This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json) Hash identifier: 1n/0Ixbdu0ynydrSL1Ue1TK2DRqFryQBTBYVMkPImcI= Subject key identifier: 65:65:A3:59:44:6B:97:71:1A:73:F4:FA:B6:52:C8:7E:08:96:A9:5C Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511 Certificate serial: 019B2098AC9323985A01514C8B9410A8B7E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft Manifest number: 0E07 Signing time: Mon 15 Dec 2025 06:00:35 +0000 Manifest this update: Mon 15 Dec 2025 06:00:35 +0000 Manifest next update: Tue 16 Dec 2025 06:00:35 +0000 Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=) 2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: 9eAZWOBQ7P65+CKX247+Q6XlYb7eWeZ77gURPpiCMbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:ac:93:23:98:5a:01:51:4c:8b:94:10:a8:b7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511 Validity Not Before: Dec 15 06:00:35 2025 GMT Not After : Dec 16 06:00:35 2025 GMT Subject: CN=6565a359446b97711a73f4fab652c87e0896a95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:91:d7:b7:1c:ba:4f:09:68:2a:ca:ea:67:67: 32:b2:67:c0:74:71:87:dd:28:4d:ae:a6:3d:93:06: b1:0b:90:af:2b:3e:83:f7:cc:9c:87:f8:43:b5:93: a4:69:66:e1:e5:d6:a7:49:00:a0:b2:95:46:57:4d: 22:ca:eb:54:00:48:5d:57:1d:88:f0:ba:35:fe:c4: a8:44:7c:5b:cd:b6:db:b3:02:c0:0e:cd:50:d4:8b: 2f:f9:ef:54:47:9e:e5:d0:31:d3:b2:7d:62:28:2c: a9:31:5f:2f:9b:93:a4:48:1c:25:68:e6:39:31:a9: c8:97:75:fd:a0:e0:30:b3:32:b4:dc:d3:d1:7b:a7: 32:c3:3c:15:bd:e0:b5:0c:04:5f:78:78:01:e4:4f: 93:83:70:b5:de:8c:54:92:df:18:c8:a2:4d:3d:fd: 2c:1c:43:d7:06:f3:62:9b:f0:f5:84:86:30:c7:d6: 6d:cd:0e:65:9b:c7:82:ec:1c:de:27:b1:6a:5f:8a: 13:fd:1e:1f:c2:ae:fc:9e:eb:62:84:a9:38:07:d6: 98:7d:0f:66:a8:c1:cf:25:68:36:90:73:41:8e:12: f1:e3:5f:34:8f:6e:04:08:b7:ce:a6:1d:aa:89:5b: 0e:e8:27:ad:7b:e1:3a:a6:30:79:1a:24:ef:f5:1f: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:65:A3:59:44:6B:97:71:1A:73:F4:FA:B6:52:C8:7E:08:96:A9:5C X509v3 Authority Key Identifier: keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:11:80:9b:60:df:84:f8:c1:a2:03:02:8a:21:6f:46:4a:33: 7d:f3:18:9c:f9:6e:da:de:2e:5b:00:24:55:a3:15:e0:19:1c: 38:6e:63:20:24:a2:0c:81:d4:01:70:8f:53:f9:b8:ba:0a:11: 9b:79:ac:c4:28:c0:60:03:62:ff:2b:90:3a:42:63:d9:87:2b: f4:86:b7:42:fa:ff:d4:cf:07:22:b3:72:55:b3:1c:d1:fd:a4: ec:16:13:7b:7c:d2:85:9a:e0:48:c6:9a:ae:5c:24:9f:e8:88: 6a:d6:bd:ba:4d:69:3d:43:cf:30:f0:0a:ee:2c:23:a0:fb:0d: eb:0c:eb:a0:92:b6:c5:50:c6:f9:1d:84:d2:fb:84:20:7e:3b: 44:f4:85:e6:eb:00:23:e9:f3:87:99:25:ef:2d:66:e6:09:9d: a8:7e:15:60:f2:45:79:9f:83:47:4d:0e:e6:dd:bd:fd:c2:83: e7:a2:55:43:f9:4b:dc:24:01:85:0d:1a:2b:ad:46:4d:5b:96: 40:20:d5:55:c1:f6:bc:9b:ba:79:6e:64:d2:c7:bc:de:27:2d: 16:fe:38:ee:db:8f:c7:4b:7f:01:28:f2:27:72:f0:dd:2f:1d: 63:f7:6a:8d:84:6d:45:b4:48:9a:12:a1:df:88:07:d3:82:11: 66:3e:5f:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmKyTI5haAVFMi5QQqLfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl OGM1MTEwHhcNMjUxMjE1MDYwMDM1WhcNMjUxMjE2MDYwMDM1WjAzMTEwLwYDVQQD Eyg2NTY1YTM1OTQ0NmI5NzcxMWE3M2Y0ZmFiNjUyYzg3ZTA4OTZhOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJHXtxy6TwloKsrqZ2cysmfAdHGH 3ShNrqY9kwaxC5CvKz6D98ych/hDtZOkaWbh5danSQCgspVGV00iyutUAEhdVx2I 8Lo1/sSoRHxbzbbbswLADs1Q1Isv+e9UR57l0DHTsn1iKCypMV8vm5OkSBwlaOY5 ManIl3X9oOAwszK03NPRe6cywzwVveC1DARfeHgB5E+Tg3C13oxUkt8YyKJNPf0s HEPXBvNim/D1hIYwx9ZtzQ5lm8eC7BzeJ7FqX4oT/R4fwq78nutihKk4B9aYfQ9m qMHPJWg2kHNBjhLx4180j24ECLfOph2qiVsO6Cete+E6pjB5GiTv9R9eoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVlo1lEa5dxGnP0+rZSyH4IlqlcMB8GA1UdIwQY MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0 LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBGAm2Df hPjBogMCiiFvRkozffMYnPlu2t4uWwAkVaMV4BkcOG5jICSiDIHUAXCPU/m4ugoR m3msxCjAYANi/yuQOkJj2Ycr9Ia3Qvr/1M8HIrNyVbMc0f2k7BYTe3zShZrgSMaa rlwkn+iIata9uk1pPUPPMPAK7iwjoPsN6wzroJK2xVDG+R2E0vuEIH47RPSF5usA I+nzh5kl7y1m5gmdqH4VYPJFeZ+DR00O5t29/cKD56JVQ/lL3CQBhQ0aK61GTVuW QCDVVcH2vJu6eW5k0se83ictFv447tuPx0t/ASjyJ3Lw3S8dY/dqjYRtRbRImhKh 34gH04IRZj5fig== -----END CERTIFICATE-----Generated at Mon Dec 15 13:34:43 2025 by rpki-client