This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json) Hash identifier: tJLDkM3iedTzsdxwjLNG0VJv+aL+xFrXLXYLH8FPxzU= Subject key identifier: 65:0E:3C:D7:C0:54:C6:55:DA:AF:29:3F:EA:08:B4:D1:8E:BA:EE:48 Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Certificate serial: 019B424AAF720B76244C981BCDFFFC96B6FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft Manifest number: 09D9 Signing time: Sun 21 Dec 2025 19:02:29 +0000 Manifest this update: Sun 21 Dec 2025 19:02:29 +0000 Manifest next update: Mon 22 Dec 2025 19:02:29 +0000 Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: iTV1sN0xCyUeTmVM9tujabpPt8qIUSQBEzxMvMk2/HU=) 2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=) 3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:af:72:0b:76:24:4c:98:1b:cd:ff:fc:96:b6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b Validity Not Before: Dec 21 19:02:29 2025 GMT Not After : Dec 22 19:02:29 2025 GMT Subject: CN=650e3cd7c054c655daaf293fea08b4d18ebaee48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5f:5c:8a:f1:dd:a6:2b:a9:e6:e7:4c:b0:90: 91:7e:08:1e:56:07:92:bd:c0:05:b5:8c:9b:2d:c7: 19:3c:99:99:ac:dc:dc:1d:6a:a0:76:1f:bd:73:5f: 6d:dd:86:bd:a5:70:36:d0:93:25:da:60:1a:e8:13: c0:f6:3e:09:b0:38:41:25:5a:fd:74:77:9e:88:65: e7:ef:4b:93:bd:04:f4:f6:7a:d7:5f:ab:f6:47:de: de:c3:53:d6:20:f2:3f:df:34:7d:fe:1e:29:b0:c3: 12:d9:a4:9e:74:2e:91:b4:c0:3d:89:e3:7c:86:17: 72:60:d6:31:12:03:eb:c2:78:ae:7a:4f:3e:3b:82: cd:c2:cf:54:a0:9d:fc:9d:f0:ea:54:95:7c:9c:41: 61:6f:c9:fe:0e:0d:69:24:b5:8d:09:1e:75:b6:15: 5c:98:c4:dc:27:d1:a1:bb:5c:66:d6:46:d3:ae:13: 17:af:55:32:9a:4b:54:ae:d9:e2:cc:c0:cf:6d:eb: 40:73:6f:03:99:45:d1:4a:30:fa:67:7b:02:5d:69: 07:dc:a2:65:94:6d:22:e0:c7:00:6b:75:d0:da:16: 8d:fd:9d:52:88:09:38:0c:3b:3d:87:21:d4:b6:9a: a2:e3:46:01:9c:e2:03:6a:57:26:73:88:cc:1b:a8: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0E:3C:D7:C0:54:C6:55:DA:AF:29:3F:EA:08:B4:D1:8E:BA:EE:48 X509v3 Authority Key Identifier: keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:be:b9:82:c9:c4:dd:d7:e3:57:30:6e:42:e5:4f:97:3b:ec: a5:1c:46:db:8f:05:8d:b3:8b:40:7e:ac:92:81:ad:d9:7c:8b: f4:fa:19:cd:e1:47:31:89:8d:14:85:17:86:8d:a8:9c:d7:33: 74:da:bb:65:b2:72:e3:3b:e4:53:f2:43:e5:03:af:8e:c5:6a: 1a:38:5a:26:86:75:04:8f:00:98:7a:77:55:25:28:57:5f:23: a4:b6:71:d3:34:f7:a1:8b:f6:35:1a:61:e1:ca:29:71:55:fc: 51:f7:46:a7:64:c7:65:37:19:fa:cf:79:97:be:b2:40:b9:47: b2:e5:c7:94:fc:27:ee:29:42:c1:e0:c2:1f:80:dd:83:d6:94: fb:72:e5:22:94:47:34:ac:db:7b:a6:9c:72:fd:62:1d:fc:8b: 12:54:7f:b8:68:13:3e:66:24:79:50:df:ec:f9:c8:f6:d2:09: c9:4b:ab:b8:ee:c0:3f:ce:27:56:77:45:e6:55:da:13:82:fc: b1:27:a7:05:8a:4e:60:9b:b7:ba:9c:f0:a9:e5:cf:8d:4f:9c: db:7d:04:bb:c5:84:3a:ce:9a:d1:97:f5:ed:c5:c7:1f:bf:7c: 15:c4:6f:f9:98:8a:bc:16:2a:f2:c8:b1:85:bb:08:30:66:f6: 4a:ef:07:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSq9yC3YkTJgbzf/8lrb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjIwMGUyZDM4NjgzYTdjYjFjZTVjYWJiZWUzNGMwNjg4 MzRhMGIwHhcNMjUxMjIxMTkwMjI5WhcNMjUxMjIyMTkwMjI5WjAzMTEwLwYDVQQD Eyg2NTBlM2NkN2MwNTRjNjU1ZGFhZjI5M2ZlYTA4YjRkMThlYmFlZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F9civHdpiup5udMsJCRfggeVgeS vcAFtYybLccZPJmZrNzcHWqgdh+9c19t3Ya9pXA20JMl2mAa6BPA9j4JsDhBJVr9 dHeeiGXn70uTvQT09nrXX6v2R97ew1PWIPI/3zR9/h4psMMS2aSedC6RtMA9ieN8 hhdyYNYxEgPrwniuek8+O4LNws9UoJ38nfDqVJV8nEFhb8n+Dg1pJLWNCR51thVc mMTcJ9Ghu1xm1kbTrhMXr1UymktUrtnizMDPbetAc28DmUXRSjD6Z3sCXWkH3KJl lG0i4McAa3XQ2haN/Z1SiAk4DDs9hyHUtpqi40YBnOIDalcmc4jMG6jSNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUOPNfAVMZV2q8pP+oItNGOuu5IMB8GA1UdIwQY MBaAFNnyAOLThoOnyxzlyrvuNMBog0oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEt MDljOGZlNzI0Y2Q3LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMDdiOTgtYzIyMi00ODM1LTgzODEtMDljOGZlNzI0Y2Q3 LzEvMmZJQTR0T0dnNmZMSE9YS3UtNDB3R2lEU2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAur65gsnE 3dfjVzBuQuVPlzvspRxG248FjbOLQH6skoGt2XyL9PoZzeFHMYmNFIUXho2onNcz dNq7ZbJy4zvkU/JD5QOvjsVqGjhaJoZ1BI8AmHp3VSUoV18jpLZx0zT3oYv2NRph 4copcVX8UfdGp2THZTcZ+s95l76yQLlHsuXHlPwn7ilCweDCH4Ddg9aU+3LlIpRH NKzbe6accv1iHfyLElR/uGgTPmYkeVDf7PnI9tIJyUuruO7AP84nVndF5lXaE4L8 sSenBYpOYJu3upzwqeXPjU+c230Eu8WEOs6a0Zf17cXHH798FcRv+ZiKvBYq8six hbsIMGb2Su8HvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:21 2025 by rpki-client