This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json) Hash identifier: Qt724ZstuwhyzlTDxK9rJDyrPPe4ddij2YGPDu5P0Zg= Subject key identifier: D3:80:81:3F:4D:83:3C:6E:60:A8:B6:6E:6F:DF:33:2D:6D:74:85:27 Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c Certificate serial: 019AF12DFE894BFA9B7169402BDE658EB52C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft Manifest number: 0F81 Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: u2TRJgDC66LDCmGaADUwI8NWNJT9TqoJcRPv9DKvmNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fe:89:4b:fa:9b:71:69:40:2b:de:65:8e:b5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=d380813f4d833c6e60a8b66e6fdf332d6d748527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:35:c0:bd:ab:1c:79:65:1a:10:43:2f:32: c2:a9:f0:33:d3:2c:eb:8b:e7:31:f4:d5:d9:5a:2a: d9:05:3b:fa:a9:33:fa:27:d9:8d:fd:71:cf:26:40: e1:3f:e5:bd:27:69:86:41:04:15:3e:91:66:44:43: 60:38:74:82:f3:4a:25:96:bc:3b:9b:fb:c6:e4:01: ed:c7:b6:e2:12:0e:58:fa:66:dd:52:63:11:b0:d4: 9b:eb:42:7d:58:ff:65:cf:47:0c:88:9d:f7:b0:bd: 15:a0:87:6e:0f:22:f8:76:62:34:4f:5f:7a:d8:84: a3:f2:e1:f9:7f:50:c0:b1:c1:eb:3a:6e:0d:93:df: a8:de:40:bc:15:d3:2c:42:85:ef:63:ac:3d:88:4e: 94:5f:88:95:9c:ec:8d:2f:26:23:5b:a6:f9:0c:c2: 82:8d:40:48:69:61:66:74:0a:2b:81:22:87:85:43: 24:82:35:93:26:7e:67:6a:d8:bd:e1:be:d4:21:56: a7:5d:5b:b3:09:1e:61:40:91:9c:21:af:ec:56:f7: c7:6b:22:0a:df:2c:9d:8c:63:ff:45:7d:b0:b4:9b: 08:46:e0:12:80:ea:79:ab:ff:5c:7e:54:42:e7:ff: 84:0e:22:aa:70:b3:46:82:6b:00:3e:89:23:81:7b: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:81:3F:4D:83:3C:6E:60:A8:B6:6E:6F:DF:33:2D:6D:74:85:27 X509v3 Authority Key Identifier: keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ea:86:47:24:7c:f4:3e:0a:c5:1d:18:a9:75:a1:24:57:c7: 3c:5a:ad:0c:29:41:cf:c8:d1:2d:68:9b:48:28:62:fc:d8:bf: 7a:1f:c0:62:3a:24:a8:86:8c:47:e3:51:8b:8a:bd:8e:7f:98: 4b:fa:d1:d0:e3:01:df:fc:54:af:bc:75:7a:51:d5:e2:ee:d0: 3d:8d:ce:e3:0f:6a:7a:29:4c:71:6a:46:74:cb:a6:8d:33:45: 42:0f:7f:b5:2e:ca:95:dd:d9:9d:0f:95:66:b7:f1:f1:73:7f: 66:4c:13:b7:4d:6f:e1:15:52:6b:25:2f:ef:80:cf:18:5a:2a: 29:18:09:11:27:fe:7b:8e:e2:44:d3:01:57:8c:69:10:2b:df: 01:ec:fe:91:96:b3:dc:89:a2:de:12:05:6e:17:b0:e3:62:e0: a0:7e:ed:34:26:a6:2e:21:6e:2d:ba:4e:32:bf:3e:57:37:20: fe:99:12:a6:ba:19:c1:de:4b:c4:36:d9:e4:2e:c8:40:38:22: cb:e8:cb:8e:7f:22:fb:06:1e:e7:f1:a6:89:2a:e4:4f:8e:81: 42:55:bc:88:b0:75:18:68:19:74:c1:a3:02:1e:41:81:91:0b: 49:ae:6f:64:ef:7b:63:8b:f3:bb:c1:11:8d:bd:34:01:9f:c3: 67:c5:c5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLf6JS/qbcWlAK95ljrUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzE4YjVhZDNhMjVmMTE4YTgzYmIyZmZiYmU3OTVkNjY0 MzY2M2MwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD EyhkMzgwODEzZjRkODMzYzZlNjBhOGI2NmU2ZmRmMzMyZDZkNzQ4NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kA1wL2rHHllGhBDLzLCqfAz0yzr i+cx9NXZWirZBTv6qTP6J9mN/XHPJkDhP+W9J2mGQQQVPpFmRENgOHSC80ollrw7 m/vG5AHtx7biEg5Y+mbdUmMRsNSb60J9WP9lz0cMiJ33sL0VoIduDyL4dmI0T196 2ISj8uH5f1DAscHrOm4Nk9+o3kC8FdMsQoXvY6w9iE6UX4iVnOyNLyYjW6b5DMKC jUBIaWFmdAorgSKHhUMkgjWTJn5nati94b7UIVanXVuzCR5hQJGcIa/sVvfHayIK 3yydjGP/RX2wtJsIRuASgOp5q/9cflRC5/+EDiKqcLNGgmsAPokjgXsybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOAgT9NgzxuYKi2bm/fMy1tdIUnMB8GA1UdIwQY MBaAFNjBi1rTol8RioO7L/u+eV1mQ2Y8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82NGI4ZGQtOWJjYi00NzVlLWJmOGYt ZDg3ZmI3NjdkOGJkLzEvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82NGI4ZGQtOWJjYi00NzVlLWJmOGYtZDg3ZmI3NjdkOGJk LzEvMk1HTFd0T2lYeEdLZzdzdi03NTVYV1pEWmp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+qGRyR8 9D4KxR0YqXWhJFfHPFqtDClBz8jRLWibSChi/Ni/eh/AYjokqIaMR+NRi4q9jn+Y S/rR0OMB3/xUr7x1elHV4u7QPY3O4w9qeilMcWpGdMumjTNFQg9/tS7Kld3ZnQ+V Zrfx8XN/ZkwTt01v4RVSayUv74DPGFoqKRgJESf+e47iRNMBV4xpECvfAez+kZaz 3Imi3hIFbhew42LgoH7tNCamLiFuLbpOMr8+Vzcg/pkSproZwd5LxDbZ5C7IQDgi y+jLjn8i+wYe5/GmiSrkT46BQlW8iLB1GGgZdMGjAh5BgZELSa5vZO97Y4vzu8ER jb00AZ/DZ8XFLA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:28 2025 by rpki-client