This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json) Hash identifier: 6rH+FIJYDfeaSc3Vs2xJibyjBgEMghcTXIx6xQBWwU4= Subject key identifier: 2D:23:1D:F3:27:E7:E3:B0:0B:D2:44:CC:52:11:48:74:2D:C5:59:B2 Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d Certificate serial: 019AF653C4E22E3757507C58CA367C296CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 01:01:16 +0000 Manifest this update: Sun 07 Dec 2025 01:01:16 +0000 Manifest next update: Mon 08 Dec 2025 01:01:16 +0000 Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: 62YV2gch++Z2u99Zhspuq5FlrPlm6FYhpFlbmoUoaLw=) 2: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (hash: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=) 3: aqOGkykY9Ju12UAZyyt6XVgtms4.roa (hash: E4BJpz+NX3TX7uydvegd/qgoqkfPLAjjVrCasy2lcGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:c4:e2:2e:37:57:50:7c:58:ca:36:7c:29:6c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d Validity Not Before: Dec 7 01:01:16 2025 GMT Not After : Dec 8 01:01:16 2025 GMT Subject: CN=2d231df327e7e3b00bd244cc521148742dc559b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:92:aa:06:f1:50:dc:54:a7:d7:40:c4:cc: 74:89:f7:56:b1:84:29:f3:5e:e0:2c:30:84:de:35: fa:10:73:ae:74:ba:b3:b5:a3:bf:96:36:5c:b2:a3: 02:c7:e7:2a:2b:61:69:57:7f:63:8e:a4:76:07:d1: a9:38:de:32:f9:1a:a8:06:7a:9d:76:df:ea:71:95: bc:85:33:f2:66:bd:d3:14:cc:40:e6:7c:aa:b5:c7: e1:e0:c1:1e:0e:ac:65:35:9a:75:55:dc:9b:1c:33: 48:9e:41:92:ce:14:0e:47:23:71:03:d1:0f:32:92: 5b:b1:52:c2:53:a1:4e:bb:91:75:a8:61:5f:ed:b0: 57:ea:03:55:c4:60:32:f7:e6:bf:3a:a5:96:df:6e: 00:cf:e4:6f:d5:8a:84:ee:74:74:0c:65:b9:53:bd: f7:c7:06:19:77:86:dd:c5:c0:b2:a8:71:17:22:a7: 74:a4:c0:34:79:10:60:a5:6a:15:52:99:4b:45:ae: fa:8a:e5:d2:da:5a:06:a2:8e:f6:e4:1b:c6:c7:b6: 8a:4d:8f:43:b3:9a:ee:3f:d0:5b:90:f8:91:98:78: ba:0a:66:72:7b:49:0c:3e:05:51:16:20:4d:7e:57: ff:4c:72:64:9f:ba:fe:15:b5:a6:6d:20:b1:df:6d: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:1D:F3:27:E7:E3:B0:0B:D2:44:CC:52:11:48:74:2D:C5:59:B2 X509v3 Authority Key Identifier: keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bc:ad:d8:98:ed:2f:fe:cc:7c:45:44:b4:2c:97:66:d0:47: 0c:88:96:f4:1f:57:54:79:25:92:79:b8:bd:2e:ea:43:7f:c6: 58:0a:49:c3:57:6d:7d:ea:d8:4b:0e:03:79:31:f0:c4:a2:71: b6:c3:72:cc:8a:78:ee:d1:2d:98:be:e9:2b:a6:69:a2:e0:43: 8d:d4:9a:8a:89:e0:67:c2:44:a6:83:f0:1e:9e:7e:ee:aa:f6: 2d:ce:8d:95:98:68:ec:f0:c8:49:12:81:01:40:3f:1a:74:45: 1e:ea:20:b8:e4:b1:c1:1f:f9:29:2a:bf:29:8c:09:81:e3:bd: 90:67:99:1e:cd:58:7a:8f:a0:33:4b:f1:65:4b:91:71:64:ed: 18:33:af:d8:48:5c:c3:00:52:8b:83:c9:51:9c:d7:b7:bb:11: f9:13:23:a3:00:34:19:d5:ef:15:82:50:8a:80:40:52:4a:63: 3e:31:b8:6e:00:30:dd:d1:62:4d:57:d8:f7:35:36:ff:9a:9b: cb:61:8b:a2:ac:63:90:af:9b:e4:8c:8f:3d:ad:80:4a:86:2a: 01:41:57:82:b0:9e:f8:e3:09:e2:c8:50:43:f5:f4:a3:e1:8c: 76:81:d3:ed:6d:1b:2f:7f:3b:33:2a:62:d6:8e:b7:b7:9e:3f: 2d:3b:8e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U8TiLjdXUHxYyjZ8KWzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky ZDc5M2QwHhcNMjUxMjA3MDEwMTE2WhcNMjUxMjA4MDEwMTE2WjAzMTEwLwYDVQQD EygyZDIzMWRmMzI3ZTdlM2IwMGJkMjQ0Y2M1MjExNDg3NDJkYzU1OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5eSqgbxUNxUp9dAxMx0ifdWsYQp 817gLDCE3jX6EHOudLqztaO/ljZcsqMCx+cqK2FpV39jjqR2B9GpON4y+RqoBnqd dt/qcZW8hTPyZr3TFMxA5nyqtcfh4MEeDqxlNZp1VdybHDNInkGSzhQORyNxA9EP MpJbsVLCU6FOu5F1qGFf7bBX6gNVxGAy9+a/OqWW324Az+Rv1YqE7nR0DGW5U733 xwYZd4bdxcCyqHEXIqd0pMA0eRBgpWoVUplLRa76iuXS2loGoo725BvGx7aKTY9D s5ruP9BbkPiRmHi6CmZye0kMPgVRFiBNflf/THJkn7r+FbWmbSCx323a3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0jHfMn5+OwC9JEzFIRSHQtxVmyMB8GA1UdIwQY MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt NGM3NGQzMzJlYTU4LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4 LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKryt2Jjt L/7MfEVEtCyXZtBHDIiW9B9XVHklknm4vS7qQ3/GWApJw1dtferYSw4DeTHwxKJx tsNyzIp47tEtmL7pK6ZpouBDjdSaiongZ8JEpoPwHp5+7qr2Lc6NlZho7PDISRKB AUA/GnRFHuoguOSxwR/5KSq/KYwJgeO9kGeZHs1Yeo+gM0vxZUuRcWTtGDOv2Ehc wwBSi4PJUZzXt7sR+RMjowA0GdXvFYJQioBAUkpjPjG4bgAw3dFiTVfY9zU2/5qb y2GLoqxjkK+b5IyPPa2ASoYqAUFXgrCe+OMJ4shQQ/X0o+GMdoHT7W0bL387Mypi 1o63t54/LTuOIg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:44 2025 by rpki-client