This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json) Hash identifier: WsHZGlUlj0bNACWAiTtLpPLCF4+2WdCmtYkWFvn/R8E= Subject key identifier: 44:C5:B1:EC:63:0B:E8:DB:1C:2A:C4:21:33:4A:72:EA:96:0A:DC:97 Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43 Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43 Certificate serial: 019B481458D6DC9122342C6B57D7DBBF0DC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft Manifest number: 1381 Signing time: Mon 22 Dec 2025 22:00:51 +0000 Manifest this update: Mon 22 Dec 2025 22:00:51 +0000 Manifest next update: Tue 23 Dec 2025 22:00:51 +0000 Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: yffzkZ6U0G7zBCGUsyKjIsUkvwjE3H6/f3ECjdGPkvw=) 2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:58:d6:dc:91:22:34:2c:6b:57:d7:db:bf:0d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43 Validity Not Before: Dec 22 22:00:51 2025 GMT Not After : Dec 23 22:00:51 2025 GMT Subject: CN=44c5b1ec630be8db1c2ac421334a72ea960adc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:13:1a:89:bb:b7:a2:69:0a:36:24:a4:8d: f5:b0:66:c9:61:40:4d:c0:0f:5a:23:5f:ec:8c:96: b3:4d:a8:ac:df:e2:3f:55:d1:66:3e:bd:6f:4d:eb: 73:fa:ee:81:b6:08:a8:ba:ef:92:f2:c2:75:11:ac: 56:7a:c3:0a:d1:af:ea:74:75:dc:40:d5:7e:74:45: dd:b0:53:7b:9d:b6:de:cd:91:9b:80:b8:07:d9:48: 03:b7:f8:53:3f:98:4f:12:b8:01:03:c8:44:42:3d: bc:ba:82:7a:9f:7c:b2:fe:f3:80:e3:74:97:9a:62: d6:50:ad:83:26:89:48:d6:66:e3:0b:67:53:18:48: af:bd:53:d9:55:84:b1:dc:ba:e7:a3:d6:e9:d0:e6: e5:33:9e:8e:5d:0d:c4:50:48:1e:dd:67:d1:32:b7: 85:1b:07:b7:65:7a:a3:6f:d2:1e:77:92:3a:e9:b1: 4d:40:12:fc:2c:6f:56:f5:06:13:17:f1:15:76:b4: 9c:f0:a5:c0:3a:e7:60:0f:5b:a0:b3:33:5f:92:1b: 9e:44:ae:a7:bd:6d:7e:41:99:4d:7b:e5:03:8c:63: a0:98:2d:ed:3f:d5:81:a1:2d:05:b9:8c:1b:18:a8: a4:db:19:10:e9:15:ff:89:67:23:3a:eb:d6:a5:fb: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:B1:EC:63:0B:E8:DB:1C:2A:C4:21:33:4A:72:EA:96:0A:DC:97 X509v3 Authority Key Identifier: keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:62:1a:03:5e:fd:e2:00:8c:a9:aa:2e:e7:28:d6:d7:99:46: 4a:37:28:34:cc:1a:d7:30:14:6d:88:2f:10:97:ff:9b:9f:98: c9:ce:0f:3f:ee:22:c9:eb:a1:93:fe:c7:db:4e:a5:0e:47:90: c1:9c:0e:c0:84:c0:06:8f:2c:67:05:5d:d2:a5:fe:ec:af:41: 3b:7b:cb:c3:8f:f4:cc:4d:3f:50:75:ec:2e:21:87:51:d1:65: 9f:d1:72:24:0b:b6:4e:0e:6c:97:5f:4d:02:da:2e:32:ac:7e: 77:b8:e4:a1:0a:ed:67:c4:5f:01:f7:8c:86:a6:54:a8:7e:e0: 50:da:52:2c:f4:49:41:6f:c4:02:88:26:da:bb:9c:60:8a:ee: 3c:41:15:86:02:5c:26:39:db:3a:70:d5:9e:44:28:cc:2d:2e: 77:95:80:18:d1:84:50:7e:d7:43:00:4c:7a:6b:4d:ac:a0:27: 39:81:da:10:be:4d:70:cd:41:0a:a2:49:bd:eb:07:5a:f3:9c: ce:00:3e:12:5e:4c:d0:9e:bd:1e:e0:7d:24:a0:f6:d8:ee:98: cc:48:41:81:ae:1a:26:49:8c:4e:60:03:ab:2b:8a:05:9e:34: 6c:da:cd:a1:d5:6c:30:f4:35:84:79:b2:46:e2:0b:0f:99:47: f5:1a:15:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFFjW3JEiNCxrV9fbvw3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjY5ZDBlYThjYWE0MGM3YTcwNDM4MmNhYjUzZTFiMDI2 ZDZiNDMwHhcNMjUxMjIyMjIwMDUxWhcNMjUxMjIzMjIwMDUxWjAzMTEwLwYDVQQD Eyg0NGM1YjFlYzYzMGJlOGRiMWMyYWM0MjEzMzRhNzJlYTk2MGFkYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXoTGom7t6JpCjYkpI31sGbJYUBN wA9aI1/sjJazTais3+I/VdFmPr1vTetz+u6Btgiouu+S8sJ1EaxWesMK0a/qdHXc QNV+dEXdsFN7nbbezZGbgLgH2UgDt/hTP5hPErgBA8hEQj28uoJ6n3yy/vOA43SX mmLWUK2DJolI1mbjC2dTGEivvVPZVYSx3Lrno9bp0OblM56OXQ3EUEge3WfRMreF Gwe3ZXqjb9Ied5I66bFNQBL8LG9W9QYTF/EVdrSc8KXAOudgD1ugszNfkhueRK6n vW1+QZlNe+UDjGOgmC3tP9WBoS0FuYwbGKik2xkQ6RX/iWcjOuvWpfsGlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETFsexjC+jbHCrEITNKcuqWCtyXMB8GA1UdIwQY MBaAFNsmnQ6oyqQMenBDgsq1PhsCbWtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQt Njk4ZjgxOGJiZDMzLzEvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQtNjk4ZjgxOGJiZDMz LzEvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2IaA179 4gCMqaou5yjW15lGSjcoNMwa1zAUbYgvEJf/m5+Yyc4PP+4iyeuhk/7H206lDkeQ wZwOwITABo8sZwVd0qX+7K9BO3vLw4/0zE0/UHXsLiGHUdFln9FyJAu2Tg5sl19N AtouMqx+d7jkoQrtZ8RfAfeMhqZUqH7gUNpSLPRJQW/EAogm2rucYIruPEEVhgJc JjnbOnDVnkQozC0ud5WAGNGEUH7XQwBMemtNrKAnOYHaEL5NcM1BCqJJvesHWvOc zgA+El5M0J69HuB9JKD22O6YzEhBga4aJkmMTmADqyuKBZ40bNrNodVsMPQ1hHmy RuILD5lH9RoVvA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:56:29 2025 by rpki-client