This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json) Hash identifier: WURMYYRxD96ZDYnoyNEth8KhY7VSu4sNp0IgLGDFdXs= Subject key identifier: C4:76:3B:9B:C7:7D:F4:36:FE:C5:9D:F9:F2:8F:6D:F8:85:AB:C3:51 Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe Certificate serial: 019AF68A2E3F5CD41D69575CFC5501CD2D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft Manifest number: 14CF Signing time: Sun 07 Dec 2025 02:00:42 +0000 Manifest this update: Sun 07 Dec 2025 02:00:42 +0000 Manifest next update: Mon 08 Dec 2025 02:00:42 +0000 Files and hashes: 1: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: AgcZWW51G0sIu/Fu4k4f2/58uMGbEIjsjLFgWOnoie0=) 2: 9UEtadLY-agViKRUcbVzmb_0mzg.roa (hash: RBx+8e4ijRV5/eVLdK7mQKVp4+k2LueMZ0s6Ez6C7JA=) 3: DTFwzq2g65Dq-1Vdc_lPETGChPI.roa (hash: vSxLCXuhhkqZVNd7lpT8hCgMyR9Cz5KGCKvVphrxEVI=) 4: LZoTpPM2VkILReCwMFeJVUb0VAo.roa (hash: ID8ZXpUjQ9jwywDgmAXCourXR8hKniMNfDnHcEORfgE=) 5: VJD0tsYXDO2sI4dcf9MIIrSlLwc.roa (hash: 6fGdwYSOOZxG1ekAjN2Rgb632S59In886eUrD8g+MAs=) 6: bLJ_1uTmZ_Woe95GKroEXOKfXRc.roa (hash: D/qqGavjudHHAFM94s9+FB+kKIVF4We10px0uVymkXM=) 7: bjCtwaamOgxw0Xg82kluS8PB7V8.roa (hash: v+0XNorCDJlFbTsmyu56ngcT05sUOeAxt+RXGTOihD8=) 8: cuPytutt2n0eGvtmlKhIAPwMjik.roa (hash: nLVXqcqfXAYczwV0A/DG7UlQnOtJTTZ+GUSbi/wO1E4=) 9: yl2_YgC-tBVxL8RhU8L2adT98-I.roa (hash: AMuPFgWghyfaBGHNj/l+7jY+wwAmCTQqhQ3xsaE8j4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:2e:3f:5c:d4:1d:69:57:5c:fc:55:01:cd:2d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe Validity Not Before: Dec 7 02:00:42 2025 GMT Not After : Dec 8 02:00:42 2025 GMT Subject: CN=c4763b9bc77df436fec59df9f28f6df885abc351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:0e:be:b5:7c:49:be:c3:05:d5:61:a7:5a: 5c:28:13:96:0f:47:e8:88:c2:8b:e4:bd:96:0e:27: ba:8b:ba:40:d5:79:f6:6c:d6:ce:a1:a6:fe:50:48: 98:bf:63:f8:10:c3:8f:9f:2f:79:f1:45:50:45:3b: 46:9d:83:19:6e:14:39:19:56:92:21:35:ba:06:26: 52:f0:6c:a0:19:72:da:5c:6e:47:c9:cc:6c:48:7d: c2:b9:23:1a:c4:cc:13:1d:89:df:5c:89:fa:8b:ce: b2:33:7b:8a:13:2d:b3:64:e8:14:03:45:1e:11:e3: 54:10:1b:95:cd:63:2f:71:4b:4f:d8:06:c4:93:88: ba:f4:f0:74:8f:4f:17:d2:67:5e:aa:c2:0a:67:98: 87:91:1c:ef:8c:16:28:b6:a8:02:f8:df:95:a3:0f: fe:69:24:d4:15:55:bf:8f:7b:66:a6:76:52:ba:86: 7d:de:9e:f7:7a:49:73:33:b4:89:65:f4:a2:d5:25: 9f:d0:55:0c:b9:af:c1:98:54:25:b1:87:32:c9:7d: