This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json) Hash identifier: 0FvIdvjQLgz9YxVFZQA1ZejgLzek1WiBEKsfb0QuKvY= Subject key identifier: 9B:C6:D6:0C:C3:F3:7B:87:D6:BD:A1:96:09:9A:D6:92:E4:BC:28:54 Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd Certificate serial: 019B0E929EADF8AA5C44F5EA8E9A592CACAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft Manifest number: 16CA Signing time: Thu 11 Dec 2025 18:00:48 +0000 Manifest this update: Thu 11 Dec 2025 18:00:48 +0000 Manifest next update: Fri 12 Dec 2025 18:00:48 +0000 Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: JjfBTMUvws+XevU36CK5GLIoRKuWMFRagVJsxMwAwmk=) 2: ryWVvW7NydfH0Lg55_MWvg1kBGg.roa (hash: PtmvLKXYoeUQyGlzTXT4GMeJ6VdsraUUI7+TJbIbgOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:9e:ad:f8:aa:5c:44:f5:ea:8e:9a:59:2c:ac:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd Validity Not Before: Dec 11 18:00:48 2025 GMT Not After : Dec 12 18:00:48 2025 GMT Subject: CN=9bc6d60cc3f37b87d6bda196099ad692e4bc2854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:94:8d:c1:06:38:6b:bb:35:8f:ed:0a:09: a9:70:27:a7:db:00:11:96:26:3f:69:13:39:20:e5: 95:58:b2:c6:a5:8c:d4:17:8a:67:a2:73:0b:d5:31: f4:a2:9b:e1:28:1a:ed:05:14:b2:da:6a:c3:39:f7: e6:bd:9f:0a:84:36:b9:11:a0:50:1c:f8:1a:9b:80: cf:3f:c2:c7:a3:d1:68:0e:75:7c:1e:95:f8:c0:19: fc:ad:34:97:c2:60:f2:97:1f:13:b4:0b:56:1a:4e: 7f:1e:62:c6:3c:42:2f:df:be:65:8b:7b:ab:74:81: 99:4d:aa:36:49:bb:2f:d6:8c:71:79:0e:25:6e:ef: 5b:d3:32:0f:af:f1:1c:f8:ce:b7:53:f2:2e:51:e6: 2a:68:05:4d:53:5d:af:cf:aa:c2:91:cd:49:19:79: 23:b4:02:fc:07:f5:af:dc:46:1f:2f:3e:9c:a6:f5: bd:b9:e7:83:d9:80:6c:40:12:fa:75:8e:4c:e4:fe: 44:6d:6b:31:a6:53:30:75:7a:da:7b:7d:91:45:a8: 4b:a7:f8:f2:68:8e:ff:a2:75:98:3c:e9:d4:5a:c1: 98:29:fe:34:f3:14:d3:78:60:16:ae:85:84:e9:38: 36:09:60:3d:a5:09:d1:4c:a9:74:78:e6:2c:83:99: e8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:D6:0C:C3:F3:7B:87:D6:BD:A1:96:09:9A:D6:92:E4:BC:28:54 X509v3 Authority Key Identifier: keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9a:47:8a:87:bb:9b:fa:3e:ce:bc:1f:e8:5c:80:68:76:10: b4:60:1b:94:83:ff:4c:d5:2c:30:25:0c:06:21:49:c6:68:72: a0:78:19:1c:72:35:a9:1c:6b:5f:e3:c3:f6:15:17:ca:3d:86: 19:ab:b6:43:11:cf:27:26:d1:cf:54:9f:b0:21:c4:70:34:4c: 95:44:66:31:ba:b2:27:98:18:46:ce:de:af:44:ec:28:b5:95: 36:45:ac:a2:39:a0:d2:35:21:cf:cd:56:27:ae:06:a4:0f:cd: 1c:18:7e:5d:59:e1:a0:24:d4:8a:68:0e:d5:e7:69:54:14:fb: d9:c2:7f:73:2c:19:83:83:a3:11:bb:4b:bd:00:d8:27:e6:ac: c6:91:84:6c:49:57:7e:5a:17:f1:be:bb:07:8f:b0:29:f9:a9: fb:91:bb:6d:8a:02:f1:88:66:cf:d9:e6:12:a9:ce:d0:e4:93: 77:14:66:73:7d:7a:5c:5e:cf:0b:cd:16:24:5b:b2:69:93:00: 6d:a5:f8:ad:b8:7e:ee:55:1e:65:4b:9a:28:27:95:d8:b2:13: 55:57:fc:ba:03:1e:17:52:ec:37:0d:b1:87:3a:f7:d7:0e:19: 62:83:4f:4e:31:ce:17:17:8f:f0:94:4c:cc:6d:61:ed:0c:4b: 93:98:1c:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkp6t+KpcRPXqjppZLKysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5 MzAyZmQwHhcNMjUxMjExMTgwMDQ4WhcNMjUxMjEyMTgwMDQ4WjAzMTEwLwYDVQQD Eyg5YmM2ZDYwY2MzZjM3Yjg3ZDZiZGExOTYwOTlhZDY5MmU0YmMyODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2SUjcEGOGu7NY/tCgmpcCen2wAR liY/aRM5IOWVWLLGpYzUF4pnonML1TH0opvhKBrtBRSy2mrDOffmvZ8KhDa5EaBQ HPgam4DPP8LHo9FoDnV8HpX4wBn8rTSXwmDylx8TtAtWGk5/HmLGPEIv375li3ur dIGZTao2Sbsv1oxxeQ4lbu9b0zIPr/Ec+M63U/IuUeYqaAVNU12vz6rCkc1JGXkj tAL8B/Wv3EYfLz6cpvW9ueeD2YBsQBL6dY5M5P5EbWsxplMwdXrae32RRahLp/jy aI7/onWYPOnUWsGYKf408xTTeGAWroWE6Tg2CWA9pQnRTKl0eOYsg5no2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvG1gzD83uH1r2hlgma1pLkvChUMB8GA1UdIwQY MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt Y2NlYWViNWQyZGI5LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5 LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5pHioe7 m/o+zrwf6FyAaHYQtGAblIP/TNUsMCUMBiFJxmhyoHgZHHI1qRxrX+PD9hUXyj2G Gau2QxHPJybRz1SfsCHEcDRMlURmMbqyJ5gYRs7er0TsKLWVNkWsojmg0jUhz81W J64GpA/NHBh+XVnhoCTUimgO1edpVBT72cJ/cywZg4OjEbtLvQDYJ+asxpGEbElX floX8b67B4+wKfmp+5G7bYoC8Yhmz9nmEqnO0OSTdxRmc316XF7PC80WJFuyaZMA baX4rbh+7lUeZUuaKCeV2LITVVf8ugMeF1LsNw2xhzr31w4ZYoNPTjHOFxeP8JRM zG1h7QxLk5gcIw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:00 2025 by rpki-client