This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json) Hash identifier: m3B+87J1UJcFcAaTsqwhecJJ3KChw30lI+2CGvxrbro= Subject key identifier: 53:BE:8E:16:21:CE:33:C0:7C:CF:08:F0:B3:27:8D:10:CD:4B:5D:96 Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019AFA9DBC9A59B6EFCEC72770287925DC44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft Manifest number: 03D5 Signing time: Sun 07 Dec 2025 21:00:32 +0000 Manifest this update: Sun 07 Dec 2025 21:00:32 +0000 Manifest next update: Mon 08 Dec 2025 21:00:32 +0000 Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: NnPdsBSlXHbXEhRZJK9nYh1EjJlmIC6EtTXVwbsrrrU=) 2: IKiKBtqV8aj5bEB_07uOzUdtWLk.roa (hash: bQ7k6i8N3tX0GvUq5MJyPUTOMxjiiyFXgrbUPEnTVIc=) 3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=) 4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:9d:bc:9a:59:b6:ef:ce:c7:27:70:28:79:25:dc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Dec 7 21:00:32 2025 GMT Not After : Dec 8 21:00:32 2025 GMT Subject: CN=53be8e1621ce33c07ccf08f0b3278d10cd4b5d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:3c:4e:40:ba:73:dd:5e:78:f5:a3:91:7d: 02:82:b6:8d:62:79:cf:81:8b:3e:ff:21:6c:84:0a: 7d:06:ef:27:7a:47:e0:d5:59:dc:e3:b7:a4:29:11: c7:cf:fe:33:ca:01:e2:c0:cf:0b:9a:97:76:26:18: 5a:dc:86:6f:73:eb:19:66:b1:39:d6:b8:20:a7:e1: 6f:94:b9:a4:6e:b7:d8:9a:7c:e1:e6:06:98:83:a7: 07:ec:be:fb:15:a0:74:06:ac:ad:48:1b:8e:a9:ac: c6:97:4a:82:f6:f3:99:a2:86:e4:03:b0:b7:e3:c4: 48:2c:d9:c2:64:d6:98:7d:3c:d4:5d:13:fb:b5:c9: dc:14:b0:c0:f4:b2:0a:cc:40:85:ab:b2:c6:09:3e: 1b:3e:c1:80:fb:9e:16:00:e3:a4:df:ca:42:c9:06: 9e:a3:59:5d:32:f3:90:72:b8:89:c9:6c:71:3b:94: 36:d0:e2:51:79:24:d8:bd:a3:0f:94:7e:9f:3d:88: a1:cb:2a:38:4a:2b:ae:09:5f:76:c8:e8:89:19:66: 1d:ff:09:1d:da:e2:ea:0e:c8:d5:09:e1:7e:88:ed: d1:60:98:9d:45:d4:c5:91:39:7e:72:25:1d:ee:4a: fc:79:60:29:d3:5c:eb:94:7c:d0:6d:a9:21:79:d0: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BE:8E:16:21:CE:33:C0:7C:CF:08:F0:B3:27:8D:10:CD:4B:5D:96 X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2f:89:20:52:72:1d:50:32:93:65:85:f3:2f:77:4b:5f:e6: 03:84:d9:4f:a1:d7:cc:b4:9f:9b:fc:8d:1b:d1:e4:ad:81:a6: 3a:14:57:94:db:c8:31:3c:1f:d6:9a:90:c4:e6:96:34:e0:05: 3b:83:43:89:89:88:d2:d2:a3:ea:de:4a:47:05:36:33:a3:49: 41:b2:79:7b:3c:58:4f:77:aa:83:f5:e3:c7:bc:17:f0:36:e5: e8:fe:51:b3:2a:cb:94:ba:31:44:cc:22:f8:5a:30:39:49:f6: 51:26:aa:af:15:e7:a2:2e:37:c7:65:0d:f4:c0:f0:0f:55:04: d1:49:66:70:54:93:56:20:6a:b0:03:4f:3a:e5:b5:b9:34:d8: 0e:7b:17:5a:02:37:84:a1:97:d5:eb:70:12:35:22:fb:b7:3b: 37:f6:3d:8b:2d:a4:5e:f8:99:4b:fd:11:1c:a5:b5:9c:38:4d: f1:0a:1c:36:0a:52:b9:48:39:57:64:09:7f:6a:6b:cd:ab:cb: 04:48:15:3d:59:de:8f:da:93:92:5a:8d:f4:29:bd:eb:04:31: 80:c7:9c:0f:16:b1:6c:cf:f9:0e:01:c7:2f:ec:0e:88:c4:92: ec:19:f2:f3:99:30:4c:d9:fa:10:12:2b:e5:70:25:b5:32:40: 7e:28:d8:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6nbyaWbbvzscncCh5JdxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjUxMjA3MjEwMDMyWhcNMjUxMjA4MjEwMDMyWjAzMTEwLwYDVQQD Eyg1M2JlOGUxNjIxY2UzM2MwN2NjZjA4ZjBiMzI3OGQxMGNkNGI1ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQs8TkC6c91eePWjkX0CgraNYnnP gYs+/yFshAp9Bu8nekfg1Vnc47ekKRHHz/4zygHiwM8Lmpd2Jhha3IZvc+sZZrE5 1rggp+FvlLmkbrfYmnzh5gaYg6cH7L77FaB0BqytSBuOqazGl0qC9vOZoobkA7C3 48RILNnCZNaYfTzUXRP7tcncFLDA9LIKzECFq7LGCT4bPsGA+54WAOOk38pCyQae o1ldMvOQcriJyWxxO5Q20OJReSTYvaMPlH6fPYihyyo4SiuuCV92yOiJGWYd/wkd 2uLqDsjVCeF+iO3RYJidRdTFkTl+ciUd7kr8eWAp01zrlHzQbakhedDy3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO+jhYhzjPAfM8I8LMnjRDNS12WMB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC+JIFJy HVAyk2WF8y93S1/mA4TZT6HXzLSfm/yNG9HkrYGmOhRXlNvIMTwf1pqQxOaWNOAF O4NDiYmI0tKj6t5KRwU2M6NJQbJ5ezxYT3eqg/Xjx7wX8Dbl6P5RsyrLlLoxRMwi +FowOUn2USaqrxXnoi43x2UN9MDwD1UE0UlmcFSTViBqsANPOuW1uTTYDnsXWgI3 hKGX1etwEjUi+7c7N/Y9iy2kXviZS/0RHKW1nDhN8QocNgpSuUg5V2QJf2przavL BEgVPVnej9qTklqN9Cm96wQxgMecDxaxbM/5DgHHL+wOiMSS7Bny85kwTNn6EBIr 5XAltTJAfijY4g== -----END CERTIFICATE-----Generated at Mon Dec 8 02:36:59 2025 by rpki-client