7e:67:01:bd:92:f3:86:ac:fd:3b: f5:e5:d9:8b:9a:9e:8f:ed:40:f6:94:7c:5f:23:c1:48:3a:cd: 5a:6e:78:fc:60:2f:ec:6d:4f:89:02:e1:2e:8f:d0:56:a1:38: 7a:a2:79:b9:38:3b:0e:18:f5:17:6e:ed:bb:f6:d4:cc:97:ce: ef:4a:33:8c:9f:c8:86:c0:0b:a7:36:5f:08:8a:57:74:e1:6f: 08:3b:86:a0:64:8b:09:73:f3:75:eb:5f:d9:a2:5d:9c:25:01: ae:06:ac:95:29:b6:41:17:f0:31:36:2d:48:19:38:f7:71:28: 4a:81:07:38:5d:2e:4e:39:10:75:2d:3f:b4:a5:f8:4e:9b:06: bc:86:d7:6d:85:e4:26:dc:1b:f1:75:61:3c:2e:6f:6b:e3:d5: 8f:b5:77:2e:54:5b:41:de:18:e7:1d:2d:51:47:ea:09:2f:d2: f9:41:ec:bb:e6:c0:c7:c9:1e:db:e4:78:49:e8:ad:3b:39:d3: f9:35:e2:60:ad:cd:31:e4:cf:6e:78:0e:cb:66:a4:f3:e7:3d: 60:ee:52:84:28:ec:c8:9d:28:71:5c:d7:34:eb:1e:10:51:ff: 1d:b9:0a:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiFyIpMcCvM5vQFwNC9xVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMmVmMDUzZmE2NzQ4MWVlMjc3N2E3MjczYWQxOGE0MzFj M2JhYjEwHhcNMjUxMjI2MTIwMDQ0WhcNMjUxMjI3MTIwMDQ0WjAzMTEwLwYDVQQD Eyg1NmZiZTBjMWQ0NDQ2ZWE3YTE0MzExNjNkYzRlYzNjOWRlY2MwZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOkca5nUYhfz7dpxnKoWO9/4gSwe 1XWqajQXYzWm8sZz1Eqa6VLeIUZsYFIwgEcw+5abrCMK/iC+8rpiBi7fgiPmr6Xd P8gshDgaMTaP3lnqSoHllntVLOhZykWlJmUbBCiIsKULtCh6uXqkUXTIo+vnU9lQ 8dNbkDBDEhYYFLq/awTQBxNnqUYSoso1soEER40up9BwiitgOSUmpKD99ANbmnTU OisGz+jdz+6/qNHzHHS8tmiUEKvjunnPBfq6fIcnoSU2sjfr2++KGTGZSz3j+UhB 3EDvP0BgcnxTwuuHnykxok8okg1kB+SMUsPgVw5KR1TLYPvbKoZ9bAHOMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb74MHURG6noUMRY9xOw8nezA+uMB8GA1UdIwQY MBaAFNsu8FP6Z0ge4nd6cnOtGKQxw7qxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUt NjMwZGYzNTdlNTdkLzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUtNjMwZGYzNTdlNTdk LzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8qtm0T9 wVJeQtEZeFpO7sJnuOLA6Z3hBTd+ZwG9kvOGrP079eXZi5qej+1A9pR8XyPBSDrN Wm54/GAv7G1PiQLhLo/QVqE4eqJ5uTg7Dhj1F27tu/bUzJfO70ozjJ/IhsALpzZf CIpXdOFvCDuGoGSLCXPzdetf2aJdnCUBrgaslSm2QRfwMTYtSBk493EoSoEHOF0u TjkQdS0/tKX4TpsGvIbXbYXkJtwb8XVhPC5va+PVj7V3LlRbQd4Y5x0tUUfqCS/S +UHsu+bAx8ke2+R4SeitOznT+TXiYK3NMeTPbngOy2ak8+c9YO5ShCjsyJ0ocVzX NOseEFH/HbkKKQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:29 2025 by rpki-client