This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json) Hash identifier: oQOr0QOPmZxWrmy3jhepEin29Tme2eu2wSn8xiNMYUU= Subject key identifier: 5A:31:E4:F4:61:F7:59:E0:50:DC:A2:6A:1D:11:75:F5:66:F3:C4:46 Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Certificate serial: 019B0E270926CF447D31B85D2443A358E23B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft Manifest number: 0E1B Signing time: Thu 11 Dec 2025 16:03:17 +0000 Manifest this update: Thu 11 Dec 2025 16:03:17 +0000 Manifest next update: Fri 12 Dec 2025 16:03:17 +0000 Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: u65F+Xdrxnk1rn7X4Kq34tTOaWnQxNlzj7z5VLeDBBM=) 2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:27:09:26:cf:44:7d:31:b8:5d:24:43:a3:58:e2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a Validity Not Before: Dec 11 16:03:17 2025 GMT Not After : Dec 12 16:03:17 2025 GMT Subject: CN=5a31e4f461f759e050dca26a1d1175f566f3c446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:76:13:c2:88:fe:ec:e7:51:e3:de:71:ea: d7:a7:e0:63:72:14:50:5d:97:e0:81:0d:e7:6e:d3: 3d:49:9c:6b:45:66:a3:53:80:5a:40:b3:6b:b1:95: e9:46:bf:3c:05:68:b3:a5:e2:19:00:69:f7:da:6f: fd:62:c2:1f:8d:34:bb:0e:27:a7:0c:10:63:fb:85: ee:54:22:61:c5:af:3a:08:9f:32:af:e8:34:dc:31: 2e:23:e5:ff:b3:b5:b8:68:e6:6e:1c:1e:88:96:7f: 16:8e:f0:2e:89:55:19:4f:d8:87:37:be:1a:85:9a: 8c:d5:64:b2:94:78:f8:b5:c3:b4:e5:69:59:bd:b2: a8:f6:61:61:b4:d4:cf:b1:1d:9b:49:e3:08:d3:51: 06:65:30:b2:19:8e:1c:47:0a:95:e4:c2:34:68:3e: c5:79:2a:d7:34:25:f1:44:40:69:48:80:84:dc:9c: a2:86:e3:a8:fd:95:74:a6:73:c8:55:ab:11:eb:db: 78:3d:0b:43:f1:fe:b8:a0:ec:dd:0e:21:6a:e0:43: 67:29:33:96:f0:dd:e3:47:a5:10:6e:31:45:9c:4d: 69:02:f4:ff:ee:05:89:14:08:b2:ef:06:31:f1:8a: 86:6d:12:73:e5:cc:9a:cd:32:bf:58:94:e4:09:82: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:E4:F4:61:F7:59:E0:50:DC:A2:6A:1D:11:75:F5:66:F3:C4:46 X509v3 Authority Key Identifier: keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:89:86:1a:f3:71:f2:d4:40:b7:75:df:50:54:7b:78:7c:5a: 55:cf:c5:d3:a2:14:f8:db:2e:8e:60:2a:c2:79:18:a1:54:ec: 53:04:5d:8c:f6:59:3e:ea:e2:57:e6:95:8e:68:41:34:ac:86: ef:17:06:76:40:ef:75:34:f9:f4:55:35:7f:39:88:4b:cc:95: 71:86:38:cd:15:bd:12:41:9d:aa:df:80:84:82:57:5a:24:52: 2f:85:05:72:06:4c:17:a9:14:b6:13:c5:f1:de:cd:cb:bf:96: 08:f6:af:77:e6:8c:0b:92:1a:a8:e1:4c:60:19:a4:f8:44:d2: b2:36:bb:bd:d0:34:54:18:01:45:3c:70:fe:73:16:30:b7:51: a5:1f:6d:a6:ff:d7:74:6f:a7:bd:4d:0b:fa:a9:da:79:fd:e4: 81:7c:04:00:f8:bc:b7:85:ec:39:86:62:80:99:7e:6c:2e:4c: 4e:8b:2e:a1:42:eb:12:da:a0:52:d9:f4:15:d1:af:41:cd:26: c5:f8:21:07:5e:df:78:00:f0:5d:f2:0b:d8:1c:1d:57:7f:4d: 92:7a:f9:83:fa:7e:a4:1d:62:04:e5:08:2c:c3:3b:fb:56:96: 0c:ea:d3:3a:d2:a7:d1:22:6d:9a:b6:6b:37:64:6e:f4:50:b7: ec:b6:f6:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJwkmz0R9MbhdJEOjWOI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YjkyYWY0NGI3OWZjMGFjZjY0MTAzZWI1ZmIzMzdhOTFl ZWNkOWEwHhcNMjUxMjExMTYwMzE3WhcNMjUxMjEyMTYwMzE3WjAzMTEwLwYDVQQD Eyg1YTMxZTRmNDYxZjc1OWUwNTBkY2EyNmExZDExNzVmNTY2ZjNjNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tV2E8KI/uznUePecerXp+BjchRQ XZfggQ3nbtM9SZxrRWajU4BaQLNrsZXpRr88BWizpeIZAGn32m/9YsIfjTS7Dien DBBj+4XuVCJhxa86CJ8yr+g03DEuI+X/s7W4aOZuHB6Iln8WjvAuiVUZT9iHN74a hZqM1WSylHj4tcO05WlZvbKo9mFhtNTPsR2bSeMI01EGZTCyGY4cRwqV5MI0aD7F eSrXNCXxREBpSICE3JyihuOo/ZV0pnPIVasR69t4PQtD8f64oOzdDiFq4ENnKTOW 8N3jR6UQbjFFnE1pAvT/7gWJFAiy7wYx8YqGbRJz5cyazTK/WJTkCYIDCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFox5PRh91ngUNyiah0RdfVm88RGMB8GA1UdIwQY MBaAFNi5KvRLefwKz2QQPrX7M3qR7s2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMt NjdhYzk3MTE4Y2FjLzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lYWM4NmItNmU5MS00YmJlLWEyMDMtNjdhYzk3MTE4Y2Fj LzEvMkxrcTlFdDVfQXJQWkJBLXRmc3plcEh1elpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiImGGvNx 8tRAt3XfUFR7eHxaVc/F06IU+NsujmAqwnkYoVTsUwRdjPZZPuriV+aVjmhBNKyG 7xcGdkDvdTT59FU1fzmIS8yVcYY4zRW9EkGdqt+AhIJXWiRSL4UFcgZMF6kUthPF 8d7Ny7+WCPavd+aMC5IaqOFMYBmk+ETSsja7vdA0VBgBRTxw/nMWMLdRpR9tpv/X dG+nvU0L+qnaef3kgXwEAPi8t4XsOYZigJl+bC5MTosuoULrEtqgUtn0FdGvQc0m xfghB17feADwXfIL2BwdV39Nknr5g/p+pB1iBOUILMM7+1aWDOrTOtKn0SJtmrZr N2Ru9FC37Lb2Pw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:36:45 2025 by rpki-client