This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: knF0hX3LbE24Vsc3ARz9TE30VZ4K3S/W3Ca1bbOGcBw= Subject key identifier: 8C:97:2D:10:16:65:1F:EB:9B:A4:86:67:6D:2A:02:38:E2:FC:65:4D Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B10B81B584760757B140FCA35B21350BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 0626 Signing time: Fri 12 Dec 2025 04:00:59 +0000 Manifest this update: Fri 12 Dec 2025 04:00:59 +0000 Manifest next update: Sat 13 Dec 2025 04:00:59 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: AY7WKIWVrasHyDlxWdnO4ood5imxkrxi2aNn1A+RB0Y=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: 4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa (hash: 7KT8zX1ut3NI1KMa06d5NbNTRIbK0mONunluRgrTKdc=) 4: 56KKt4BpkIwEHMFmq2QXksA-2io.roa (hash: 54GcazY6u68JnZUu56e7FZCBJWXeMImZQ8ihkRRuFTc=) 5: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 6: EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa (hash: Ju4zKmRJh/EbFKeLrhI6L7JYjbJ+gosDVEmrn3gTxds=) 7: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 8: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 9: hfy8wKzZ1lOnw8rRIAp89k1HBQg.roa (hash: w/O4MPtS75N0zJ8yWXd9FMAgNBIXsYLEr12sXp5bZHk=) 10: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 11: lWNGZyoYxMMDcNyLWjAJGitLlFk.roa (hash: 6BoUCdn7LLlUMhRVmjkftBgzwA47YP9UtF03OcYu1VA=) 12: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 13: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 14: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 15: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 16: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:1b:58:47:60:75:7b:14:0f:ca:35:b2:13:50:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Dec 12 04:00:59 2025 GMT Not After : Dec 13 04:00:59 2025 GMT Subject: CN=8c972d1016651feb9ba486676d2a0238e2fc654d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:1f:d3:28:08:72:90:23:52:db:72:a3:fb: 9a:d6:49:b2:9b:ba:8e:d2:c8:88:a5:f6:38:89:b3: b9:7d:25:07:a1:1e:3c:38:22:8b:57:11:03:eb:1a: d6:21:99:1a:de:d3:9e:85:44:04:d9:13:d5:22:76: f5:d2:e3:f9:de:50:65:79:b7:95:30:2f:9d:8c:2e: ab:23:4a:c9:6b:05:78:c3:6c:9d:10:6f:17:5d:37: 4f:78:d5:b5:ef:9b:b3:78:8c:a3:ff:2b:e3:ca:54: ac:79:20:48:0b:77:43:5b:bf:ea:e7:6b:52:00:09: 18:1d:29:60:99:b3:a6:74:02:53:e3:6f:98:06:bc: 6d:21:93:5b:d2:ae:e7:62:a0:18:08:5f:73:0b:f0: c3:54:40:84:95:a0:93:40:6e:cd:43:b7:62:27:fb: 3c:98:e0:80:c8:79:43:34:16:70:bc:24:15:0d:2f: 9a:18:89:5a:e0:e5:a5:9a:b2:1c:46:e1:e9:70:5d: 98:5f:50:33:92:7d:20:1c:83:38:80:e7:fa:42:d2: 5a:bd:63:55:29:6e:0e:cc:d0:89:96:4c:a6:f1:f4: fa:80:35:1b:78:cb:54:0b:2b:df:95:77:e0:24:b6: f2:6f:11:dc:63:76:1e:df:ad:2a:6c:a0:f7:8c:9c: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:2D:10:16:65:1F:EB:9B:A4:86:67:6D:2A:02:38:E2:FC:65:4D X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:71:e0:e0:65:c3:7f:7a:9b:b0:23:0b:0f:18:80:6a:56:e1: a2:b9:a5:af:01:45:d1:ad:ae:7d:fb:ac:d8:7c:86:0c:93:d5: 34:cd:a3:0d:33:d3:58:89:f4:ad:ff:10:f1:a7:ce:21:55:99: 41:f6:60:7d:a9:48:01:6c:b9:c4:dc:cd:ca:12:65:8a:ed:c5: aa:e7:63:b9:52:2f:42:1f:dd:70:c6:df:cf:9c:f6:0f:48:f3: b3:d8:73:40:09:f7:02:20:02:c3:7b:f9:9e:5c:7a:a7:a7:5f: fa:4b:18:e4:71:40:8e:16:27:20:f2:46:ae:25:d5:91:75:e1: 06:88:e3:f8:f9:d4:1a:4b:96:b1:5a:40:a1:f4:72:64:6b:a9: 6c:7c:85:aa:70:c0:96:57:d0:29:90:d2:e1:b1:88:29:20:5e: 0a:f8:7b:c7:22:fb:25:51:29:e7:c6:af:6e:bc:b9:6f:eb:77: 12:ad:86:63:67:d4:a2:18:29:3e:3f:fc:b1:38:3a:37:ca:11: 28:d0:3b:27:79:ab:69:52:37:b7:6d:09:15:56:d3:ee:e2:ee: a9:e6:5c:e8:73:61:37:71:3a:08:63:73:2b:4c:ff:ac:6a:7f: 55:af:25:51:7e:ca:8e:1a:cb:a4:44:01:67:7e:73:21:ed:6c: c7:f6:e5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuBtYR2B1exQPyjWyE1C7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMjEyMDQwMDU5WhcNMjUxMjEzMDQwMDU5WjAzMTEwLwYDVQQD Eyg4Yzk3MmQxMDE2NjUxZmViOWJhNDg2Njc2ZDJhMDIzOGUyZmM2NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmYf0ygIcpAjUttyo/ua1kmym7qO 0siIpfY4ibO5fSUHoR48OCKLVxED6xrWIZka3tOehUQE2RPVInb10uP53lBlebeV MC+djC6rI0rJawV4w2ydEG8XXTdPeNW175uzeIyj/yvjylSseSBIC3dDW7/q52tS AAkYHSlgmbOmdAJT42+YBrxtIZNb0q7nYqAYCF9zC/DDVECElaCTQG7NQ7diJ/s8 mOCAyHlDNBZwvCQVDS+aGIla4OWlmrIcRuHpcF2YX1Azkn0gHIM4gOf6QtJavWNV KW4OzNCJlkym8fT6gDUbeMtUCyvflXfgJLbybxHcY3Ye360qbKD3jJyCcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyXLRAWZR/rm6SGZ20qAjji/GVNMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3Hg4GXD f3qbsCMLDxiAalbhormlrwFF0a2uffus2HyGDJPVNM2jDTPTWIn0rf8Q8afOIVWZ QfZgfalIAWy5xNzNyhJliu3FqudjuVIvQh/dcMbfz5z2D0jzs9hzQAn3AiACw3v5 nlx6p6df+ksY5HFAjhYnIPJGriXVkXXhBojj+PnUGkuWsVpAofRyZGupbHyFqnDA llfQKZDS4bGIKSBeCvh7xyL7JVEp58avbry5b+t3Eq2GY2fUohgpPj/8sTg6N8oR KNA7J3mraVI3t20JFVbT7uLuqeZc6HNhN3E6CGNzK0z/rGp/Va8lUX7KjhrLpEQB Z35zIe1sx/blJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:45 2025 by rpki-client