This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json) Hash identifier: dUTsUq44WT6yUbXgqxn1LTKKfCfiKC6Y3EqF9kfb6SA= Subject key identifier: 91:09:78:CD:68:5E:C9:8B:DB:4F:0F:D9:88:70:A9:C9:36:6A:44:32 Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Certificate serial: 019AF276F0A57EAD67DEB9E9219DCCE18470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: +y1jzGtuL5JPivr21M0xPszQUIqeP/auMNTaUsG8qxo=) 2: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (hash: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=) 3: cJTD3IKsBKeCbDG4KiZEHnYFPTM.roa (hash: ufqwqkZa7S2iEhZdfjJxNYCun4AbNJ4X2aLuA4Ji7yY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f0:a5:7e:ad:67:de:b9:e9:21:9d:cc:e1:84:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=910978cd685ec98bdb4f0fd98870a9c9366a4432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c4:ed:bf:94:c6:5b:0e:cb:b0:4a:00:2f:0b: 65:91:f4:e5:ee:a5:d2:89:1b:30:36:61:6e:1e:16: cc:7b:d8:6f:1f:4d:b8:c5:ec:c4:58:5f:89:f4:3b: 4f:75:5a:c9:53:8d:87:01:d5:c3:e5:1d:cd:4a:44: 78:0e:1d:0a:b6:78:93:f8:a8:13:50:28:a2:e5:2a: 66:44:03:cf:7e:64:d2:93:01:e8:9c:31:50:04:75: 6a:62:69:08:2c:57:5b:6a:4f:fe:5a:c9:04:77:b5: 53:74:d9:d3:e7:8c:75:f1:85:10:90:bf:3b:e4:fe: 0e:71:58:00:7a:0c:c2:91:a0:d4:22:3a:f3:45:ac: b8:29:f6:8c:46:dc:4c:2e:b1:f4:9c:3a:c8:ca:7b: 45:ba:92:13:86:3d:4d:ec:22:55:35:fc:db:e4:a8: 7b:45:57:90:4e:42:e7:32:91:3e:71:3b:03:f5:05: 1b:38:a1:81:cf:31:db:62:85:8a:ec:6f:0b:ad:c7: cf:54:b1:3b:db:ea:d0:ac:04:1b:0a:4d:ab:0a:c4: 6d:25:bf:2f:b7:70:25:11:17:23:80:86:13:2d:78: a4:fc:61:43:12:75:d2:1f:59:0a:b4:4d:18:51:43: d5:4b:eb:1e:12:23:68:41:35:fb:85:a4:26:21:06: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:09:78:CD:68:5E:C9:8B:DB:4F:0F:D9:88:70:A9:C9:36:6A:44:32 X509v3 Authority Key Identifier: keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:90:8b:3f:87:a7:58:8a:5b:44:a7:79:3c:58:88:fc:a8:0b: d9:9d:1b:3e:a5:d4:b3:2c:75:e0:97:b5:a5:05:f6:80:74:71: 3c:fc:3f:e9:46:b8:68:f8:b3:f2:5f:58:21:12:16:ea:7a:38: cf:d4:bc:45:96:3e:15:7a:eb:7f:0a:08:fe:24:03:58:0e:fb: 74:be:b7:c5:1b:9d:d6:26:7b:ce:60:51:9c:02:63:dd:bd:43: 4f:9b:9e:a9:55:69:78:1a:10:34:30:61:cf:8f:14:4d:c4:a6: 32:7b:d0:04:19:54:39:20:8a:99:08:21:15:c1:96:b8:de:b0: fa:ed:32:1c:fb:2c:97:3c:3a:b5:59:d3:5f:70:25:f9:a1:40: e3:d6:60:5c:67:f5:1d:4e:1a:7c:93:c8:97:ae:54:b0:e7:04: f9:48:0e:fa:53:0d:1d:9c:6b:e9:b6:da:76:c2:40:51:a1:1f: 9c:aa:11:43:61:51:3a:09:1e:25:89:cf:e1:b4:41:83:e4:4b: c4:5d:c3:4d:b9:4f:c2:1d:70:de:7a:7d:c5:1c:c9:18:7d:24: b3:df:be:0f:ca:92:65:ad:d1:2a:5a:46:69:b0:3f:ae:1d:d7: 2a:9b:d9:17:bf:49:ac:e4:90:96:50:be:7b:8b:38:df:bc:13: 39:57:1d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvClfq1n3rnpIZ3M4YRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDI0YjljNjNkYjVjMWExY2Y0YzU1ODFkYmU1YjM4MWNi OTUwODcwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD Eyg5MTA5NzhjZDY4NWVjOThiZGI0ZjBmZDk4ODcwYTljOTM2NmE0NDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMTtv5TGWw7LsEoALwtlkfTl7qXS iRswNmFuHhbMe9hvH024xezEWF+J9DtPdVrJU42HAdXD5R3NSkR4Dh0KtniT+KgT UCii5SpmRAPPfmTSkwHonDFQBHVqYmkILFdbak/+WskEd7VTdNnT54x18YUQkL87 5P4OcVgAegzCkaDUIjrzRay4KfaMRtxMLrH0nDrIyntFupIThj1N7CJVNfzb5Kh7 RVeQTkLnMpE+cTsD9QUbOKGBzzHbYoWK7G8LrcfPVLE72+rQrAQbCk2rCsRtJb8v t3AlERcjgIYTLXik/GFDEnXSH1kKtE0YUUPVS+seEiNoQTX7haQmIQZ+swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEJeM1oXsmL208P2Yhwqck2akQyMB8GA1UdIwQY MBaAFNoCS5xj21waHPTFWB2+WzgcuVCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYt NzEyYjFhNzk2OGU2LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYtNzEyYjFhNzk2OGU2 LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZCLP4en WIpbRKd5PFiI/KgL2Z0bPqXUsyx14Je1pQX2gHRxPPw/6Ua4aPiz8l9YIRIW6no4 z9S8RZY+FXrrfwoI/iQDWA77dL63xRud1iZ7zmBRnAJj3b1DT5ueqVVpeBoQNDBh z48UTcSmMnvQBBlUOSCKmQghFcGWuN6w+u0yHPsslzw6tVnTX3Al+aFA49ZgXGf1 HU4afJPIl65UsOcE+UgO+lMNHZxr6bbadsJAUaEfnKoRQ2FROgkeJYnP4bRBg+RL xF3DTblPwh1w3np9xRzJGH0ks9++D8qSZa3RKlpGabA/rh3XKpvZF79JrOSQllC+ e4s437wTOVcdAg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:40:44 2025 by rpki-client