This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json) Hash identifier: ogIqrALfSIBRjI7VTxvvup8P2GrQsrMvnaq+X1VdT0s= Subject key identifier: 27:03:FF:C8:C1:8B:17:6E:35:62:9C:3A:82:2F:48:55:00:DA:97:C5 Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Certificate serial: 019B5A884EF613C2A667E24B1C451FC44DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft Manifest number: 06B3 Signing time: Fri 26 Dec 2025 12:00:40 +0000 Manifest this update: Fri 26 Dec 2025 12:00:40 +0000 Manifest next update: Sat 27 Dec 2025 12:00:40 +0000 Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: qENrsuZJz6E8XwQEoH5zM5jS5k4VYI02X1bwg+Q4ECs=) 2: VQ7JeV_tskjfpRVdsrs1v5YKkSU.roa (hash: 1PjRctB0b2K579QXFToCUIlrjVAB3uaRehTo7Exp26c=) 3: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:4e:f6:13:c2:a6:67:e2:4b:1c:45:1f:c4:4d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Validity Not Before: Dec 26 12:00:40 2025 GMT Not After : Dec 27 12:00:40 2025 GMT Subject: CN=2703ffc8c18b176e35629c3a822f485500da97c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:56:bb:e5:cd:79:77:34:c0:9e:e3:c4:1e: 84:f0:70:4b:b3:32:ee:a5:bc:5a:cc:87:2a:b8:31: e7:eb:d0:21:62:67:36:af:d4:af:8f:89:bc:ca:c1: e5:fe:9f:f9:33:5e:45:ee:a8:82:45:70:6f:9f:13: 59:e3:8b:ea:83:89:fe:e9:cb:e3:d5:8f:e9:26:ca: cf:46:46:16:4d:33:eb:17:ba:3a:2f:2f:1f:6f:d1: 0f:50:6e:0e:e5:51:a4:83:48:f2:0b:56:c3:d5:da: cb:ce:31:dd:94:9b:c0:4e:76:47:68:9e:6a:4b:b7: 7f:8c:9d:61:4c:85:37:57:01:a7:50:7d:d5:c0:8c: 64:eb:7a:90:fb:5a:d3:89:df:28:66:d2:a3:33:6a: 21:16:8f:98:9c:19:ff:db:c6:06:d9:86:e2:e4:99: 73:55:e1:af:5b:dd:f6:66:52:53:91:1c:83:4c:6b: a2:30:ac:42:28:cf:56:f2:cb:69:dd:73:fd:d4:c2: 41:1b:01:72:89:1f:77:65:ea:0e:fc:b3:8b:d7:a0: b8:fd:d0:00:fd:ef:b0:89:f0:48:0b:6d:02:7d:5e: a8:70:b8:76:ce:9c:58:28:39:17:b6:58:e5:7e:9d: 82:cf:fd:2d:f3:40:89:76:d1:a7:1c:f1:50:a9:7b: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:FF:C8:C1:8B:17:6E:35:62:9C:3A:82:2F:48:55:00:DA:97:C5 X509v3 Authority Key Identifier: keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2f:95:71:0e:0a:d2:de:26:1d:ed:35:ab:90:ef:38:47:b5: 36:42:f5:2a:84:3b:ac:95:9a:d3:4e:e4:3c:86:fe:87:d8:50: 45:54:f6:b5:b6:57:96:e0:7f:54:06:16:11:1c:14:0a:b5:b2: ea:af:fe:55:98:5b:6b:c7:e3:fc:d1:bd:2a:35:e1:c8:04:3c: 82:ec:29:23:3d:0e:17:48:26:eb:63:d6:8c:be:00:a8:6c:4f: 46:90:d6:70:43:ce:dc:e9:3d:ae:9a:2f:27:76:f9:a0:50:84: 90:00:48:b1:d0:07:7c:6b:c2:dd:8f:86:56:33:5b:b0:c3:19: d2:23:79:dc:21:80:77:4b:58:a2:8c:2c:60:ea:9d:77:b7:f5: 3c:1b:79:46:7d:74:7d:34:11:9f:a4:38:43:43:e3:5c:97:2d: 53:44:4d:57:36:60:ef:19:df:ce:46:7b:6e:2b:8a:ff:77:43: a9:b1:34:4a:8e:e1:38:aa:be:1e:64:67:2e:da:10:9c:37:cf: c5:a3:77:d6:21:7e:ed:24:66:62:21:fc:97:73:58:26:2b:62: 49:f6:cb:ad:66:df:10:d5:83:f6:49:5b:43:fe:c5:6b:b2:b6: af:cf:18:03:b8:b0:ed:ca:5e:a5:d9:34:84:43:51:49:cc:96: aa:cc:71:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiE72E8KmZ+JLHEUfxE3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy MGM0ODUwHhcNMjUxMjI2MTIwMDQwWhcNMjUxMjI3MTIwMDQwWjAzMTEwLwYDVQQD EygyNzAzZmZjOGMxOGIxNzZlMzU2MjljM2E4MjJmNDg1NTAwZGE5N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMBWu+XNeXc0wJ7jxB6E8HBLszLu pbxazIcquDHn69AhYmc2r9Svj4m8ysHl/p/5M15F7qiCRXBvnxNZ44vqg4n+6cvj 1Y/pJsrPRkYWTTPrF7o6Ly8fb9EPUG4O5VGkg0jyC1bD1drLzjHdlJvATnZHaJ5q S7d/jJ1hTIU3VwGnUH3VwIxk63qQ+1rTid8oZtKjM2ohFo+YnBn/28YG2Ybi5Jlz VeGvW932ZlJTkRyDTGuiMKxCKM9W8stp3XP91MJBGwFyiR93ZeoO/LOL16C4/dAA /e+wifBIC20CfV6ocLh2zpxYKDkXtljlfp2Cz/0t80CJdtGnHPFQqXv2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcD/8jBixduNWKcOoIvSFUA2pfFMB8GA1UdIwQY MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy+VcQ4K 0t4mHe01q5DvOEe1NkL1KoQ7rJWa007kPIb+h9hQRVT2tbZXluB/VAYWERwUCrWy 6q/+VZhba8fj/NG9KjXhyAQ8guwpIz0OF0gm62PWjL4AqGxPRpDWcEPO3Ok9rpov J3b5oFCEkABIsdAHfGvC3Y+GVjNbsMMZ0iN53CGAd0tYoowsYOqdd7f1PBt5Rn10 fTQRn6Q4Q0PjXJctU0RNVzZg7xnfzkZ7biuK/3dDqbE0So7hOKq+HmRnLtoQnDfP xaN31iF+7SRmYiH8l3NYJitiSfbLrWbfENWD9klbQ/7Fa7K2r88YA7iw7cpepdk0 hENRScyWqsxxPw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:58 2025 by rpki-client