This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft File: 2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json) Hash identifier: UoD654vRfHpVAQrNeNcKmKep3dWk06uSinNQM8S9MuU= Subject key identifier: 74:38:20:8C:88:E7:98:59:7C:5A:AE:2B:06:2F:BD:D4:F8:B3:66:13 Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Certificate serial: 019B0E25BBC2438A9C0F55AFF3314166C714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft Manifest number: 146F Signing time: Thu 11 Dec 2025 16:01:52 +0000 Manifest this update: Thu 11 Dec 2025 16:01:52 +0000 Manifest next update: Fri 12 Dec 2025 16:01:52 +0000 Files and hashes: 1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: 5OemWT959zkpEAj1tl3raZL0CJaK2pHFaB/NaxnZx+c=) 2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=) 3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=) 4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=) 5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:bb:c2:43:8a:9c:0f:55:af:f3:31:41:66:c7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a Validity Not Before: Dec 11 16:01:52 2025 GMT Not After : Dec 12 16:01:52 2025 GMT Subject: CN=7438208c88e798597c5aae2b062fbdd4f8b36613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:1d:bd:6f:1e:70:da:d2:0b:3f:e3:ce:cd: bd:61:2a:fa:91:9d:b2:43:8b:d6:88:c8:4b:8d:83: 6f:dc:fc:ff:1c:6a:f4:91:5f:4a:51:ca:92:a3:a2: 68:69:24:94:7c:86:6a:ba:ef:66:79:9a:d9:e1:4e: 4e:d6:1c:52:da:8c:47:35:6c:09:fb:dc:00:02:3f: 59:a3:b6:ae:24:28:75:bd:b2:17:ce:88:0b:04:76: a2:ec:8f:8d:fb:79:18:58:0e:8c:6e:c6:a8:07:45: f6:7a:0d:6e:b5:84:ea:bd:1b:c0:f2:69:e5:00:d9: 8c:87:fc:d0:dc:5d:7f:27:44:66:e8:d2:fe:c6:21: ea:a7:3d:29:14:d4:9e:50:15:8b:b8:6f:3c:8e:1a: 40:09:8a:3f:4d:e7:3c:a9:55:84:cc:80:45:5d:f3: 85:75:05:19:93:60:be:98:43:0d:aa:1e:0a:72:83: 81:9c:ba:91:bc:a8:4e:89:b6:0a:0b:b5:88:13:29: 96:54:bd:15:ed:da:ec:3a:78:86:f1:3e:d0:b7:cd: 42:4a:99:c8:5d:ed:af:60:47:61:25:97:16:be:5d: a6:50:48:98:e3:f9:e1:9e:90:85:89:59:a4:29:b7: 77:a9:ce:e7:e4:b9:9b:c2:18:16:01:f3:e5:e1:54: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:38:20:8C:88:E7:98:59:7C:5A:AE:2B:06:2F:BD:D4:F8:B3:66:13 X509v3 Authority Key Identifier: keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:45:b1:eb:82:7d:27:1d:73:6e:74:b8:47:78:19:c4:d0:61: 2a:05:ce:a1:c6:0a:1f:7a:23:aa:a2:07:ed:62:d3:a0:db:ac: bb:d0:43:71:d2:1c:36:ee:50:02:55:b6:43:ed:e9:40:87:b5: f4:d5:2b:96:26:56:88:df:28:af:05:a6:e0:5b:fc:14:dd:0a: 9c:b5:91:9b:0e:1c:f1:bf:53:a0:a8:5b:42:42:d6:8f:9d:b8: b1:b9:8e:aa:ad:ce:c7:ba:c9:64:72:9d:2d:23:91:60:65:a6: 2a:9a:ac:74:b8:8f:5c:77:e4:38:a6:4e:52:48:a2:72:8b:07: 09:ff:5f:84:84:af:aa:16:6d:ca:a7:d4:8a:4e:bc:9c:b2:49: 18:a5:9c:7c:ff:41:53:80:0d:65:5e:24:4c:d4:c8:b7:43:c1: c7:0e:e4:be:fd:50:24:2e:cf:b5:4d:ed:e2:70:a7:88:43:bf: 30:42:cb:ad:7b:3f:07:ee:ad:b0:c8:f3:a0:b0:cb:82:5a:3f: 99:2a:b5:5b:c4:59:47:47:7b:f7:34:7e:80:8f:4c:37:05:3b: 4c:e0:1f:02:56:ed:db:9b:0c:03:74:36:d8:bb:9f:c8:a3:31: fb:fb:e3:b1:a7:06:6c:25:c0:b9:94:39:ac:70:76:ac:e2:c2: 80:fe:b0:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJbvCQ4qcD1Wv8zFBZscUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3 ZjRkNWEwHhcNMjUxMjExMTYwMTUyWhcNMjUxMjEyMTYwMTUyWjAzMTEwLwYDVQQD Eyg3NDM4MjA4Yzg4ZTc5ODU5N2M1YWFlMmIwNjJmYmRkNGY4YjM2NjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/odvW8ecNrSCz/jzs29YSr6kZ2y Q4vWiMhLjYNv3Pz/HGr0kV9KUcqSo6JoaSSUfIZquu9meZrZ4U5O1hxS2oxHNWwJ +9wAAj9Zo7auJCh1vbIXzogLBHai7I+N+3kYWA6MbsaoB0X2eg1utYTqvRvA8mnl ANmMh/zQ3F1/J0Rm6NL+xiHqpz0pFNSeUBWLuG88jhpACYo/Tec8qVWEzIBFXfOF dQUZk2C+mEMNqh4KcoOBnLqRvKhOibYKC7WIEymWVL0V7drsOniG8T7Qt81CSpnI Xe2vYEdhJZcWvl2mUEiY4/nhnpCFiVmkKbd3qc7n5LmbwhgWAfPl4VSjdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ4IIyI55hZfFquKwYvvdT4s2YTMB8GA1UdIwQY MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEWx64J9 Jx1zbnS4R3gZxNBhKgXOocYKH3ojqqIH7WLToNusu9BDcdIcNu5QAlW2Q+3pQIe1 9NUrliZWiN8orwWm4Fv8FN0KnLWRmw4c8b9ToKhbQkLWj524sbmOqq3Ox7rJZHKd LSORYGWmKpqsdLiPXHfkOKZOUkiicosHCf9fhISvqhZtyqfUik68nLJJGKWcfP9B U4ANZV4kTNTIt0PBxw7kvv1QJC7PtU3t4nCniEO/MELLrXs/B+6tsMjzoLDLglo/ mSq1W8RZR0d79zR+gI9MNwU7TOAfAlbt25sMA3Q22LufyKMx+/vjsacGbCXAuZQ5 rHB2rOLCgP6wJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:51 2025 by rpki-client