This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json) Hash identifier: GKJsxjAqw/auWJCYvo4lg7yWP+cb+uym9DrdsrazOEc= Subject key identifier: B4:9F:E0:5D:9E:ED:4A:C7:6E:9E:DB:43:4F:BF:7C:F4:A6:41:EC:73 Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51 Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51 Certificate serial: 019AF3BFEF13E25DBBFF0CB848B0980E0468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft Manifest number: 177E Signing time: Sat 06 Dec 2025 13:00:33 +0000 Manifest this update: Sat 06 Dec 2025 13:00:33 +0000 Manifest next update: Sun 07 Dec 2025 13:00:33 +0000 Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: bJnPdK3hmv+B1M2dOLI4oglmCnnNqxWx+UupJwBL4Sw=) 2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=) 3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=) 4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:ef:13:e2:5d:bb:ff:0c:b8:48:b0:98:0e:04:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51 Validity Not Before: Dec 6 13:00:33 2025 GMT Not After : Dec 7 13:00:33 2025 GMT Subject: CN=b49fe05d9eed4ac76e9edb434fbf7cf4a641ec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:0c:15:2d:75:22:39:a4:b2:61:b7:cb:33: c7:10:c0:3a:a4:a7:90:56:5d:a9:c5:01:39:95:f0: 39:bb:36:20:ea:5b:e6:bd:39:f4:e9:cc:24:09:33: 1f:7c:df:38:c8:9a:eb:c4:0b:ab:37:8c:cb:55:25: a4:ee:2f:68:9d:53:9c:8d:8b:b2:55:e3:79:0c:dc: a2:6d:1e:12:66:3e:8e:73:22:99:24:9b:b5:b5:ea: 03:3a:39:42:84:b7:ee:e2:a8:12:43:07:fa:7b:fc: 7f:ec:9b:9e:d0:7e:42:94:7d:a4:e7:1e:95:66:fb: d3:24:60:12:b0:66:bd:00:38:e3:88:68:c8:65:a2: 14:96:bc:2f:6f:c8:47:fc:05:3b:0c:a9:1e:70:ee: 88:24:90:6a:92:e6:2b:14:95:34:0b:a4:d3:c6:19: 47:f9:39:07:0a:80:18:f5:7c:06:58:6d:47:67:64: a3:d8:fb:d4:81:96:a4:42:e3:61:c4:76:82:25:75: fb:d6:a0:5d:46:e4:3d:25:0b:b8:8c:da:37:8f:0e: 18:96:ac:e8:df:4b:06:c9:e8:87:b5:3b:6d:12:08: a6:8a:a6:9d:3f:e1:44:61:2f:91:bf:89:d0:e2:62: e2:5d:ac:ec:02:be:fb:69:bf:95:08:67:28:51:d9: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9F:E0:5D:9E:ED:4A:C7:6E:9E:DB:43:4F:BF:7C:F4:A6:41:EC:73 X509v3 Authority Key Identifier: keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:df:a6:b6:4a:0e:dd:36:cb:72:3d:2f:f4:55:c2:8a:17:55: 8b:43:2a:31:b7:b2:ce:dc:94:c0:7e:00:04:44:b4:d2:52:54: 5c:6d:2c:0a:f8:c3:31:f7:ef:10:21:7c:1b:29:2f:28:ce:34: 25:53:3d:7d:2f:f1:9c:6a:8b:48:a5:ee:a2:85:23:66:ec:5d: 4d:7c:fe:aa:46:b2:4e:31:c3:c9:62:5e:e9:1a:29:a9:4e:ad: a9:fc:7d:92:51:c4:d0:74:8c:6d:11:6e:7d:6f:0c:25:91:e5: 67:b1:73:a3:d1:68:f4:06:6d:98:cd:20:26:74:6c:b4:cd:ab: 65:66:5f:60:13:24:b9:ac:3d:70:6a:82:48:1b:ee:95:74:27: f2:6a:99:32:fb:99:64:86:3e:2b:c3:2c:96:0a:d8:22:0b:19: 48:25:4f:98:3a:4e:27:57:f3:49:b2:76:ce:a4:a3:f3:47:b4: 87:ad:4c:b8:b0:36:a0:13:23:dd:17:8f:74:6f:ec:c0:6e:50: 0f:6b:f2:b4:1c:39:42:b6:6c:40:d5:18:fd:79:fc:03:0e:84: fc:50:da:97:f1:a5:f7:f2:0c:f4:cc:71:bd:38:f3:ce:ea:27: d8:a4:94:14:d7:8c:f4:f9:44:b9:07:a9:06:8f:8e:67:3c:61: 81:36:d8:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+8T4l27/wy4SLCYDgRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NzgyMWE3Yzg3NjFlMDgxMjFlNzBjOWZmNDJmZjliNmFk MzRlNTEwHhcNMjUxMjA2MTMwMDMzWhcNMjUxMjA3MTMwMDMzWjAzMTEwLwYDVQQD EyhiNDlmZTA1ZDllZWQ0YWM3NmU5ZWRiNDM0ZmJmN2NmNGE2NDFlYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSgMFS11IjmksmG3yzPHEMA6pKeQ Vl2pxQE5lfA5uzYg6lvmvTn06cwkCTMffN84yJrrxAurN4zLVSWk7i9onVOcjYuy VeN5DNyibR4SZj6OcyKZJJu1teoDOjlChLfu4qgSQwf6e/x/7Jue0H5ClH2k5x6V ZvvTJGASsGa9ADjjiGjIZaIUlrwvb8hH/AU7DKkecO6IJJBqkuYrFJU0C6TTxhlH +TkHCoAY9XwGWG1HZ2Sj2PvUgZakQuNhxHaCJXX71qBdRuQ9JQu4jNo3jw4Ylqzo 30sGyeiHtTttEgimiqadP+FEYS+Rv4nQ4mLiXazsAr77ab+VCGcoUdn5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSf4F2e7UrHbp7bQ0+/fPSmQexzMB8GA1UdIwQY MBaAFNh4IafIdh4IEh5wyf9C/5tq005RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMt NWFhNjIwYTgxMTQ5LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9lNTcyNWItMzEyOC00NGIzLTlmODMtNWFhNjIwYTgxMTQ5 LzEvMkhnaHA4aDJIZ2dTSG5ESl8wTF9tMnJUVGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9+mtkoO 3TbLcj0v9FXCihdVi0MqMbeyztyUwH4ABES00lJUXG0sCvjDMffvECF8GykvKM40 JVM9fS/xnGqLSKXuooUjZuxdTXz+qkayTjHDyWJe6RopqU6tqfx9klHE0HSMbRFu fW8MJZHlZ7Fzo9Fo9AZtmM0gJnRstM2rZWZfYBMkuaw9cGqCSBvulXQn8mqZMvuZ ZIY+K8MslgrYIgsZSCVPmDpOJ1fzSbJ2zqSj80e0h61MuLA2oBMj3RePdG/swG5Q D2vytBw5QrZsQNUY/Xn8Aw6E/FDal/Gl9/IM9MxxvTjzzuon2KSUFNeM9PlEuQep Bo+OZzxhgTbY/A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:25:04 2025 by rpki-client