This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft File: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json) Hash identifier: Gl72/GS7XGo2LzfjNl+6zV9H8DeN33Ar9X8zBRGM2ss= Subject key identifier: B5:57:D2:8F:08:F5:F6:F7:46:BA:1A:EF:B8:16:F5:7A:FE:55:45:D2 Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Certificate serial: 019AF208BCCCE4A34C6AF9E4CF55D209B362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft Manifest number: 164F Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: Bh8jPaZX0YITzoxxl1xL/pqMmX9I7Fy3GAckLN1OzTE=) 2: B5m6j_K3O894W_R_t6V6YidAg_M.roa (hash: bXrv4zwrH5nVqybqsixx97jvkGY3LFCIFwVY3pH6Bk8=) 3: KqKhKARLMvPV_bRfQE5O-Q0jitE.roa (hash: g5DaBAVimvDHhHZlO6bebh2BYJNntLdIOufL8sw6/TA=) 4: PSzX4ETQs2L8cNC3MHgmvmQQifU.roa (hash: UakKPUPcxegOjzkx7/qLz6OeHL3ixKpktOgsps0SIHU=) 5: gpM2Niv38-bAPpYWDWu_AiD_7fU.roa (hash: U97/Bujuoe+UqbMI2I87geGUh9XKKMGTDgPKSh0HsUc=) 6: v_tCnLJbfmXfnX8r8TkiKrJdo6U.roa (hash: 2qeSRWLeCZqoEkwlBGulwS0BehW+dyHuoHpo1B95cR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bc:cc:e4:a3:4c:6a:f9:e4:cf:55:d2:09:b3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=b557d28f08f5f6f746ba1aefb816f57afe5545d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:f6:a7:f6:b9:9a:5c:77:af:5e:5c:7a:8b: 1f:c1:04:96:08:33:ef:fe:ad:da:27:9a:f5:6f:31: e4:1d:0d:9f:a5:2d:fc:e7:aa:51:28:9d:c8:e4:10: 40:f5:89:e8:16:04:a0:66:22:0e:84:f3:75:ab:15: 5e:ae:6b:ad:93:12:85:0c:04:31:e3:f8:43:da:1a: e2:20:70:4f:21:c1:1b:ab:7a:68:a9:aa:29:26:4f: b8:ad:c6:9f:93:7e:cd:c7:ce:9c:cd:0c:4f:2d:de: 06:91:8f:22:18:7c:27:4d:a5:12:89:5b:f2:37:41: a7:af:f8:9a:c6:d8:99:1c:db:63:b6:2d:91:7a:cc: 4b:b2:e2:3a:92:f2:a6:09:3d:3f:a3:c8:a9:33:88: 52:87:f1:a0:87:be:1f:c5:0c:9f:bc:a9:4d:6b:28: 85:71:6f:f4:bb:cb:dd:63:d4:3e:da:34:c5:7f:12: c4:b5:77:c3:1a:50:34:20:79:4d:76:0b:d1:da:6b: 04:aa:96:2e:4d:7d:67:2b:32:f0:89:86:fc:a4:7c: 1f:71:29:01:3f:2c:14:30:84:2b:42:47:85:be:0d: ca:5d:10:69:09:68:77:a3:16:ed:e5:b3:30:a1:0e: bc:b2:f3:33:49:29:82:92:74:17:9b:a3:57:62:51: 25:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:D2:8F:08:F5:F6:F7:46:BA:1A:EF:B8:16:F5:7A:FE:55:45:D2 X509v3 Authority Key Identifier: keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:77:af:27:03:c2:1b:cf:46:e1:01:82:c5:de:3f:4d:1a:58: 0d:e7:30:c6:cc:4b:f5:a2:4d:1a:13:0f:cd:67:ac:70:85:b9: 28:37:a3:da:4f:17:ea:dd:29:01:79:36:f9:d2:bb:f0:b0:8b: 38:0d:ea:08:34:4d:c2:be:b7:1e:77:d1:84:0b:ca:02:6c:1f: 88:f0:46:11:37:2b:02:1c:fb:94:18:29:47:5f:d4:3c:f7:3b: 67:e4:fc:50:73:36:41:e8:92:71:17:b4:bc:8c:be:e2:69:0a: 3f:81:b5:4b:56:e6:80:43:c5:65:21:c1:36:94:53:51:a2:cf: d3:1f:34:01:cd:83:a9:c3:8e:61:43:5f:dd:49:4a:06:f7:dc: 52:71:44:99:3a:73:5f:98:78:93:a2:0c:5c:bb:1d:aa:54:ff: 53:1d:c8:6b:5e:91:4b:9c:b5:76:98:fa:5f:35:c2:ee:85:24: d7:39:75:70:ae:f4:5f:02:16:8d:37:bc:57:cb:0a:85:af:37: 25:ab:47:c7:fd:0a:84:44:c5:67:a9:56:e6:74:17:4a:a0:23: 97:03:40:0c:54:73:05:bf:55:48:61:65:9d:2a:9c:59:ee:88: fe:71:50:f6:6a:5b:f5:13:8c:68:ac:24:e9:7f:0f:63:1d:db: ff:32:cc:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLzM5KNMavnkz1XSCbNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4 YTdkYTYwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD EyhiNTU3ZDI4ZjA4ZjVmNmY3NDZiYTFhZWZiODE2ZjU3YWZlNTU0NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEL2p/a5mlx3r15ceosfwQSWCDPv /q3aJ5r1bzHkHQ2fpS3856pRKJ3I5BBA9YnoFgSgZiIOhPN1qxVermutkxKFDAQx 4/hD2hriIHBPIcEbq3poqaopJk+4rcafk37Nx86czQxPLd4GkY8iGHwnTaUSiVvy N0Gnr/iaxtiZHNtjti2ResxLsuI6kvKmCT0/o8ipM4hSh/Ggh74fxQyfvKlNayiF cW/0u8vdY9Q+2jTFfxLEtXfDGlA0IHlNdgvR2msEqpYuTX1nKzLwiYb8pHwfcSkB PywUMIQrQkeFvg3KXRBpCWh3oxbt5bMwoQ68svMzSSmCknQXm6NXYlElPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVX0o8I9fb3Rroa77gW9Xr+VUXSMB8GA1UdIwQY MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt MzMzYmVlY2ZmNmY0LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0 LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHevJwPC G89G4QGCxd4/TRpYDecwxsxL9aJNGhMPzWescIW5KDej2k8X6t0pAXk2+dK78LCL OA3qCDRNwr63HnfRhAvKAmwfiPBGETcrAhz7lBgpR1/UPPc7Z+T8UHM2QeiScRe0 vIy+4mkKP4G1S1bmgEPFZSHBNpRTUaLP0x80Ac2DqcOOYUNf3UlKBvfcUnFEmTpz X5h4k6IMXLsdqlT/Ux3Ia16RS5y1dpj6XzXC7oUk1zl1cK70XwIWjTe8V8sKha83 JatHx/0KhETFZ6lW5nQXSqAjlwNADFRzBb9VSGFlnSqcWe6I/nFQ9mpb9ROMaKwk 6X8PYx3b/zLMqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:40 2025 by rpki-client