This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json) Hash identifier: xh5p3D9lkHQedxOPtWi/XbXgaBxPshyQfuGC4lYXfc0= Subject key identifier: CE:54:5B:30:70:F5:35:50:72:B5:02:19:FE:BD:BE:72:E3:27:36:2A Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Certificate serial: 019AAC4BA4FF49B0E7500935E704BDEA288C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft Manifest number: 1456 Signing time: Sat 22 Nov 2025 16:00:29 +0000 Manifest this update: Sat 22 Nov 2025 16:00:29 +0000 Manifest next update: Sun 23 Nov 2025 16:00:29 +0000 Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=) 2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: 8tFlXt95UBOVdD4laUQwCbpq7D0hLQkdPaQdqO1m2jU=) 3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=) 4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4b:a4:ff:49:b0:e7:50:09:35:e7:04:bd:ea:28:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943 Validity Not Before: Nov 22 16:00:29 2025 GMT Not After : Nov 23 16:00:29 2025 GMT Subject: CN=ce545b3070f5355072b50219febdbe72e327362a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:be:10:f8:09:bb:67:49:8f:09:b0:e8:0e: 0f:04:d5:27:21:0b:4d:b5:f8:41:c7:38:13:e4:c1: ae:b7:55:96:6a:7c:66:1d:ca:ef:13:31:84:ce:01: 69:39:31:05:d8:ad:35:61:4c:fb:af:cb:28:92:ea: 1e:e1:4c:33:0c:1d:08:4a:3d:6c:48:a6:7a:7d:9a: f2:bd:a8:b2:c4:ea:bc:85:d4:71:93:46:a1:a5:93: 5f:bc:44:b1:01:ae:f5:df:a2:65:6c:a6:47:e0:be: 95:89:52:dc:a1:fe:7a:ba:a7:03:ed:cf:2a:b6:df: 23:a5:57:cf:f3:29:c3:aa:5b:b7:ed:f6:f1:5e:1a: 3e:b9:61:80:19:7d:18:4d:fd:3c:39:d0:0d:aa:ef: 29:0a:ec:2d:e0:51:ef:e4:46:78:ad:1c:6a:b5:34: 70:2f:5a:9c:2d:16:25:f8:54:4f:37:6a:e5:03:5b: 9f:f8:60:91:07:9a:48:cd:a2:8f:77:40:c2:1b:41: fc:96:5c:de:4a:a1:d6:b4:80:44:3f:61:81:1f:65: 1d:cc:5c:a2:09:ac:cd:c5:7d:9a:aa:19:b1:63:2c: fe:04:71:c7:23:74:ed:a2:b7:46:6c:82:61:87:ec: cb:68:f7:30:de:a7:7a:8c:11:3e:20:0b:29:ab:12: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:54:5B:30:70:F5:35:50:72:B5:02:19:FE:BD:BE:72:E3:27:36:2A X509v3 Authority Key Identifier: keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a5:da:91:d4:c1:f2:55:6a:c3:61:40:83:cb:e5:14:88:4c: c7:46:48:05:41:ce:f8:46:2f:53:a1:76:b3:07:d2:f4:ba:fe: 68:59:8c:d0:ed:17:bf:3f:46:c3:96:54:3f:eb:55:55:96:49: 55:ad:4a:f4:ff:27:a8:0f:14:9c:bb:11:02:61:2d:52:73:3e: 5f:b1:a2:11:b3:c1:87:cf:e5:e2:fc:b2:f5:a3:9b:2d:d7:c4: b8:1b:d9:21:01:53:c0:57:17:04:2c:27:14:a8:84:5c:88:e3: 77:14:99:53:b6:01:45:50:15:88:86:9a:0c:90:31:dd:b8:ca: 1a:d8:14:e4:68:fb:7c:c4:ac:de:8c:ac:a6:5b:5a:52:00:5c: 9a:5e:50:b0:2c:cb:12:fe:ab:4b:23:49:42:19:21:ee:fe:ed: f2:4b:ad:6c:52:b4:ec:9c:ed:8f:cc:eb:70:a4:39:51:2c:0b: 41:52:10:bd:d7:e7:e5:f9:47:03:10:93:1d:57:aa:60:92:e2: c3:ef:e3:80:08:f7:8f:af:e3:e9:d1:66:b4:13:fa:6b:af:03: a0:d5:07:03:c0:10:28:85:7e:74:da:eb:89:86:d2:d3:a4:7e: 30:13:5d:66:55:ab:51:ae:35:f6:f1:57:95:91:81:a5:f5:e5: 13:8a:27:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsS6T/SbDnUAk15wS96iiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MjZjYTVkNTNjMWI1MzA4ZTJjOWM3OTFjNjMwYTBmMjIz Mzc5NDMwHhcNMjUxMTIyMTYwMDI5WhcNMjUxMTIzMTYwMDI5WjAzMTEwLwYDVQQD EyhjZTU0NWIzMDcwZjUzNTUwNzJiNTAyMTlmZWJkYmU3MmUzMjczNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupS+EPgJu2dJjwmw6A4PBNUnIQtN tfhBxzgT5MGut1WWanxmHcrvEzGEzgFpOTEF2K01YUz7r8sokuoe4UwzDB0ISj1s SKZ6fZryvaiyxOq8hdRxk0ahpZNfvESxAa7136JlbKZH4L6ViVLcof56uqcD7c8q tt8jpVfP8ynDqlu37fbxXho+uWGAGX0YTf08OdANqu8pCuwt4FHv5EZ4rRxqtTRw L1qcLRYl+FRPN2rlA1uf+GCRB5pIzaKPd0DCG0H8llzeSqHWtIBEP2GBH2UdzFyi CazNxX2aqhmxYyz+BHHHI3TtordGbIJhh+zLaPcw3qd6jBE+IAspqxIpnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5UWzBw9TVQcrUCGf69vnLjJzYqMB8GA1UdIwQY MBaAFNgmyl1TwbUwjiyceRxjCg8iM3lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGIt NThkMmVlOTgyODc5LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80YjU0NGUtNjUzNS00YWY4LWJiZGItNThkMmVlOTgyODc5 LzEvMkNiS1hWUEJ0VENPTEp4NUhHTUtEeUl6ZVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaXakdTB 8lVqw2FAg8vlFIhMx0ZIBUHO+EYvU6F2swfS9Lr+aFmM0O0Xvz9Gw5ZUP+tVVZZJ Va1K9P8nqA8UnLsRAmEtUnM+X7GiEbPBh8/l4vyy9aObLdfEuBvZIQFTwFcXBCwn FKiEXIjjdxSZU7YBRVAViIaaDJAx3bjKGtgU5Gj7fMSs3oyspltaUgBcml5QsCzL Ev6rSyNJQhkh7v7t8kutbFK07Jztj8zrcKQ5USwLQVIQvdfn5flHAxCTHVeqYJLi w+/jgAj3j6/j6dFmtBP6a68DoNUHA8AQKIV+dNrriYbS06R+MBNdZlWrUa419vFX lZGBpfXlE4onuw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:02 2025 by rpki-client