This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json) Hash identifier: wuM2kNgurs/JIAimWX/Fp1k/xhGqTYSNQHO6eaCd+/A= Subject key identifier: 08:08:F4:2A:E6:AE:D1:55:9E:55:B6:91:F4:30:F7:34:AB:1F:4C:23 Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Certificate serial: 019B21ABA51566E0B30202B0402618E1C169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft Manifest number: 0826 Signing time: Mon 15 Dec 2025 11:00:55 +0000 Manifest this update: Mon 15 Dec 2025 11:00:55 +0000 Manifest next update: Tue 16 Dec 2025 11:00:55 +0000 Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: GMEFW5sXs1DxFip/cBdkOtm2MhWMzCruwMByKi3PJcY=) 2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:a5:15:66:e0:b3:02:02:b0:40:26:18:e1:c1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Validity Not Before: Dec 15 11:00:55 2025 GMT Not After : Dec 16 11:00:55 2025 GMT Subject: CN=0808f42ae6aed1559e55b691f430f734ab1f4c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d7:15:55:16:9c:23:17:fd:9c:1f:b6:1a:26: 8a:a9:c2:20:70:6f:22:38:8a:93:0d:f6:87:cd:a1: ef:cd:a9:9a:d8:39:0c:c5:44:7e:01:92:1e:49:82: ed:9f:03:63:da:82:2f:e9:0f:84:40:e8:16:de:d0: 75:90:e7:13:c4:e0:a3:dd:00:8f:e4:97:08:0c:78: 0e:3a:6a:b1:75:f7:0a:8b:0a:5a:b4:89:bc:60:43: 74:11:d5:30:80:2e:95:a5:35:79:f9:68:8c:ec:b5: 39:f0:a5:66:2c:db:47:d9:b7:e7:7c:ea:a4:ad:30: e5:d0:e2:35:f5:d0:15:00:a9:e4:d9:c6:cb:24:0a: f7:dd:47:4d:2f:c0:64:e8:92:d2:12:a6:6f:3d:72: 1f:c5:f0:8d:05:4b:23:76:8f:9c:c4:d3:ef:b3:78: be:31:dd:d5:03:3a:26:1a:de:fa:ac:5b:a2:c3:df: 2f:62:22:22:9e:bd:4d:dd:f0:0e:00:75:7b:a0:40: 19:de:d3:73:ac:86:d0:a0:12:ca:c9:a6:6b:bd:dc: 3f:67:d7:8f:fa:f2:36:f6:c2:29:38:33:e8:77:7d: 59:bf:83:4c:2e:79:30:07:de:7b:89:00:ea:04:e7: 62:5f:15:b1:02:ee:ec:01:a1:a2:71:68:89:bd:c0: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:08:F4:2A:E6:AE:D1:55:9E:55:B6:91:F4:30:F7:34:AB:1F:4C:23 X509v3 Authority Key Identifier: keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9b:10:34:b1:cd:10:bd:7a:58:49:65:3b:3e:22:c8:3b:b0: 73:b5:d0:e0:c6:d6:88:37:58:a3:c6:98:b2:df:0e:3f:3a:ee: 33:ac:01:35:47:67:bc:b7:d5:06:38:ee:d2:ed:20:30:c0:5a: 7b:70:ad:b3:3f:68:9f:86:33:66:08:90:ab:b2:f8:cd:09:3e: 6e:b0:2e:00:06:75:2c:00:ed:9b:71:d0:25:52:83:cb:0e:64: 87:f1:fa:f6:5b:71:ef:1e:02:ef:0b:3b:2e:29:89:7c:99:88: c0:90:20:60:66:c2:73:fd:0e:e1:b4:8b:f5:88:8a:98:87:2d: 46:16:76:31:c3:e7:d3:ea:af:af:51:13:bf:f0:d5:6e:67:17: 83:3b:10:d6:57:0e:c9:34:9a:91:5a:8a:e1:9b:1b:43:b6:8e: 0e:32:5c:82:68:d6:60:52:0a:9b:2b:8d:8a:9a:df:95:9b:6b: f0:f7:8c:13:13:39:92:c6:f6:dc:1d:4b:4d:d5:38:4a:cd:91: 64:29:b8:b1:4e:b6:d2:0a:26:dd:43:c7:ed:2f:88:bb:a6:49: 52:8a:78:a8:9e:d2:df:99:fd:02:48:a9:29:76:42:1e:3a:a0: a5:60:7f:95:5f:54:5a:ea:1b:3f:de:f9:3f:a8:d8:3c:a8:2f: 67:fe:ed:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq6UVZuCzAgKwQCYY4cFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh YTA2YTYwHhcNMjUxMjE1MTEwMDU1WhcNMjUxMjE2MTEwMDU1WjAzMTEwLwYDVQQD EygwODA4ZjQyYWU2YWVkMTU1OWU1NWI2OTFmNDMwZjczNGFiMWY0YzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtcVVRacIxf9nB+2GiaKqcIgcG8i OIqTDfaHzaHvzama2DkMxUR+AZIeSYLtnwNj2oIv6Q+EQOgW3tB1kOcTxOCj3QCP 5JcIDHgOOmqxdfcKiwpatIm8YEN0EdUwgC6VpTV5+WiM7LU58KVmLNtH2bfnfOqk rTDl0OI19dAVAKnk2cbLJAr33UdNL8Bk6JLSEqZvPXIfxfCNBUsjdo+cxNPvs3i+ Md3VAzomGt76rFuiw98vYiIinr1N3fAOAHV7oEAZ3tNzrIbQoBLKyaZrvdw/Z9eP +vI29sIpODPod31Zv4NMLnkwB957iQDqBOdiXxWxAu7sAaGicWiJvcAZVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgI9CrmrtFVnlW2kfQw9zSrH0wjMB8GA1UdIwQY MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt MTYxMGEwYzk5M2I0LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0 LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZsQNLHN EL16WEllOz4iyDuwc7XQ4MbWiDdYo8aYst8OPzruM6wBNUdnvLfVBjju0u0gMMBa e3Ctsz9on4YzZgiQq7L4zQk+brAuAAZ1LADtm3HQJVKDyw5kh/H69ltx7x4C7ws7 LimJfJmIwJAgYGbCc/0O4bSL9YiKmIctRhZ2McPn0+qvr1ETv/DVbmcXgzsQ1lcO yTSakVqK4ZsbQ7aODjJcgmjWYFIKmyuNiprflZtr8PeMExM5ksb23B1LTdU4Ss2R ZCm4sU620gom3UPH7S+Iu6ZJUop4qJ7S35n9AkipKXZCHjqgpWB/lV9UWuobP975 P6jYPKgvZ/7teA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:16 2025 by rpki-client