This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json) Hash identifier: wZKnsdiLlTMwRQm/CcGE5RKPAVK2sbr7EJlmnOOl3pE= Subject key identifier: F8:87:A3:23:15:52:CE:83:29:71:0A:65:E3:4E:D6:C7:06:17:3D:EB Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4 Certificate serial: 019AFA30A8688CA87AFED56EFA396A0DB442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft Manifest number: 0EA9 Signing time: Sun 07 Dec 2025 19:01:24 +0000 Manifest this update: Sun 07 Dec 2025 19:01:24 +0000 Manifest next update: Mon 08 Dec 2025 19:01:24 +0000 Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: fBZLbTPveHFZbbzq0ZCrlHSbd3lEnvl86V8Jc6uE0K0=) 2: KtlV2YYAuDvLLDrwvVONKNyr5wE.roa (hash: X0ZKW+Jh+LXjVGRNpAiX4HmMGVTvfeCbPgs0XOICV8s=) 3: SRivJZ3NfmTceYbb0X0qedoYDkw.roa (hash: +54ZwqGRotzytN67kFR0epWImuzogdtQhuQ9BjiZR4M=) 4: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:30:a8:68:8c:a8:7a:fe:d5:6e:fa:39:6a:0d:b4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4 Validity Not Before: Dec 7 19:01:24 2025 GMT Not After : Dec 8 19:01:24 2025 GMT Subject: CN=f887a3231552ce8329710a65e34ed6c706173deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:35:6e:52:fe:81:c4:fc:80:9c:31:e5:b6: 02:33:74:33:00:4e:e9:0f:7f:3f:39:2b:9d:2f:df: 09:ac:44:52:23:de:62:00:06:78:62:07:35:90:87: 9b:d6:b3:fc:a0:25:c9:d4:cf:a1:3a:94:8f:07:f0: 98:08:12:de:05:0d:ee:f3:c1:53:d0:c9:2a:0e:d3: 97:18:86:f4:cc:69:90:41:30:11:1a:bf:d8:71:f9: e5:95:54:b6:82:72:e4:ec:95:b1:8e:32:17:aa:26: 12:ea:ba:c1:52:f8:52:6b:d6:43:d8:9d:7b:d3:e0: b5:59:59:26:7a:3f:f4:d8:3c:55:46:e9:85:26:f0: b5:07:02:f8:54:37:0a:93:d9:b1:78:76:e0:b8:0b: 41:0f:00:4b:5e:02:de:aa:a7:4e:d1:e7:5c:d7:c5: 2d:16:9a:ae:49:2c:a5:cd:b8:22:e1:dd:1f:5f:ad: cc:e3:ee:68:ec:98:5e:eb:3f:f9:a7:c5:d4:ac:fc: 32:5c:86:76:b0:86:3a:8f:bc:86:6a:b1:44:e5:39: 9c:cd:e7:d6:ae:69:26:6c:a8:9f:d2:eb:df:1d:bc: fc:3c:f2:f5:38:9d:61:de:26:7c:07:ca:94:21:b7: 19:b6:58:de:66:f4:63:bc:6b:05:91:89:3c:11:45: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:A3:23:15:52:CE:83:29:71:0A:65:E3:4E:D6:C7:06:17:3D:EB X509v3 Authority Key Identifier: keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:06:b3:ac:3f:12:da:97:1f:95:6b:cd:30:f9:e4:32:87:83: 4b:00:e4:37:92:2d:fe:d7:80:69:c8:5d:27:43:d1:56:48:9d: 37:34:60:54:e9:ff:18:c8:b6:64:76:64:83:ad:8b:5f:81:2d: 94:50:59:ca:99:6b:5d:c3:22:8c:7b:49:3d:74:06:ca:1e:9c: 6c:6b:71:37:ee:07:e8:f5:b1:61:06:0d:48:24:d9:81:1f:8a: 82:75:01:98:40:64:b9:b1:89:a2:9b:a3:8a:58:fe:e2:69:10: af:e2:a9:cf:b4:e1:50:04:ab:ee:38:18:45:3c:4a:ee:6b:41: 9c:d5:96:c4:2e:94:69:ad:e5:3d:a7:5e:17:69:b1:48:ec:c1: ac:6b:67:ec:f3:ce:1f:f4:89:ae:b7:a0:7c:9d:a6:99:22:55: 90:03:de:92:04:c9:fc:be:1b:80:36:b3:1d:72:ea:ef:15:ff: 8c:0a:88:6b:33:63:ce:8e:21:97:4f:b9:47:48:2a:95:ef:a6: aa:e6:c9:de:16:2d:8c:46:50:ec:84:f6:79:07:45:3b:9b:a0: fa:be:94:48:5a:e9:4a:ed:69:ea:ab:b5:bb:5b:da:d4:c9:dd: 6d:6a:bb:e3:56:90:64:13:8d:bd:4b:65:50:54:99:a0:3c:c9: 70:c4:39:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6MKhojKh6/tVu+jlqDbRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw MGM5YTQwHhcNMjUxMjA3MTkwMTI0WhcNMjUxMjA4MTkwMTI0WjAzMTEwLwYDVQQD EyhmODg3YTMyMzE1NTJjZTgzMjk3MTBhNjVlMzRlZDZjNzA2MTczZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhU1blL+gcT8gJwx5bYCM3QzAE7p D38/OSudL98JrERSI95iAAZ4Ygc1kIeb1rP8oCXJ1M+hOpSPB/CYCBLeBQ3u88FT 0MkqDtOXGIb0zGmQQTARGr/YcfnllVS2gnLk7JWxjjIXqiYS6rrBUvhSa9ZD2J17 0+C1WVkmej/02DxVRumFJvC1BwL4VDcKk9mxeHbguAtBDwBLXgLeqqdO0edc18Ut FpquSSylzbgi4d0fX63M4+5o7Jhe6z/5p8XUrPwyXIZ2sIY6j7yGarFE5TmczefW rmkmbKif0uvfHbz8PPL1OJ1h3iZ8B8qUIbcZtljeZvRjvGsFkYk8EUXPUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiHoyMVUs6DKXEKZeNO1scGFz3rMB8GA1UdIwQY MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt MTVmYzBiNjhmODQ0LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0 LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAazrD8S 2pcflWvNMPnkMoeDSwDkN5It/teAachdJ0PRVkidNzRgVOn/GMi2ZHZkg62LX4Et lFBZyplrXcMijHtJPXQGyh6cbGtxN+4H6PWxYQYNSCTZgR+KgnUBmEBkubGJopuj ilj+4mkQr+Kpz7ThUASr7jgYRTxK7mtBnNWWxC6Uaa3lPadeF2mxSOzBrGtn7PPO H/SJrregfJ2mmSJVkAPekgTJ/L4bgDazHXLq7xX/jAqIazNjzo4hl0+5R0gqle+m qubJ3hYtjEZQ7IT2eQdFO5ug+r6USFrpSu1p6qu1u1va1MndbWq741aQZBONvUtl UFSZoDzJcMQ5yw== -----END CERTIFICATE-----Generated at Mon Dec 8 05:02:44 2025 by rpki-client