This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json) Hash identifier: EYasqGigeqiLS9kpMbX8WOzDC+IC8jvX0peUi02zILs= Subject key identifier: 96:69:3B:39:01:7B:EB:0C:EF:9C:48:7E:89:82:BA:28:24:99:0B:1A Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b Certificate serial: 019B311F2D406D06588B40365A78F9CB89C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft Manifest number: 0731 Signing time: Thu 18 Dec 2025 11:01:25 +0000 Manifest this update: Thu 18 Dec 2025 11:01:25 +0000 Manifest next update: Fri 19 Dec 2025 11:01:25 +0000 Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: 0v9oyj+lEuG87Be/YTzp5qvyZuiZVx37bYGTli1CDrg=) 2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=) 3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1f:2d:40:6d:06:58:8b:40:36:5a:78:f9:cb:89:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b Validity Not Before: Dec 18 11:01:25 2025 GMT Not After : Dec 19 11:01:25 2025 GMT Subject: CN=96693b39017beb0cef9c487e8982ba2824990b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:ba:14:30:e9:10:83:ed:a6:64:3b:04:27: 29:d4:e9:e7:05:c9:31:fd:a5:70:20:fb:5d:5d:59: d0:81:6b:a7:ac:76:12:f2:26:12:ff:d9:f5:22:55: 2e:b5:0c:56:76:fe:a4:73:16:de:cd:9d:1a:26:8a: 30:f0:bd:0a:4a:88:e8:4f:5c:9b:97:c6:39:cc:2f: f2:3d:f8:f2:40:c9:5e:3e:cc:0c:93:75:fd:19:2d: c0:33:18:a5:b8:a1:e9:50:43:88:2d:a9:45:c6:5b: 6b:22:d0:94:f1:ce:1a:4c:e9:d1:ab:d9:a4:70:51: 72:6a:35:33:54:bf:89:4a:5b:9b:52:b0:15:bb:6d: 24:3f:e4:36:23:48:5b:93:6b:4b:87:ea:75:a2:5f: c1:56:4d:45:12:e0:76:a1:d6:09:f1:d4:e9:37:fc: e6:46:d6:be:ec:29:c1:80:39:ec:78:a1:2e:26:be: 36:62:bc:b8:57:aa:e7:14:34:51:86:7c:e2:4d:5a: e0:7b:8b:32:cd:0c:9d:d4:92:7a:46:6d:63:fc:64: 75:e8:83:0a:54:e5:57:79:89:f8:10:01:dc:7a:c4: 8a:1e:b4:36:cb:1c:4f:42:28:f6:41:85:fd:e6:35: 1f:c7:60:09:26:c3:f4:85:25:7a:4e:c7:b2:f9:4c: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:69:3B:39:01:7B:EB:0C:EF:9C:48:7E:89:82:BA:28:24:99:0B:1A X509v3 Authority Key Identifier: keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e1:9f:8d:02:a9:41:b6:b2:06:bf:63:c8:16:59:b7:d1:75: e6:04:b5:6d:09:c3:93:f5:ae:54:6f:40:cd:e8:c7:51:7f:98: 8f:76:f7:6c:4c:94:a2:ed:93:29:95:ab:1c:3e:7d:d8:06:2e: 43:9e:75:b4:0b:23:d7:ed:a3:be:9b:e9:b3:20:78:2f:7e:c2: 41:13:17:4a:d6:97:b3:ae:a6:f9:6a:0a:e0:7a:ab:a6:b0:42: 81:a3:0f:5f:9e:44:a6:30:a9:87:3d:1f:e3:ee:3d:d1:75:11: 31:51:ec:e9:50:dc:d8:08:a9:b2:bd:24:90:b1:b4:93:48:f8: 43:66:96:59:f7:1f:c6:5e:36:26:37:57:2b:a4:ff:7e:fd:60: 2d:81:4a:21:ad:73:5c:71:e8:ad:3b:f4:68:24:a1:e0:1c:da: 7a:ab:ef:b5:70:f4:80:40:e4:9c:6e:e0:7a:df:02:3f:31:ef: c1:60:2c:76:61:93:88:c4:96:fe:bc:b8:8f:08:de:c2:26:90: db:57:b3:69:8a:6c:19:6b:96:4d:bd:e6:14:4a:c8:0f:57:aa: 54:e2:99:cc:5a:cb:c5:82:87:c2:5b:a4:db:38:67:b0:c5:74: 5c:f2:08:d0:5c:40:16:20:d3:f7:fd:44:d2:89:4e:07:04:b7: 15:73:c5:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHy1AbQZYi0A2Wnj5y4nCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MmI4YTVlZDQ2YWMzMDQ2ZDQ1MDE0NzIzYTBiOTJmYWNm MmE0OWIwHhcNMjUxMjE4MTEwMTI1WhcNMjUxMjE5MTEwMTI1WjAzMTEwLwYDVQQD Eyg5NjY5M2IzOTAxN2JlYjBjZWY5YzQ4N2U4OTgyYmEyODI0OTkwYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGm6FDDpEIPtpmQ7BCcp1OnnBckx /aVwIPtdXVnQgWunrHYS8iYS/9n1IlUutQxWdv6kcxbezZ0aJoow8L0KSojoT1yb l8Y5zC/yPfjyQMlePswMk3X9GS3AMxiluKHpUEOILalFxltrItCU8c4aTOnRq9mk cFFyajUzVL+JSlubUrAVu20kP+Q2I0hbk2tLh+p1ol/BVk1FEuB2odYJ8dTpN/zm Rta+7CnBgDnseKEuJr42Yry4V6rnFDRRhnziTVrge4syzQyd1JJ6Rm1j/GR16IMK VOVXeYn4EAHcesSKHrQ2yxxPQij2QYX95jUfx2AJJsP0hSV6Tsey+Uwl4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZpOzkBe+sM75xIfomCuigkmQsaMB8GA1UdIwQY MBaAFNkril7UasMEbUUBRyOguS+s8qSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYt NDE1NjlhYmMzN2NjLzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82OTllZmEtOTRmNy00MTI1LWI2MmYtNDE1NjlhYmMzN2Nj LzEvMlN1S1h0UnF3d1J0UlFGSEk2QzVMNnp5cEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOGfjQKp QbayBr9jyBZZt9F15gS1bQnDk/WuVG9AzejHUX+Yj3b3bEyUou2TKZWrHD592AYu Q551tAsj1+2jvpvpsyB4L37CQRMXStaXs66m+WoK4HqrprBCgaMPX55EpjCphz0f 4+490XURMVHs6VDc2Aipsr0kkLG0k0j4Q2aWWfcfxl42JjdXK6T/fv1gLYFKIa1z XHHorTv0aCSh4BzaeqvvtXD0gEDknG7get8CPzHvwWAsdmGTiMSW/ry4jwjewiaQ 21ezaYpsGWuWTb3mFErID1eqVOKZzFrLxYKHwluk2zhnsMV0XPII0FxAFiDT9/1E 0olOBwS3FXPFSQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:26:46 2025 by rpki-client