This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json) Hash identifier: KpLC1ocngNLjB7zC2DP+2xiJcuwxbIkDKGu90uMATyc= Subject key identifier: 88:67:B8:58:42:03:F3:23:86:24:F7:2D:45:F8:9A:C2:5D:E4:8E:3A Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Certificate serial: 019AF540822F8EC6F9CC60F5AAECD94E5C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 20:00:36 +0000 Manifest this update: Sat 06 Dec 2025 20:00:36 +0000 Manifest next update: Sun 07 Dec 2025 20:00:36 +0000 Files and hashes: 1: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: nmV9GvVe12HL4ZIrvI6wlT+FwkyvLTr5iG8XchJHcLw=) 2: Y1j-uGE-hHjyQXF1dqHskSD6dUQ.roa (hash: Up3WLZNSHdEK1sMiRUY44r/SHAl87NKo+QPgupCnk6U=) 3: piyG_4pLweIpFIJp244sQ3YLI3M.roa (hash: yuMmrMBvXUR0TS0lNqk4ZJrc0tskyVrHhBjRTlP7+Vw=) 4: u5lPRSy8TTjSrS9sU6cP6pvHWTY.roa (hash: nHXVS6U6ny2U+TZRyYNc9upvg7oq5CrJlEbjCC7RIaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:82:2f:8e:c6:f9:cc:60:f5:aa:ec:d9:4e:5c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86 Validity Not Before: Dec 6 20:00:36 2025 GMT Not After : Dec 7 20:00:36 2025 GMT Subject: CN=8867b8584203f3238624f72d45f89ac25de48e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:0c:b1:13:28:3c:25:1d:97:03:2a:fa:39: 0c:2e:b0:d1:b9:82:5d:d5:65:3d:61:36:22:21:93: b5:b6:09:1a:ca:fe:c3:e9:94:cd:58:c9:be:f3:32: 2b:e7:76:c7:fd:b4:e7:6c:a7:f7:f6:5f:1c:e1:cc: 9e:42:33:75:fd:e8:df:f1:d8:96:13:c7:90:10:a7: 9a:31:bc:19:ad:39:9b:2c:49:8e:0b:cd:df:fe:fc: 9e:24:7f:fc:fd:45:4c:64:b6:de:47:bc:6d:3c:80: f1:cf:d4:06:81:79:74:be:95:94:e1:93:62:e2:22: 4b:98:f4:cc:ef:f3:4b:ce:72:e3:bd:33:78:69:7f: 1a:89:9b:ad:66:8a:84:1f:39:1d:b7:09:ad:8b:1d: f6:7a:16:53:50:12:b9:50:30:6a:3e:09:60:69:70: a3:13:cb:87:52:13:32:cf:9b:a2:89:ba:4a:0e:f4: 7d:f8:89:6f:8c:34:77:b2:a5:50:08:0e:d7:32:06: 8b:60:5d:57:07:ad:de:24:2c:72:40:76:34:db:fc: bf:76:e6:56:30:17:40:47:21:83:ad:95:93:6f:a3: 98:f0:55:e4:91:5e:d4:f1:48:37:05:2b:54:1e:95: 32:e6:7d:5b:99:e1:25:bb:36:5b:dc:2e:34:4f:b7: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:67:B8:58:42:03:F3:23:86:24:F7:2D:45:F8:9A:C2:5D:E4:8E:3A X509v3 Authority Key Identifier: keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:76:9a:ee:58:4c:11:e1:d8:4b:ec:80:80:69:bb:c9:fe:5c: ac:98:dd:01:8d:80:3b:4a:e7:44:0e:42:e9:b8:bb:09:13:63: 64:76:60:00:1b:bd:13:bc:2b:65:01:bf:c4:df:95:d5:ab:0a: f4:07:7a:de:7b:92:2f:8b:a2:e9:52:bd:e5:be:78:5e:5a:3a: 96:c6:9f:c3:30:17:57:a4:c3:29:13:e7:51:a6:af:1c:0b:56: bd:eb:fa:86:89:da:77:4a:fe:77:a2:14:2e:b9:bb:1e:88:e7: ea:cf:0d:af:04:bc:a8:de:2b:ad:60:ce:1a:ce:41:80:43:9c: b4:3c:19:27:ae:a8:30:8c:f3:97:2c:3a:33:1b:e3:98:54:33: 51:bb:a4:eb:70:94:af:ef:5d:43:cd:fe:50:e5:9e:c8:a7:25: e5:de:7f:62:e7:9f:ba:ee:bc:64:7a:3c:14:c6:29:4f:a5:37: d1:dd:dd:90:45:b2:d2:cf:65:d0:df:fc:ea:b3:f0:69:7f:bc: 69:99:cd:21:b6:42:2d:4c:08:51:37:00:74:d4:49:89:85:4d: 54:77:42:2e:41:79:20:94:ea:52:ac:61:be:7f:e4:77:ad:96: 1a:d6:1e:5d:64:69:99:32:d5:f9:2f:5a:fa:3c:9a:40:b7:88: fe:dd:dd:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIIvjsb5zGD1quzZTlwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz MThmODYwHhcNMjUxMjA2MjAwMDM2WhcNMjUxMjA3MjAwMDM2WjAzMTEwLwYDVQQD Eyg4ODY3Yjg1ODQyMDNmMzIzODYyNGY3MmQ0NWY4OWFjMjVkZTQ4ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2AMsRMoPCUdlwMq+jkMLrDRuYJd 1WU9YTYiIZO1tgkayv7D6ZTNWMm+8zIr53bH/bTnbKf39l8c4cyeQjN1/ejf8diW E8eQEKeaMbwZrTmbLEmOC83f/vyeJH/8/UVMZLbeR7xtPIDxz9QGgXl0vpWU4ZNi 4iJLmPTM7/NLznLjvTN4aX8aiZutZoqEHzkdtwmtix32ehZTUBK5UDBqPglgaXCj E8uHUhMyz5uiibpKDvR9+IlvjDR3sqVQCA7XMgaLYF1XB63eJCxyQHY02/y/duZW MBdARyGDrZWTb6OY8FXkkV7U8Ug3BStUHpUy5n1bmeEluzZb3C40T7dt7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhnuFhCA/MjhiT3LUX4msJd5I46MB8GA1UdIwQY MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4 LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXaa7lhM EeHYS+yAgGm7yf5crJjdAY2AO0rnRA5C6bi7CRNjZHZgABu9E7wrZQG/xN+V1asK 9Ad63nuSL4ui6VK95b54Xlo6lsafwzAXV6TDKRPnUaavHAtWvev6honad0r+d6IU Lrm7Hojn6s8NrwS8qN4rrWDOGs5BgEOctDwZJ66oMIzzlyw6MxvjmFQzUbuk63CU r+9dQ83+UOWeyKcl5d5/Yuefuu68ZHo8FMYpT6U30d3dkEWy0s9l0N/86rPwaX+8 aZnNIbZCLUwIUTcAdNRJiYVNVHdCLkF5IJTqUqxhvn/kd62WGtYeXWRpmTLV+S9a +jyaQLeI/t3d0A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:20:58 2025 by rpki-client