This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json) Hash identifier: 5ssPfxQ0nbu4UmDBEuvUSOaRMqSE5sDgGmkGe0pXIpc= Subject key identifier: C3:FD:73:46:B8:A3:E8:5E:B7:0B:0A:9B:95:40:A1:19:3B:BA:86:D2 Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Certificate serial: 019B59AD3D27066F4A9EA625F291AD294617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft Manifest number: 0D70 Signing time: Fri 26 Dec 2025 08:01:24 +0000 Manifest this update: Fri 26 Dec 2025 08:01:24 +0000 Manifest next update: Sat 27 Dec 2025 08:01:24 +0000 Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: hEeEKrTM47zhWchOduKbgKAzVTjd5d4cf+XujVvDBdM=) 2: AFsm5Hojd_mzqy4fDUGaBTUHip0.roa (hash: /zyEWmbu24okUbXBK84y7eHw8Bd0tTWYuWt84qBvy9I=) 3: O3tc3OLHq8cB4loy7Fxi0BP8NNQ.roa (hash: CkO+KiiM2ukYR9GxsF5rvvOLV2C/777PuHZR8Bn21G4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:3d:27:06:6f:4a:9e:a6:25:f2:91:ad:29:46:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267 Validity Not Before: Dec 26 08:01:24 2025 GMT Not After : Dec 27 08:01:24 2025 GMT Subject: CN=c3fd7346b8a3e85eb70b0a9b9540a1193bba86d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:6b:ff:b8:b5:d8:55:57:e7:f5:8b:80:84: 64:e2:da:21:7f:28:8f:b0:87:56:88:6c:1b:07:91: 96:09:4f:4b:3c:4e:b3:58:b1:af:c2:cc:46:bb:c4: 18:7a:ce:03:30:75:61:91:08:4d:c8:07:a5:da:60: 51:7f:bd:6f:7f:9c:a6:f5:ec:12:a1:af:08:90:6f: f1:bb:7b:ef:26:31:13:64:c4:52:e0:dd:90:67:df: 09:cb:c6:05:20:76:24:6f:43:0f:45:da:c3:65:85: 12:ff:87:0a:b7:8e:b4:91:5c:09:51:81:ff:3c:87: aa:aa:9c:dc:5d:1d:40:de:4d:ad:03:85:26:cd:4b: 3f:71:e1:41:68:fe:04:7c:8a:a8:f0:d4:d0:96:cd: b3:3c:8c:09:5a:ec:b9:12:b1:36:21:c9:b1:ac:54: 9d:a4:c4:34:02:10:3d:f5:26:ef:7d:a6:df:cf:88: 4a:ef:48:17:cb:d5:80:54:75:aa:8b:f6:47:c0:c9: a1:ba:65:41:8e:87:b1:47:1d:73:bb:4b:b2:69:b4: 38:4f:fa:2f:88:51:97:cf:c5:e4:ff:17:d3:e6:3b: d2:81:e4:47:fb:7b:fc:6b:76:b0:36:02:c2:8d:ea: 52:11:e2:88:49:e5:1c:99:1f:fd:b8:2e:5b:75:dd: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FD:73:46:B8:A3:E8:5E:B7:0B:0A:9B:95:40:A1:19:3B:BA:86:D2 X509v3 Authority Key Identifier: keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:47:6f:24:56:36:39:73:f6:d0:07:e4:0d:53:74:ef:90:80: 5b:08:a3:b3:68:df:34:5b:03:52:6f:94:16:c1:7e:7e:27:1b: 1c:2c:c4:2b:83:23:37:41:e2:19:ee:ba:cf:ce:0f:4e:8b:9a: 16:88:90:67:ae:d9:92:f0:52:f2:a4:c0:9c:e3:08:df:e2:53: 0a:7b:a9:8f:77:6d:9d:0b:b4:d9:65:60:f8:5c:4d:84:95:a0: a4:48:db:28:ff:b9:00:5d:23:2e:88:6f:6e:1d:46:34:c2:8d: ac:03:4f:d2:2f:26:7d:d7:a5:6d:37:a4:94:c2:4a:dc:23:f0: a5:a5:56:f4:f7:38:df:6d:30:ed:80:3d:92:59:6f:75:2e:3a: e2:e6:97:02:61:53:6f:2d:5e:2d:66:2e:34:5a:d7:bc:c5:18: 5d:50:53:09:6c:71:38:f8:8d:45:99:b9:63:eb:26:36:d4:4b: 46:8f:95:88:af:7c:54:18:7d:33:80:eb:32:3b:48:65:a5:5b: bc:c7:b9:10:73:b3:29:a7:0f:f3:80:f0:8c:79:c5:b6:f5:18: b4:21:61:c3:e1:e8:62:a6:73:3e:14:01:22:f6:f6:cf:75:7b: a3:fa:6f:44:b6:46:13:5f:b5:aa:56:c8:ee:dc:0e:1a:e6:6a: d5:ab:99:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrT0nBm9KnqYl8pGtKUYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzYzM2ExNGNhYzdjN2EwOTIyZmZkOTgwZGU1ZjI3OGEz YmUyNjcwHhcNMjUxMjI2MDgwMTI0WhcNMjUxMjI3MDgwMTI0WjAzMTEwLwYDVQQD EyhjM2ZkNzM0NmI4YTNlODVlYjcwYjBhOWI5NTQwYTExOTNiYmE4NmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2pr/7i12FVX5/WLgIRk4tohfyiP sIdWiGwbB5GWCU9LPE6zWLGvwsxGu8QYes4DMHVhkQhNyAel2mBRf71vf5ym9ewS oa8IkG/xu3vvJjETZMRS4N2QZ98Jy8YFIHYkb0MPRdrDZYUS/4cKt460kVwJUYH/ PIeqqpzcXR1A3k2tA4UmzUs/ceFBaP4EfIqo8NTQls2zPIwJWuy5ErE2IcmxrFSd pMQ0AhA99Sbvfabfz4hK70gXy9WAVHWqi/ZHwMmhumVBjoexRx1zu0uyabQ4T/ov iFGXz8Xk/xfT5jvSgeRH+3v8a3awNgLCjepSEeKISeUcmR/9uC5bdd2IBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP9c0a4o+hetwsKm5VAoRk7uobSMB8GA1UdIwQY MBaAFNrGM6FMrHx6CSL/2YDeXyeKO+JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt MjQ1MTVhMTRjNDU2LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2 LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0dvJFY2 OXP20AfkDVN075CAWwijs2jfNFsDUm+UFsF+ficbHCzEK4MjN0HiGe66z84PToua FoiQZ67ZkvBS8qTAnOMI3+JTCnupj3dtnQu02WVg+FxNhJWgpEjbKP+5AF0jLohv bh1GNMKNrANP0i8mfdelbTeklMJK3CPwpaVW9Pc4320w7YA9kllvdS464uaXAmFT by1eLWYuNFrXvMUYXVBTCWxxOPiNRZm5Y+smNtRLRo+ViK98VBh9M4DrMjtIZaVb vMe5EHOzKacP84DwjHnFtvUYtCFhw+HoYqZzPhQBIvb2z3V7o/pvRLZGE1+1qlbI 7twOGuZq1auZZg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:56 2025 by rpki-client