This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json) Hash identifier: 8DnDmqIvxn4BNvNcLAw0UlNfMkz5uQ0HQDvQM6jNVGk= Subject key identifier: 8C:64:A9:F2:04:2B:A9:94:F6:5C:4A:42:A3:8B:6D:11:59:DD:B8:5F Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0 Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0 Certificate serial: 019B34C4F3782781D1003A50C2477692E850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft Manifest number: 0E2B Signing time: Fri 19 Dec 2025 04:01:21 +0000 Manifest this update: Fri 19 Dec 2025 04:01:21 +0000 Manifest next update: Sat 20 Dec 2025 04:01:21 +0000 Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: ZVlYUOw3+9t58dALM48VXWjHSnIZCDlyXGrH/vsHvVI=) 2: he-9O0rw1scVnV8QKLbFYmxFilo.roa (hash: 5u76H6F4zhHuyIDIEsIVg7UrT9YlgKHZ6fwd0Bucupw=) 3: mCWf1F1Mm7OBpM7kBt_V6FcBzcM.roa (hash: crtUvkvttnNAHW4vnAucfsvmuPjcxyYp2LzbydDGgAI=) 4: pRIAJQlSrUkvuKhnZASC9fivsrg.roa (hash: yBBsHGNSjeIXP9/D0Jjl9E4Wj2zoir6qR7xsd4RwM4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:f3:78:27:81:d1:00:3a:50:c2:47:76:92:e8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0 Validity Not Before: Dec 19 04:01:21 2025 GMT Not After : Dec 20 04:01:21 2025 GMT Subject: CN=8c64a9f2042ba994f65c4a42a38b6d1159ddb85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:ca:12:8c:5a:33:9f:91:58:ac:bc:fd:66: 38:95:f3:6e:95:50:8d:b2:6c:74:47:fa:c8:16:77: 65:2e:d4:3b:79:f8:1c:46:f4:6c:d9:9e:bd:4c:6e: c2:e4:c3:4f:bd:cf:71:7e:d1:ed:23:cb:b2:8a:af: ff:d0:0c:16:c8:33:15:9e:b8:c4:dc:aa:76:a6:ab: 0b:b7:b3:52:30:6b:c2:15:b3:39:d3:51:aa:bd:be: 54:b3:07:b9:a4:f9:6f:47:75:93:aa:75:ec:8f:21: 3d:5e:3c:6e:77:3f:63:12:d3:ce:b0:70:47:e0:7f: 3e:ec:34:f4:e9:a6:ad:f9:cc:af:39:61:05:84:8f: 94:fe:0e:31:5d:2c:22:ff:98:2e:27:99:87:a4:7a: e4:d6:1a:70:89:8f:17:bb:77:21:b4:e2:39:b2:71: 81:4d:59:e9:38:cb:cb:8c:12:bc:c5:ac:84:af:23: 44:f0:f5:71:de:52:96:c3:ee:9d:87:b5:e0:2f:c9: c7:00:b6:1c:44:c7:60:0f:a9:8e:9b:71:ce:9e:e3: 81:b0:84:7d:fe:f8:29:ee:8e:0e:de:87:4d:25:d8: 6c:c3:50:c9:08:f5:b0:16:c6:1c:4d:82:74:a6:75: dc:04:2c:8c:10:24:49:be:27:3f:71:03:25:84:99: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:64:A9:F2:04:2B:A9:94:F6:5C:4A:42:A3:8B:6D:11:59:DD:B8:5F X509v3 Authority Key Identifier: keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:33:a0:36:c5:59:11:fe:90:63:e3:07:dc:f6:d9:b9:da:42: b8:67:72:38:31:97:c3:c2:63:3f:e0:b0:23:a2:86:ae:92:d1: 79:00:9c:2c:c0:23:ff:ce:be:3d:f0:03:94:02:b5:75:f0:50: 37:96:e2:a9:4d:06:63:cf:39:40:93:9e:a8:2f:e4:63:94:fb: 86:f3:4d:0b:d7:a4:74:80:bc:c0:20:ef:ba:f0:2f:4e:66:b1: 8b:c5:e6:40:cb:da:38:35:60:15:03:20:83:9b:ee:51:93:99: f5:85:47:99:ff:28:fa:3c:fc:95:1d:3a:80:8f:55:8d:75:4c: 52:53:70:8d:dd:dd:b1:c7:92:7c:74:ac:25:d1:a6:a1:f1:8e: 55:ad:05:2b:13:7c:e9:60:ee:88:40:bf:19:bb:21:d2:31:c7: 7c:57:ce:5b:db:b2:86:bd:5f:8b:ac:fa:e7:04:6c:65:c8:c0: e9:03:16:ed:30:55:3b:d1:a6:7e:66:5c:c1:cc:c6:e2:db:59: 25:f1:8a:8e:11:e1:90:4b:4d:c4:4f:ee:20:05:c6:9f:cc:ba: 13:dc:4c:6e:77:db:b8:b1:bb:99:36:bf:04:0d:2f:a9:1b:9b: 35:1f:c7:fe:f6:76:85:c5:e7:47:b0:e8:ed:83:ad:8b:64:0a: f6:a7:85:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xPN4J4HRADpQwkd2kuhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTdmYWVhOTQ4MTVlMDUyMGI0NmYxODVjM2ViZWMyOWIz NzZlZjAwHhcNMjUxMjE5MDQwMTIxWhcNMjUxMjIwMDQwMTIxWjAzMTEwLwYDVQQD Eyg4YzY0YTlmMjA0MmJhOTk0ZjY1YzRhNDJhMzhiNmQxMTU5ZGRiODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgobKEoxaM5+RWKy8/WY4lfNulVCN smx0R/rIFndlLtQ7efgcRvRs2Z69TG7C5MNPvc9xftHtI8uyiq//0AwWyDMVnrjE 3Kp2pqsLt7NSMGvCFbM501Gqvb5Uswe5pPlvR3WTqnXsjyE9Xjxudz9jEtPOsHBH 4H8+7DT06aat+cyvOWEFhI+U/g4xXSwi/5guJ5mHpHrk1hpwiY8Xu3chtOI5snGB TVnpOMvLjBK8xayEryNE8PVx3lKWw+6dh7XgL8nHALYcRMdgD6mOm3HOnuOBsIR9 /vgp7o4O3odNJdhsw1DJCPWwFsYcTYJ0pnXcBCyMECRJvic/cQMlhJkTVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxkqfIEK6mU9lxKQqOLbRFZ3bhfMB8GA1UdIwQY MBaAFNiX+uqUgV4FILRvGFw+vsKbN27wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzct YzgxM2NlMGY1ZTQ3LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83NmEyMTYtY2FlNy00ODg2LThlNzctYzgxM2NlMGY1ZTQ3 LzEvMkpmNjZwU0JYZ1VndEc4WVhENi13cHMzYnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTOgNsVZ Ef6QY+MH3PbZudpCuGdyODGXw8JjP+CwI6KGrpLReQCcLMAj/86+PfADlAK1dfBQ N5biqU0GY885QJOeqC/kY5T7hvNNC9ekdIC8wCDvuvAvTmaxi8XmQMvaODVgFQMg g5vuUZOZ9YVHmf8o+jz8lR06gI9VjXVMUlNwjd3dsceSfHSsJdGmofGOVa0FKxN8 6WDuiEC/Gbsh0jHHfFfOW9uyhr1fi6z65wRsZcjA6QMW7TBVO9GmfmZcwczG4ttZ JfGKjhHhkEtNxE/uIAXGn8y6E9xMbnfbuLG7mTa/BA0vqRubNR/H/vZ2hcXnR7Do 7YOti2QK9qeFjQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:43:24 2025 by rpki-client