This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json) Hash identifier: 9dM2pmCrEPLiuGeSY3MbkMFWwjmkdIKlrVuRbQ6YLZI= Subject key identifier: A3:77:CB:EB:89:D8:9A:16:99:CB:2B:86:29:6A:D9:48:8E:05:1D:71 Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1 Certificate serial: 019B07B561E6C7257BD12C0A7BD212E307DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 10:01:26 +0000 Manifest this update: Wed 10 Dec 2025 10:01:26 +0000 Manifest next update: Thu 11 Dec 2025 10:01:26 +0000 Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: JVMEZykSy4ibYgsj6XIzHzwIJmMENPCAl0zsj7uNC0k=) 2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:61:e6:c7:25:7b:d1:2c:0a:7b:d2:12:e3:07:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1 Validity Not Before: Dec 10 10:01:26 2025 GMT Not After : Dec 11 10:01:26 2025 GMT Subject: CN=a377cbeb89d89a1699cb2b86296ad9488e051d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:0e:75:cf:85:0c:9a:eb:fa:f9:aa:ef:e6: f0:92:45:49:a3:ec:d9:7a:30:f8:da:76:f1:8c:1b: c3:d0:77:ee:ec:22:37:12:19:46:6a:cc:8d:2c:85: 98:cf:59:f2:86:24:f0:76:5e:40:b4:e6:8f:f8:c3: 79:f3:ef:78:b8:69:a5:cc:91:f5:65:f8:1c:c5:82: 49:91:3d:69:0f:f7:93:43:f8:f2:a1:43:c8:49:cd: 43:f4:3e:a3:8a:cd:b2:ed:7d:17:6b:b0:13:19:49: a6:48:2b:93:df:73:1f:b7:2d:89:cb:fa:e3:93:dc: 91:cc:0d:0e:43:bc:4f:9d:10:23:74:a6:35:f2:35: 1b:31:d1:ee:14:d3:ea:77:3b:c9:d8:84:ff:95:73: 16:c4:a0:b7:67:57:0a:c6:5c:41:44:6b:70:42:13: b4:e5:31:9a:33:92:81:44:c1:90:44:8e:a4:e7:ad: 57:e4:7a:09:19:fd:b7:c9:b4:f9:51:62:79:8f:89: c0:b5:f5:38:8e:ca:b0:6a:01:9f:82:c1:45:3a:77: 49:1a:23:63:6e:ad:63:4a:f1:48:f1:84:cf:fd:e7: 27:92:72:43:1b:03:a7:d2:27:80:61:ab:89:77:10: 7c:be:98:37:89:c1:5c:dc:c4:51:1d:d1:d6:f7:c5: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:77:CB:EB:89:D8:9A:16:99:CB:2B:86:29:6A:D9:48:8E:05:1D:71 X509v3 Authority Key Identifier: keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:19:1d:47:87:86:dd:78:79:3b:d7:86:ed:a4:7f:f5:a1:59: 12:ff:bf:87:9d:29:bf:99:62:b6:3e:f6:d0:94:15:31:70:2c: bc:4e:1c:d0:de:df:82:fe:c0:e6:2b:03:b8:60:d8:81:7b:cc: 0b:3c:e3:62:81:f6:fc:90:19:ad:a4:ae:b7:df:33:4e:ac:8a: 24:19:65:99:a1:89:60:d1:3e:b7:54:59:79:e7:85:76:dc:3b: 69:74:96:39:1d:90:3c:9b:fe:4f:65:7f:eb:49:57:5f:3e:cb: f8:53:06:1a:02:6f:a7:90:f0:9e:53:bc:eb:eb:85:d7:06:70: 9e:1e:22:2c:db:aa:20:52:43:a6:28:f3:28:fd:9a:83:ef:96: 85:e9:91:9f:f7:25:9a:8b:c3:64:ee:f8:aa:ab:13:cd:ca:c2: b3:4f:e3:1f:48:30:13:11:84:40:59:4f:95:a8:46:ac:fd:ac: 8e:b7:2d:a1:31:10:e0:90:e1:ab:dc:f3:a0:6b:6e:07:70:0e: 94:ae:a1:36:b6:0f:5c:84:5e:c6:0f:70:a4:7a:06:df:33:fb: 7d:85:20:7e:27:90:f1:71:45:8b:ba:a1:97:08:b2:7b:46:25: 4a:ab:b0:6e:bd:83:6a:46:aa:35:88:44:ad:10:e1:68:2e:29: 23:51:d2:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtWHmxyV70SwKe9IS4wfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2 N2EwYzEwHhcNMjUxMjEwMTAwMTI2WhcNMjUxMjExMTAwMTI2WjAzMTEwLwYDVQQD EyhhMzc3Y2JlYjg5ZDg5YTE2OTljYjJiODYyOTZhZDk0ODhlMDUxZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzYOdc+FDJrr+vmq7+bwkkVJo+zZ ejD42nbxjBvD0Hfu7CI3EhlGasyNLIWYz1nyhiTwdl5AtOaP+MN58+94uGmlzJH1 ZfgcxYJJkT1pD/eTQ/jyoUPISc1D9D6jis2y7X0Xa7ATGUmmSCuT33Mfty2Jy/rj k9yRzA0OQ7xPnRAjdKY18jUbMdHuFNPqdzvJ2IT/lXMWxKC3Z1cKxlxBRGtwQhO0 5TGaM5KBRMGQRI6k561X5HoJGf23ybT5UWJ5j4nAtfU4jsqwagGfgsFFOndJGiNj bq1jSvFI8YTP/ecnknJDGwOn0ieAYauJdxB8vpg3icFc3MRRHdHW98XN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN3y+uJ2JoWmcsrhilq2UiOBR1xMB8GA1UdIwQY MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt Mjc2NDdiY2VmNGIwLzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohkdR4eG 3Xh5O9eG7aR/9aFZEv+/h50pv5litj720JQVMXAsvE4c0N7fgv7A5isDuGDYgXvM CzzjYoH2/JAZraSut98zTqyKJBllmaGJYNE+t1RZeeeFdtw7aXSWOR2QPJv+T2V/ 60lXXz7L+FMGGgJvp5DwnlO86+uF1wZwnh4iLNuqIFJDpijzKP2ag++WhemRn/cl movDZO74qqsTzcrCs0/jH0gwExGEQFlPlahGrP2sjrctoTEQ4JDhq9zzoGtuB3AO lK6hNrYPXIRexg9wpHoG3zP7fYUgfieQ8XFFi7qhlwiye0YlSquwbr2DakaqNYhE rRDhaC4pI1HSQw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:45:46 2025 by rpki-client