This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json) Hash identifier: CW0ksk7wJNfB/Xc2r5HRytaJyirXdMKM5+DeLlklQuo= Subject key identifier: 92:C4:6C:9D:9F:1B:17:E3:8D:FF:E5:F6:12:1D:04:B3:39:F8:4C:2D Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d Certificate serial: 019B3CB545BCE2ABFEC813AC1F7AAC69424C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 17:01:11 +0000 Manifest this update: Sat 20 Dec 2025 17:01:11 +0000 Manifest next update: Sun 21 Dec 2025 17:01:11 +0000 Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: i0bSuRkO+TcGnKCy9P47qgZFjA3gxfw6X3XbDV1JDWo=) 2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:45:bc:e2:ab:fe:c8:13:ac:1f:7a:ac:69:42:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d Validity Not Before: Dec 20 17:01:11 2025 GMT Not After : Dec 21 17:01:11 2025 GMT Subject: CN=92c46c9d9f1b17e38dffe5f6121d04b339f84c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:e1:52:4a:f0:ea:2a:f6:c7:67:c7:ab:0f: e8:88:38:7d:64:6f:63:75:b8:ba:74:9b:b2:77:e7: a1:c6:24:1b:c1:4f:a7:f9:c0:fd:26:e6:53:09:cb: cc:2d:1e:e1:db:f7:e5:d1:f8:b4:64:dd:7e:fe:b6: 1f:eb:80:93:b2:ce:a9:8b:81:3f:6c:81:58:57:c0: 76:40:59:ff:71:09:f8:28:67:a0:13:7b:11:6b:0d: 0e:20:6c:25:09:a7:cd:3c:96:e7:c0:a1:dd:6b:1a: e1:99:f9:89:fd:a7:20:1f:94:8f:37:e1:3d:a3:3c: 2c:77:e8:7f:31:04:28:c2:33:71:29:f3:b8:c2:21: b5:fe:e6:49:e5:6d:03:97:f0:52:77:cd:f1:e3:72: e9:f1:79:57:da:46:93:fa:8a:e2:bb:05:29:f4:f0: cc:68:63:1c:be:33:13:b3:5e:56:22:99:4b:d5:1a: cd:7c:40:04:51:4c:f0:30:a8:2c:cf:bb:4b:b8:10: 25:c9:e9:1c:73:66:87:ce:3d:61:25:6c:38:3d:ab: a6:86:d8:66:1d:02:c5:ae:ca:67:1f:2a:39:6c:31: 7c:d3:89:60:48:d7:c7:ef:63:d5:c5:ab:20:bc:e4: 47:bf:f3:f2:c7:54:52:f2:68:18:50:67:7b:6e:b5: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C4:6C:9D:9F:1B:17:E3:8D:FF:E5:F6:12:1D:04:B3:39:F8:4C:2D X509v3 Authority Key Identifier: keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b3:37:8a:e3:16:04:eb:98:df:12:74:9d:1c:00:68:0f:0c: e1:76:42:cf:26:b1:f1:c3:d8:10:68:c0:d1:62:f8:88:c8:35: 0d:1f:7f:9b:03:fe:2f:d1:4e:be:a3:da:b2:67:0f:b6:4f:6e: 17:64:83:4b:66:c2:a9:0a:5e:1a:94:40:49:e1:71:48:a3:51: e0:3c:73:bb:23:b8:e0:b3:f3:3f:3a:69:ef:75:06:5f:e1:d6: 7c:ed:09:dd:08:5e:d7:28:c4:55:79:54:48:47:d9:16:38:1a: 38:94:81:16:b2:f6:53:b5:c1:d4:3a:38:00:96:60:33:9a:a3: c8:91:a1:b0:a3:9d:35:4d:20:23:81:25:a0:3a:af:2e:49:e4: 9d:dd:cf:a6:60:61:f3:3e:1d:bd:12:af:5f:bb:18:a4:7e:43: be:ae:75:71:b9:52:aa:b9:e6:ca:1e:9c:68:1e:c8:71:aa:1d: 5f:7d:e8:73:86:9c:2e:9f:de:b4:10:b8:aa:81:15:a4:66:30: 5f:86:86:e8:0c:3c:9d:ee:a3:67:40:26:b7:be:5f:4e:c4:bd: 94:92:4c:3c:68:01:1e:54:9c:73:fb:ac:2f:ac:a3:87:00:0b: ed:65:35:98:fb:3b:d3:ed:0e:60:77:ba:19:a6:c6:40:a6:cd: f5:13:ee:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUW84qv+yBOsH3qsaUJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMWRhMzIxODQzZjlmYWQxMzhlNjExNWQ4NWJlZThhOTIw YjhlMWQwHhcNMjUxMjIwMTcwMTExWhcNMjUxMjIxMTcwMTExWjAzMTEwLwYDVQQD Eyg5MmM0NmM5ZDlmMWIxN2UzOGRmZmU1ZjYxMjFkMDRiMzM5Zjg0YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobPhUkrw6ir2x2fHqw/oiDh9ZG9j dbi6dJuyd+ehxiQbwU+n+cD9JuZTCcvMLR7h2/fl0fi0ZN1+/rYf64CTss6pi4E/ bIFYV8B2QFn/cQn4KGegE3sRaw0OIGwlCafNPJbnwKHdaxrhmfmJ/acgH5SPN+E9 ozwsd+h/MQQowjNxKfO4wiG1/uZJ5W0Dl/BSd83x43Lp8XlX2kaT+oriuwUp9PDM aGMcvjMTs15WIplL1RrNfEAEUUzwMKgsz7tLuBAlyekcc2aHzj1hJWw4Paumhthm HQLFrspnHyo5bDF804lgSNfH72PVxasgvORHv/Pyx1RS8mgYUGd7brXuewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLEbJ2fGxfjjf/l9hIdBLM5+EwtMB8GA1UdIwQY MBaAFNsdoyGEP5+tE45hFdhb7oqSC44dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAt NzM5ZDYyNjY5ZjkxLzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wNjQ3OTQtMmMzNi00M2Q2LWI4MDAtNzM5ZDYyNjY5Zjkx LzEvMngyaklZUV9uNjBUam1FVjJGdnVpcElMamgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbM3iuMW BOuY3xJ0nRwAaA8M4XZCzyax8cPYEGjA0WL4iMg1DR9/mwP+L9FOvqPasmcPtk9u F2SDS2bCqQpeGpRASeFxSKNR4DxzuyO44LPzPzpp73UGX+HWfO0J3Qhe1yjEVXlU SEfZFjgaOJSBFrL2U7XB1Do4AJZgM5qjyJGhsKOdNU0gI4EloDqvLknknd3PpmBh 8z4dvRKvX7sYpH5Dvq51cblSqrnmyh6caB7IcaodX33oc4acLp/etBC4qoEVpGYw X4aG6Aw8ne6jZ0Amt75fTsS9lJJMPGgBHlScc/usL6yjhwAL7WU1mPs70+0OYHe6 GabGQKbN9RPu7w== -----END CERTIFICATE-----Generated at Sat Dec 20 19:00:53 2025 by rpki-client