This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json) Hash identifier: Lu4BlW4SLzDR5FTXvJQ3vwmx4MjXJFNltonRhotDA6I= Subject key identifier: 38:36:57:FC:37:EF:BD:2D:87:EC:73:81:EF:A4:47:65:D9:9A:07:47 Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932 Certificate serial: 019B07B5CB308E8A4E749079295175C72C0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft Manifest number: 0245 Signing time: Wed 10 Dec 2025 10:01:53 +0000 Manifest this update: Wed 10 Dec 2025 10:01:53 +0000 Manifest next update: Thu 11 Dec 2025 10:01:53 +0000 Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: ZvtNM6fjwAw2Yw/nbopdWDXsFSGXkMXzX2SS7Pr5jFI=) 2: HVaoDMotksZf76Ju74TL_0gQqQw.roa (hash: 6Wt6s6Ldu4cKxpBhxwlW4dbeWtmB6JUQE70sEXR7L0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:cb:30:8e:8a:4e:74:90:79:29:51:75:c7:2c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d97a77930122879a766470df8d660c98442a9932 Validity Not Before: Dec 10 10:01:53 2025 GMT Not After : Dec 11 10:01:53 2025 GMT Subject: CN=383657fc37efbd2d87ec7381efa44765d99a0747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7d:71:28:6f:44:fa:e4:1a:29:f8:17:fb:db: 8f:81:9b:a9:47:3b:fe:f5:c7:3e:06:b5:5a:4b:6d: cb:be:3a:66:86:f3:59:85:67:ec:3a:da:00:2c:b8: 37:b2:4d:d9:d7:c0:45:6a:41:59:6f:6f:2a:d4:66: a7:95:a3:d5:08:56:f2:b7:dd:4f:9b:c6:e6:01:8e: ba:85:98:8e:52:be:1a:b1:f5:ce:e7:73:2c:67:02: 98:28:62:01:92:c0:43:58:22:0f:aa:64:4d:ed:3f: 8a:0d:44:38:83:15:70:f4:7a:da:52:22:eb:a7:79: e0:9f:44:9f:32:ac:4c:39:2b:a6:a7:9b:f0:c7:ad: 98:11:5d:ee:b0:b6:55:7c:a6:dd:6d:6b:61:38:97: a8:d5:22:04:7f:f8:d9:69:99:a6:ac:71:36:2b:c0: 69:46:3c:6a:e7:ff:f3:88:67:bd:55:69:64:0b:66: 70:b7:0b:c5:f8:ef:ea:f1:01:f6:11:73:42:58:01: 72:0b:e4:00:53:f3:12:10:b8:f9:a6:bd:24:6a:6c: e9:c8:9f:a9:9a:aa:0d:b6:6c:b2:82:71:f0:a9:58: 24:fe:c2:a4:0a:cf:55:57:c5:59:9e:e1:30:bb:5d: e9:a8:24:56:2f:ad:07:89:64:65:a1:64:74:e5:25: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:36:57:FC:37:EF:BD:2D:87:EC:73:81:EF:A4:47:65:D9:9A:07:47 X509v3 Authority Key Identifier: keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e3:9d:76:ee:6f:f1:3b:3a:3c:2c:df:ea:e3:1a:ad:78:43: 11:69:6b:f5:c3:ee:3f:a4:0f:cc:3d:40:09:87:da:b7:8c:67: 0e:1d:bc:dc:52:4b:28:79:6e:d8:68:0d:a7:31:db:2f:d9:fc: f0:e0:c9:49:d0:8a:17:66:2b:d4:ed:f6:c8:47:46:70:0c:60: 23:cf:89:3f:fe:10:3f:df:5e:4a:77:1c:e2:da:ed:a7:32:f0: 26:c8:7f:6a:76:0f:c6:a7:e5:3d:0f:fb:11:13:55:ee:8b:6c: 93:88:c2:70:57:4d:06:11:6f:49:47:64:ba:a9:36:5e:7b:1e: d9:7e:e7:60:22:97:b9:d2:08:81:dd:7d:0d:b2:bb:f4:3b:60: 85:d1:85:80:08:f0:33:91:ec:85:70:6e:3f:ce:8a:12:cd:94: 35:86:4b:bf:9a:18:a4:b8:74:50:a1:38:31:46:c7:29:f4:c2: a9:fc:39:65:82:b1:02:c2:0d:cd:bc:4d:dc:1d:b7:77:33:c1: aa:bc:26:be:3c:b7:27:c8:24:b8:b7:56:db:29:b9:e1:23:71: 7d:ce:43:de:53:93:2f:8f:8a:2d:51:50:43:31:ba:0d:d1:85: 15:a5:e7:93:7f:7a:81:64:27:1c:c7:43:63:65:cc:73:75:c4: fe:e2:54:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtcswjopOdJB5KVF1xywNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5N2E3NzkzMDEyMjg3OWE3NjY0NzBkZjhkNjYwYzk4NDQy YTk5MzIwHhcNMjUxMjEwMTAwMTUzWhcNMjUxMjExMTAwMTUzWjAzMTEwLwYDVQQD EygzODM2NTdmYzM3ZWZiZDJkODdlYzczODFlZmE0NDc2NWQ5OWEwNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn1xKG9E+uQaKfgX+9uPgZupRzv+ 9cc+BrVaS23LvjpmhvNZhWfsOtoALLg3sk3Z18BFakFZb28q1GanlaPVCFbyt91P m8bmAY66hZiOUr4asfXO53MsZwKYKGIBksBDWCIPqmRN7T+KDUQ4gxVw9HraUiLr p3ngn0SfMqxMOSump5vwx62YEV3usLZVfKbdbWthOJeo1SIEf/jZaZmmrHE2K8Bp Rjxq5//ziGe9VWlkC2ZwtwvF+O/q8QH2EXNCWAFyC+QAU/MSELj5pr0kamzpyJ+p mqoNtmyygnHwqVgk/sKkCs9VV8VZnuEwu13pqCRWL60HiWRloWR05SXqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg2V/w3770th+xzge+kR2XZmgdHMB8GA1UdIwQY MBaAFNl6d5MBIoeadmRw341mDJhEKpkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQt Y2Q0NTlhNjU3MjFiLzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yYTQ5MjItNDM0Yi00N2IxLWIzMDQtY2Q0NTlhNjU3MjFi LzEvMlhwM2t3RWloNXAyWkhEZmpXWU1tRVFxbVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeOddu5v 8Ts6PCzf6uMarXhDEWlr9cPuP6QPzD1ACYfat4xnDh283FJLKHlu2GgNpzHbL9n8 8ODJSdCKF2Yr1O32yEdGcAxgI8+JP/4QP99eSncc4trtpzLwJsh/anYPxqflPQ/7 ERNV7otsk4jCcFdNBhFvSUdkuqk2Xnse2X7nYCKXudIIgd19DbK79DtghdGFgAjw M5HshXBuP86KEs2UNYZLv5oYpLh0UKE4MUbHKfTCqfw5ZYKxAsINzbxN3B23dzPB qrwmvjy3J8gkuLdW2ym54SNxfc5D3lOTL4+KLVFQQzG6DdGFFaXnk396gWQnHMdD Y2XMc3XE/uJUFA== -----END CERTIFICATE-----Generated at Wed Dec 10 11:36:39 2025 by rpki-client