This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: FcKyEscZLOQ8YLDyOhcQ/0eqA6NPsrQg/cKqzM2PrJA= Subject key identifier: 08:A4:A7:97:74:6A:01:84:F4:BE:18:28:2A:F1:74:41:53:09:7E:5B Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B1A5FF51F52EF4A1B36DFB06D155EA0A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 062B Signing time: Sun 14 Dec 2025 01:00:54 +0000 Manifest this update: Sun 14 Dec 2025 01:00:54 +0000 Manifest next update: Mon 15 Dec 2025 01:00:54 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: HY5ViTh/Kxsn7di3BYL4/1nqc9Fu7D48KJDcVO1FHhw=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: 4CZL39u6EkvmfRWfrvmQhA9Ubpg.roa (hash: 7KT8zX1ut3NI1KMa06d5NbNTRIbK0mONunluRgrTKdc=) 4: 56KKt4BpkIwEHMFmq2QXksA-2io.roa (hash: 54GcazY6u68JnZUu56e7FZCBJWXeMImZQ8ihkRRuFTc=) 5: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 6: EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa (hash: Ju4zKmRJh/EbFKeLrhI6L7JYjbJ+gosDVEmrn3gTxds=) 7: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 8: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 9: hfy8wKzZ1lOnw8rRIAp89k1HBQg.roa (hash: w/O4MPtS75N0zJ8yWXd9FMAgNBIXsYLEr12sXp5bZHk=) 10: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 11: lWNGZyoYxMMDcNyLWjAJGitLlFk.roa (hash: 6BoUCdn7LLlUMhRVmjkftBgzwA47YP9UtF03OcYu1VA=) 12: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 13: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 14: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 15: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 16: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:f5:1f:52:ef:4a:1b:36:df:b0:6d:15:5e:a0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Dec 14 01:00:54 2025 GMT Not After : Dec 15 01:00:54 2025 GMT Subject: CN=08a4a797746a0184f4be18282af1744153097e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:5e:f4:12:e4:3b:f7:9b:d4:6a:41:c8:a6: 56:12:77:51:3c:cf:be:89:0e:47:fd:84:82:6a:e3: 86:ab:0f:12:22:88:5a:3b:88:59:5f:f1:6e:57:45: b5:94:3a:e2:74:23:8f:a8:33:a2:ce:c1:92:ce:b3: f9:08:38:83:15:e9:35:41:82:b3:3a:1f:b9:d8:69: cd:92:0c:d8:ac:96:3d:7e:db:4d:42:78:1f:ba:6f: 42:07:f5:0d:a7:36:79:5d:d6:dd:34:6d:61:4e:13: ec:57:7f:15:89:d7:43:88:d8:2c:5b:0a:06:82:28: 17:87:c1:0e:69:1d:ef:14:52:be:9e:7c:7d:95:0e: f3:c9:c6:c9:49:7e:bc:fd:91:9d:57:23:54:23:04: 6d:73:c8:60:4d:cc:1a:a1:db:ce:f6:b3:a1:f6:3a: bb:80:3d:d4:29:ac:47:33:4d:32:aa:8d:23:5c:01: d1:eb:6e:d2:3a:8a:1f:f7:f7:c1:6c:c2:94:aa:ca: f1:e9:c3:6d:47:3f:ba:64:ea:fb:6a:5e:04:a2:50: f6:d5:08:ed:57:66:8c:56:83:6e:9b:b8:67:4a:99: c0:cb:45:a3:7b:b4:1d:bb:75:64:09:c0:db:97:9f: db:04:81:a0:f7:41:04:ad:33:94:ad:ce:65:09:25: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:A7:97:74:6A:01:84:F4:BE:18:28:2A:F1:74:41:53:09:7E:5B X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ed:6b:ff:52:41:07:09:3e:62:e0:f0:77:d0:a5:28:25:e4: 86:6d:25:86:2b:ea:fb:61:39:d4:d6:6d:eb:c3:da:2c:3e:f7: 2d:a5:6c:d7:22:d2:4c:28:d1:41:fe:5d:0b:dc:9d:88:af:55: b8:d7:44:2e:f6:6a:75:01:fc:16:17:0a:17:2e:a5:e0:5c:0a: 3f:b2:7d:06:d5:cb:a0:cc:19:48:4e:1e:ee:78:92:fb:44:a2: 12:fb:ec:33:56:c6:56:e9:4e:05:be:0f:53:0c:e3:c9:fc:05: 0f:83:cb:a6:8b:a6:f9:6c:a6:bf:4c:e3:f7:28:99:95:b0:2d: 0f:11:90:c2:a2:23:64:90:8f:5f:2a:a7:f2:ef:3f:e9:d4:64: 34:a1:5e:22:95:49:71:52:7a:2b:13:fb:92:19:ba:a6:6d:49: d5:4f:e8:1f:84:73:a4:2e:9b:ec:f3:6d:94:52:83:4d:b5:46: 15:38:d9:92:a1:ea:da:19:54:c0:3a:f6:72:c4:b5:cf:8d:16: c8:22:58:23:66:4d:fc:90:03:c7:45:ed:a4:e1:2f:cb:88:1d: f8:88:ee:1d:eb:77:14:34:f1:0b:45:7f:15:06:1d:fc:0a:b0: 91:8b:cf:f9:0f:f0:6f:9a:1e:f5:62:28:70:56:7a:0a:1f:aa: 94:d7:a9:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX/UfUu9KGzbfsG0VXqCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMjE0MDEwMDU0WhcNMjUxMjE1MDEwMDU0WjAzMTEwLwYDVQQD EygwOGE0YTc5Nzc0NmEwMTg0ZjRiZTE4MjgyYWYxNzQ0MTUzMDk3ZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Je9BLkO/eb1GpByKZWEndRPM++ iQ5H/YSCauOGqw8SIohaO4hZX/FuV0W1lDridCOPqDOizsGSzrP5CDiDFek1QYKz Oh+52GnNkgzYrJY9fttNQngfum9CB/UNpzZ5XdbdNG1hThPsV38ViddDiNgsWwoG gigXh8EOaR3vFFK+nnx9lQ7zycbJSX68/ZGdVyNUIwRtc8hgTcwaodvO9rOh9jq7 gD3UKaxHM00yqo0jXAHR627SOoof9/fBbMKUqsrx6cNtRz+6ZOr7al4EolD21Qjt V2aMVoNum7hnSpnAy0Wje7Qdu3VkCcDbl5/bBIGg90EErTOUrc5lCSXOgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAikp5d0agGE9L4YKCrxdEFTCX5bMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbe1r/1JB Bwk+YuDwd9ClKCXkhm0lhivq+2E51NZt68PaLD73LaVs1yLSTCjRQf5dC9ydiK9V uNdELvZqdQH8FhcKFy6l4FwKP7J9BtXLoMwZSE4e7niS+0SiEvvsM1bGVulOBb4P UwzjyfwFD4PLpoum+Wymv0zj9yiZlbAtDxGQwqIjZJCPXyqn8u8/6dRkNKFeIpVJ cVJ6KxP7khm6pm1J1U/oH4RzpC6b7PNtlFKDTbVGFTjZkqHq2hlUwDr2csS1z40W yCJYI2ZN/JADx0XtpOEvy4gd+IjuHet3FDTxC0V/FQYd/AqwkYvP+Q/wb5oe9WIo cFZ6Ch+qlNep2A== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:37 2025 by rpki-client