c8:e2:99:97:25:95:7f:b1:98:0e:96:95:59:6a:60: 7b:65:83:43:c5:29:82:1c:93:80:de:b0:d3:e4:b2: bd:47:6e:cd:29:94:0d:d9:99:5a:50:81:f9:72:50: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:76:3B:9B:C7:7D:F4:36:FE:C5:9D:F9:F2:8F:6D:F8:85:AB:C3:51 X509v3 Authority Key Identifier: keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8d:f8:e2:87:03:8b:32:77:2f:10:c4:86:a4:cb:e7:84:14: ef:1a:b7:b4:83:bb:a6:7c:0a:5f:0c:36:70:e9:48:b2:4b:78: 77:c2:84:52:ed:ef:47:99:f0:c9:af:8d:18:54:06:95:2a:2b: a1:58:98:19:55:26:6e:62:76:ec:7f:67:c6:ef:5a:4f:d4:a9: ef:05:0f:43:92:f4:98:0e:28:af:2f:e5:94:87:09:c2:3d:e7: b2:b9:48:82:f2:ba:db:3b:17:e3:a4:68:57:34:6d:46:5d:a3: ee:4a:e5:bc:71:bf:17:4d:93:29:da:2b:ee:5c:3d:17:cc:36: b5:e8:51:24:3d:65:1e:b3:4f:04:89:ed:3a:92:85:3f:dd:c5: bd:05:b6:88:f1:9b:b7:5c:35:52:67:5f:f6:22:aa:96:2c:36: da:24:0f:44:69:60:a6:ae:bb:15:a5:67:5e:64:c4:8f:06:0e: 1d:bd:fb:11:cf:d9:24:e3:1c:7f:8f:d3:bb:b4:ec:28:a5:00: 5b:8f:8c:a3:4a:14:e1:7d:9f:28:c5:d3:8e:fa:07:b1:6f:71: f3:92:04:02:04:0e:05:ec:19:e5:ea:da:cc:55:58:7e:a1:fe: f5:c1:65:61:1b:a6:ef:61:7e:86:f1:9f:7b:52:1f:d6:f4:06: a6:35:4b:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ii4/XNQdaVdc/FUBzS0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx OGJhYmUwHhcNMjUxMjA3MDIwMDQyWhcNMjUxMjA4MDIwMDQyWjAzMTEwLwYDVQQD EyhjNDc2M2I5YmM3N2RmNDM2ZmVjNTlkZjlmMjhmNmRmODg1YWJjMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/IOvrV8Sb7DBdVhp1pcKBOWD0fo iMKL5L2WDie6i7pA1Xn2bNbOoab+UEiYv2P4EMOPny958UVQRTtGnYMZbhQ5GVaS ITW6BiZS8GygGXLaXG5HycxsSH3CuSMaxMwTHYnfXIn6i86yM3uKEy2zZOgUA0Ue EeNUEBuVzWMvcUtP2AbEk4i69PB0j08X0mdeqsIKZ5iHkRzvjBYotqgC+N+Vow/+ aSTUFVW/j3tmpnZSuoZ93p73eklzM7SJZfSi1SWf0FUMua/BmFQlsYcyyX3I4pmX JZV/sZgOlpVZamB7ZYNDxSmCHJOA3rDT5LK9R27NKZQN2ZlaUIH5clA4EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR2O5vHffQ2/sWd+fKPbfiFq8NRMB8GA1UdIwQY MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY344ocD izJ3LxDEhqTL54QU7xq3tIO7pnwKXww2cOlIskt4d8KEUu3vR5nwya+NGFQGlSor oViYGVUmbmJ27H9nxu9aT9Sp7wUPQ5L0mA4ory/llIcJwj3nsrlIgvK62zsX46Ro VzRtRl2j7krlvHG/F02TKdor7lw9F8w2tehRJD1lHrNPBIntOpKFP93FvQW2iPGb t1w1Umdf9iKqliw22iQPRGlgpq67FaVnXmTEjwYOHb37Ec/ZJOMcf4/Tu7TsKKUA W4+Mo0oU4X2fKMXTjvoHsW9x85IEAgQOBewZ5erazFVYfqH+9cFlYRum72F+hvGf e1If1vQGpjVLgg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:03:01 2025 by rpki-client