This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json) Hash identifier: 9PUc3ajtx4iRf4X2VWzTxZ6T476iW6aFGPQ3HoaRTLU= Subject key identifier: AF:F2:1C:DE:6D:E8:91:FD:C2:C7:F2:CE:93:49:8C:B7:9E:B2:A8:26 Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee Certificate serial: 019B25F6433E24170A787AE504F18A69CF32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft Manifest number: 1258 Signing time: Tue 16 Dec 2025 07:00:54 +0000 Manifest this update: Tue 16 Dec 2025 07:00:54 +0000 Manifest next update: Wed 17 Dec 2025 07:00:54 +0000 Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: uZrL6QeqZEztGP5fARVOoWljtHXYoOp+Our2UfRc8Ts=) 2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:43:3e:24:17:0a:78:7a:e5:04:f1:8a:69:cf:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee Validity Not Before: Dec 16 07:00:54 2025 GMT Not After : Dec 17 07:00:54 2025 GMT Subject: CN=aff21cde6de891fdc2c7f2ce93498cb79eb2a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:af:89:07:e7:4e:f5:69:d4:63:a3:e2:b7: eb:61:88:e2:ab:bf:42:b0:09:07:94:7d:9e:96:1f: 46:6f:fc:96:ab:1d:02:bb:13:76:f7:1a:b6:9c:71: 04:a5:e4:15:34:8b:c8:d8:d3:1f:03:d7:e1:0b:e2: 5c:59:6c:c9:cf:c2:29:64:61:8b:be:56:26:7f:2a: 46:48:cc:5b:2c:72:ce:c6:8e:48:0f:84:e6:9a:f3: 43:e3:95:b2:11:3c:bb:04:d4:8e:6f:76:91:e6:94: 7d:1d:52:5a:76:20:b7:a9:08:92:70:f3:cc:b5:9c: f9:37:f2:aa:71:5a:52:47:e6:fa:e2:34:0f:76:4f: 18:5c:c3:22:ef:4b:d9:72:8d:db:24:1b:1b:66:22: b1:67:ed:0d:fc:d3:80:32:5e:9c:65:92:c2:4f:5d: b4:5b:f5:43:47:03:c2:7d:b4:3c:62:78:14:70:36: 4d:8b:1b:00:b9:ca:d6:75:12:69:3a:95:14:bd:14: d3:36:0e:48:3f:dc:b7:88:c6:5c:bc:bd:13:02:80: da:81:05:f6:e4:4b:4f:69:14:a4:e0:f9:f4:ae:6d: 3b:8c:9f:55:18:86:c1:bd:d0:c5:15:9c:e4:cb:fd: 78:b9:fa:4e:7a:6b:a8:95:8f:9f:82:fa:76:0c:26: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F2:1C:DE:6D:E8:91:FD:C2:C7:F2:CE:93:49:8C:B7:9E:B2:A8:26 X509v3 Authority Key Identifier: keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a2:03:a5:af:03:f0:e7:be:8b:d7:2c:60:de:d2:13:9c:1f: 25:f3:64:c6:98:6d:ac:dc:2d:21:90:a3:48:b9:9e:d6:44:74: 41:6b:4b:bf:b0:b1:2a:4e:38:a7:a7:8b:d0:62:43:90:b9:f0: 73:35:06:3b:e0:6d:44:ee:50:d2:da:7f:df:09:bc:c8:82:62: 57:f0:08:85:2b:c9:f7:4d:81:d8:e7:3c:79:3c:90:87:d6:2a: 13:e4:8c:7d:a8:c0:b1:b6:e1:1f:87:3b:03:2c:f5:62:e2:e3: c9:5c:19:60:e4:37:ec:a4:1f:60:13:70:80:ff:ee:0f:83:bc: e0:d1:fe:d5:b3:70:08:f6:65:6e:ea:db:15:8c:61:a5:58:59: 31:dc:da:74:92:4a:1e:af:1a:c7:a6:b3:1d:22:7e:08:e2:82: a5:f3:de:c2:ee:df:6e:8b:1e:e1:88:72:97:e3:2c:5c:e4:af: 52:86:9c:b6:15:99:fe:5f:d1:02:a6:49:a3:96:97:2b:88:92: 32:a7:3f:d1:19:1a:a0:f8:7e:d9:9f:d6:fb:d4:53:b5:55:32: d6:d2:1c:e4:99:6c:6a:c1:af:43:d6:96:61:84:4e:ef:64:f1: 3a:1c:d3:66:d4:0f:6f:cd:b4:ad:f9:ab:a0:38:27:78:56:16: 36:b2:37:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9kM+JBcKeHrlBPGKac8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5M2UzMDJjMjFhOWRkYTY3NTA5ZmM4ZjEzZGFmNGM2MmFj ZmYwZWUwHhcNMjUxMjE2MDcwMDU0WhcNMjUxMjE3MDcwMDU0WjAzMTEwLwYDVQQD EyhhZmYyMWNkZTZkZTg5MWZkYzJjN2YyY2U5MzQ5OGNiNzllYjJhODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcqviQfnTvVp1GOj4rfrYYjiq79C sAkHlH2elh9Gb/yWqx0CuxN29xq2nHEEpeQVNIvI2NMfA9fhC+JcWWzJz8IpZGGL vlYmfypGSMxbLHLOxo5ID4TmmvND45WyETy7BNSOb3aR5pR9HVJadiC3qQiScPPM tZz5N/KqcVpSR+b64jQPdk8YXMMi70vZco3bJBsbZiKxZ+0N/NOAMl6cZZLCT120 W/VDRwPCfbQ8YngUcDZNixsAucrWdRJpOpUUvRTTNg5IP9y3iMZcvL0TAoDagQX2 5EtPaRSk4Pn0rm07jJ9VGIbBvdDFFZzky/14ufpOemuolY+fgvp2DCbLkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/yHN5t6JH9wsfyzpNJjLeesqgmMB8GA1UdIwQY MBaAFNk+MCwhqd2mdQn8jxPa9MYqz/DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct YWUxNzU5OTE2ZGYwLzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw LzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6IDpa8D 8Oe+i9csYN7SE5wfJfNkxphtrNwtIZCjSLme1kR0QWtLv7CxKk44p6eL0GJDkLnw czUGO+BtRO5Q0tp/3wm8yIJiV/AIhSvJ902B2Oc8eTyQh9YqE+SMfajAsbbhH4c7 Ayz1YuLjyVwZYOQ37KQfYBNwgP/uD4O84NH+1bNwCPZlburbFYxhpVhZMdzadJJK Hq8ax6azHSJ+COKCpfPewu7fbose4Yhyl+MsXOSvUoacthWZ/l/RAqZJo5aXK4iS Mqc/0RkaoPh+2Z/W+9RTtVUy1tIc5JlsasGvQ9aWYYRO72TxOhzTZtQPb820rfmr oDgneFYWNrI3RQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:22:40 2025 by rpki-client