This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json) Hash identifier: 4N/70jmZPA4XiRBIClUeeOf8ndpAiStNgI+ryoeuDEs= Subject key identifier: FF:CD:5F:AD:3C:9B:54:35:17:2F:35:AD:21:F0:A1:BF:03:33:5C:6F Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f Certificate serial: 019B13EFC7E548C801ABE175A32D933E0046 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft Manifest number: 1117 Signing time: Fri 12 Dec 2025 19:00:39 +0000 Manifest this update: Fri 12 Dec 2025 19:00:39 +0000 Manifest next update: Sat 13 Dec 2025 19:00:39 +0000 Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: wwlbDygwhgBAhD5LMB60+/qWAcNghKrKVZHC0ERRe7U=) 2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=) 3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:ef:c7:e5:48:c8:01:ab:e1:75:a3:2d:93:3e:00:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f Validity Not Before: Dec 12 19:00:39 2025 GMT Not After : Dec 13 19:00:39 2025 GMT Subject: CN=ffcd5fad3c9b5435172f35ad21f0a1bf03335c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:8c:a8:33:c6:b4:fa:f5:27:6b:9a:a7:1b: 3c:85:ef:37:0b:c0:2f:bd:39:4f:64:04:5c:00:d7: a9:2a:09:98:7a:86:80:07:c0:c3:7e:77:a1:8f:0e: 3e:d9:5a:1f:49:1a:2f:09:6b:9a:d1:5d:dd:22:cd: c9:eb:e4:d1:88:fc:39:10:a6:46:03:14:cc:42:71: 2c:b0:16:d4:f1:e2:c3:94:f3:c7:47:ed:4d:13:92: 59:e3:a8:cb:27:65:5e:78:a4:85:d3:66:86:bf:6b: dc:d8:75:7a:0e:ac:a9:06:5a:75:52:dd:3e:21:2f: 8f:c9:22:7e:98:c8:a0:8f:df:d7:d3:c5:7e:22:45: b0:99:3f:e2:7d:46:84:30:21:e5:d9:88:69:cf:b6: 0c:55:9b:dd:cf:ff:be:ad:42:b5:d0:b5:84:66:f4: ba:68:0f:c0:47:76:0e:fe:85:2e:93:f7:7b:c2:31: 06:25:5d:a2:4b:22:5d:26:ad:b0:c2:1b:c0:de:70: 97:fa:d9:a0:27:56:b2:c4:17:27:b7:61:43:05:6f: 62:ba:c5:d5:32:52:29:51:42:48:84:9e:ba:83:71: f0:00:e0:21:86:8a:eb:f0:39:4b:b9:d6:cb:0e:6e: c4:73:84:82:3a:e2:c8:9b:79:df:67:03:e2:bb:ee: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CD:5F:AD:3C:9B:54:35:17:2F:35:AD:21:F0:A1:BF:03:33:5C:6F X509v3 Authority Key Identifier: keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:94:f3:1b:d6:59:ec:80:a7:48:b3:66:a1:d4:23:fc:8b:2d: ec:e2:1d:0c:89:c3:64:d0:5b:88:de:51:5f:79:31:f7:2f:48: 84:d5:77:d5:e4:04:b7:e4:91:7c:78:4a:fa:6e:b5:1d:43:58: da:f4:fa:a0:7f:40:93:3f:c7:59:76:02:01:23:9a:84:04:34: 3e:d8:ad:88:a7:4b:c3:3e:dc:aa:1e:0c:47:7f:bf:0a:6c:a6: dc:dd:ef:67:c3:8a:4e:19:d5:94:1b:27:50:69:ce:b9:11:a9: a4:b0:e0:b6:24:33:9c:17:2f:63:73:76:51:e6:34:f4:a7:28: 25:08:40:e9:f7:b8:3e:34:7a:0a:26:aa:62:5c:81:56:25:88: ed:16:73:d8:48:85:7e:42:f9:2e:68:22:9f:b2:72:08:c8:cb: 17:ab:78:87:8c:92:f9:9e:1d:95:23:35:ad:29:74:f5:c1:3a: f7:45:0c:c1:c1:77:f5:17:92:b3:dc:5b:29:17:20:d1:07:ad: bf:04:1d:db:bc:df:46:85:e5:1d:1a:7b:f8:67:1c:56:06:63: 3e:b0:ea:41:f1:ae:1a:10:2d:c9:85:f0:42:8f:33:19:e2:09: 73:f4:5f:e2:dd:69:3d:c2:a1:be:76:e1:a8:04:74:f5:08:bd: 30:8a:9b:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT78flSMgBq+F1oy2TPgBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx ODk1MWYwHhcNMjUxMjEyMTkwMDM5WhcNMjUxMjEzMTkwMDM5WjAzMTEwLwYDVQQD EyhmZmNkNWZhZDNjOWI1NDM1MTcyZjM1YWQyMWYwYTFiZjAzMzM1YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNqMqDPGtPr1J2uapxs8he83C8Av vTlPZARcANepKgmYeoaAB8DDfnehjw4+2VofSRovCWua0V3dIs3J6+TRiPw5EKZG AxTMQnEssBbU8eLDlPPHR+1NE5JZ46jLJ2VeeKSF02aGv2vc2HV6DqypBlp1Ut0+ IS+PySJ+mMigj9/X08V+IkWwmT/ifUaEMCHl2Yhpz7YMVZvdz/++rUK10LWEZvS6 aA/AR3YO/oUuk/d7wjEGJV2iSyJdJq2wwhvA3nCX+tmgJ1ayxBcnt2FDBW9iusXV MlIpUUJIhJ66g3HwAOAhhorr8DlLudbLDm7Ec4SCOuLIm3nfZwPiu+5YCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/NX608m1Q1Fy81rSHwob8DM1xvMB8GA1UdIwQY MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0 LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5TzG9ZZ 7ICnSLNmodQj/Ist7OIdDInDZNBbiN5RX3kx9y9IhNV31eQEt+SRfHhK+m61HUNY 2vT6oH9Akz/HWXYCASOahAQ0PtitiKdLwz7cqh4MR3+/Cmym3N3vZ8OKThnVlBsn UGnOuRGppLDgtiQznBcvY3N2UeY09KcoJQhA6fe4PjR6CiaqYlyBViWI7RZz2EiF fkL5Lmgin7JyCMjLF6t4h4yS+Z4dlSM1rSl09cE690UMwcF39ReSs9xbKRcg0Qet vwQd27zfRoXlHRp7+GccVgZjPrDqQfGuGhAtyYXwQo8zGeIJc/Rf4t1pPcKhvnbh qAR09Qi9MIqbbQ== -----END CERTIFICATE-----Generated at Sat Dec 13 01:56:48 2025 by rpki-client