This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json) Hash identifier: u8wx5qGlEXMPVfH70hp2XWKbY5YGt6naHBJxoU+jEhs= Subject key identifier: C6:85:9E:81:E1:8B:43:E2:BE:BD:E0:3F:F7:A8:17:75:35:BC:7F:7D Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f Certificate serial: 019ABC63D939F1ED70A297673F9814361135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft Manifest number: 1742 Signing time: Tue 25 Nov 2025 19:00:51 +0000 Manifest this update: Tue 25 Nov 2025 19:00:51 +0000 Manifest next update: Wed 26 Nov 2025 19:00:51 +0000 Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: OzE+CyPC1/OFjj0mMM3BGxa6x8AtpQXCaZAlqe7HWtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 14:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:63:d9:39:f1:ed:70:a2:97:67:3f:98:14:36:11:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f Validity Not Before: Nov 25 19:00:51 2025 GMT Not After : Nov 26 19:00:51 2025 GMT Subject: CN=c6859e81e18b43e2bebde03ff7a8177535bc7f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:bf:6a:74:10:d1:b3:a4:1f:26:33:32:f7: 4e:9e:72:c4:00:db:6d:6e:84:8d:c7:ce:fe:21:7b: 9f:c0:a7:ce:18:a9:8d:b9:bf:e7:e2:5c:30:e2:ea: 64:10:81:c4:f0:e8:a1:6e:46:98:d4:69:85:9d:c4: e8:28:d1:41:d4:84:04:dc:25:1d:3c:85:8a:1a:1a: 6e:4e:a7:7f:35:29:72:9f:ae:fc:3f:13:6b:f0:a6: aa:c0:01:49:f4:18:0c:8b:bb:cb:81:79:88:e6:32: 43:17:0f:37:41:cf:ea:68:d7:4c:e9:44:76:e5:80: 63:a1:e5:d5:6e:09:eb:6c:fd:42:83:ad:c3:86:9f: b8:fc:ca:58:04:10:4e:d7:89:5a:24:05:14:fa:38: 14:db:83:ed:87:fe:de:dd:09:00:4b:be:fa:fe:3c: 9e:1d:15:5a:ea:02:de:c4:d3:a6:40:39:7c:48:84: bc:87:1e:0f:5a:35:64:0c:c4:f7:b6:e6:84:75:0d: fe:e4:f5:d2:97:20:30:31:2e:97:b4:85:24:c2:3f: d3:2b:1b:19:9e:91:44:ba:b0:5a:9a:53:e2:66:71: c7:38:c1:fd:98:2e:ac:e0:ab:2f:12:c6:a2:20:4e: b9:6c:9c:fa:5d:01:0b:ec:5a:86:cb:9c:b0:4e:d7: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:85:9E:81:E1:8B:43:E2:BE:BD:E0:3F:F7:A8:17:75:35:BC:7F:7D X509v3 Authority Key Identifier: keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2d:67:18:93:0e:08:8c:58:b6:0a:d3:b2:8c:62:9b:65:46: e9:21:cd:4e:80:64:ec:d8:75:3c:c8:bf:52:7a:8b:87:2e:37: 71:71:4f:28:68:46:54:51:6d:0e:78:ca:2f:5e:25:78:2e:9c: f4:be:06:66:2c:e5:b7:51:a1:e0:92:f4:3b:d7:9d:49:07:c4: 54:37:ad:2e:68:4b:b1:7a:2b:b6:6b:12:16:82:56:46:4f:e0: d5:c2:cf:c0:71:f6:c4:00:d3:23:83:89:a4:93:db:f0:81:d0: 2b:c4:03:fe:96:3b:ee:d5:c1:d8:b2:08:d4:bf:c2:ef:ed:80: 90:b9:1f:b0:2a:ca:89:6f:23:a3:7b:d3:90:c2:4c:12:5a:7b: f8:96:83:51:1f:c1:65:d9:e9:d4:a8:a1:78:25:3d:c8:70:75: 69:7a:d0:f4:b5:19:a0:7f:1d:5b:cd:38:f1:32:be:06:16:55: fa:d9:da:0b:3b:0f:e2:41:0c:2e:b5:e1:2a:41:8c:17:67:e4: 8d:21:8c:50:5d:90:f9:6e:3b:37:7e:55:a1:be:ad:4e:6e:c6: e0:b7:20:8b:56:6d:06:a7:35:f4:a5:e6:16:0a:bd:e5:18:d2: 3c:53:d9:50:18:6e:73:d9:21:77:f7:5d:4b:b8:b9:90:a3:11: 11:cf:62:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq8Y9k58e1wopdnP5gUNhE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTkxOWZiNTFhNzA1MTExZDY5OTZlZWMzMGZmYzQ0MmRl OTdhMmYwHhcNMjUxMTI1MTkwMDUxWhcNMjUxMTI2MTkwMDUxWjAzMTEwLwYDVQQD EyhjNjg1OWU4MWUxOGI0M2UyYmViZGUwM2ZmN2E4MTc3NTM1YmM3ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYe/anQQ0bOkHyYzMvdOnnLEANtt boSNx87+IXufwKfOGKmNub/n4lww4upkEIHE8OihbkaY1GmFncToKNFB1IQE3CUd PIWKGhpuTqd/NSlyn678PxNr8KaqwAFJ9BgMi7vLgXmI5jJDFw83Qc/qaNdM6UR2 5YBjoeXVbgnrbP1Cg63Dhp+4/MpYBBBO14laJAUU+jgU24Pth/7e3QkAS776/jye HRVa6gLexNOmQDl8SIS8hx4PWjVkDMT3tuaEdQ3+5PXSlyAwMS6XtIUkwj/TKxsZ npFEurBamlPiZnHHOMH9mC6s4KsvEsaiIE65bJz6XQEL7FqGy5ywTtdG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaFnoHhi0Pivr3gP/eoF3U1vH99MB8GA1UdIwQY MBaAFNiZGftRpwURHWmW7sMP/EQt6XovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgt N2Q4YjFjOTFlYzdiLzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgtN2Q4YjFjOTFlYzdi LzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC1nGJMO CIxYtgrTsoxim2VG6SHNToBk7Nh1PMi/UnqLhy43cXFPKGhGVFFtDnjKL14leC6c 9L4GZizlt1Gh4JL0O9edSQfEVDetLmhLsXortmsSFoJWRk/g1cLPwHH2xADTI4OJ pJPb8IHQK8QD/pY77tXB2LII1L/C7+2AkLkfsCrKiW8jo3vTkMJMElp7+JaDUR/B Zdnp1KiheCU9yHB1aXrQ9LUZoH8dW8048TK+BhZV+tnaCzsP4kEMLrXhKkGMF2fk jSGMUF2Q+W47N35Vob6tTm7G4Lcgi1ZtBqc19KXmFgq95RjSPFPZUBhuc9khd/dd S7i5kKMREc9iLg== -----END CERTIFICATE-----Generated at Tue Nov 25 22:42:31 2025 by rpki-client