This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json) Hash identifier: T+j50cJjMP0jrIjRrVlUXt9xGVJkTrAOH7oqnV4Ltzs= Subject key identifier: 68:C5:0A:9F:FC:7B:F1:83:91:D0:28:84:E1:52:71:DB:79:1A:AB:3E Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f Certificate serial: 019B42B79BFA816C4C28CFDE6CE083C1FADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft Manifest number: 036F Signing time: Sun 21 Dec 2025 21:01:27 +0000 Manifest this update: Sun 21 Dec 2025 21:01:27 +0000 Manifest next update: Mon 22 Dec 2025 21:01:27 +0000 Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: lwd/Kmh2e5yrSUnf93h/Jt/iGvgDrSBWXZ32fKohlE0=) 2: u49LP2KZbug5chay4GBuyj76KF4.roa (hash: iitJr/xtGKA9fcThsDwdBfqlW1f+LjPeCOduA3NSE/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:9b:fa:81:6c:4c:28:cf:de:6c:e0:83:c1:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f Validity Not Before: Dec 21 21:01:27 2025 GMT Not After : Dec 22 21:01:27 2025 GMT Subject: CN=68c50a9ffc7bf18391d02884e15271db791aab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:0a:0f:75:f1:ca:8c:e5:2f:55:da:c3:4d: 16:51:2c:cf:2e:0a:84:cf:1e:59:03:7c:f9:84:c1: 69:32:62:37:07:4d:e3:f1:23:46:65:63:6f:75:46: 83:ff:23:ab:27:30:35:64:1a:8f:95:9f:bc:d6:49: 8e:d8:bf:b1:77:8d:8d:3e:5a:13:e4:ed:98:bf:47: fd:e8:ae:da:27:aa:a9:a7:b0:34:b1:7f:32:c0:d2: 4a:cf:00:5e:a5:90:40:1f:2f:7d:6c:11:d0:64:dd: eb:fb:2d:60:8d:6f:4d:47:a4:ce:ba:8e:1b:ce:b7: 60:c3:a8:0f:d1:82:65:89:0b:09:97:04:fd:2b:98: b5:00:18:36:4b:cf:0b:41:0a:f6:3c:52:e9:31:72: 6e:78:4b:94:75:fc:52:2a:10:f9:81:f4:d3:08:37: f1:9e:83:97:ce:71:2b:0a:7c:32:82:79:1b:1b:f0: 14:02:6b:b0:72:94:f5:c3:fc:98:49:40:6a:5e:5f: c8:43:cb:9e:5a:10:20:b2:d6:91:32:e3:37:7d:d9: 89:16:c3:92:a8:05:5f:f1:49:af:c6:68:1c:23:ee: c6:d9:ba:83:5b:ac:9f:a9:65:6e:de:89:b1:21:73: 6f:0f:1a:ae:a1:e4:3a:02:e2:3d:7c:ba:31:18:90: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C5:0A:9F:FC:7B:F1:83:91:D0:28:84:E1:52:71:DB:79:1A:AB:3E X509v3 Authority Key Identifier: keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:18:b0:e3:ee:eb:1d:46:3a:7e:d9:ff:b2:4b:d2:1d:ae:7b: 78:69:c6:1c:58:d7:7f:d3:17:6a:58:66:ed:28:e3:ae:12:d5: 71:d5:12:9a:aa:6c:73:5b:11:df:aa:16:52:73:16:98:3a:18: 9a:08:3d:a4:ad:ec:48:f0:6c:5c:96:80:ad:a1:41:90:1b:68: 93:1e:64:1e:f0:33:ea:12:3b:02:15:6a:f9:49:eb:d1:1a:9e: 85:56:69:42:a5:92:9c:da:2e:b6:61:43:77:14:dc:4f:a6:62: 62:2d:a8:9a:96:15:a2:b3:05:6f:a8:3a:cd:14:c1:92:5a:fe: f5:07:2c:71:34:88:00:f5:57:a7:24:2c:ba:73:7a:6b:b7:5a: 4c:91:77:1b:60:09:45:80:2e:13:2a:bd:79:b8:71:dd:47:a1: e7:4a:bf:32:00:91:ec:fc:b9:bc:7c:e5:9c:20:da:ba:5b:f5: ab:88:64:dd:64:cd:d8:cb:68:ed:87:16:bd:83:3f:20:5a:03: bf:4e:69:38:b1:e5:34:6c:c3:13:9f:c3:6d:69:03:95:af:b0: 06:2d:e0:e4:35:13:61:96:99:b0:01:59:4d:f1:34:25:03:58: f6:ed:f3:8e:92:11:d1:5e:cc:bf:b8:e2:4a:b8:9b:96:1e:0b: da:6d:ca:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt5v6gWxMKM/ebOCDwfrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NWJkZmQ3YWUyMDY4NzFlMzgyNjdmNDU3Nzg2MjExMTg2 NGQ4MmYwHhcNMjUxMjIxMjEwMTI3WhcNMjUxMjIyMjEwMTI3WjAzMTEwLwYDVQQD Eyg2OGM1MGE5ZmZjN2JmMTgzOTFkMDI4ODRlMTUyNzFkYjc5MWFhYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfYKD3XxyozlL1Xaw00WUSzPLgqE zx5ZA3z5hMFpMmI3B03j8SNGZWNvdUaD/yOrJzA1ZBqPlZ+81kmO2L+xd42NPloT 5O2Yv0f96K7aJ6qpp7A0sX8ywNJKzwBepZBAHy99bBHQZN3r+y1gjW9NR6TOuo4b zrdgw6gP0YJliQsJlwT9K5i1ABg2S88LQQr2PFLpMXJueEuUdfxSKhD5gfTTCDfx noOXznErCnwygnkbG/AUAmuwcpT1w/yYSUBqXl/IQ8ueWhAgstaRMuM3fdmJFsOS qAVf8UmvxmgcI+7G2bqDW6yfqWVu3omxIXNvDxquoeQ6AuI9fLoxGJC82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjFCp/8e/GDkdAohOFScdt5Gqs+MB8GA1UdIwQY MBaAFNlb39euIGhx44Jn9Fd4YhEYZNgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hN2VlOTktNjE2MS00OWRhLTg3ZWIt YThiZjgzNTcwNzlmLzEvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hN2VlOTktNjE2MS00OWRhLTg3ZWItYThiZjgzNTcwNzlm LzEvMlZ2ZjE2NGdhSEhqZ21mMFYzaGlFUmhrMkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBiw4+7r HUY6ftn/skvSHa57eGnGHFjXf9MXalhm7SjjrhLVcdUSmqpsc1sR36oWUnMWmDoY mgg9pK3sSPBsXJaAraFBkBtokx5kHvAz6hI7AhVq+Unr0RqehVZpQqWSnNoutmFD dxTcT6ZiYi2ompYVorMFb6g6zRTBklr+9QcscTSIAPVXpyQsunN6a7daTJF3G2AJ RYAuEyq9ebhx3Ueh50q/MgCR7Py5vHzlnCDaulv1q4hk3WTN2Mto7YcWvYM/IFoD v05pOLHlNGzDE5/DbWkDla+wBi3g5DUTYZaZsAFZTfE0JQNY9u3zjpIR0V7Mv7ji Sriblh4L2m3Kqg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:32 2025 by rpki-client