This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json) Hash identifier: OI/KOSFVAp5txtwuFXVhWyHO2gXo6MLrYfeW1nqbjMQ= Subject key identifier: 17:90:89:A6:C9:97:CC:8F:78:B8:34:E6:BD:99:A9:A6:28:96:16:AE Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Certificate serial: 019B0E26A2805E544CFBE67F04991B67D390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft Manifest number: 16A3 Signing time: Thu 11 Dec 2025 16:02:51 +0000 Manifest this update: Thu 11 Dec 2025 16:02:51 +0000 Manifest next update: Fri 12 Dec 2025 16:02:51 +0000 Files and hashes: 1: 9dm3RFT9BYoMAAVpyE60LHFzSlc.roa (hash: uwrhQ0q4VpiHZaTRgjsMBaRGiUAzHgpiv2VyGMcmfoA=) 2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: 8MGrU6bmRNs2LKGhwn/2d377AGGmukhfD0uqfAurAuA=) 3: ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa (hash: ephpJ4ipHMwrJD7Bz3rKfNSaDOgLcj3aX7bFbiCir/4=) 4: wUsbt-HTaTgAWsY_K2ZwhZempLg.roa (hash: OXuJmL2+egILFuJsJVzo1F0QRoATbyDTCvgbpKqhXMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:a2:80:5e:54:4c:fb:e6:7f:04:99:1b:67:d3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9 Validity Not Before: Dec 11 16:02:51 2025 GMT Not After : Dec 12 16:02:51 2025 GMT Subject: CN=179089a6c997cc8f78b834e6bd99a9a6289616ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:31:09:08:95:42:3e:47:a3:a0:39:cb:dd:10: 99:8d:86:2f:9e:74:09:7f:53:60:07:48:8e:21:96: 2b:74:16:8a:83:5c:01:94:16:5f:d9:ad:1b:28:c6: 6e:f3:5d:ef:5d:25:18:09:67:1d:5c:50:27:5f:0b: 87:12:3b:8d:ac:77:f8:8d:f5:6b:f3:97:ee:b2:7b: 06:90:7b:6f:59:c0:e3:35:16:0a:19:82:38:bd:ab: fb:4d:2f:2b:94:c9:c9:87:9b:b4:ac:71:7e:43:b4: a6:16:25:54:fc:17:f2:e8:da:06:81:96:37:9c:56: 5b:6b:80:0e:5c:19:84:fb:09:9d:3c:c2:50:ec:71: 65:3c:f9:3a:e0:e4:42:e6:75:e8:4d:f4:76:ce:47: 8e:b9:2d:bb:7a:12:3f:d5:0e:58:32:2d:a8:77:a8: 74:67:50:87:ad:ef:4c:1e:f5:bd:f7:38:01:bb:d1: 1a:de:20:27:65:79:db:79:c1:5b:8b:c6:0c:e8:54: 9f:01:d9:ee:26:ac:66:5b:e7:af:a5:44:b4:b1:a3: b4:24:37:5c:05:8a:e3:b2:53:f9:d5:ba:dd:72:07: ff:de:26:0e:e8:1a:13:7d:4d:3e:6a:f4:59:b6:f7: 22:16:d0:58:f7:41:56:4e:80:7b:31:97:63:a6:37: 23:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:90:89:A6:C9:97:CC:8F:78:B8:34:E6:BD:99:A9:A6:28:96:16:AE X509v3 Authority Key Identifier: keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f8:08:97:13:29:32:ab:cc:66:1e:fd:68:87:1e:b3:f1:22: 5d:a7:23:e9:e8:6f:f0:51:85:30:91:2c:f7:3e:97:51:43:37: 5d:26:b7:3c:b2:00:95:70:92:2c:81:0f:7e:10:56:04:52:9f: 07:c7:17:3d:c7:f8:a9:6b:1f:a1:70:f3:4a:76:d6:b4:2d:09: 49:e6:84:52:4a:df:34:5f:85:08:ad:fa:5c:e6:f7:ec:e5:f9: 77:73:7f:a3:66:43:3b:be:6d:cf:90:18:f3:b6:13:08:90:58: 90:90:3a:1c:5e:68:42:c6:9f:46:76:92:05:dd:d1:8c:11:1a: 65:b8:9e:60:17:af:d7:f0:6e:c5:07:21:5a:84:78:aa:72:25: 81:a1:20:0d:98:fa:be:7a:b8:e1:13:d2:10:04:28:40:d9:f7: 3d:1c:53:e1:27:43:b6:ec:41:73:67:64:2c:0f:df:1f:a4:ea: c0:37:54:0c:cf:af:09:b6:3b:17:5e:13:96:47:22:0e:31:c6: cc:4d:0d:04:82:b6:4c:62:2b:e9:e7:9e:2c:1c:7c:04:b5:ac: a3:9d:eb:dc:61:18:a6:dd:b9:4d:6b:54:91:30:55:72:f7:ca: a0:dc:a5:9a:0b:8f:bf:7c:c4:e8:27:65:e2:08:04:ea:e4:4d: b6:70:c1:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJqKAXlRM++Z/BJkbZ9OQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjI1NjJjYWU4NzNmNGZjNGEzMjMyYmY0OWRkNTM0M2I3 MDg0ZjkwHhcNMjUxMjExMTYwMjUxWhcNMjUxMjEyMTYwMjUxWjAzMTEwLwYDVQQD EygxNzkwODlhNmM5OTdjYzhmNzhiODM0ZTZiZDk5YTlhNjI4OTYxNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zEJCJVCPkejoDnL3RCZjYYvnnQJ f1NgB0iOIZYrdBaKg1wBlBZf2a0bKMZu813vXSUYCWcdXFAnXwuHEjuNrHf4jfVr 85fusnsGkHtvWcDjNRYKGYI4vav7TS8rlMnJh5u0rHF+Q7SmFiVU/Bfy6NoGgZY3 nFZba4AOXBmE+wmdPMJQ7HFlPPk64ORC5nXoTfR2zkeOuS27ehI/1Q5YMi2od6h0 Z1CHre9MHvW99zgBu9Ea3iAnZXnbecFbi8YM6FSfAdnuJqxmW+evpUS0saO0JDdc BYrjslP51brdcgf/3iYO6BoTfU0+avRZtvciFtBY90FWToB7MZdjpjcjQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeQiabJl8yPeLg05r2ZqaYolhauMB8GA1UdIwQY MBaAFP9iViyuhz9PxKMjK/Sd1TQ7cIT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEt ODhmN2I5MWI2ZTMyLzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zZGMzYzQtOWM0OC00YTY0LThmYTEtODhmN2I5MWI2ZTMy LzEvXzJKV0xLNkhQMF9Fb3lNcjlKM1ZORHR3aFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfgIlxMp MqvMZh79aIces/EiXacj6ehv8FGFMJEs9z6XUUM3XSa3PLIAlXCSLIEPfhBWBFKf B8cXPcf4qWsfoXDzSnbWtC0JSeaEUkrfNF+FCK36XOb37OX5d3N/o2ZDO75tz5AY 87YTCJBYkJA6HF5oQsafRnaSBd3RjBEaZbieYBev1/BuxQchWoR4qnIlgaEgDZj6 vnq44RPSEAQoQNn3PRxT4SdDtuxBc2dkLA/fH6TqwDdUDM+vCbY7F14TlkciDjHG zE0NBIK2TGIr6eeeLBx8BLWso53r3GEYpt25TWtUkTBVcvfKoNylmguPv3zE6Cdl 4ggE6uRNtnDBfQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:00 2025 by rpki-client