This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json) Hash identifier: Ee6n18MGUTNuXbTwCdjnly6k2lox7bdFhUIRgLNAa68= Subject key identifier: 7B:AC:43:72:8B:32:89:66:CF:10:86:D0:C7:33:DD:56:3B:13:42:EF Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Certificate serial: 019B21750B3400483D209FB08E3CEF9E92FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft Manifest number: 1611 Signing time: Mon 15 Dec 2025 10:01:17 +0000 Manifest this update: Mon 15 Dec 2025 10:01:17 +0000 Manifest next update: Tue 16 Dec 2025 10:01:17 +0000 Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: q/A2jEUihpJA+JtMrorRlUAmcW8JEDhLEdV5fvXYva0=) 2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=) 3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=) 4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:0b:34:00:48:3d:20:9f:b0:8e:3c:ef:9e:92:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Validity Not Before: Dec 15 10:01:17 2025 GMT Not After : Dec 16 10:01:17 2025 GMT Subject: CN=7bac43728b328966cf1086d0c733dd563b1342ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:9d:5d:e7:9b:39:f6:56:2a:f0:69:6d:75: e8:95:93:df:3b:87:7e:48:9f:8f:cc:fb:bc:7f:07: f3:7e:af:89:00:9b:85:6d:d2:e2:91:45:84:94:a1: 85:b9:0a:35:29:86:e8:4a:77:54:cf:6e:3d:42:59: 96:07:3e:68:6c:56:7f:3d:06:1e:7d:7a:43:96:61: ca:28:a7:f6:72:69:50:88:7a:83:c8:87:40:ef:4f: 08:e7:0d:80:2a:2b:0e:b8:bb:42:a1:89:40:51:96: 66:6a:41:b3:79:79:7a:02:5a:1b:4e:0a:28:62:c1: 0f:c1:27:4d:b6:59:90:c2:16:3b:d6:7a:1a:57:c7: 93:11:45:58:80:8b:09:34:b2:d8:ad:38:d8:59:74: a6:a3:70:64:35:f3:85:c7:27:1b:93:0d:51:82:64: fe:5a:92:f1:be:c3:2a:15:0d:fc:03:25:6a:d3:47: d2:62:6d:fe:ff:90:62:11:af:d4:ab:48:cc:ae:f8: b7:11:48:ae:6a:e2:35:20:86:90:64:0f:cc:a1:45: 7f:77:35:ba:57:ae:79:22:71:ff:b8:3a:6c:b7:f8: 57:6f:b4:16:b7:73:20:c6:2f:a2:2f:3d:34:6e:82: 2a:6d:99:d8:19:e7:ef:16:f4:ea:2f:58:15:0d:91: d1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AC:43:72:8B:32:89:66:CF:10:86:D0:C7:33:DD:56:3B:13:42:EF X509v3 Authority Key Identifier: keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:f3:20:ea:ed:40:68:99:ea:0f:75:48:73:df:42:3a:03: 84:97:9e:c9:f9:ec:47:20:b3:71:ff:65:ea:b4:87:df:9e:86: 2e:4b:b3:23:c4:8a:fd:43:18:1e:95:71:47:de:45:f3:80:f4: 8d:e4:0a:5e:50:e6:a8:b9:12:10:94:98:41:67:23:72:1a:b7: a3:e2:8a:d3:fb:13:8b:e9:51:60:f1:aa:24:3a:86:7f:de:0c: c6:d9:81:73:cb:fb:75:61:d6:48:a7:9d:e9:dd:d3:e4:b2:43: 13:68:eb:42:79:2b:14:db:ea:79:70:35:07:90:35:23:23:0d: ca:15:77:a4:c7:22:e5:ef:90:2f:c0:60:da:e9:91:47:7a:a4: 4f:02:b4:4a:45:b0:c9:03:1e:44:f4:b4:c5:2a:7b:a3:74:94: b5:9a:22:f8:9b:5f:64:84:91:cf:d0:2b:fd:80:dc:26:2c:b6: 73:b0:14:c5:65:f5:40:46:d0:c8:25:73:53:16:5c:2c:9b:d3: c1:31:b3:33:98:b1:ee:73:83:d1:0a:0e:06:96:cf:42:e3:e8: a2:47:4b:4a:98:39:2e:f6:44:81:30:bf:10:d9:c4:85:e1:cd: 96:ed:aa:7d:ea:88:fd:c0:f1:d8:a0:7b:c1:0b:77:e7:23:ff: 2f:9d:49:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdQs0AEg9IJ+wjjzvnpL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll YmVmMTMwHhcNMjUxMjE1MTAwMTE3WhcNMjUxMjE2MTAwMTE3WjAzMTEwLwYDVQQD Eyg3YmFjNDM3MjhiMzI4OTY2Y2YxMDg2ZDBjNzMzZGQ1NjNiMTM0MmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe+dXeebOfZWKvBpbXXolZPfO4d+ SJ+PzPu8fwfzfq+JAJuFbdLikUWElKGFuQo1KYboSndUz249QlmWBz5obFZ/PQYe fXpDlmHKKKf2cmlQiHqDyIdA708I5w2AKisOuLtCoYlAUZZmakGzeXl6AlobTgoo YsEPwSdNtlmQwhY71noaV8eTEUVYgIsJNLLYrTjYWXSmo3BkNfOFxycbkw1RgmT+ WpLxvsMqFQ38AyVq00fSYm3+/5BiEa/Uq0jMrvi3EUiuauI1IIaQZA/MoUV/dzW6 V655InH/uDpst/hXb7QWt3Mgxi+iLz00boIqbZnYGefvFvTqL1gVDZHR1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHusQ3KLMolmzxCG0Mcz3VY7E0LvMB8GA1UdIwQY MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut ZGUyZGUxNWY5MGVkLzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXbzIOrt QGiZ6g91SHPfQjoDhJeeyfnsRyCzcf9l6rSH356GLkuzI8SK/UMYHpVxR95F84D0 jeQKXlDmqLkSEJSYQWcjchq3o+KK0/sTi+lRYPGqJDqGf94MxtmBc8v7dWHWSKed 6d3T5LJDE2jrQnkrFNvqeXA1B5A1IyMNyhV3pMci5e+QL8Bg2umRR3qkTwK0SkWw yQMeRPS0xSp7o3SUtZoi+JtfZISRz9Ar/YDcJiy2c7AUxWX1QEbQyCVzUxZcLJvT wTGzM5ix7nOD0QoOBpbPQuPookdLSpg5LvZEgTC/ENnEheHNlu2qfeqI/cDx2KB7 wQt35yP/L51JGQ== -----END CERTIFICATE-----Generated at Mon Dec 15 19:36:53 2025 by rpki-client