This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json) Hash identifier: zvfFlmF7UhdHm7UiKG1Jzf1XsZfZJE7UYDOrWTZxozo= Subject key identifier: 48:31:B5:80:A4:FC:4B:A3:F1:2F:39:A1:32:30:DD:37:B8:37:9A:82 Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Certificate serial: 019AF50BC1FA181C6A341E04C7ADFA9657AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft Manifest number: 123F Signing time: Sat 06 Dec 2025 19:02:59 +0000 Manifest this update: Sat 06 Dec 2025 19:02:59 +0000 Manifest next update: Sun 07 Dec 2025 19:02:59 +0000 Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: A0PQV7AF9ulJ1nODZ1f0HH37DMPJtdKxFb9I6ibuxuo=) 2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c1:fa:18:1c:6a:34:1e:04:c7:ad:fa:96:57:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Validity Not Before: Dec 6 19:02:59 2025 GMT Not After : Dec 7 19:02:59 2025 GMT Subject: CN=4831b580a4fc4ba3f12f39a13230dd37b8379a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:34:24:2e:8b:3e:6d:f0:31:d3:e4:3f:a2: 2b:b3:60:a3:b7:49:59:2d:66:f1:3c:5f:4b:f3:bb: 0e:77:c3:3b:4f:58:99:cc:2b:7d:10:12:ac:26:36: fc:a1:b6:3b:3c:0a:3f:dc:50:f0:06:d7:01:ab:6c: 80:89:6f:c6:25:5b:15:64:c0:8c:47:1f:f0:fd:7b: 0b:ac:36:38:11:65:70:3d:4d:47:e9:36:01:5e:f6: 80:a4:17:a7:6c:6e:89:a0:bb:d9:12:59:68:2a:bb: f6:d4:aa:f5:2a:0b:4a:9a:00:3b:f0:21:d3:01:ba: d5:f2:7b:97:23:c2:23:d6:8a:41:b3:c6:f7:e9:a4: 80:de:94:79:95:3d:2e:f6:c1:c4:bd:53:95:e6:d5: 43:11:1b:71:24:84:48:df:1c:11:29:9f:a7:19:13: f9:a1:0f:e9:9c:03:eb:50:45:7e:e0:dd:b2:cb:b6: 8e:e6:ba:7a:e0:15:72:2b:d5:94:39:53:b2:f4:8a: d2:08:85:9a:a0:05:d7:f8:d5:74:21:01:0b:e2:96: 76:f2:d9:df:9a:ba:1b:a5:04:e1:89:ee:6e:44:a6: 7a:e2:3f:11:06:f1:07:cd:5a:b5:5f:d5:26:b4:83: bd:1b:54:15:2b:bc:91:6c:40:09:6f:29:69:fe:9f: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:31:B5:80:A4:FC:4B:A3:F1:2F:39:A1:32:30:DD:37:B8:37:9A:82 X509v3 Authority Key Identifier: keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:65:f2:32:4d:d7:ae:c8:62:73:19:0c:4a:28:bc:ad:c1:21: 68:02:10:73:ed:e0:ca:75:75:52:ef:c8:31:54:57:11:d8:ef: ad:7c:10:d9:de:77:52:80:b8:8f:9f:ca:fc:59:5c:88:a6:e8: f1:bd:a4:4a:6b:0c:61:05:45:c2:78:dc:d1:cd:46:d3:5d:b4: 4d:a2:1a:91:db:97:36:49:9e:c1:a6:20:58:11:e2:35:ca:5b: 68:2a:c5:88:30:9c:0c:89:0a:5d:71:45:8a:15:4c:b8:13:ed: 5b:80:ef:a0:f8:e0:ad:07:83:94:c3:24:63:bc:4f:a2:0e:5b: db:d4:03:a5:4f:ee:8b:70:b4:b0:4a:cb:d6:36:d6:bf:fa:f8: 6a:25:d1:4a:b1:71:49:7f:d1:62:96:27:eb:bc:f3:ac:ca:41: ff:3d:47:4c:58:bf:25:9f:8a:4b:e0:79:60:cf:df:bd:d9:1e: 0b:82:d6:4f:e1:3a:49:b9:02:9a:c5:88:4f:b5:de:de:c1:37: 6e:56:f7:6b:0e:5a:e8:64:75:7c:43:3c:8b:e5:11:b6:b0:c5: 78:bc:85:a7:eb:74:a4:e0:ac:b9:15:34:a1:b5:c0:1a:9b:c8: 3c:93:a5:37:00:fc:4e:72:40:c3:c5:07:49:a0:55:fa:0a:00: 1f:6d:b7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8H6GBxqNB4Ex636lletMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm YzFjYjcwHhcNMjUxMjA2MTkwMjU5WhcNMjUxMjA3MTkwMjU5WjAzMTEwLwYDVQQD Eyg0ODMxYjU4MGE0ZmM0YmEzZjEyZjM5YTEzMjMwZGQzN2I4Mzc5YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtE0JC6LPm3wMdPkP6Irs2Cjt0lZ LWbxPF9L87sOd8M7T1iZzCt9EBKsJjb8obY7PAo/3FDwBtcBq2yAiW/GJVsVZMCM Rx/w/XsLrDY4EWVwPU1H6TYBXvaApBenbG6JoLvZElloKrv21Kr1KgtKmgA78CHT AbrV8nuXI8Ij1opBs8b36aSA3pR5lT0u9sHEvVOV5tVDERtxJIRI3xwRKZ+nGRP5 oQ/pnAPrUEV+4N2yy7aO5rp64BVyK9WUOVOy9IrSCIWaoAXX+NV0IQEL4pZ28tnf mrobpQThie5uRKZ64j8RBvEHzVq1X9UmtIO9G1QVK7yRbEAJbylp/p8CEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgxtYCk/Euj8S85oTIw3Te4N5qCMB8GA1UdIwQY MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt OWY2YWE0Y2YwNzk5LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5 LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWXyMk3X rshicxkMSii8rcEhaAIQc+3gynV1Uu/IMVRXEdjvrXwQ2d53UoC4j5/K/FlciKbo 8b2kSmsMYQVFwnjc0c1G0120TaIakduXNkmewaYgWBHiNcpbaCrFiDCcDIkKXXFF ihVMuBPtW4DvoPjgrQeDlMMkY7xPog5b29QDpU/ui3C0sErL1jbWv/r4aiXRSrFx SX/RYpYn67zzrMpB/z1HTFi/JZ+KS+B5YM/fvdkeC4LWT+E6SbkCmsWIT7Xe3sE3 blb3aw5a6GR1fEM8i+URtrDFeLyFp+t0pOCsuRU0obXAGpvIPJOlNwD8TnJAw8UH SaBV+goAH223wQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:09 2025 by rpki-client