This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json) Hash identifier: VhBBm6L7r0bN12NiKx/3jLmFsAkdKkCM2lxwZRrRUpM= Subject key identifier: A6:E3:86:BB:F4:F0:37:4C:2B:2C:20:79:BA:BB:93:32:2B:3B:C9:1C Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Certificate serial: 019AF509EAE2B1460F84C2578185A5CE4054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft Manifest number: 06E7 Signing time: Sat 06 Dec 2025 19:00:59 +0000 Manifest this update: Sat 06 Dec 2025 19:00:59 +0000 Manifest next update: Sun 07 Dec 2025 19:00:59 +0000 Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: e8BhNvmbvGhpy6QZg9yJgzM9juQ2Nc6AzS3pWMPZqok=) 2: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ea:e2:b1:46:0f:84:c2:57:81:85:a5:ce:40:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0 Validity Not Before: Dec 6 19:00:59 2025 GMT Not After : Dec 7 19:00:59 2025 GMT Subject: CN=a6e386bbf4f0374c2b2c2079babb93322b3bc91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:03:f9:b8:f5:b5:1e:11:fb:0f:f9:84:d0: 47:5d:3b:09:cf:80:c9:f8:31:61:e4:99:4e:29:9d: f9:44:d3:f0:b2:06:2d:b8:33:1b:92:31:cc:32:05: 12:9e:98:8d:8c:39:bc:92:a3:5f:01:c7:72:c3:16: 81:22:71:16:af:11:aa:f1:d9:44:fd:cc:88:49:9d: ae:4a:83:ba:5b:65:ce:84:48:d8:bc:13:e0:ba:21: 47:25:99:3e:17:e0:a9:c2:74:83:a7:0b:61:65:b2: 35:f2:ab:22:fb:5b:fc:ed:18:83:7e:80:1e:50:55: 0e:b8:e4:9c:c3:8e:82:4e:8f:10:d4:a6:95:dc:54: b5:f5:15:d9:e9:de:49:b2:f9:b7:e3:98:c9:e6:dc: c2:66:db:b8:0b:97:d0:ac:e6:6c:e7:fd:f7:50:d7: f5:1c:71:e7:3b:06:cc:43:ec:92:3f:d7:d4:99:5f: 6f:2d:09:b0:7d:6c:2a:24:03:dd:ec:2a:a4:68:81: ab:49:6c:bb:43:6d:04:37:8c:ec:00:e8:76:23:98: 54:48:c2:be:94:39:c4:40:94:7d:2d:ba:48:1b:e3: aa:b1:e2:c0:0e:9b:0c:30:e3:fc:27:50:a1:e4:b9: da:9e:28:31:cc:16:46:4c:bb:65:cd:f8:b3:37:fb: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E3:86:BB:F4:F0:37:4C:2B:2C:20:79:BA:BB:93:32:2B:3B:C9:1C X509v3 Authority Key Identifier: keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:71:84:8a:38:40:21:96:bf:6c:e9:b0:35:60:57:b8:3a:1a: db:58:3d:4f:80:87:24:f9:a0:a8:e1:9e:c3:01:17:29:14:66: f1:1a:1d:58:76:c0:3a:1e:a3:d4:22:ca:87:48:91:69:de:b2: 4a:e0:9d:77:dd:ff:95:c2:74:4e:c7:10:a6:b0:0a:32:ac:1f: 41:59:e7:f1:2f:91:c5:17:21:34:a4:eb:66:ae:f5:9a:6f:40: 18:23:b4:71:72:e6:77:a7:26:f4:72:8f:9e:ed:14:af:2b:83: 96:1f:b3:b7:4f:1a:77:db:a8:a8:06:54:e3:45:55:d9:b2:31: db:b7:1f:f4:5a:5f:bb:1a:0b:ae:85:33:e8:4b:79:1c:47:12: 8b:43:d1:61:4d:ea:37:35:15:54:9e:20:a7:ba:45:2c:4e:86: 48:41:6e:2e:e4:5a:7d:c1:dd:a8:d7:55:87:45:fd:62:24:84: 7f:ea:a3:69:68:e8:d7:24:55:24:33:d2:e2:9f:11:a5:07:cc: 4b:a1:8a:7d:fe:31:02:9b:59:b2:18:8b:b4:2d:0d:91:fc:dd: 0b:25:b2:82:33:36:f9:97:c6:1f:ee:1e:94:95:74:66:29:99: f5:85:61:10:d5:9b:6d:cb:1e:70:2e:89:96:7d:e1:79:ab:a0: 99:9c:4c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CerisUYPhMJXgYWlzkBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5 ZTQ3YTAwHhcNMjUxMjA2MTkwMDU5WhcNMjUxMjA3MTkwMDU5WjAzMTEwLwYDVQQD EyhhNmUzODZiYmY0ZjAzNzRjMmIyYzIwNzliYWJiOTMzMjJiM2JjOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI8D+bj1tR4R+w/5hNBHXTsJz4DJ +DFh5JlOKZ35RNPwsgYtuDMbkjHMMgUSnpiNjDm8kqNfAcdywxaBInEWrxGq8dlE /cyISZ2uSoO6W2XOhEjYvBPguiFHJZk+F+CpwnSDpwthZbI18qsi+1v87RiDfoAe UFUOuOScw46CTo8Q1KaV3FS19RXZ6d5Jsvm345jJ5tzCZtu4C5fQrOZs5/33UNf1 HHHnOwbMQ+ySP9fUmV9vLQmwfWwqJAPd7CqkaIGrSWy7Q20EN4zsAOh2I5hUSMK+ lDnEQJR9LbpIG+OqseLADpsMMOP8J1Ch5LnanigxzBZGTLtlzfizN/s6hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbjhrv08DdMKywgebq7kzIrO8kcMB8GA1UdIwQY MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt MjAyYTA5ODBjMTc2LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2 LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3GEijhA IZa/bOmwNWBXuDoa21g9T4CHJPmgqOGewwEXKRRm8RodWHbAOh6j1CLKh0iRad6y SuCdd93/lcJ0TscQprAKMqwfQVnn8S+RxRchNKTrZq71mm9AGCO0cXLmd6cm9HKP nu0UryuDlh+zt08ad9uoqAZU40VV2bIx27cf9FpfuxoLroUz6Et5HEcSi0PRYU3q NzUVVJ4gp7pFLE6GSEFuLuRafcHdqNdVh0X9YiSEf+qjaWjo1yRVJDPS4p8RpQfM S6GKff4xAptZshiLtC0NkfzdCyWygjM2+ZfGH+4elJV0ZimZ9YVhENWbbcsecC6J ln3heaugmZxMCA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:47 2025 by rpki-client