This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json) Hash identifier: 0i2mg7xZFuPU8VAGAI2iFPt1iwCFp0AS/1y/FBf8xwo= Subject key identifier: 0E:07:A9:C1:31:FD:F0:FC:DA:81:F9:81:67:E1:BF:C3:39:45:43:CF Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Certificate serial: 019B1ACE149479522F749CA56A3C311A52A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft Manifest number: 0AF9 Signing time: Sun 14 Dec 2025 03:01:11 +0000 Manifest this update: Sun 14 Dec 2025 03:01:11 +0000 Manifest next update: Mon 15 Dec 2025 03:01:11 +0000 Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: TmiIR9yhYMIknFyaLeQuRxjbsB0Nn/fSJiamcbIDDNU=) 2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=) 3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=) 4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:ce:14:94:79:52:2f:74:9c:a5:6a:3c:31:1a:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Validity Not Before: Dec 14 03:01:11 2025 GMT Not After : Dec 15 03:01:11 2025 GMT Subject: CN=0e07a9c131fdf0fcda81f98167e1bfc3394543cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:ca:57:9c:bb:9e:e4:8a:aa:60:ea:7d:39: 44:f0:57:42:1c:58:bf:19:fc:bf:14:c2:b8:51:2b: c5:64:e2:25:e0:06:57:de:47:fd:4e:ee:f9:c7:ae: a5:f5:72:4d:4a:f1:29:fb:2d:c9:f7:0f:ca:c0:62: cb:22:8a:31:ea:31:e8:78:d5:23:69:8f:41:e5:4f: dc:94:2c:7e:ab:e8:88:54:d2:0a:63:cd:b9:17:ad: 59:07:81:d9:26:74:da:47:7a:1e:f3:71:b4:32:fc: 9b:73:27:f4:19:9c:98:27:e1:89:12:ad:96:25:18: 9f:8b:16:4e:c0:6d:1f:16:9c:e9:90:9b:60:20:a8: 3a:31:09:1b:1e:bb:67:0e:7e:16:63:ce:21:e4:4a: 9f:fc:08:90:8d:09:12:6f:21:85:fe:59:fe:f6:06: a6:7e:91:be:83:78:b6:e4:f3:69:24:41:4f:56:f3: af:26:09:5e:09:92:ae:93:cd:df:be:d8:67:83:2f: d0:81:b5:a9:0c:a3:49:9c:3b:c4:1a:a1:6b:fa:84: 89:a2:55:f3:b0:72:95:77:7f:65:dd:41:49:72:0e: f5:5c:16:bd:47:8f:71:35:52:61:20:27:94:51:8f: c2:02:11:65:36:51:44:28:29:7f:2a:63:87:45:7c: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:07:A9:C1:31:FD:F0:FC:DA:81:F9:81:67:E1:BF:C3:39:45:43:CF X509v3 Authority Key Identifier: keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8d:85:56:b3:ca:c6:08:4f:e9:84:03:15:ac:44:3c:28:c1: c7:67:d7:d7:46:d0:59:d3:89:7a:92:6a:06:5b:48:d7:d7:01: 48:7e:04:d2:1b:9e:eb:45:48:ee:2a:92:14:18:84:35:d6:da: 2e:3a:be:59:f1:eb:a7:67:7a:0d:88:ab:71:55:fd:c6:2a:50: 1b:f2:c8:4d:36:51:13:6e:9a:f4:19:df:8d:0f:ad:18:6d:97: e0:5a:b6:db:35:1d:04:78:d0:3a:c7:9b:36:77:14:88:3c:e3: e0:9b:24:f1:90:8f:d2:0e:73:00:e2:cd:f0:36:48:10:93:a2: d4:ea:65:33:b9:67:e2:6c:1c:39:09:38:34:ff:7a:d6:b6:93: fd:c8:2a:2a:46:6c:a2:ea:76:66:4c:21:29:d1:e7:13:9b:9f: 45:18:78:38:d6:0c:34:79:1d:a4:ce:7e:24:c4:9b:f7:ae:e9: 15:3f:fd:d4:92:d5:40:39:1f:75:23:4f:fe:bc:e3:8f:f7:94: 23:b6:63:2d:4a:7e:b0:cf:2c:f1:74:87:39:9d:cf:7d:aa:2e: 17:ce:2a:d8:4e:7a:a3:f5:16:d8:b4:98:11:d5:56:69:37:91: 6c:bf:7f:d9:d1:c0:b7:e0:4b:07:b6:7e:1f:55:f6:a3:bb:f0: ac:5f:31:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazhSUeVIvdJylajwxGlKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5 MWJlYjAwHhcNMjUxMjE0MDMwMTExWhcNMjUxMjE1MDMwMTExWjAzMTEwLwYDVQQD EygwZTA3YTljMTMxZmRmMGZjZGE4MWY5ODE2N2UxYmZjMzM5NDU0M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0rKV5y7nuSKqmDqfTlE8FdCHFi/ Gfy/FMK4USvFZOIl4AZX3kf9Tu75x66l9XJNSvEp+y3J9w/KwGLLIoox6jHoeNUj aY9B5U/clCx+q+iIVNIKY825F61ZB4HZJnTaR3oe83G0Mvybcyf0GZyYJ+GJEq2W JRifixZOwG0fFpzpkJtgIKg6MQkbHrtnDn4WY84h5Eqf/AiQjQkSbyGF/ln+9gam fpG+g3i25PNpJEFPVvOvJgleCZKuk83fvthngy/QgbWpDKNJnDvEGqFr+oSJolXz sHKVd39l3UFJcg71XBa9R49xNVJhICeUUY/CAhFlNlFEKCl/KmOHRXyaHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4HqcEx/fD82oH5gWfhv8M5RUPPMB8GA1UdIwQY MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANI2FVrPK xghP6YQDFaxEPCjBx2fX10bQWdOJepJqBltI19cBSH4E0hue60VI7iqSFBiENdba Ljq+WfHrp2d6DYircVX9xipQG/LITTZRE26a9BnfjQ+tGG2X4Fq22zUdBHjQOseb NncUiDzj4Jsk8ZCP0g5zAOLN8DZIEJOi1OplM7ln4mwcOQk4NP961raT/cgqKkZs oup2ZkwhKdHnE5ufRRh4ONYMNHkdpM5+JMSb967pFT/91JLVQDkfdSNP/rzjj/eU I7ZjLUp+sM8s8XSHOZ3PfaouF84q2E56o/UW2LSYEdVWaTeRbL9/2dHAt+BLB7Z+ H1X2o7vwrF8xPQ== -----END CERTIFICATE-----Generated at Sun Dec 14 08:22:30 2025 by rpki-client