This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json) Hash identifier: rVzcPH3RKqJwJRy7wJbJhiaEvoQrbocDTO8iW7sflHs= Subject key identifier: 98:B5:B4:81:05:4C:5A:DF:42:A2:EA:A0:01:E5:B6:43:57:AE:F5:4B Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Certificate serial: 019B21E23E8709FA43C59C2F933EFE0C6FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft Manifest number: 03D5 Signing time: Mon 15 Dec 2025 12:00:33 +0000 Manifest this update: Mon 15 Dec 2025 12:00:33 +0000 Manifest next update: Tue 16 Dec 2025 12:00:33 +0000 Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: 3TVbnTJT2H7W1Zc6inxBK5C/oxr+kkPUNhD3sLazVgo=) 2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:3e:87:09:fa:43:c5:9c:2f:93:3e:fe:0c:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2 Validity Not Before: Dec 15 12:00:33 2025 GMT Not After : Dec 16 12:00:33 2025 GMT Subject: CN=98b5b481054c5adf42a2eaa001e5b64357aef54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:4b:78:98:16:f5:cf:8d:04:b4:60:28:3e: 45:40:a4:64:aa:ea:62:19:e2:08:e7:0e:4a:03:18: 01:4d:23:38:e6:0c:5a:33:c6:e5:fb:75:2d:de:e8: 6b:9a:b0:fd:15:a1:14:8e:18:36:7f:a4:88:7c:6a: dc:06:63:9e:24:c6:0c:21:af:32:aa:5e:e1:2c:8f: 67:6e:2a:4f:e2:3d:2f:7d:1b:65:d5:d8:6f:36:71: a1:4f:6b:a6:a3:78:c1:89:8f:35:16:03:be:9d:32: 8a:f1:db:cb:8c:40:22:ab:81:8b:7c:0b:08:2b:5c: fc:46:b6:05:ab:65:7f:2e:f3:b0:40:45:2c:e6:20: 3c:7e:05:0d:eb:b2:4b:a6:48:89:41:73:ae:b4:17: 5d:53:23:f4:7a:b1:2f:a0:2b:6e:b0:1a:e6:28:59: 35:80:57:56:23:d6:ba:ab:e7:fe:2f:3f:bd:66:ea: 55:97:94:5f:d4:28:91:7f:09:be:83:85:13:d9:db: 53:f3:02:d4:fa:35:e7:bd:86:4c:0e:de:91:da:1f: 08:e5:f1:08:86:8f:fa:89:c1:49:86:4e:07:2e:65: c6:39:14:79:02:6d:2a:8a:0a:9e:79:64:da:ba:7a: 27:65:63:6c:cc:a5:ab:6a:02:65:05:2c:b3:3a:ab: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B5:B4:81:05:4C:5A:DF:42:A2:EA:A0:01:E5:B6:43:57:AE:F5:4B X509v3 Authority Key Identifier: keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:64:1f:ad:98:8f:6d:05:cd:91:89:69:d9:51:ff:5e:94: 03:19:d1:13:80:84:13:40:10:72:80:ca:2a:28:c8:e1:c4:b9: 61:af:d5:9b:fe:1d:21:da:d3:17:e7:23:38:80:99:98:c6:61: 4d:c8:8c:9e:8d:1b:8f:6a:82:14:20:f4:58:18:4e:93:72:c7: 06:6c:5d:42:c3:b7:0b:38:45:e7:f9:e8:63:57:ed:c0:f5:47: 3f:08:9f:de:9b:e3:e6:10:78:aa:9f:ab:d2:a0:1f:c9:22:c5: 21:b3:fe:fd:49:4c:6a:d1:e5:6b:c2:84:c3:fa:1b:c2:14:9a: cc:d4:e9:aa:0e:b8:d9:01:aa:cd:76:9c:bc:01:b6:70:3a:05: b6:cf:42:6c:f6:c5:52:ec:2f:e9:42:ea:53:a0:c8:fe:b1:83: ae:38:f8:5d:48:e1:da:7c:7e:01:c3:12:7e:a6:af:ba:3f:13: 55:9e:80:80:5d:88:c6:27:f3:24:dd:2e:52:68:12:96:8e:5f: ab:7f:3d:49:f6:8a:fc:e8:17:ec:54:65:83:f3:41:a2:a6:82: 13:22:d2:32:70:c2:d1:c7:20:e8:10:25:7b:9a:17:db:50:23: 98:81:fe:7b:e9:0c:d7:88:ff:ef:86:02:be:57:b5:ac:09:41: 72:60:a8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4j6HCfpDxZwvkz7+DG+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWUyZGU1NGRhMjhjNzNmMTliM2UwNGVmOTU3NGU5OTA1 N2YxYTIwHhcNMjUxMjE1MTIwMDMzWhcNMjUxMjE2MTIwMDMzWjAzMTEwLwYDVQQD Eyg5OGI1YjQ4MTA1NGM1YWRmNDJhMmVhYTAwMWU1YjY0MzU3YWVmNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCBLeJgW9c+NBLRgKD5FQKRkqupi GeII5w5KAxgBTSM45gxaM8bl+3Ut3uhrmrD9FaEUjhg2f6SIfGrcBmOeJMYMIa8y ql7hLI9nbipP4j0vfRtl1dhvNnGhT2umo3jBiY81FgO+nTKK8dvLjEAiq4GLfAsI K1z8RrYFq2V/LvOwQEUs5iA8fgUN67JLpkiJQXOutBddUyP0erEvoCtusBrmKFk1 gFdWI9a6q+f+Lz+9ZupVl5Rf1CiRfwm+g4UT2dtT8wLU+jXnvYZMDt6R2h8I5fEI ho/6icFJhk4HLmXGORR5Am0qigqeeWTaunonZWNszKWragJlBSyzOqsK6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi1tIEFTFrfQqLqoAHltkNXrvVLMB8GA1UdIwQY MBaAFNquLeVNooxz8Zs+BO+VdOmQV/GiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMt NjAwOGU2MGNkMzBiLzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lM2FlYjctY2ExMC00MzI2LThiMWMtNjAwOGU2MGNkMzBi LzEvMnE0dDVVMmlqSFB4bXo0RTc1VjA2WkJYOGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGRkH62Y j20FzZGJadlR/16UAxnRE4CEE0AQcoDKKijI4cS5Ya/Vm/4dIdrTF+cjOICZmMZh TciMno0bj2qCFCD0WBhOk3LHBmxdQsO3CzhF5/noY1ftwPVHPwif3pvj5hB4qp+r 0qAfySLFIbP+/UlMatHla8KEw/obwhSazNTpqg642QGqzXacvAG2cDoFts9CbPbF Uuwv6ULqU6DI/rGDrjj4XUjh2nx+AcMSfqavuj8TVZ6AgF2IxifzJN0uUmgSlo5f q389SfaK/OgX7FRlg/NBoqaCEyLSMnDC0ccg6BAle5oX21AjmIH+e+kM14j/74YC vle1rAlBcmCoxw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:44:43 2025 by rpki-client