This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json) Hash identifier: +UzlqcxcKjhSpTIYTfjAkzuBcCd89w1ldAQQnwVPQhE= Subject key identifier: DE:56:10:1F:13:15:D5:6E:16:34:ED:C5:0F:A6:B0:66:EF:F6:44:B0 Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b Certificate serial: 019B2552D807D263D01813C57066146FFDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft Manifest number: 1709 Signing time: Tue 16 Dec 2025 04:02:24 +0000 Manifest this update: Tue 16 Dec 2025 04:02:24 +0000 Manifest next update: Wed 17 Dec 2025 04:02:24 +0000 Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: ycd6S0eWwkA1+Fca/ZaRGnvA/z5CRRDlfPJRF6hRi6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:d8:07:d2:63:d0:18:13:c5:70:66:14:6f:fd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b Validity Not Before: Dec 16 04:02:24 2025 GMT Not After : Dec 17 04:02:24 2025 GMT Subject: CN=de56101f1315d56e1634edc50fa6b066eff644b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:bc:ee:ff:d9:7e:73:d4:9c:76:b9:09:ea: 22:e5:86:bb:17:a6:8d:85:76:de:cb:5b:d6:8c:1b: d0:9d:00:0c:6e:da:14:c7:13:c6:f5:37:9a:20:8d: 0f:81:a3:e0:91:23:f5:81:6c:3b:33:6c:56:db:a9: 8a:c6:dc:89:56:8c:c8:31:aa:84:cd:c5:63:a2:9a: 40:03:5f:15:fd:9e:43:28:92:c0:7d:2c:86:32:e5: c8:d3:9e:93:40:a2:f5:54:8f:58:26:69:54:e1:13: a0:ac:38:0a:52:82:3f:eb:93:1e:b3:82:95:64:b3: 3b:72:e3:9a:02:ce:e7:fc:9e:24:8d:cd:d4:2f:8a: 60:0b:c6:33:20:2c:c3:2a:24:f5:2b:5c:fe:9f:85: 7f:41:2e:71:28:6e:8c:4a:37:45:bf:cf:80:e7:20: ad:6a:5a:b2:b6:c7:3b:ed:cf:d3:74:17:3e:a9:dc: 90:60:85:8e:bf:92:6a:9f:eb:b7:b0:77:ab:75:9f: 67:ec:07:52:52:5a:3d:ae:5c:14:3e:c6:25:38:f8: 14:d6:f4:71:82:6c:7d:3d:a0:33:18:ec:9c:94:9e: 2e:25:93:f6:21:cf:61:44:08:0b:6b:d8:3f:cf:fa: 2b:a1:9c:03:8f:4b:a7:d4:47:00:5b:c9:60:42:06: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:56:10:1F:13:15:D5:6E:16:34:ED:C5:0F:A6:B0:66:EF:F6:44:B0 X509v3 Authority Key Identifier: keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:94:39:b9:c4:9d:57:c0:be:40:27:1c:6b:93:fb:5f:0b:35: 47:f1:e6:b2:f8:ef:f6:4d:66:5e:21:42:fa:cc:07:ab:7e:f2: bc:6c:88:2b:ea:0e:b0:99:d7:11:0c:d4:d2:b1:fb:05:e8:46: 25:0e:4b:80:e7:3d:ed:9b:6b:d7:fd:cf:98:43:90:4f:5f:6a: b9:15:2b:bd:b1:b3:6a:32:94:78:59:f2:58:26:d0:e5:f3:3b: 23:07:8f:82:14:d4:b5:ed:07:a0:e6:10:bd:2b:d0:b9:1d:f3: b5:d9:ce:cc:0c:24:87:00:81:15:de:4d:ca:f8:36:d4:90:e1: 86:70:15:36:59:a1:c0:41:9c:47:8a:b9:89:f0:2d:ff:2f:10: ee:83:7d:eb:7d:78:31:a3:0b:59:23:76:fa:89:02:9c:7f:1d: b7:0c:bf:d4:23:ee:d3:72:39:63:30:aa:0f:6f:b0:c6:5e:c9: 75:a1:63:92:11:48:87:4a:c6:c8:8e:dc:73:5e:91:66:6f:b1: a4:0a:e5:29:da:f5:40:9a:f2:eb:0c:f7:e5:53:7f:b9:8f:bd: 5d:b4:ca:a2:18:57:57:23:f1:83:ef:f2:1d:85:86:56:f4:69: 20:6a:28:bb:e8:3f:90:c2:54:10:f7:22:66:8b:54:74:75:66: 55:08:87:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUtgH0mPQGBPFcGYUb/3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzA0MmViMGM0OGVjYjM3MTllNWMwZWUyZTE5Yzc0ZTI4 ODBmM2IwHhcNMjUxMjE2MDQwMjI0WhcNMjUxMjE3MDQwMjI0WjAzMTEwLwYDVQQD EyhkZTU2MTAxZjEzMTVkNTZlMTYzNGVkYzUwZmE2YjA2NmVmZjY0NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTe87v/ZfnPUnHa5Ceoi5Ya7F6aN hXbey1vWjBvQnQAMbtoUxxPG9TeaII0PgaPgkSP1gWw7M2xW26mKxtyJVozIMaqE zcVjoppAA18V/Z5DKJLAfSyGMuXI056TQKL1VI9YJmlU4ROgrDgKUoI/65Mes4KV ZLM7cuOaAs7n/J4kjc3UL4pgC8YzICzDKiT1K1z+n4V/QS5xKG6MSjdFv8+A5yCt alqytsc77c/TdBc+qdyQYIWOv5Jqn+u3sHerdZ9n7AdSUlo9rlwUPsYlOPgU1vRx gmx9PaAzGOyclJ4uJZP2Ic9hRAgLa9g/z/oroZwDj0un1EcAW8lgQgYKywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5WEB8TFdVuFjTtxQ+msGbv9kSwMB8GA1UdIwQY MBaAFNpwQusMSOyzcZ5cDuLhnHTiiA87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMt NTAxZjc3YjQyZTlhLzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMtNTAxZjc3YjQyZTlh LzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZQ5ucSd V8C+QCcca5P7Xws1R/Hmsvjv9k1mXiFC+swHq37yvGyIK+oOsJnXEQzU0rH7BehG JQ5LgOc97Ztr1/3PmEOQT19quRUrvbGzajKUeFnyWCbQ5fM7IwePghTUte0HoOYQ vSvQuR3ztdnOzAwkhwCBFd5Nyvg21JDhhnAVNlmhwEGcR4q5ifAt/y8Q7oN96314 MaMLWSN2+okCnH8dtwy/1CPu03I5YzCqD2+wxl7JdaFjkhFIh0rGyI7cc16RZm+x pArlKdr1QJry6wz35VN/uY+9XbTKohhXVyPxg+/yHYWGVvRpIGoou+g/kMJUEPci ZotUdHVmVQiHwA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:40:25 2025 by rpki-client