This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json) Hash identifier: yy88h5PsfM4qo6Uxsl/CCdf3+fsO4xy0OquytmlWFPM= Subject key identifier: B1:FE:11:79:51:7D:11:CB:A5:14:A1:B3:04:7D:D2:0B:82:3A:1B:2B Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Certificate serial: 019B07B59C5CAB3E20746A53059E9446D67F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft Manifest number: 0EC2 Signing time: Wed 10 Dec 2025 10:01:41 +0000 Manifest this update: Wed 10 Dec 2025 10:01:41 +0000 Manifest next update: Thu 11 Dec 2025 10:01:41 +0000 Files and hashes: 1: 1-IgxnHsFK8oFte8N10P7PK5e7cM.roa (hash: ePOdDmBwQlth5xBvng3CM+ctUv7VLk8att4hDe8d3XM=) 2: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=) 3: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: X638w+h53LnY7VmVbgNRAFUysJk+iCnxMF3iz0a0KY4=) 4: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=) 5: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=) 6: Ywn8ul2r71oT-xjPbkKIJ5E1ZP4.roa (hash: o0itDHyiOKdFZunGmNw6h8Z1wOF08DEK5D3hH/0u17w=) 7: jyjyrq_AfUtR4N7vXi1KVwU7zy0.roa (hash: gGJ4wMLSXQ4nt3254hCEsSARPmaiHzOwXZG33svfRBY=) 8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:9c:5c:ab:3e:20:74:6a:53:05:9e:94:46:d6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Validity Not Before: Dec 10 10:01:41 2025 GMT Not After : Dec 11 10:01:41 2025 GMT Subject: CN=b1fe1179517d11cba514a1b3047dd20b823a1b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:4c:2e:cd:f4:8d:ee:6b:a9:83:16:5a:49: 85:24:6d:3d:9d:b8:71:46:6a:a5:4a:d1:f5:21:6f: 4a:33:67:e6:15:1f:cf:18:8e:bd:56:92:0f:f1:d1: 7c:02:20:79:c5:08:b0:36:46:e0:22:bb:82:1c:17: 1f:cc:c1:b5:f9:52:50:ba:40:95:b7:3e:b5:b6:fb: 64:49:f5:5a:3c:6b:e9:a9:46:89:09:8b:89:d2:6f: 2e:3d:81:66:74:e3:8b:6d:d1:63:62:95:8a:f1:15: a7:39:21:ef:44:b8:10:9e:72:23:19:c0:78:1f:e5: 1d:7a:64:86:c9:3a:e5:1a:1b:73:e7:7e:07:d7:e0: 1d:89:55:c5:30:e0:f4:cf:12:ea:fc:c0:de:e0:54: 8b:5c:3c:f5:4a:c7:e0:65:5c:61:2e:44:a4:5f:16: 6c:3e:40:e9:23:8f:de:bb:03:0a:e2:18:cd:63:6c: 21:58:44:c2:bd:24:58:8f:16:c3:1f:3c:78:3d:3c: d3:18:f9:ce:86:bb:f0:56:4d:4f:4c:ba:90:e8:72: 93:33:77:41:e9:a5:15:38:dd:77:85:4c:c1:ab:b6: c3:e0:5f:dd:ec:2b:44:2c:9e:fa:3b:ba:33:67:84: 27:07:8f:da:0f:ab:10:22:76:11:9e:c1:5f:48:d3: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FE:11:79:51:7D:11:CB:A5:14:A1:B3:04:7D:D2:0B:82:3A:1B:2B X509v3 Authority Key Identifier: keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:35:31:0e:52:d6:58:e1:b6:cb:3f:61:35:50:3b:7a:dc:55: cf:64:0c:68:dd:24:0a:c5:ab:a5:50:ad:57:14:55:d9:63:7d: 83:18:73:95:9d:5a:c7:eb:3d:b3:d8:a1:d4:f7:08:0d:5b:a5: d8:0e:fa:9f:99:c3:89:15:2d:67:3b:d3:d2:45:5a:e1:8a:5e: 82:ab:d4:7f:18:f1:e9:ce:56:38:5d:a6:63:02:a1:2d:78:fe: 0d:e7:09:a7:24:db:97:32:14:5c:1f:cf:67:cd:3e:bc:0e:b1: f7:d9:83:1a:49:f9:d9:43:f3:ae:b9:60:85:19:58:61:a3:d7: da:bc:c5:b3:85:f7:2f:71:e7:32:3b:1e:dd:c7:93:61:27:91: 0d:de:bb:66:9d:ca:94:fb:58:c6:d1:00:9c:5d:5a:60:7e:e4: d8:d1:66:e5:e2:9d:b4:c7:d4:c2:02:99:ec:93:36:32:52:59: 55:24:85:68:f6:77:d8:f2:ea:93:42:71:69:d0:f9:b5:5f:92: 0e:92:42:a4:43:6d:fc:ff:1c:2a:30:97:0f:89:63:a7:49:cd: 3a:69:7b:9f:20:ef:e9:3f:93:4b:ab:36:36:41:fd:17:9e:32: e4:0f:48:5d:15:05:cf:fd:d9:54:ae:00:0f:01:84:bc:90:7c: 46:23:04:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtZxcqz4gdGpTBZ6URtZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw YWI3NzAwHhcNMjUxMjEwMTAwMTQxWhcNMjUxMjExMTAwMTQxWjAzMTEwLwYDVQQD EyhiMWZlMTE3OTUxN2QxMWNiYTUxNGExYjMwNDdkZDIwYjgyM2ExYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudNMLs30je5rqYMWWkmFJG09nbhx RmqlStH1IW9KM2fmFR/PGI69VpIP8dF8AiB5xQiwNkbgIruCHBcfzMG1+VJQukCV tz61tvtkSfVaPGvpqUaJCYuJ0m8uPYFmdOOLbdFjYpWK8RWnOSHvRLgQnnIjGcB4 H+UdemSGyTrlGhtz534H1+AdiVXFMOD0zxLq/MDe4FSLXDz1SsfgZVxhLkSkXxZs PkDpI4/euwMK4hjNY2whWETCvSRYjxbDHzx4PTzTGPnOhrvwVk1PTLqQ6HKTM3dB 6aUVON13hUzBq7bD4F/d7CtELJ76O7ozZ4QnB4/aD6sQInYRnsFfSNPSZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLH+EXlRfRHLpRShswR90guCOhsrMB8GA1UdIwQY MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt MzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4 LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTUxDlLW WOG2yz9hNVA7etxVz2QMaN0kCsWrpVCtVxRV2WN9gxhzlZ1ax+s9s9ih1PcIDVul 2A76n5nDiRUtZzvT0kVa4YpegqvUfxjx6c5WOF2mYwKhLXj+DecJpyTblzIUXB/P Z80+vA6x99mDGkn52UPzrrlghRlYYaPX2rzFs4X3L3HnMjse3ceTYSeRDd67Zp3K lPtYxtEAnF1aYH7k2NFm5eKdtMfUwgKZ7JM2MlJZVSSFaPZ32PLqk0JxadD5tV+S DpJCpENt/P8cKjCXD4ljp0nNOml7nyDv6T+TS6s2NkH9F54y5A9IXRUFz/3ZVK4A DwGEvJB8RiMElg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:24:28 2025 by rpki-client