This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft File: 2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json) Hash identifier: e/LJYka9QDSP/w5OJkLlJIUzb4sSJw9jBA75tvaROgM= Subject key identifier: 0F:8D:9B:9D:E2:E9:D2:DD:7C:4F:D8:F0:DD:71:2D:72:53:84:FA:85 Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67 Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167 Certificate serial: 019B39B426EB4CCF5466A3934F48C9A8A4C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft Manifest number: 07AD Signing time: Sat 20 Dec 2025 03:01:06 +0000 Manifest this update: Sat 20 Dec 2025 03:01:06 +0000 Manifest next update: Sun 21 Dec 2025 03:01:06 +0000 Files and hashes: 1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: HKbgYKSgyFDrSI1m8vgXvqW+LOWrbvdW5/CQKR1yjCo=) 2: IkFAAhMo6EXvgYuzubUjkLN3WU0.asa (hash: 8AwsEwj6pWhJYhsurZj03YidpYvlpZCbsOGUi0yK1yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:26:eb:4c:cf:54:66:a3:93:4f:48:c9:a8:a4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167 Validity Not Before: Dec 20 03:01:06 2025 GMT Not After : Dec 21 03:01:06 2025 GMT Subject: CN=0f8d9b9de2e9d2dd7c4fd8f0dd712d725384fa85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:8f:9e:43:84:4f:fe:f9:53:fa:95:03:ff: cd:d2:99:28:ce:3f:24:ef:4f:f3:09:66:d0:fb:4b: 06:ee:49:b2:d9:d0:38:a5:ad:15:01:57:a7:28:f0: bf:21:1d:50:08:4c:97:c0:18:4a:b0:85:b8:5b:9a: 7b:d0:75:11:c8:9f:58:e9:c4:9c:c1:0d:a3:bb:3a: 4f:2a:73:d0:45:a8:1c:ba:11:48:db:07:60:6f:88: 58:d1:1d:d9:9f:8b:3a:5e:0a:21:01:e5:03:69:5f: 61:10:cd:92:ec:b6:13:50:77:60:ee:73:00:2b:46: ce:4a:7d:95:bc:c0:76:4e:ca:f3:de:87:22:57:29: f5:5d:14:2c:ec:e7:59:d5:9c:1e:a8:5b:4e:b8:ee: e1:b2:20:9e:3f:51:cf:a0:2e:d8:07:0e:28:65:ab: bd:b4:49:62:0c:52:5c:0f:2f:92:8c:2f:02:9d:db: c8:ce:c0:36:cb:14:bb:8f:f1:aa:50:bd:d3:98:f7: 3a:c6:ca:28:48:2e:9e:48:6f:89:15:6e:e2:38:33: fc:34:94:44:24:ec:c0:aa:3c:07:d0:85:97:7b:3b: d0:9a:54:66:cc:88:f7:ff:27:2a:1f:9d:ae:6c:50: 95:3a:1f:d5:bb:09:8c:4c:da:09:2d:d6:d5:c3:50: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8D:9B:9D:E2:E9:D2:DD:7C:4F:D8:F0:DD:71:2D:72:53:84:FA:85 X509v3 Authority Key Identifier: keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ed:99:78:49:80:c9:a2:d6:d0:6a:8c:e6:22:f4:a6:35:03: 5c:19:df:d3:f5:f4:ca:71:ce:21:69:29:ab:c6:60:0d:b2:45: f8:31:2b:22:1b:04:11:1a:19:14:4d:7d:f7:88:1a:a1:bd:1d: e0:e7:18:00:e3:98:1c:f6:1f:10:21:8c:7e:27:61:f0:a0:46: 45:7c:ae:67:41:59:8d:f0:1f:1b:74:44:14:bc:f6:2b:2b:80: ed:be:bb:58:d3:e5:53:bb:30:f8:44:36:fe:4e:d1:22:85:4c: d5:81:2f:bc:71:91:ab:e0:8c:08:f8:c6:c8:ac:3e:e3:69:db: 02:a7:8b:b8:d4:97:b5:3d:a6:04:b4:ea:58:22:5b:58:e1:67: 25:6f:10:0c:9a:28:5b:75:9d:25:cb:55:c7:32:02:cb:05:79: 75:7d:63:95:a5:9b:c5:43:45:03:d1:f4:c5:27:0d:13:1e:ca: b8:94:e9:9c:9c:94:fe:ba:89:41:90:c8:4a:8b:ac:40:55:67: fb:36:44:04:38:4f:11:bb:c1:5b:a2:d3:67:96:e8:20:d6:e3: 39:fb:a7:12:96:9f:ce:92:b4:4e:1d:e9:b1:c0:66:67:e3:03: fa:8c:57:0f:f3:10:28:6a:18:9b:ff:05:7d:86:32:13:b3:40: 9d:a2:ee:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCbrTM9UZqOTT0jJqKTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj ZmIxNjcwHhcNMjUxMjIwMDMwMTA2WhcNMjUxMjIxMDMwMTA2WjAzMTEwLwYDVQQD EygwZjhkOWI5ZGUyZTlkMmRkN2M0ZmQ4ZjBkZDcxMmQ3MjUzODRmYTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznyPnkOET/75U/qVA//N0pkozj8k 70/zCWbQ+0sG7kmy2dA4pa0VAVenKPC/IR1QCEyXwBhKsIW4W5p70HURyJ9Y6cSc wQ2juzpPKnPQRagcuhFI2wdgb4hY0R3Zn4s6XgohAeUDaV9hEM2S7LYTUHdg7nMA K0bOSn2VvMB2Tsrz3ociVyn1XRQs7OdZ1ZweqFtOuO7hsiCeP1HPoC7YBw4oZau9 tEliDFJcDy+SjC8CndvIzsA2yxS7j/GqUL3TmPc6xsooSC6eSG+JFW7iODP8NJRE JOzAqjwH0IWXezvQmlRmzIj3/ycqH52ubFCVOh/VuwmMTNoJLdbVw1B9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+Nm53i6dLdfE/Y8N1xLXJThPqFMB8GA1UdIwQY MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt ZjhmZGYwNDNmYTQ3LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3 LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACe2ZeEmA yaLW0GqM5iL0pjUDXBnf0/X0ynHOIWkpq8ZgDbJF+DErIhsEERoZFE1994gaob0d 4OcYAOOYHPYfECGMfidh8KBGRXyuZ0FZjfAfG3REFLz2KyuA7b67WNPlU7sw+EQ2 /k7RIoVM1YEvvHGRq+CMCPjGyKw+42nbAqeLuNSXtT2mBLTqWCJbWOFnJW8QDJoo W3WdJctVxzICywV5dX1jlaWbxUNFA9H0xScNEx7KuJTpnJyU/rqJQZDISousQFVn +zZEBDhPEbvBW6LTZ5boINbjOfunEpafzpK0Th3pscBmZ+MD+oxXD/MQKGoYm/8F fYYyE7NAnaLuMA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:40:10 2025 by rpki-client