This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json) Hash identifier: PM9iF4mtC0NfxmMOthAzU6Zvwo/LSXYtJd5fkjGsl/s= Subject key identifier: 46:38:E9:61:9E:E5:98:7E:69:95:9D:0A:B1:69:30:4A:8D:72:19:DB Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Certificate serial: 019B3B6B6EC361EAE8584320F0AC6E002769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft Manifest number: 0D60 Signing time: Sat 20 Dec 2025 11:00:54 +0000 Manifest this update: Sat 20 Dec 2025 11:00:54 +0000 Manifest next update: Sun 21 Dec 2025 11:00:54 +0000 Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: dfrwuyhiFyZG5qMedX+RKWcPpSzM3GufNWRV8ijGNQ4=) 2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:6e:c3:61:ea:e8:58:43:20:f0:ac:6e:00:27:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222 Validity Not Before: Dec 20 11:00:54 2025 GMT Not After : Dec 21 11:00:54 2025 GMT Subject: CN=4638e9619ee5987e69959d0ab169304a8d7219db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:0d:da:61:e0:d9:73:7c:4a:09:32:15:9c: 02:98:64:9a:b3:c7:02:b0:9f:62:63:a2:ec:74:dd: ed:e5:ed:48:17:21:66:01:ff:25:81:cc:9d:e0:8b: 85:05:b7:77:65:76:63:1b:9d:10:ba:40:fe:db:16: 76:4f:ac:0e:75:77:8d:0e:b1:44:5a:80:9e:cb:20: 53:18:24:6a:a5:b3:af:65:55:9e:51:76:3b:83:4a: 86:ef:c3:f0:31:ee:c1:05:21:c4:91:34:48:33:e0: 7b:64:be:41:0d:b1:3f:e0:4e:37:19:16:9f:8e:84: 19:1c:6e:5c:0a:a5:81:f3:31:d4:75:2a:02:34:ad: 38:4a:7d:a8:1c:1e:74:2d:97:3f:2e:af:fc:f3:99: 8a:78:58:c3:68:6f:b7:b5:4e:6d:33:8c:b2:10:72: df:72:5c:f2:20:4c:1f:a2:f4:70:f2:56:09:e3:1a: fe:71:b2:4d:d8:3d:c5:dc:39:de:d2:e3:f3:a7:94: c2:b8:fd:12:2b:27:fd:a2:cd:b7:1a:a5:d0:41:57: 89:d9:3d:2b:85:21:bf:7c:f6:3c:f7:db:8a:23:ad: 4d:0a:8a:2f:2c:89:d4:05:93:c0:5e:85:bd:4a:ab: c7:c1:a0:0b:fe:f8:fb:7f:b5:6a:68:16:f8:bd:d9: c7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:38:E9:61:9E:E5:98:7E:69:95:9D:0A:B1:69:30:4A:8D:72:19:DB X509v3 Authority Key Identifier: keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:1a:8c:2a:d4:1d:71:03:22:eb:62:a1:9b:ac:29:81:1a:2c: b4:56:b4:cf:bf:46:e2:1e:e4:72:8e:a9:52:50:8e:c4:b4:4d: 00:54:75:54:97:7e:ff:f1:33:66:29:8b:52:95:ca:63:14:95: 96:ba:5a:b1:7a:20:f0:ff:4d:58:e5:44:4e:15:29:10:86:52: ea:0e:28:61:34:cd:24:f9:bc:2a:e1:73:c5:b6:59:28:21:ec: 3e:45:08:ab:46:bf:9b:f9:71:63:87:c9:c0:d1:0d:de:ad:9e: ad:e0:95:8a:a9:9e:67:b3:d3:26:6b:ba:9d:93:49:8d:5d:16: f3:26:a8:d3:c2:77:29:ce:ae:59:9a:06:16:d3:9d:30:7b:b7: 0e:be:c9:e3:34:a0:b0:1b:17:ba:60:da:3b:82:48:6f:9c:dd: fc:4e:65:18:32:bc:ac:d8:d9:80:ce:70:fa:e5:2f:04:34:3c: af:6f:54:37:d7:0a:ee:01:38:56:28:56:9f:b8:9d:15:b3:14: 39:09:29:11:dd:bd:f9:30:bc:0a:23:09:eb:4d:e4:74:d2:77: 2d:0f:23:35:be:ce:d0:40:3b:ed:f3:20:ec:6b:3d:6c:bc:88: 05:c2:c4:be:b1:ec:8f:40:84:06:25:a3:f2:ca:3b:58:3e:8c: 5b:d7:80:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a27DYeroWEMg8KxuACdpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi ODUyMjIwHhcNMjUxMjIwMTEwMDU0WhcNMjUxMjIxMTEwMDU0WjAzMTEwLwYDVQQD Eyg0NjM4ZTk2MTllZTU5ODdlNjk5NTlkMGFiMTY5MzA0YThkNzIxOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wEN2mHg2XN8SgkyFZwCmGSas8cC sJ9iY6LsdN3t5e1IFyFmAf8lgcyd4IuFBbd3ZXZjG50QukD+2xZ2T6wOdXeNDrFE WoCeyyBTGCRqpbOvZVWeUXY7g0qG78PwMe7BBSHEkTRIM+B7ZL5BDbE/4E43GRaf joQZHG5cCqWB8zHUdSoCNK04Sn2oHB50LZc/Lq/885mKeFjDaG+3tU5tM4yyEHLf clzyIEwfovRw8lYJ4xr+cbJN2D3F3Dne0uPzp5TCuP0SKyf9os23GqXQQVeJ2T0r hSG/fPY899uKI61NCoovLInUBZPAXoW9SqvHwaAL/vj7f7VqaBb4vdnHNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY46WGe5Zh+aZWdCrFpMEqNchnbMB8GA1UdIwQY MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRqMKtQd cQMi62Khm6wpgRostFa0z79G4h7kco6pUlCOxLRNAFR1VJd+//EzZimLUpXKYxSV lrpasXog8P9NWOVEThUpEIZS6g4oYTTNJPm8KuFzxbZZKCHsPkUIq0a/m/lxY4fJ wNEN3q2ereCViqmeZ7PTJmu6nZNJjV0W8yao08J3Kc6uWZoGFtOdMHu3Dr7J4zSg sBsXumDaO4JIb5zd/E5lGDK8rNjZgM5w+uUvBDQ8r29UN9cK7gE4VihWn7idFbMU OQkpEd29+TC8CiMJ603kdNJ3LQ8jNb7O0EA77fMg7Gs9bLyIBcLEvrHsj0CEBiWj 8so7WD6MW9eAfw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:32:40 2025 by rpki-client