This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json) Hash identifier: xIOUjZo4dPtGzRYIy6hD7qpwqx/IgIoJlkafIZJZu1g= Subject key identifier: 2F:15:13:DB:F7:0D:5F:32:6A:B6:88:85:E8:D0:E9:01:62:0E:E2:92 Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5 Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5 Certificate serial: 019B597698281C3BAB3B1FFEFA24CFB8168A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft Manifest number: 0D46 Signing time: Fri 26 Dec 2025 07:01:42 +0000 Manifest this update: Fri 26 Dec 2025 07:01:42 +0000 Manifest next update: Sat 27 Dec 2025 07:01:42 +0000 Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: OjJTuyJad7p3xiu4oUZNiAMKVz2Nt4O7Y6I9yCyO4+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:98:28:1c:3b:ab:3b:1f:fe:fa:24:cf:b8:16:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5 Validity Not Before: Dec 26 07:01:42 2025 GMT Not After : Dec 27 07:01:42 2025 GMT Subject: CN=2f1513dbf70d5f326ab68885e8d0e901620ee292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:d6:62:02:a8:7f:2d:e3:fc:9e:94:25:80: 73:3b:d2:c0:11:6f:a9:82:bd:ec:57:06:85:0c:a3: 05:ae:3f:56:02:f6:a3:4c:f5:39:7e:b3:06:aa:5f: e9:8d:eb:00:db:64:87:3b:7e:f6:20:ea:db:54:c6: 86:dc:f5:88:75:16:19:f5:99:82:fc:95:e0:af:81: 11:08:6c:5e:39:13:14:f5:8c:fd:e0:3f:04:52:00: 96:c7:16:33:f0:60:2c:0d:35:9a:3a:1c:fa:d3:24: 64:fa:75:7a:33:d6:0f:3d:3e:11:b1:17:b5:5c:76: bc:e0:ad:69:63:46:f7:fd:b2:e4:91:8e:a5:59:74: 71:45:70:19:3e:f0:69:c9:be:db:ff:31:b9:e7:bc: 7e:fe:64:d3:a1:97:64:49:ea:49:9b:dc:71:15:81: bb:1d:bd:43:fd:86:01:7e:83:5e:95:15:a7:28:7e: ec:bd:44:46:09:fe:fd:6a:7e:8a:ec:eb:01:82:6d: eb:33:29:51:a9:82:4b:39:47:aa:55:ce:b1:a1:7d: 1b:91:11:82:9c:c6:8c:e6:82:92:6c:ba:8a:d6:08: 31:36:d7:00:36:96:eb:8b:bc:d7:4c:af:05:95:15: 4b:aa:06:60:66:45:07:6e:37:f5:5b:d5:a4:23:13: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:15:13:DB:F7:0D:5F:32:6A:B6:88:85:E8:D0:E9:01:62:0E:E2:92 X509v3 Authority Key Identifier: keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9c:3b:23:65:2e:96:a6:9b:58:7c:ec:96:6a:0a:2d:6c:7e: 41:fd:6e:da:b3:46:f2:0c:34:f3:03:f1:97:20:41:fc:34:3b: 5e:3e:a2:04:89:3b:21:ec:14:c4:45:49:15:aa:d9:75:0a:ce: 5e:a7:64:ee:d5:4e:05:ff:22:cf:af:d8:ec:4a:e9:ad:33:b7: 3b:75:e4:44:e2:d8:05:c5:a7:a6:09:3c:5b:a2:11:af:05:fc: 4d:62:7f:e2:cd:5b:ae:c2:09:22:a8:ea:08:85:1f:64:1f:06: 9b:55:71:d8:fa:ad:e7:e4:dc:62:94:a5:1d:ea:21:d2:b5:15: fe:7f:47:3f:bb:de:02:ab:48:c2:5b:ec:00:cd:46:9c:a6:4b: 7a:03:1a:65:10:91:ea:63:4b:2c:e7:8a:ba:f7:ae:93:c9:23: 6f:ca:96:a9:79:06:59:80:1c:a0:88:43:3e:2a:78:49:75:5f: ba:34:88:07:9e:d3:49:ae:59:d6:28:b9:81:31:b8:4b:5e:ae: c5:b8:54:27:04:83:5c:29:32:58:02:da:74:2a:ea:a2:4d:11: 7b:ac:f8:fa:8c:a0:c6:fc:c8:85:2c:00:56:96:4d:a7:e8:39: 3f:93:4a:94:fe:64:8c:b1:33:e6:e7:ec:19:ad:1d:28:2b:c7: 55:2e:ab:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpgoHDurOx/++iTPuBaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OWY2MWNjNDA2OWMzNjM2MjQ0NWQ4MTg4OTEwMzQwYjZl NTdiYTUwHhcNMjUxMjI2MDcwMTQyWhcNMjUxMjI3MDcwMTQyWjAzMTEwLwYDVQQD EygyZjE1MTNkYmY3MGQ1ZjMyNmFiNjg4ODVlOGQwZTkwMTYyMGVlMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbHWYgKofy3j/J6UJYBzO9LAEW+p gr3sVwaFDKMFrj9WAvajTPU5frMGql/pjesA22SHO372IOrbVMaG3PWIdRYZ9ZmC /JXgr4ERCGxeORMU9Yz94D8EUgCWxxYz8GAsDTWaOhz60yRk+nV6M9YPPT4RsRe1 XHa84K1pY0b3/bLkkY6lWXRxRXAZPvBpyb7b/zG557x+/mTToZdkSepJm9xxFYG7 Hb1D/YYBfoNelRWnKH7svURGCf79an6K7OsBgm3rMylRqYJLOUeqVc6xoX0bkRGC nMaM5oKSbLqK1ggxNtcANpbri7zXTK8FlRVLqgZgZkUHbjf1W9WkIxNwawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8VE9v3DV8yaraIhejQ6QFiDuKSMB8GA1UdIwQY MBaAFNifYcxAacNjYkRdgYiRA0C25XulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3Njkt ZWEzMmMyOGQzODdjLzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3NjktZWEzMmMyOGQzODdj LzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJw7I2Uu lqabWHzslmoKLWx+Qf1u2rNG8gw08wPxlyBB/DQ7Xj6iBIk7IewUxEVJFarZdQrO Xqdk7tVOBf8iz6/Y7ErprTO3O3XkROLYBcWnpgk8W6IRrwX8TWJ/4s1brsIJIqjq CIUfZB8Gm1Vx2Pqt5+TcYpSlHeoh0rUV/n9HP7veAqtIwlvsAM1GnKZLegMaZRCR 6mNLLOeKuveuk8kjb8qWqXkGWYAcoIhDPip4SXVfujSIB57TSa5Z1ii5gTG4S16u xbhUJwSDXCkyWALadCrqok0Re6z4+oygxvzIhSwAVpZNp+g5P5NKlP5kjLEz5ufs Ga0dKCvHVS6rbA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:20 2025 by rpki-client