This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json) Hash identifier: O7PXdonWBwfLZsj50KuYz6cHcroKM/CaYs7eu5m6qxg= Subject key identifier: 33:B1:10:C3:3C:93:B6:20:F3:B2:D7:FE:A9:CE:ED:6B:8B:52:14:E8 Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21 Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21 Certificate serial: 019B33B21E8B6E0501F9B0C9F083CC4FC271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 23:01:09 +0000 Manifest this update: Thu 18 Dec 2025 23:01:09 +0000 Manifest next update: Fri 19 Dec 2025 23:01:09 +0000 Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: Pik4w5zCzpPWWsLvcIcosGJq7lgevU3KKt80zd2J7W0=) 2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=) 3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:1e:8b:6e:05:01:f9:b0:c9:f0:83:cc:4f:c2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21 Validity Not Before: Dec 18 23:01:09 2025 GMT Not After : Dec 19 23:01:09 2025 GMT Subject: CN=33b110c33c93b620f3b2d7fea9ceed6b8b5214e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:53:3a:cd:92:12:bf:a5:9f:ff:a9:6f:75: 75:4d:ec:46:48:d1:d1:9c:da:f6:4d:e3:93:c2:74: 67:4d:3e:ed:16:c3:cc:31:bb:21:bd:ff:64:65:39: 2c:92:b3:8a:b7:ad:d2:5d:9c:1e:d7:a4:47:75:ea: d2:ea:fb:16:81:1b:3a:7c:b6:55:5d:74:31:25:26: a7:5c:1c:e4:46:2f:a2:ce:34:fc:9b:73:82:0a:61: a2:65:66:1f:73:6a:04:ea:77:78:27:26:33:c9:2b: d1:3e:0a:cf:0d:b9:fb:ea:e0:e7:1c:f5:5a:fd:48: d7:ef:3c:cc:ee:cd:9a:06:79:31:50:49:0c:93:fe: da:da:7c:76:4d:5b:e9:54:a6:e1:90:29:5b:ce:0e: 47:11:36:af:89:82:b8:3b:71:b1:a1:c2:3f:74:20: 37:21:ac:ce:60:30:63:47:dc:ad:a2:26:a2:3f:12: a2:5b:6a:f0:dc:24:cd:cb:4c:c8:82:b4:0e:22:a4: ea:af:98:75:ff:01:c4:28:f9:1b:0f:12:ec:4c:cc: 36:11:1d:a8:fc:dd:25:12:60:f6:03:36:b7:11:b4: 2c:9d:bb:3a:9b:f7:fd:28:f8:35:e4:41:b2:a4:38: ed:05:ef:29:54:21:62:b5:ba:f3:f6:58:28:f8:cf: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B1:10:C3:3C:93:B6:20:F3:B2:D7:FE:A9:CE:ED:6B:8B:52:14:E8 X509v3 Authority Key Identifier: keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2c:62:54:22:92:6c:d4:f7:ae:88:a3:84:88:b7:f7:2e:14: 3d:e7:e9:45:32:d0:b3:67:2e:d7:ac:84:54:49:b6:78:6d:bf: 75:8c:97:f1:cb:ac:43:b8:89:bc:d8:db:d4:2e:fa:b4:49:c3: be:e4:79:b3:37:0a:e6:4d:2d:de:09:2f:fe:9f:d7:8b:de:a9: 28:3f:1a:9e:e2:51:77:8e:d8:4c:06:57:5d:5f:b0:01:64:37: 1e:e9:22:71:a1:27:05:82:9f:33:64:72:08:1b:af:8b:8f:50: ba:fe:4c:10:f5:24:19:33:b3:a3:c5:f5:7b:7a:b7:c2:11:68: 14:bc:7c:c6:e7:a8:79:a5:70:8e:05:9a:f6:1b:88:e5:f1:48: 99:04:28:01:63:70:04:c6:fb:91:93:df:0e:73:da:65:8d:0b: 9f:c8:ab:42:65:a0:7a:96:39:3e:2e:2d:7c:aa:cc:e5:ec:d8: b9:57:bb:14:4b:f0:60:e9:b6:3b:a4:26:e6:c4:d3:b2:dd:b0: 36:5f:de:7d:c6:d7:91:cf:6f:95:37:6c:9d:6c:24:63:2f:9e: 63:df:7c:ec:24:b3:d8:d1:6e:e1:90:41:82:c5:ce:ce:08:4d: ff:57:fc:d8:28:1e:0c:36:b2:c2:b0:02:7a:75:ef:77:58:69: dc:0f:ec:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsh6LbgUB+bDJ8IPMT8JxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm NjFhMjEwHhcNMjUxMjE4MjMwMTA5WhcNMjUxMjE5MjMwMTA5WjAzMTEwLwYDVQQD EygzM2IxMTBjMzNjOTNiNjIwZjNiMmQ3ZmVhOWNlZWQ2YjhiNTIxNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7NTOs2SEr+ln/+pb3V1TexGSNHR nNr2TeOTwnRnTT7tFsPMMbshvf9kZTkskrOKt63SXZwe16RHderS6vsWgRs6fLZV XXQxJSanXBzkRi+izjT8m3OCCmGiZWYfc2oE6nd4JyYzySvRPgrPDbn76uDnHPVa /UjX7zzM7s2aBnkxUEkMk/7a2nx2TVvpVKbhkClbzg5HETaviYK4O3GxocI/dCA3 IazOYDBjR9ytoiaiPxKiW2rw3CTNy0zIgrQOIqTqr5h1/wHEKPkbDxLsTMw2ER2o /N0lEmD2Aza3EbQsnbs6m/f9KPg15EGypDjtBe8pVCFitbrz9lgo+M94sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOxEMM8k7Yg87LX/qnO7WuLUhToMB8GA1UdIwQY MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt ZGFiOWY4YmE4ZmI2LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2 LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSxiVCKS bNT3roijhIi39y4UPefpRTLQs2cu16yEVEm2eG2/dYyX8cusQ7iJvNjb1C76tEnD vuR5szcK5k0t3gkv/p/Xi96pKD8anuJRd47YTAZXXV+wAWQ3HukicaEnBYKfM2Ry CBuvi49Quv5MEPUkGTOzo8X1e3q3whFoFLx8xueoeaVwjgWa9huI5fFImQQoAWNw BMb7kZPfDnPaZY0Ln8irQmWgepY5Pi4tfKrM5ezYuVe7FEvwYOm2O6Qm5sTTst2w Nl/efcbXkc9vlTdsnWwkYy+eY9987CSz2NFu4ZBBgsXOzghN/1f82CgeDDaywrAC enXvd1hp3A/sJA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:48:57 2025 by rpki-client