This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json) Hash identifier: pdrWA9NmoEKWoWBPxbG12Ghld8LYqJi53szK46oE/t0= Subject key identifier: 39:75:8A:3A:8C:6B:88:76:CF:3D:1A:D9:25:EC:D5:F3:34:1F:51:74 Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09 Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09 Certificate serial: 019AF653CC29BB47C480761230545413FCC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 01:01:17 +0000 Manifest this update: Sun 07 Dec 2025 01:01:17 +0000 Manifest next update: Mon 08 Dec 2025 01:01:17 +0000 Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: Tm8Bp2uK6rMbSdFyiSRUAgYZVIHH5pEoRlZ9m+9QNwI=) 2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:cc:29:bb:47:c4:80:76:12:30:54:54:13:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09 Validity Not Before: Dec 7 01:01:17 2025 GMT Not After : Dec 8 01:01:17 2025 GMT Subject: CN=39758a3a8c6b8876cf3d1ad925ecd5f3341f5174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:7b:df:f3:22:7d:a3:42:e4:ca:49:a1:42: 0d:a3:cc:07:39:e8:3c:5d:5f:9e:5f:02:7e:3e:21: 93:b0:d1:97:74:35:ab:2d:2a:b3:e9:82:dd:47:25: d7:7c:9d:2a:7b:2a:09:33:4f:1d:5b:39:4e:92:c4: 4a:6e:f0:f9:b4:73:6e:5c:32:c0:dc:38:7c:0b:49: f4:c5:ac:a0:57:9d:4f:71:53:30:7f:8c:1a:c7:8e: fc:00:9f:da:52:88:3e:66:26:cd:5b:50:f4:cd:23: d5:1a:27:9a:1b:6e:ad:3d:87:14:77:fb:a6:dd:5a: 9f:93:56:c1:ce:58:10:30:be:7c:fb:ca:30:35:85: 70:1b:f2:4f:b8:a8:f3:95:82:f5:31:6b:e3:07:11: 9b:60:3d:c4:40:1e:78:f8:eb:22:87:f5:a9:00:75: bb:8d:f1:aa:71:7a:e5:62:44:e5:52:7e:1b:d4:89: 98:60:42:fb:7b:4e:93:90:15:80:9a:96:10:8a:7e: 42:85:68:39:53:2a:15:7b:a2:e5:a5:d9:8a:c5:25: d0:de:91:25:2a:96:2a:28:60:13:da:7c:a3:aa:99: cf:f0:0e:9b:bb:1e:4c:9f:ed:6f:d5:5d:db:01:01: 4e:44:a3:bb:a4:c5:3d:21:2a:12:39:79:25:66:01: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:75:8A:3A:8C:6B:88:76:CF:3D:1A:D9:25:EC:D5:F3:34:1F:51:74 X509v3 Authority Key Identifier: keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:52:8f:67:f0:01:a8:b2:90:14:44:01:13:e0:09:ba:c3:01: ee:f8:fa:80:a2:36:1d:73:eb:42:aa:eb:10:7c:38:78:80:94: 09:3b:c2:8f:96:6b:e1:4b:7e:3f:df:af:14:73:1e:9a:cd:4a: 6c:63:0f:20:e2:e2:38:bf:7b:f5:8e:4b:9e:dc:66:c7:24:1c: 54:45:50:a8:bc:c8:07:85:19:a3:80:85:cf:3b:9c:38:67:2c: ab:c7:63:15:26:de:29:97:6b:cf:9d:bc:3d:68:d1:7b:34:65: a3:25:52:6c:10:09:ac:3c:eb:76:20:08:ba:9e:25:43:ea:53: 5b:a8:a8:6a:e7:49:60:80:3b:ca:d4:50:5d:ee:52:f1:a2:25: 93:c8:4f:3f:4f:72:dc:5c:00:e8:0e:fa:a7:b5:80:ca:2a:a9: ce:1f:1f:ca:ff:62:1b:0c:72:98:53:c4:ec:f6:2a:74:12:f1: 21:a8:00:8c:c4:cd:b9:00:f6:65:c4:ca:20:4f:e4:f7:3f:a0: 79:bc:43:11:e7:42:e2:90:6f:7c:45:39:9e:06:0c:75:92:2c: 73:57:c9:66:6a:91:e5:10:2d:ad:29:f3:cf:6b:18:90:1d:db: cd:70:b2:9d:48:bc:04:cc:90:78:66:6c:e7:26:6d:f5:a7:82: ae:cf:df:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U8wpu0fEgHYSMFRUE/zAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MGQyNjgxNTE0YWVmZWU5ZDNjODZlMWVhZTM1NzM2Yzg0 ZDFjMDkwHhcNMjUxMjA3MDEwMTE3WhcNMjUxMjA4MDEwMTE3WjAzMTEwLwYDVQQD EygzOTc1OGEzYThjNmI4ODc2Y2YzZDFhZDkyNWVjZDVmMzM0MWY1MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOR73/MifaNC5MpJoUINo8wHOeg8 XV+eXwJ+PiGTsNGXdDWrLSqz6YLdRyXXfJ0qeyoJM08dWzlOksRKbvD5tHNuXDLA 3Dh8C0n0xaygV51PcVMwf4wax478AJ/aUog+ZibNW1D0zSPVGieaG26tPYcUd/um 3Vqfk1bBzlgQML58+8owNYVwG/JPuKjzlYL1MWvjBxGbYD3EQB54+Osih/WpAHW7 jfGqcXrlYkTlUn4b1ImYYEL7e06TkBWAmpYQin5ChWg5UyoVe6LlpdmKxSXQ3pEl KpYqKGAT2nyjqpnP8A6bux5Mn+1v1V3bAQFORKO7pMU9ISoSOXklZgEb0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl1ijqMa4h2zz0a2SXs1fM0H1F0MB8GA1UdIwQY MBaAFNkNJoFRSu/unTyG4erjVzbITRwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQt MWQwZjI5YjRiOTdmLzEvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQtMWQwZjI5YjRiOTdm LzEvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVKPZ/AB qLKQFEQBE+AJusMB7vj6gKI2HXPrQqrrEHw4eICUCTvCj5Zr4Ut+P9+vFHMems1K bGMPIOLiOL979Y5LntxmxyQcVEVQqLzIB4UZo4CFzzucOGcsq8djFSbeKZdrz528 PWjRezRloyVSbBAJrDzrdiAIup4lQ+pTW6ioaudJYIA7ytRQXe5S8aIlk8hPP09y 3FwA6A76p7WAyiqpzh8fyv9iGwxymFPE7PYqdBLxIagAjMTNuQD2ZcTKIE/k9z+g ebxDEedC4pBvfEU5ngYMdZIsc1fJZmqR5RAtrSnzz2sYkB3bzXCynUi8BMyQeGZs 5yZt9aeCrs/fUA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:52:26 2025 by rpki-client