This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft File: t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json) Hash identifier: SZwbu8+ok4/jWb35hIjLwDVaXFpnDJ6LArpUHCjD2KU= Subject key identifier: 6B:66:C0:31:56:67:39:29:B6:02:C5:E0:AA:D1:CE:A3:26:8A:B0:04 Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe Certificate serial: 019B337B4D51465CCB52D2C8585A27EF1506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft Manifest number: 106E Signing time: Thu 18 Dec 2025 22:01:17 +0000 Manifest this update: Thu 18 Dec 2025 22:01:17 +0000 Manifest next update: Fri 19 Dec 2025 22:01:17 +0000 Files and hashes: 1: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: Jqg48JH4hOd6sGL0RTMrzVN8iNrSd0/Tm7mTUSDjwsg=) 2: vHSz7syZCdc9si7_Pq1PLv6tdnc.roa (hash: DpwRdEh/R0r3FLFeNbLkCKGthqDKuAQzsAmQCtR8AOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:4d:51:46:5c:cb:52:d2:c8:58:5a:27:ef:15:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe Validity Not Before: Dec 18 22:01:17 2025 GMT Not After : Dec 19 22:01:17 2025 GMT Subject: CN=6b66c03156673929b602c5e0aad1cea3268ab004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:e5:48:99:ee:f6:c1:c1:30:f2:f0:79:90: 16:9c:ba:78:4a:fc:22:b4:a0:6e:5f:80:16:71:5a: f3:1f:a1:61:ce:49:2a:33:25:00:6d:a9:aa:56:83: 2f:c5:7a:d9:74:be:8b:27:3c:27:82:25:86:65:db: cb:fb:c5:f3:a5:34:a5:8a:ed:52:38:c3:69:e1:52: 51:48:6e:9f:ac:0d:55:28:c4:23:7a:43:54:27:fc: e8:69:43:f9:87:df:4e:46:4a:d5:8c:ef:41:91:56: dc:e8:bc:48:36:a0:22:15:f3:06:f1:a5:e6:ec:fb: d3:53:8e:ea:af:a5:a8:cd:1d:09:f0:10:c7:51:0e: 3f:f6:61:62:be:97:51:68:11:70:a4:e3:b3:71:e2: b0:88:2b:5a:f9:df:18:a3:ba:3f:92:97:9e:9e:f0: 87:bf:f6:d7:76:cf:fd:e2:b4:33:9f:59:d2:1a:6a: 7b:8b:2f:4e:e6:7a:5c:eb:15:5d:17:e7:10:00:11: 46:c4:4b:06:ce:a3:38:de:61:a8:9f:92:bc:be:44: 61:5e:0f:61:6f:16:9b:6b:d8:f3:ad:de:87:fe:74: ba:fc:ce:1b:3d:b1:c0:1a:5d:1e:de:10:09:c2:cd: 6c:d5:0c:82:ac:a7:70:69:51:dd:e2:99:8f:d1:2d: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:66:C0:31:56:67:39:29:B6:02:C5:E0:AA:D1:CE:A3:26:8A:B0:04 X509v3 Authority Key Identifier: keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e5:83:d3:69:61:8e:8a:31:fc:92:a5:4b:f8:e4:44:21:51: 54:13:0a:b5:1a:8b:89:31:f8:65:15:ae:02:69:d2:fa:1a:2e: 46:94:9c:69:d1:d8:26:4b:4b:f6:9a:23:b8:1b:97:47:6b:02: 34:f8:1e:03:76:c0:ca:4f:0f:fd:db:fe:10:16:5d:99:4b:80: a7:d4:fe:77:3c:b4:eb:3c:77:61:47:36:4e:0f:e2:f7:92:ef: c4:b9:46:c4:2f:a5:c3:c4:a0:e3:b6:55:75:40:ad:2c:8e:0c: 00:95:db:b7:f7:d5:93:f3:80:4f:6c:2d:cc:ad:99:26:ec:8e: a5:bb:07:fb:52:d5:1d:b2:26:c4:09:fe:42:a9:16:85:90:fb: 65:b9:66:91:6a:2f:b1:e1:87:07:8d:2d:4c:6a:7f:db:81:c4: 6c:fc:c2:56:8e:1f:b9:a1:28:fa:c0:f9:20:69:c5:3b:dc:4b: 6e:14:05:8b:25:be:cd:f8:48:d5:5f:49:ec:b1:f4:7b:09:9d: 60:e7:5d:e5:fe:0a:80:9e:d2:35:63:96:c1:79:e6:99:dd:02: a6:a6:64:e2:83:80:ab:41:4d:87:e7:e2:bd:4b:60:da:f2:6a: 7f:cc:2a:04:5e:c1:ba:b1:7c:4f:d7:48:3a:9d:97:cd:5a:bc: 85:72:06:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze01RRlzLUtLIWFon7xUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NjBjYWFjZjc3NzY5OWE4YzQzMjM3Yjg5MjZjNjhlNGQx MmM0ZmUwHhcNMjUxMjE4MjIwMTE3WhcNMjUxMjE5MjIwMTE3WjAzMTEwLwYDVQQD Eyg2YjY2YzAzMTU2NjczOTI5YjYwMmM1ZTBhYWQxY2VhMzI2OGFiMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBLlSJnu9sHBMPLweZAWnLp4Svwi tKBuX4AWcVrzH6FhzkkqMyUAbamqVoMvxXrZdL6LJzwngiWGZdvL+8XzpTSliu1S OMNp4VJRSG6frA1VKMQjekNUJ/zoaUP5h99ORkrVjO9BkVbc6LxINqAiFfMG8aXm 7PvTU47qr6WozR0J8BDHUQ4/9mFivpdRaBFwpOOzceKwiCta+d8Yo7o/kpeenvCH v/bXds/94rQzn1nSGmp7iy9O5npc6xVdF+cQABFGxEsGzqM43mGon5K8vkRhXg9h bxaba9jzrd6H/nS6/M4bPbHAGl0e3hAJws1s1QyCrKdwaVHd4pmP0S23JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtmwDFWZzkptgLF4KrRzqMmirAEMB8GA1UdIwQY MBaAFLdgyqz3d2majEMje4kmxo5NEsT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYt YzYyYmU4YTcwM2NlLzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZDQxMjItNWE1Ni00N2Q5LWJjNTYtYzYyYmU4YTcwM2Nl LzEvdDJES3JQZDNhWnFNUXlON2lTYkdqazBTeFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuWD02lh joox/JKlS/jkRCFRVBMKtRqLiTH4ZRWuAmnS+houRpScadHYJktL9pojuBuXR2sC NPgeA3bAyk8P/dv+EBZdmUuAp9T+dzy06zx3YUc2Tg/i95LvxLlGxC+lw8Sg47ZV dUCtLI4MAJXbt/fVk/OAT2wtzK2ZJuyOpbsH+1LVHbImxAn+QqkWhZD7ZblmkWov seGHB40tTGp/24HEbPzCVo4fuaEo+sD5IGnFO9xLbhQFiyW+zfhI1V9J7LH0ewmd YOdd5f4KgJ7SNWOWwXnmmd0CpqZk4oOAq0FNh+fivUtg2vJqf8wqBF7BurF8T9dI Op2XzVq8hXIGcg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:55 2025 by rpki-client