This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json) Hash identifier: CwfAhFjlWbV0WbodVtSqO4pQO261tox++785lXdywOU= Subject key identifier: 77:20:4D:DC:18:07:0A:74:86:04:4A:A8:A2:19:1E:01:74:59:CF:8E Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f Certificate serial: 019AF50A02E998D4A3D4D7FC09965CFB3717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:05 +0000 Manifest this update: Sat 06 Dec 2025 19:01:05 +0000 Manifest next update: Sun 07 Dec 2025 19:01:05 +0000 Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: olp4zqAm1OCWQQwjUgrfi2bv5HgQofzAEYn5h/vBnxw=) 2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:02:e9:98:d4:a3:d4:d7:fc:09:96:5c:fb:37:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f Validity Not Before: Dec 6 19:01:05 2025 GMT Not After : Dec 7 19:01:05 2025 GMT Subject: CN=77204ddc18070a7486044aa8a2191e017459cf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:04:ec:40:98:a0:39:e7:f8:9c:3a:8e:4d: 19:e7:7d:fa:82:ed:9a:25:78:82:f1:52:cc:d1:71: 48:53:a9:6a:82:71:35:79:73:ca:ec:d9:ff:43:b7: 67:a8:5d:0e:1c:ec:9d:5c:8b:59:1c:65:80:df:b4: 41:0a:f1:13:52:ae:23:f5:80:83:b2:f5:58:44:b1: af:52:f9:79:82:25:5a:52:9b:c3:86:74:ca:14:e2: 9f:1a:db:d6:04:ef:b5:95:a0:ea:82:17:72:62:85: e3:e5:6f:16:29:ee:03:b8:23:ae:df:2d:f5:23:0c: 5a:77:08:48:e2:ec:34:86:18:0c:fb:c9:03:62:62: 2c:ec:c6:a7:24:68:e7:d8:8f:dd:bc:7e:9b:dd:2f: ff:e7:e7:ba:06:94:f6:cf:56:92:d9:d8:f1:a7:c2: 64:44:61:03:0d:a2:63:ba:1a:76:6a:12:1a:c2:c4: 8d:b4:11:dc:c4:9a:87:ac:a6:24:fd:27:d2:a9:3d: 9b:7e:e2:7e:71:ad:6e:6f:11:b9:95:90:d7:4f:21: a8:61:3e:77:2e:5c:dc:08:1e:78:43:ae:2c:d7:d1: 9b:a2:6e:71:e0:7b:5b:77:8c:e2:b3:54:bb:68:de: 96:31:11:eb:7f:d1:65:83:14:44:f6:17:88:4c:bc: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:4D:DC:18:07:0A:74:86:04:4A:A8:A2:19:1E:01:74:59:CF:8E X509v3 Authority Key Identifier: keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:af:75:11:38:3b:fc:df:52:b4:95:c0:78:18:d2:9a:46:48: 25:d9:fd:02:a4:fb:28:d7:44:a5:f6:0c:3a:d9:e2:ef:71:62: 90:c3:c1:35:da:35:75:ad:51:f6:7c:3d:0f:ed:fd:48:17:89: 90:54:ff:3a:2e:97:96:fc:84:8b:d7:72:6d:1a:b2:c8:8d:71: 18:32:54:3e:25:bc:60:24:26:2c:46:6f:78:2e:b0:96:fb:a6: 16:e0:10:a9:10:72:2a:39:d8:f3:d0:c5:e2:1a:af:3c:0d:6c: cb:13:20:5d:4b:06:5c:f2:61:6d:4a:47:1a:1e:c5:2c:44:7e: e0:e7:9c:c5:e7:98:24:3a:ed:58:6e:14:fb:40:1a:a0:f5:39: fa:82:5b:81:55:b7:ea:41:21:e5:92:a3:59:81:bb:7c:7c:a3: 9c:1c:40:52:3e:65:d2:91:d9:d7:5d:9e:8e:d7:81:41:5a:d0: 64:69:44:d8:31:31:c0:4b:f3:e0:24:5b:d9:dd:45:de:05:b3: d1:b6:4f:0e:2c:8b:fb:8a:e4:e7:74:18:e9:b7:53:40:73:54: ae:68:d1:af:49:44:60:24:1f:e5:e7:f2:30:31:18:fa:14:c7: c1:48:f6:1d:72:6e:46:33:98:4f:b9:2c:87:bc:38:f1:76:ec: 6e:99:52:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgLpmNSj1Nf8CZZc+zcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMTg2NDIyMjc5ZDlkOGI0ZTY4ZTY5YjEyOTZlNTMyZDRk YTBjM2YwHhcNMjUxMjA2MTkwMTA1WhcNMjUxMjA3MTkwMTA1WjAzMTEwLwYDVQQD Eyg3NzIwNGRkYzE4MDcwYTc0ODYwNDRhYThhMjE5MWUwMTc0NTljZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2toE7ECYoDnn+Jw6jk0Z5336gu2a JXiC8VLM0XFIU6lqgnE1eXPK7Nn/Q7dnqF0OHOydXItZHGWA37RBCvETUq4j9YCD svVYRLGvUvl5giVaUpvDhnTKFOKfGtvWBO+1laDqghdyYoXj5W8WKe4DuCOu3y31 IwxadwhI4uw0hhgM+8kDYmIs7ManJGjn2I/dvH6b3S//5+e6BpT2z1aS2djxp8Jk RGEDDaJjuhp2ahIawsSNtBHcxJqHrKYk/SfSqT2bfuJ+ca1ubxG5lZDXTyGoYT53 LlzcCB54Q64s19Gbom5x4Htbd4zis1S7aN6WMRHrf9FlgxRE9heITLxXgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcgTdwYBwp0hgRKqKIZHgF0Wc+OMB8GA1UdIwQY MBaAFNsYZCInnZ2LTmjmmxKW5TLU2gw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2Mt NWM3NzIzNDYwMjIzLzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2MtNWM3NzIzNDYwMjIz LzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM691ETg7 /N9StJXAeBjSmkZIJdn9AqT7KNdEpfYMOtni73FikMPBNdo1da1R9nw9D+39SBeJ kFT/Oi6XlvyEi9dybRqyyI1xGDJUPiW8YCQmLEZveC6wlvumFuAQqRByKjnY89DF 4hqvPA1syxMgXUsGXPJhbUpHGh7FLER+4OecxeeYJDrtWG4U+0AaoPU5+oJbgVW3 6kEh5ZKjWYG7fHyjnBxAUj5l0pHZ112ejteBQVrQZGlE2DExwEvz4CRb2d1F3gWz 0bZPDiyL+4rk53QY6bdTQHNUrmjRr0lEYCQf5efyMDEY+hTHwUj2HXJuRjOYT7ks h7w48XbsbplSbQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:37 2025 by rpki-client