This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json) Hash identifier: Q92/mjUNYaA8/29xOoB+yaA/lw0sEdWIB8TevCEdGUo= Subject key identifier: 58:8D:D4:AB:EE:23:FC:47:9E:B2:B9:9B:12:72:88:4A:57:3E:17:5D Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c Certificate serial: 019B24E3472CA9F3F227040D68767B5B4404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft Manifest number: 0204 Signing time: Tue 16 Dec 2025 02:00:33 +0000 Manifest this update: Tue 16 Dec 2025 02:00:33 +0000 Manifest next update: Wed 17 Dec 2025 02:00:33 +0000 Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: 3p/U5dyJjiiDnLmLYvzxD2D9oeJ/bdRNeRyaB8pKfGw=) 2: dT_BFnqui1qPfatUh1gogWMYRho.roa (hash: Znmqpd0eQxFE3KRHa1gq7DMVat4pWLiZVr8QQEm1djI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:47:2c:a9:f3:f2:27:04:0d:68:76:7b:5b:44:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db05360e9873825f75d671daf1624a52e985390c Validity Not Before: Dec 16 02:00:33 2025 GMT Not After : Dec 17 02:00:33 2025 GMT Subject: CN=588dd4abee23fc479eb2b99b1272884a573e175d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:8b:25:30:c5:27:81:5e:95:b5:79:5e:53: c2:59:85:5a:b3:9a:9a:c3:27:cb:a2:95:93:35:16: e8:26:f4:c9:c4:f9:b6:3d:6c:be:10:71:70:89:5d: bf:60:7d:d4:4c:87:ee:ae:60:be:d5:32:13:fb:c5: 7d:44:cd:5a:5b:a0:da:0c:e1:90:7b:41:02:d7:b4: 74:8a:3e:34:15:9c:f3:e9:75:54:b2:82:f5:b3:94: fa:5c:b0:19:38:ea:e0:a8:e4:05:44:8f:f2:73:f5: 9d:52:e5:dd:3a:a3:26:9d:37:54:61:b7:1a:51:19: 40:ef:68:67:07:93:63:e9:e5:c4:e3:d2:54:78:18: a2:e6:df:f0:72:32:c4:ee:d8:8c:cf:0f:a0:2c:2e: ce:30:9b:2a:fe:5c:7c:c3:08:50:24:eb:73:4c:0d: 9d:c1:f7:52:b9:09:d2:2b:e2:db:ab:74:b4:02:83: 66:24:a8:c7:a2:18:97:0e:d4:fa:19:bb:4d:f7:94: 5b:af:46:91:4c:16:15:a4:c5:08:89:33:23:a9:e9: 1a:b4:36:72:c3:2a:8a:34:c2:42:70:d3:97:1b:95: f6:9f:07:be:62:f2:13:bc:6f:4b:c8:e7:0a:90:02: 1d:3b:0f:dd:f4:cd:fa:53:4c:9f:4d:26:f0:f5:71: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8D:D4:AB:EE:23:FC:47:9E:B2:B9:9B:12:72:88:4A:57:3E:17:5D X509v3 Authority Key Identifier: keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:18:be:20:c9:9e:57:12:7b:22:92:ce:58:a4:e9:6f:8e:d2: 60:95:47:a3:f8:89:69:c1:47:41:4b:e3:f4:63:2e:a1:71:9a: ab:d3:ca:70:77:c7:2a:e5:cd:02:00:30:dc:9d:a0:f3:0b:9b: 94:17:78:29:96:b7:d6:1d:be:db:05:ec:b5:03:22:70:9a:a9: 1a:08:50:e8:11:92:9d:1c:d9:64:15:3d:a8:15:3b:6b:07:6f: fd:bc:91:44:9c:87:4f:25:03:12:07:98:d2:15:cd:a5:cc:2e: 28:3b:56:fc:db:c5:d3:fb:03:04:ae:ef:cf:07:44:af:93:4f: e1:93:3c:eb:a8:c9:c0:5d:e0:ab:c0:f9:51:7b:44:d0:61:71: d9:3e:32:9a:ba:4f:14:22:5a:77:4c:e1:1d:7f:c6:fb:b7:d9: 0b:2f:e3:d9:bf:7a:1d:0f:43:ee:ca:5b:8d:ca:63:6c:c9:a6: ba:cd:ce:a7:36:cf:57:5b:db:ca:1f:bc:e9:33:a6:b1:bc:85: 53:64:43:fa:65:7d:83:5f:ad:f5:d2:13:0a:68:6f:a9:88:f3: 26:03:ac:ea:73:63:8d:18:c2:98:09:83:e4:0c:f5:df:b9:ca: 60:5c:a7:4d:fb:14:a4:a4:b6:8d:0a:34:ed:1b:3d:f9:62:d0: 9b:17:da:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk40csqfPyJwQNaHZ7W0QEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMDUzNjBlOTg3MzgyNWY3NWQ2NzFkYWYxNjI0YTUyZTk4 NTM5MGMwHhcNMjUxMjE2MDIwMDMzWhcNMjUxMjE3MDIwMDMzWjAzMTEwLwYDVQQD Eyg1ODhkZDRhYmVlMjNmYzQ3OWViMmI5OWIxMjcyODg0YTU3M2UxNzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLuLJTDFJ4FelbV5XlPCWYVas5qa wyfLopWTNRboJvTJxPm2PWy+EHFwiV2/YH3UTIfurmC+1TIT+8V9RM1aW6DaDOGQ e0EC17R0ij40FZzz6XVUsoL1s5T6XLAZOOrgqOQFRI/yc/WdUuXdOqMmnTdUYbca URlA72hnB5Nj6eXE49JUeBii5t/wcjLE7tiMzw+gLC7OMJsq/lx8wwhQJOtzTA2d wfdSuQnSK+Lbq3S0AoNmJKjHohiXDtT6GbtN95Rbr0aRTBYVpMUIiTMjqekatDZy wyqKNMJCcNOXG5X2nwe+YvITvG9LyOcKkAIdOw/d9M36U0yfTSbw9XEQKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiN1KvuI/xHnrK5mxJyiEpXPhddMB8GA1UdIwQY MBaAFNsFNg6Yc4JfddZx2vFiSlLphTkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2Ut ZDYyZDIyNGUzY2FmLzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2UtZDYyZDIyNGUzY2Fm LzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhi+IMme VxJ7IpLOWKTpb47SYJVHo/iJacFHQUvj9GMuoXGaq9PKcHfHKuXNAgAw3J2g8wub lBd4KZa31h2+2wXstQMicJqpGghQ6BGSnRzZZBU9qBU7awdv/byRRJyHTyUDEgeY 0hXNpcwuKDtW/NvF0/sDBK7vzwdEr5NP4ZM866jJwF3gq8D5UXtE0GFx2T4ymrpP FCJad0zhHX/G+7fZCy/j2b96HQ9D7spbjcpjbMmmus3OpzbPV1vbyh+86TOmsbyF U2RD+mV9g1+t9dITCmhvqYjzJgOs6nNjjRjCmAmD5Az137nKYFynTfsUpKS2jQo0 7Rs9+WLQmxfa2Q== -----END CERTIFICATE-----Generated at Tue Dec 16 09:46:02 2025 by rpki-client