This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json) Hash identifier: 2aAIFVntpEDn1MlxKAfkweEr8kHTate9Vwpqia3A/UA= Subject key identifier: 2B:65:6E:CB:59:6B:34:82:43:44:C5:EF:71:D1:9C:B3:98:03:DA:08 Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd Certificate serial: 019AF1D1C8C0E431D6B8379D82E5EA388E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: vV1zS5K2WVkhCpqrG08F/KVBuP7TqrDV38rEJYnhFUs=) 2: QwB_J4IBjr_kwpZ0DSZt7jLyFUw.roa (hash: xjQoVVO98cxf92eXukztlmvd0mAJHZVRoWG3GH3edIU=) 3: RZQ5y55NZ91q7qGueZI2kyy2lHI.roa (hash: s/DyWvu0J1swkDaWXLLyRdJ0euIh4+uqvas0DU4Xq7I=) 4: noQO1tLrNCKz3bIWnBbDMmvuYLg.roa (hash: hYTtEju7KkB6LYquIBvGjeZyYymRK8/pFRz4XyGZMT8=) 5: qWeBIgMT9yofaevmnsJv-k3J7gM.roa (hash: OVmNg3h2HayVISC+svzIkwU6u8HmPx4SN/OehOmAqgY=) 6: qq3OJ7E8FdGE4BJdu3ZOq4LInY8.roa (hash: jyVlOFzMs6a5a3ty01oIP3DwXzFAJhXu3CIHkhRdIo8=) 7: v5y-XO_c3BUL4I2vKl0yvM3sR48.roa (hash: job18wRUBRjomyukO0QxaFg1pEdwxYB+4rsX0iFAoJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c8:c0:e4:31:d6:b8:37:9d:82:e5:ea:38:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=2b656ecb596b34824344c5ef71d19cb39803da08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:eb:a5:5a:0b:f8:4b:f5:a9:20:b3:0e:eb: 9a:83:d6:47:80:91:cd:1b:ad:c1:6c:a6:04:75:00: ab:f1:16:b6:26:3a:45:c7:a9:b1:1c:14:86:89:31: e1:fd:81:94:57:5f:44:5c:ee:96:76:f9:54:31:cc: eb:29:a9:d4:7e:8e:7c:3c:ff:fe:3e:48:d8:f4:5e: 66:3d:2d:63:b8:ed:e3:65:a9:f4:22:b8:41:ff:bd: 31:b5:49:1e:06:93:8d:64:2b:41:1d:50:ca:81:74: f9:73:9a:fb:91:38:3c:62:a3:7d:49:4c:06:1b:3e: 6f:5c:89:21:45:90:1a:28:c7:f2:ba:1b:ff:0b:a2: 31:76:19:13:2b:0a:8f:77:aa:53:40:48:a8:0a:2d: 87:4e:8e:8f:b5:a7:61:c8:a2:72:31:55:70:65:5b: be:2a:b4:2d:da:95:e3:a5:1e:6f:89:e6:38:a3:1b: 55:fc:58:32:55:47:a4:86:55:32:46:32:22:e1:0e: 7d:3b:27:b7:e9:f4:c6:6b:29:d5:82:41:0c:84:73: 74:30:76:50:79:d5:08:61:72:88:d5:6d:02:1a:43: b7:44:dd:87:5b:d6:52:79:28:9e:6b:c4:43:cc:91: c4:3e:18:30:a9:ed:50:77:e8:52:7c:51:b6:87:9a: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:65:6E:CB:59:6B:34:82:43:44:C5:EF:71:D1:9C:B3:98:03:DA:08 X509v3 Authority Key Identifier: keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d5:ee:33:ed:3b:79:8a:31:84:b5:97:69:6b:ff:a3:9b:a6: f8:d7:af:cf:a9:07:12:3c:33:56:c2:d1:f3:75:45:88:e5:86: e9:eb:70:f2:d8:fc:1a:09:c3:a6:ad:2a:a7:2a:db:f9:03:bb: c4:70:e8:81:c2:54:9f:eb:13:fc:50:59:70:1b:32:6c:c7:31: 7a:c3:5d:24:88:29:4a:b9:0e:d9:40:06:18:b7:23:ad:6c:06: 9c:e2:4d:0a:f8:59:ca:c4:8e:c4:76:b6:72:a3:f8:47:26:08: 37:6b:8e:71:8e:d5:50:20:99:69:1c:ce:51:7f:99:21:cf:9f: 23:a0:d1:2b:a7:22:89:4e:4d:a5:78:ce:50:74:ea:ab:d3:bc: 08:de:4e:ba:13:be:f2:92:b6:ef:20:70:9a:44:e1:1f:60:33: 46:6d:f8:1c:d7:5e:29:eb:bb:26:64:0c:78:62:d6:d6:58:04: c6:b4:30:45:30:3b:59:71:32:9c:f2:9c:f9:99:68:cb:16:f4: 3c:60:93:a0:27:97:45:ba:8c:a8:c2:b3:17:e7:bf:4b:61:ae: 9c:02:22:a7:0f:80:8f:5b:e7:e1:b8:15:8a:a7:43:a6:d0:52: 19:12:69:9c:56:31:93:62:ea:fd:72:60:01:02:34:f6:b3:4a: 07:d2:3f:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cjA5DHWuDedguXqOI5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2 YzQwZmQwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EygyYjY1NmVjYjU5NmIzNDgyNDM0NGM1ZWY3MWQxOWNiMzk4MDNkYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPTrpVoL+Ev1qSCzDuuag9ZHgJHN G63BbKYEdQCr8Ra2JjpFx6mxHBSGiTHh/YGUV19EXO6WdvlUMczrKanUfo58PP/+ PkjY9F5mPS1juO3jZan0IrhB/70xtUkeBpONZCtBHVDKgXT5c5r7kTg8YqN9SUwG Gz5vXIkhRZAaKMfyuhv/C6IxdhkTKwqPd6pTQEioCi2HTo6PtadhyKJyMVVwZVu+ KrQt2pXjpR5vieY4oxtV/FgyVUekhlUyRjIi4Q59Oye36fTGaynVgkEMhHN0MHZQ edUIYXKI1W0CGkO3RN2HW9ZSeSiea8RDzJHEPhgwqe1Qd+hSfFG2h5rUFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtlbstZazSCQ0TF73HRnLOYA9oIMB8GA1UdIwQY MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt Yzc4NjkxMjg1ODJjLzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNXuM+07 eYoxhLWXaWv/o5um+Nevz6kHEjwzVsLR83VFiOWG6etw8tj8GgnDpq0qpyrb+QO7 xHDogcJUn+sT/FBZcBsybMcxesNdJIgpSrkO2UAGGLcjrWwGnOJNCvhZysSOxHa2 cqP4RyYIN2uOcY7VUCCZaRzOUX+ZIc+fI6DRK6ciiU5NpXjOUHTqq9O8CN5OuhO+ 8pK27yBwmkThH2AzRm34HNdeKeu7JmQMeGLW1lgExrQwRTA7WXEynPKc+Zloyxb0 PGCToCeXRbqMqMKzF+e/S2GunAIipw+Aj1vn4bgViqdDptBSGRJpnFYxk2Lq/XJg AQI09rNKB9I/UQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:06 2025 by rpki-client