This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft File: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft (raw, json) Hash identifier: Oc3wDRjsNjJ1z2blu1Nr1Shccc5eXa1BSD6B5gnhJ7o= Subject key identifier: B1:EF:66:DA:1C:26:B5:E8:F4:58:F1:46:92:65:BA:74:71:24:2C:A6 Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC Certificate issuer: /CN=d9e483f8b027b20a70414a56d3fdc7894896addc Certificate serial: 019B18DF3CBDC14D194AB5692E6CE7E9687F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft Manifest number: 0E40 Signing time: Sat 13 Dec 2025 18:00:41 +0000 Manifest this update: Sat 13 Dec 2025 18:00:41 +0000 Manifest next update: Sun 14 Dec 2025 18:00:41 +0000 Files and hashes: 1: 2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl (hash: h8AbUtWBNDYNeggYxSu5JwPWUJbSrN5wO+ZBLFe4rq8=) 2: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (hash: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:3c:bd:c1:4d:19:4a:b5:69:2e:6c:e7:e9:68:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc Validity Not Before: Dec 13 18:00:41 2025 GMT Not After : Dec 14 18:00:41 2025 GMT Subject: CN=b1ef66da1c26b5e8f458f1469265ba7471242ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:8c:ce:cc:23:94:8b:45:fe:4d:1d:0e:fe: 89:f3:5c:49:66:c9:63:b5:f3:c4:51:e2:db:e8:e5: ef:a3:4a:50:83:0d:e6:95:86:03:49:1f:1e:25:54: db:35:d9:16:f1:ef:3b:6b:6f:77:97:66:fc:59:8e: 99:90:b8:bc:74:96:45:b6:78:2c:50:78:e2:81:4e: 83:c5:3b:cf:30:89:37:68:26:b0:8d:e1:9c:5f:cc: 88:32:c9:1f:ee:40:3e:63:50:8e:13:35:59:0e:55: 7b:a7:12:80:d6:e6:fd:e6:f7:d3:df:64:25:e6:e4: 34:f8:24:92:c0:d1:b5:1d:70:e6:b3:d9:0a:a4:0b: f0:ed:6e:54:ff:75:54:7e:a2:60:0b:b3:cc:30:eb: 39:03:f1:30:f6:91:b8:fe:f8:8c:c6:24:11:b7:54: a2:57:94:1e:cd:fd:b2:5c:d1:76:52:68:e7:28:a4: 33:0b:52:34:15:bd:18:05:ba:4b:c1:a4:29:48:03: 12:c0:0e:10:0e:a9:13:1e:0e:52:09:d6:1d:b2:e6: fa:b2:44:7d:9a:56:52:5b:b9:d3:00:e2:6a:c6:46: 73:65:5c:26:37:6c:de:9e:46:ae:e4:72:bd:c3:ae: 7b:49:dc:42:1f:4c:31:4b:7c:a4:b6:3c:19:bf:e1: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:66:DA:1C:26:B5:E8:F4:58:F1:46:92:65:BA:74:71:24:2C:A6 X509v3 Authority Key Identifier: keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6f:37:60:25:39:8b:44:bd:a7:a6:47:ac:3a:87:12:1a:23: 09:0b:0f:9e:e2:5a:00:cb:dd:8c:07:6e:b7:58:9b:a7:c9:41: 14:8d:c1:23:d7:f1:52:6a:97:e3:ab:14:95:6d:49:0b:57:c5: f8:d0:ca:5b:72:40:eb:be:c5:ca:e6:d7:26:a8:92:c5:be:59: 2b:22:b7:84:7b:40:5a:05:2b:19:e7:50:25:b3:79:05:8a:3a: 42:20:db:dd:56:f9:b6:6e:00:02:7f:64:51:bd:66:e7:d4:05: 42:15:53:76:ea:56:5a:31:0a:2b:a0:74:a8:ff:78:02:26:94: f9:2f:6f:c6:d5:8a:4c:e3:1d:2f:e1:55:7f:be:b0:d7:97:3e: 90:a9:34:4a:76:b1:cd:a3:13:5a:c7:bd:86:4f:dc:a0:fd:68: 93:c2:d6:51:30:48:da:a9:9c:98:5f:02:0c:b1:3a:99:2e:25: 03:15:a6:0b:1d:07:9a:3f:11:02:61:cd:8e:ca:61:61:ef:0f: 5f:5c:02:88:d8:a3:39:46:fa:dd:d3:20:e2:14:a9:4e:03:fe: 52:f9:0c:aa:d8:cd:f5:c6:bb:d3:e7:f8:aa:e9:0d:92:a2:c2: f7:15:36:1e:81:34:3d:05:f5:97:78:21:82:85:94:15:e1:68: 70:f9:00:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3zy9wU0ZSrVpLmzn6Wh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZTQ4M2Y4YjAyN2IyMGE3MDQxNGE1NmQzZmRjNzg5NDg5 NmFkZGMwHhcNMjUxMjEzMTgwMDQxWhcNMjUxMjE0MTgwMDQxWjAzMTEwLwYDVQQD EyhiMWVmNjZkYTFjMjZiNWU4ZjQ1OGYxNDY5MjY1YmE3NDcxMjQyY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUeMzswjlItF/k0dDv6J81xJZslj tfPEUeLb6OXvo0pQgw3mlYYDSR8eJVTbNdkW8e87a293l2b8WY6ZkLi8dJZFtngs UHjigU6DxTvPMIk3aCawjeGcX8yIMskf7kA+Y1COEzVZDlV7pxKA1ub95vfT32Ql 5uQ0+CSSwNG1HXDms9kKpAvw7W5U/3VUfqJgC7PMMOs5A/Ew9pG4/viMxiQRt1Si V5Qezf2yXNF2UmjnKKQzC1I0Fb0YBbpLwaQpSAMSwA4QDqkTHg5SCdYdsub6skR9 mlZSW7nTAOJqxkZzZVwmN2zenkau5HK9w657SdxCH0wxS3yktjwZv+ErWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHvZtocJrXo9FjxRpJlunRxJCymMB8GA1UdIwQY MBaAFNnkg/iwJ7IKcEFKVtP9x4lIlq3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVTRC1MQW5zZ3B3UVVwVzBfM0hpVWlXcmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iNWJhNzctODk4Yy00ZDc2LWE4NDUt MGU2ZjM5ZjU2ZTE5LzEvMmVTRC1MQW5zZ3B3UVVwVzBfM0hpVWlXcmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iNWJhNzctODk4Yy00ZDc2LWE4NDUtMGU2ZjM5ZjU2ZTE5 LzEvMmVTRC1MQW5zZ3B3UVVwVzBfM0hpVWlXcmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG83YCU5 i0S9p6ZHrDqHEhojCQsPnuJaAMvdjAdut1ibp8lBFI3BI9fxUmqX46sUlW1JC1fF +NDKW3JA677FyubXJqiSxb5ZKyK3hHtAWgUrGedQJbN5BYo6QiDb3Vb5tm4AAn9k Ub1m59QFQhVTdupWWjEKK6B0qP94AiaU+S9vxtWKTOMdL+FVf76w15c+kKk0Snax zaMTWse9hk/coP1ok8LWUTBI2qmcmF8CDLE6mS4lAxWmCx0Hmj8RAmHNjsphYe8P X1wCiNijOUb63dMg4hSpTgP+UvkMqtjN9ca70+f4qukNkqLC9xU2HoE0PQX1l3gh goWUFeFocPkAPA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:52 2025 by rpki-client