This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json) Hash identifier: Tax/XJPklg3tFig+n/ezpOR1nts7Yy+VqoqH+7MW8bg= Subject key identifier: BF:31:45:82:46:DE:54:F7:A4:E3:54:BF:3E:39:A1:6C:0B:73:6F:80 Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93 Certificate serial: 019AF1641BCA1A6768393E92A5C6B71F15A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=) 2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: 2EMasvn3z4SPdj5dEEjuzKmFefVOXEYUq6gKWLfnRpE=) 3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=) 4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=) 5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1b:ca:1a:67:68:39:3e:92:a5:c6:b7:1f:15:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93 Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=bf31458246de54f7a4e354bf3e39a16c0b736f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:78:96:cf:0d:cd:86:be:10:89:8b:28:e4: 5b:b4:b1:95:c5:6c:60:6e:d8:dd:42:d8:7c:10:c9: 0d:22:f2:07:c5:4d:9f:49:e6:75:06:b0:04:02:5b: ff:cf:f2:70:5d:f4:cf:37:1f:52:05:8e:70:d7:ce: 82:89:18:89:aa:03:e7:c6:58:5a:a2:42:a8:90:8d: 86:36:82:76:dc:b5:42:a6:0b:bb:38:e4:c8:89:8a: 9c:fa:67:73:66:9e:e2:97:ca:27:3a:9e:f6:47:23: da:7e:d9:03:ec:37:9c:55:0c:18:cc:cd:31:f4:04: 9c:a3:13:9d:fa:4c:96:51:90:4d:5e:9b:03:2c:d6: 57:e5:6f:05:cd:5b:35:f4:51:65:8f:09:51:f9:04: 02:3f:ba:65:cb:cd:a1:a4:8c:92:0e:be:12:a1:26: ca:23:14:ae:7f:12:4f:ba:18:75:15:f2:aa:8a:04: 3d:25:ad:43:c4:c4:61:b2:1e:69:fc:67:ad:5c:14: 36:c1:d8:d8:4f:4f:56:a0:a8:e6:9d:54:31:57:2e: 91:34:81:c5:66:25:82:ab:bd:35:b3:3d:b7:6a:8d: 2c:b4:7b:a3:4d:6a:b0:31:59:80:0e:4a:38:12:0e: f2:c7:f1:c5:1b:0d:5d:19:e7:a3:3a:a1:77:49:2c: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:31:45:82:46:DE:54:F7:A4:E3:54:BF:3E:39:A1:6C:0B:73:6F:80 X509v3 Authority Key Identifier: keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c8:38:1b:94:6f:3b:33:7d:4b:e4:ea:5a:05:c0:69:27:23: 38:6d:7e:e7:a1:06:64:95:30:bf:b4:32:65:8d:b7:eb:22:22: 4a:43:5f:0d:a5:5f:1b:41:64:08:94:12:63:bb:30:c9:d0:da: 13:fc:fd:93:45:69:9a:9f:4f:0e:70:2a:dd:37:09:44:74:20: 9e:97:7f:0c:52:81:1e:57:63:e6:27:54:ef:e6:36:62:c9:1c: f2:f9:c3:1c:0e:66:68:c9:a8:21:0d:a3:c5:56:aa:bd:63:d7: 16:c3:59:f1:d5:a4:5a:28:d8:aa:37:5e:38:eb:e8:6f:8f:b2: 7c:c5:2f:7d:8b:31:87:46:f6:c5:70:80:6c:f2:f0:49:f0:05: 9e:b2:85:29:ee:2f:c9:05:42:69:bc:9d:69:2c:bb:a5:8a:f7: 80:33:85:f4:10:1a:3f:77:1a:42:91:53:0c:33:cf:dd:94:0e: 92:40:b5:23:d2:d9:b2:e7:a7:12:1d:5d:28:0b:f0:1f:2a:35: 13:40:17:37:67:7c:b3:ec:38:06:1a:63:70:02:43:52:5b:4b: a6:d0:04:5f:94:de:4a:ed:84:23:dc:3e:9e:bb:45:ea:76:8c: 60:8d:72:7a:ab:8a:f2:2b:1b:b9:ec:ac:13:67:65:6d:25:db: ee:87:93:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBvKGmdoOT6Spca3HxWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm OWZjOTMwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD EyhiZjMxNDU4MjQ2ZGU1NGY3YTRlMzU0YmYzZTM5YTE2YzBiNzM2ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvN4ls8NzYa+EImLKORbtLGVxWxg btjdQth8EMkNIvIHxU2fSeZ1BrAEAlv/z/JwXfTPNx9SBY5w186CiRiJqgPnxlha okKokI2GNoJ23LVCpgu7OOTIiYqc+mdzZp7il8onOp72RyPaftkD7DecVQwYzM0x 9AScoxOd+kyWUZBNXpsDLNZX5W8FzVs19FFljwlR+QQCP7ply82hpIySDr4SoSbK IxSufxJPuhh1FfKqigQ9Ja1DxMRhsh5p/GetXBQ2wdjYT09WoKjmnVQxVy6RNIHF ZiWCq701sz23ao0stHujTWqwMVmADko4Eg7yx/HFGw1dGeejOqF3SSwsuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8xRYJG3lT3pONUvz45oWwLc2+AMB8GA1UdIwQY MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMg4G5Rv OzN9S+TqWgXAaScjOG1+56EGZJUwv7QyZY236yIiSkNfDaVfG0FkCJQSY7swydDa E/z9k0Vpmp9PDnAq3TcJRHQgnpd/DFKBHldj5idU7+Y2Yskc8vnDHA5maMmoIQ2j xVaqvWPXFsNZ8dWkWijYqjdeOOvob4+yfMUvfYsxh0b2xXCAbPLwSfAFnrKFKe4v yQVCabydaSy7pYr3gDOF9BAaP3caQpFTDDPP3ZQOkkC1I9LZsuenEh1dKAvwHyo1 E0AXN2d8s+w4BhpjcAJDUltLptAEX5TeSu2EI9w+nrtF6naMYI1yequK8isbueys E2dlbSXb7oeTNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:25 2025 by rpki-client