This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json) Hash identifier: 4z8jfus2jPykjv04DCCvh6GYLrhJZ/ZW1ZRPKcv0hxk= Subject key identifier: B4:DE:8C:B0:E9:73:2D:C9:DF:1B:9F:6D:31:F4:37:DA:77:FA:2A:CB Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Certificate serial: 019B2EFA0F793FAEC6BABC6F7EEF556DA243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft Manifest number: 06D8 Signing time: Thu 18 Dec 2025 01:01:38 +0000 Manifest this update: Thu 18 Dec 2025 01:01:38 +0000 Manifest next update: Fri 19 Dec 2025 01:01:38 +0000 Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: iIXvN9+mZwmrozNrwheztdH4qpIg4fP4fqRePuTafEQ=) 2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:0f:79:3f:ae:c6:ba:bc:6f:7e:ef:55:6d:a2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa Validity Not Before: Dec 18 01:01:38 2025 GMT Not After : Dec 19 01:01:38 2025 GMT Subject: CN=b4de8cb0e9732dc9df1b9f6d31f437da77fa2acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:4c:dd:ca:43:07:5a:3d:76:03:a9:f9:e6: 66:3f:36:41:a8:ee:c5:c6:a1:50:14:77:34:46:5c: 79:a8:7f:13:98:90:40:2c:64:35:38:83:52:68:f5: 14:61:98:39:98:52:6f:7f:d5:46:48:0c:a2:f2:0f: 67:c8:9a:e7:36:28:a7:0b:2c:5e:d5:91:59:98:72: ae:d6:94:57:56:c3:cb:7e:10:70:18:8a:18:82:b3: b9:ed:92:77:57:55:94:e4:ba:7b:7b:29:bd:b3:4e: 57:cf:be:81:8e:5c:d9:25:ae:79:fd:d7:a7:c6:ca: b4:09:0c:66:93:ad:a8:c8:40:f9:59:bd:6d:c4:20: 20:db:90:75:9b:ee:a7:f6:13:06:01:84:ba:0f:0d: 73:4f:22:76:c8:97:ec:b5:5e:82:79:98:d6:f0:09: 3f:d1:75:fa:9f:67:c6:7c:ee:1e:90:8d:53:40:46: 44:b7:ad:05:98:f9:71:fa:ef:4b:6e:f9:d0:03:fe: a0:e1:34:8c:f1:d5:7e:aa:79:b9:d8:61:5e:3e:12: 7f:d5:44:be:f4:2b:6b:48:63:d9:b0:ce:8d:3c:6a: 47:03:70:0b:48:8e:1b:b0:24:59:58:1f:b4:61:57: 0d:d5:e3:b4:d2:3d:ee:42:13:ae:58:1b:9a:12:72: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DE:8C:B0:E9:73:2D:C9:DF:1B:9F:6D:31:F4:37:DA:77:FA:2A:CB X509v3 Authority Key Identifier: keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4d:2f:30:81:90:a6:a7:8d:19:4b:8e:68:fc:a1:a0:82:ab: 6f:d6:2d:b0:83:76:38:e6:18:bd:6c:58:01:f3:84:f9:fb:5e: 26:f5:a6:64:e6:f5:92:c2:d4:7c:76:22:7b:1f:ee:b0:81:c9: 2e:d8:6b:88:08:59:a4:8c:d2:fc:ea:d8:8a:4d:4e:82:0d:b8: c3:9c:c0:37:b2:46:5a:31:98:f9:35:99:7f:4a:ac:d1:62:a9: 33:0a:9f:e9:4f:65:ff:72:a4:5f:f2:25:17:7b:af:67:df:6b: 18:42:b4:17:fe:5f:ee:d5:03:8f:fb:a3:14:c8:80:af:0a:d2: b9:70:ec:d1:e1:26:32:e1:1b:ff:75:e0:74:92:ed:a2:3f:69: 9b:1c:70:00:eb:f0:65:eb:d5:46:7b:28:a2:ec:56:f6:aa:a0: 66:d2:88:b7:15:88:85:23:a0:92:00:74:31:4b:af:14:4c:83: 84:25:25:fd:c4:e3:ee:26:f7:3f:14:c6:4a:1a:9a:88:d6:7f: 72:fc:c1:30:f9:28:42:14:63:f2:67:38:df:58:15:cf:38:a3: 60:6e:b0:11:fd:74:8b:a2:f4:10:e7:89:3d:27:d6:4b:7c:ba: 58:38:f4:a0:31:6e:7f:ff:e2:ea:80:53:9b:37:3a:fb:a3:30: db:aa:92:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+g95P67Gurxvfu9VbaJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5 MWY4ZmEwHhcNMjUxMjE4MDEwMTM4WhcNMjUxMjE5MDEwMTM4WjAzMTEwLwYDVQQD EyhiNGRlOGNiMGU5NzMyZGM5ZGYxYjlmNmQzMWY0MzdkYTc3ZmEyYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNNM3cpDB1o9dgOp+eZmPzZBqO7F xqFQFHc0Rlx5qH8TmJBALGQ1OINSaPUUYZg5mFJvf9VGSAyi8g9nyJrnNiinCyxe 1ZFZmHKu1pRXVsPLfhBwGIoYgrO57ZJ3V1WU5Lp7eym9s05Xz76BjlzZJa55/den xsq0CQxmk62oyED5Wb1txCAg25B1m+6n9hMGAYS6Dw1zTyJ2yJfstV6CeZjW8Ak/ 0XX6n2fGfO4ekI1TQEZEt60FmPlx+u9LbvnQA/6g4TSM8dV+qnm52GFePhJ/1US+ 9CtrSGPZsM6NPGpHA3ALSI4bsCRZWB+0YVcN1eO00j3uQhOuWBuaEnIhnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTejLDpcy3J3xufbTH0N9p3+irLMB8GA1UdIwQY MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk0vMIGQ pqeNGUuOaPyhoIKrb9YtsIN2OOYYvWxYAfOE+fteJvWmZOb1ksLUfHYiex/usIHJ LthriAhZpIzS/OrYik1Ogg24w5zAN7JGWjGY+TWZf0qs0WKpMwqf6U9l/3KkX/Il F3uvZ99rGEK0F/5f7tUDj/ujFMiArwrSuXDs0eEmMuEb/3XgdJLtoj9pmxxwAOvw ZevVRnsoouxW9qqgZtKItxWIhSOgkgB0MUuvFEyDhCUl/cTj7ib3PxTGShqaiNZ/ cvzBMPkoQhRj8mc431gVzzijYG6wEf10i6L0EOeJPSfWS3y6WDj0oDFuf//i6oBT mzc6+6Mw26qSeg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:43:09 2025 by rpki-client