This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json) Hash identifier: 5WvgjNX2DeIAVrnDUh4dedLmTKbqn7zTB7VkEcQJCPo= Subject key identifier: A9:77:E3:D1:B3:35:6C:34:7D:FE:63:07:77:0C:2B:DF:8C:5B:FE:54 Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Certificate serial: 019B10B8512DB933E4E715AF829DD75216CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft Manifest number: 0EB6 Signing time: Fri 12 Dec 2025 04:01:13 +0000 Manifest this update: Fri 12 Dec 2025 04:01:13 +0000 Manifest next update: Sat 13 Dec 2025 04:01:13 +0000 Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=) 2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: zlDQtmFKp08uhrUYeHp+iibbaemvvlfJZk6RAzhauSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:51:2d:b9:33:e4:e7:15:af:82:9d:d7:52:16:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Validity Not Before: Dec 12 04:01:13 2025 GMT Not After : Dec 13 04:01:13 2025 GMT Subject: CN=a977e3d1b3356c347dfe6307770c2bdf8c5bfe54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:5e:8e:4f:8e:54:12:dd:3e:c4:d7:66:50: f0:8f:cb:a7:95:01:31:5a:40:a7:28:7b:19:77:63: ec:81:c6:35:a4:a1:57:f3:d0:33:14:d6:a8:95:f1: be:c6:df:21:17:86:b6:f0:d0:02:51:44:69:ed:04: 8a:1b:13:70:86:ab:2a:14:0b:a1:15:a3:91:f8:42: 60:4e:82:f4:53:ea:9b:29:d3:39:75:a2:0b:99:37: e9:a7:31:f9:97:73:71:74:5d:51:d4:61:ba:66:3a: 73:e9:37:c6:09:b2:aa:c3:88:ea:6e:3d:c2:98:fd: eb:97:96:ec:eb:1c:be:82:91:72:61:3b:f7:74:55: eb:62:91:c8:a9:3e:57:df:b1:81:9a:8a:d0:52:60: 9b:9b:ae:3c:d0:6f:e6:e6:1d:25:4e:ad:43:b8:e6: 6e:bd:b2:52:24:a0:af:07:8d:2a:ce:b7:bb:f1:35: 1b:b9:2d:47:86:04:16:a0:8b:aa:e0:92:ab:d7:61: 40:99:97:a0:8f:b9:c9:8a:1d:cc:c8:4c:f8:29:b9: 90:a5:b9:6d:2b:12:ea:85:c4:53:8e:1b:bd:29:93: d0:74:d4:28:19:95:b8:c0:c2:cc:bd:38:e2:53:aa: 4a:40:0f:58:ee:5a:3c:1d:61:70:af:1f:95:af:67: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:77:E3:D1:B3:35:6C:34:7D:FE:63:07:77:0C:2B:DF:8C:5B:FE:54 X509v3 Authority Key Identifier: keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:98:c8:9e:83:46:48:de:73:99:fc:79:ae:53:55:07:4c:0e: f8:9a:1e:2f:ff:23:c4:68:a3:e0:7f:31:b1:7c:e1:76:6e:3e: 22:93:08:cc:f7:cd:07:9c:4c:46:09:e1:64:5d:23:c4:4f:19: 1e:0e:5b:3f:87:bb:25:ab:8b:06:85:02:9f:d3:fb:d4:6f:c1: f8:ff:57:35:0c:df:96:57:c4:a7:83:eb:0e:c5:e5:86:0d:0f: fb:25:03:d6:5a:19:4a:18:9a:27:99:57:d0:e8:69:d3:6a:62: 6a:2a:4a:8d:29:37:ad:db:0f:cd:90:a6:ca:38:62:f3:03:69: 96:bc:45:b2:95:b8:f7:7a:b5:cd:41:c8:3f:f9:b1:b1:0a:ad: 74:cc:23:fc:23:22:79:65:23:33:ec:15:f6:f8:41:1b:d7:6d: 30:3f:72:28:ef:35:48:14:b9:c2:43:51:24:f1:4e:a5:15:28: 59:8f:15:c4:ca:0e:ba:31:12:19:78:61:32:4e:77:42:87:96: 34:a9:78:38:bd:20:27:cf:52:68:8d:6f:9a:2a:4d:b6:9f:e7: 7d:02:15:96:0d:8f:ca:98:f3:68:36:fe:57:f5:6c:9c:35:d2: 59:e6:9c:1a:4f:61:12:3e:e1:c9:40:3f:3d:7d:24:c9:57:26: 43:33:ad:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuFEtuTPk5xWvgp3XUhbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli NjlkZGMwHhcNMjUxMjEyMDQwMTEzWhcNMjUxMjEzMDQwMTEzWjAzMTEwLwYDVQQD EyhhOTc3ZTNkMWIzMzU2YzM0N2RmZTYzMDc3NzBjMmJkZjhjNWJmZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3xejk+OVBLdPsTXZlDwj8unlQEx WkCnKHsZd2PsgcY1pKFX89AzFNaolfG+xt8hF4a28NACUURp7QSKGxNwhqsqFAuh FaOR+EJgToL0U+qbKdM5daILmTfppzH5l3NxdF1R1GG6Zjpz6TfGCbKqw4jqbj3C mP3rl5bs6xy+gpFyYTv3dFXrYpHIqT5X37GBmorQUmCbm6480G/m5h0lTq1DuOZu vbJSJKCvB40qzre78TUbuS1HhgQWoIuq4JKr12FAmZegj7nJih3MyEz4KbmQpblt KxLqhcRTjhu9KZPQdNQoGZW4wMLMvTjiU6pKQA9Y7lo8HWFwrx+Vr2dMkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKl349GzNWw0ff5jB3cMK9+MW/5UMB8GA1UdIwQY MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZjInoNG SN5zmfx5rlNVB0wO+JoeL/8jxGij4H8xsXzhdm4+IpMIzPfNB5xMRgnhZF0jxE8Z Hg5bP4e7JauLBoUCn9P71G/B+P9XNQzfllfEp4PrDsXlhg0P+yUD1loZShiaJ5lX 0Ohp02piaipKjSk3rdsPzZCmyjhi8wNplrxFspW493q1zUHIP/mxsQqtdMwj/CMi eWUjM+wV9vhBG9dtMD9yKO81SBS5wkNRJPFOpRUoWY8VxMoOujESGXhhMk53QoeW NKl4OL0gJ89SaI1vmipNtp/nfQIVlg2PypjzaDb+V/VsnDXSWeacGk9hEj7hyUA/ PX0kyVcmQzOtoQ== -----END CERTIFICATE-----Generated at Fri Dec 12 07:45:40 2025 by rpki-client