This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json) Hash identifier: 1GIEM6+X5NsJSKsAiXgXc/NKk2pGpqeK9d2zz4E50Vk= Subject key identifier: D8:D8:22:7D:08:86:45:94:E2:9B:39:CC:7B:F1:1E:5C:CE:BA:00:29 Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb Certificate serial: 019B30E824ACBDB7DE312C496FD1BF51B0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft Manifest number: 1556 Signing time: Thu 18 Dec 2025 10:01:18 +0000 Manifest this update: Thu 18 Dec 2025 10:01:18 +0000 Manifest next update: Fri 19 Dec 2025 10:01:18 +0000 Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: uf2jnOikvsnqlz5+QcQ8RGge4ntAp82qAjTS0QwOHhI=) 2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:24:ac:bd:b7:de:31:2c:49:6f:d1:bf:51:b0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb Validity Not Before: Dec 18 10:01:18 2025 GMT Not After : Dec 19 10:01:18 2025 GMT Subject: CN=d8d8227d08864594e29b39cc7bf11e5cceba0029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:33:22:00:95:ef:33:a0:0b:81:b6:37:65: 5f:2d:e9:5b:ec:e4:01:31:6c:ed:c6:f0:18:e2:d8: 05:80:ee:0f:2b:a2:b5:cf:d6:ac:77:27:29:c7:c8: 81:d0:99:33:d8:8a:5c:64:9a:87:ce:5a:dd:8c:00: 2b:f1:e8:76:57:a4:90:84:a4:b2:56:c9:ea:d0:12: 4f:24:cd:3a:9b:bb:37:d0:ec:16:38:89:8e:11:71: a1:ed:30:91:c1:6a:fc:78:93:f4:6b:05:1a:0a:02: 9d:8a:49:1e:e1:c7:7b:c4:75:32:95:6d:f8:d4:f3: 01:20:85:fe:93:82:98:8e:24:53:53:3a:89:9a:1e: da:c5:d1:49:7e:33:6e:59:bd:a6:ad:e9:56:9e:3d: 22:87:2e:72:43:08:40:50:07:ec:52:19:9c:e7:17: 85:cd:cd:04:32:5e:21:f3:47:1e:b7:d5:e4:db:19: ec:d5:81:c3:68:16:ce:89:43:4d:f0:3a:1b:4e:e3: 35:0d:6b:c6:03:c5:f2:a6:8a:48:cc:3b:49:35:87: ec:a6:72:8a:84:16:2e:53:fe:e2:55:54:50:1c:dc: 31:2f:28:b2:c3:a5:4b:5c:f0:c5:4b:34:38:02:23: dd:22:01:70:e7:4e:d9:f6:8b:68:85:92:bc:c9:ef: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:22:7D:08:86:45:94:E2:9B:39:CC:7B:F1:1E:5C:CE:BA:00:29 X509v3 Authority Key Identifier: keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:1c:39:cb:7b:46:09:5c:85:3c:44:18:ac:5b:3b:1e:77: 4d:af:9e:ba:da:1d:e5:69:aa:93:13:3b:23:f8:16:28:61:84: 29:05:d0:a1:10:80:3b:a7:d4:67:f1:19:f7:fc:ea:3d:94:c1: 3d:1c:b4:2c:11:75:b1:fe:5d:95:5f:df:47:3b:92:98:56:9f: eb:89:27:8b:d8:76:ca:f4:eb:48:3c:bc:97:95:13:14:97:97: a7:12:8f:64:f8:23:9c:f6:01:63:e8:7b:a3:cb:0e:35:bf:89: 0f:9a:13:4a:ff:99:a6:ab:0a:fc:f2:b2:fb:6e:f7:dc:95:ee: 19:8d:21:07:46:51:e7:b0:51:f4:32:47:c0:f0:6d:bd:c8:47: 5d:2c:a7:9f:ad:88:a9:94:33:e8:fa:e3:f1:31:42:64:73:e0: 03:92:fe:2c:68:11:9d:91:9b:e9:8b:c0:9d:95:6f:84:ea:1a: eb:d1:4a:c3:c5:89:15:99:29:aa:ab:7c:d7:72:73:0f:63:2b: 3e:19:8a:17:49:83:a8:ea:e6:07:34:2e:1f:ac:ab:85:9e:f3: df:60:b6:79:2a:ee:2e:6b:1e:a4:57:ad:2d:46:52:75:62:d9: f9:6c:c5:37:22:f0:74:4e:e5:f2:14:64:4f:1c:ca:f1:ed:c4: 88:79:e9:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6CSsvbfeMSxJb9G/UbCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDM4OWQ4NWVhMTI2ZTBlZmJlYmM1ZDg0NTllZjcwOWZi ODk1Y2IwHhcNMjUxMjE4MTAwMTE4WhcNMjUxMjE5MTAwMTE4WjAzMTEwLwYDVQQD EyhkOGQ4MjI3ZDA4ODY0NTk0ZTI5YjM5Y2M3YmYxMWU1Y2NlYmEwMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSMzIgCV7zOgC4G2N2VfLelb7OQB MWztxvAY4tgFgO4PK6K1z9asdycpx8iB0Jkz2IpcZJqHzlrdjAAr8eh2V6SQhKSy Vsnq0BJPJM06m7s30OwWOImOEXGh7TCRwWr8eJP0awUaCgKdikke4cd7xHUylW34 1PMBIIX+k4KYjiRTUzqJmh7axdFJfjNuWb2mrelWnj0ihy5yQwhAUAfsUhmc5xeF zc0EMl4h80cet9Xk2xns1YHDaBbOiUNN8DobTuM1DWvGA8XypopIzDtJNYfspnKK hBYuU/7iVVRQHNwxLyiyw6VLXPDFSzQ4AiPdIgFw507Z9otohZK8ye+dfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjYIn0IhkWU4ps5zHvxHlzOugApMB8GA1UdIwQY MBaAFNoDidheoSbg7768XYRZ73CfuJXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQt ZWE2MTM0NzA2YTQwLzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yNzU4NWMtYjg2Ni00OTYyLTgwZmQtZWE2MTM0NzA2YTQw LzEvMmdPSjJGNmhKdUR2dnJ4ZGhGbnZjSi00bGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5McOct7 RglchTxEGKxbOx53Ta+eutod5WmqkxM7I/gWKGGEKQXQoRCAO6fUZ/EZ9/zqPZTB PRy0LBF1sf5dlV/fRzuSmFaf64kni9h2yvTrSDy8l5UTFJeXpxKPZPgjnPYBY+h7 o8sONb+JD5oTSv+ZpqsK/PKy+2733JXuGY0hB0ZR57BR9DJHwPBtvchHXSynn62I qZQz6Prj8TFCZHPgA5L+LGgRnZGb6YvAnZVvhOoa69FKw8WJFZkpqqt813JzD2Mr PhmKF0mDqOrmBzQuH6yrhZ7z32C2eSruLmsepFetLUZSdWLZ+WzFNyLwdE7l8hRk TxzK8e3EiHnpKQ== -----END CERTIFICATE-----Generated at Thu Dec 18 14:58:46 2025 by rpki-client