This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json) Hash identifier: CKQ6VUR6x34kmMKH1xhz1d9Wx3S7BI+5i2+U18Ot3c4= Subject key identifier: 67:FD:99:00:1F:E4:5D:53:F0:F3:19:6C:ED:2A:0C:B9:8B:F9:11:D2 Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa Certificate serial: 019AF12E7A4F5A8E0677A296FD14D11F9F69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=) 2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: X05JicLK5bV3YM8ulpi78rQC2X18tpq/v2Ue1qx76xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7a:4f:5a:8e:06:77:a2:96:fd:14:d1:1f:9f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=67fd99001fe45d53f0f3196ced2a0cb98bf911d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:13:ba:a4:4e:11:9c:26:68:0f:da:23:b9: ad:c2:a7:7e:c2:02:0b:5c:de:63:fd:c5:e0:e8:35: 95:b8:d8:54:47:5b:7a:b2:91:d0:67:ec:31:e9:93: 3d:ea:96:1a:2c:68:17:3e:c0:13:11:34:c6:69:4e: 75:f1:34:b0:b6:af:f7:00:96:c7:9b:39:0e:44:98: 98:b2:1a:ca:4f:39:44:25:17:01:b0:9c:b4:0f:23: 37:d5:8d:ee:ce:42:21:2f:b0:c2:62:99:65:0a:88: f2:86:1f:7d:b6:0f:20:0d:23:55:b8:9a:a0:2f:5f: c9:20:ef:f1:db:36:0c:0d:66:8e:1d:07:f4:1e:3c: 74:63:e7:33:7f:d5:ab:73:d0:2f:b4:72:9f:1d:b2: 46:ac:c5:f3:71:cd:5b:8a:9d:59:0f:99:24:31:b0: 5e:9e:9b:22:5d:6d:62:9a:cd:6c:f8:2f:3d:99:69: 4d:4f:62:68:bb:72:24:2d:92:bb:8e:67:8b:ea:b9: c2:2c:43:67:93:26:ff:61:77:a0:93:90:18:cf:22: 98:1b:c9:b2:8e:1c:a5:95:60:fa:72:d2:98:a8:27: d2:29:01:cc:cd:25:7c:00:1f:3b:68:00:6f:16:58: 52:aa:39:c7:c3:3d:80:02:e7:19:44:cf:4e:e6:16: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:99:00:1F:E4:5D:53:F0:F3:19:6C:ED:2A:0C:B9:8B:F9:11:D2 X509v3 Authority Key Identifier: keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:cb:a7:c3:e8:8e:e8:9d:99:26:0f:3c:72:2d:9f:2a:84:34: 32:95:24:9e:b2:57:98:4c:89:bd:08:4e:69:f2:de:b3:99:85: 0e:07:0d:0e:27:ce:c8:a7:62:39:c5:06:75:a6:be:4f:08:01: f2:dc:63:9d:00:bc:9e:25:17:c8:0c:41:55:fc:a1:69:18:73: e9:8e:be:b9:9c:5a:46:23:e3:53:c0:b7:ac:fc:d2:b9:2a:0f: 81:96:24:54:4c:2b:84:97:fb:f0:72:8f:48:e2:43:01:2f:a4: b4:9c:9d:bf:af:0a:12:88:cf:85:37:7d:d1:8d:eb:6e:51:86: c5:e3:7e:bb:6a:75:8d:d3:7e:07:83:69:2d:e3:2b:50:22:f2: 14:91:db:76:1c:51:0b:8f:32:cd:ba:44:aa:84:90:18:a1:3f: 00:46:63:7c:a2:4a:c7:59:d1:b5:03:31:93:88:64:7c:31:59: 8e:09:e6:8b:00:e3:04:06:9e:35:bf:da:71:6f:5e:10:c7:e3: 9a:5b:6b:f8:14:4b:d5:98:72:17:9e:94:74:2b:52:73:f2:9e: ad:e1:bd:28:ad:40:09:8a:ac:eb:1d:b3:f9:6a:28:0a:78:f5: df:07:7e:25:0b:11:79:32:1a:2e:78:92:d9:83:29:05:23:23: d3:ce:6c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnpPWo4Gd6KW/RTRH59pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmJmNmI3ODFiY2Y4YzI4MDA4YThlOGZkZGU2MGU3YWUz MTIyYWEwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg2N2ZkOTkwMDFmZTQ1ZDUzZjBmMzE5NmNlZDJhMGNiOThiZjkxMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGgTuqROEZwmaA/aI7mtwqd+wgIL XN5j/cXg6DWVuNhUR1t6spHQZ+wx6ZM96pYaLGgXPsATETTGaU518TSwtq/3AJbH mzkORJiYshrKTzlEJRcBsJy0DyM31Y3uzkIhL7DCYpllCojyhh99tg8gDSNVuJqg L1/JIO/x2zYMDWaOHQf0Hjx0Y+czf9Wrc9AvtHKfHbJGrMXzcc1bip1ZD5kkMbBe npsiXW1ims1s+C89mWlNT2Jou3IkLZK7jmeL6rnCLENnkyb/YXegk5AYzyKYG8my jhyllWD6ctKYqCfSKQHMzSV8AB87aABvFlhSqjnHwz2AAucZRM9O5hY5/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf9mQAf5F1T8PMZbO0qDLmL+RHSMB8GA1UdIwQY MBaAFMdr9reBvPjCgAio6P3eYOeuMSKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEt YWJmNDg0MGVhNjA3LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEtYWJmNDg0MGVhNjA3 LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcunw+iO 6J2ZJg88ci2fKoQ0MpUknrJXmEyJvQhOafLes5mFDgcNDifOyKdiOcUGdaa+TwgB 8txjnQC8niUXyAxBVfyhaRhz6Y6+uZxaRiPjU8C3rPzSuSoPgZYkVEwrhJf78HKP SOJDAS+ktJydv68KEojPhTd90Y3rblGGxeN+u2p1jdN+B4NpLeMrUCLyFJHbdhxR C48yzbpEqoSQGKE/AEZjfKJKx1nRtQMxk4hkfDFZjgnmiwDjBAaeNb/acW9eEMfj mltr+BRL1ZhyF56UdCtSc/KereG9KK1ACYqs6x2z+WooCnj13wd+JQsReTIaLniS 2YMpBSMj085sjw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:00 2025 by rpki-client