This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json) Hash identifier: v9rN827q3jfw10O4vE4/KaOxDuF5/JbZwKAblQF0S0I= Subject key identifier: 74:17:D2:BC:8F:76:90:27:04:6F:A9:95:FD:91:14:9F:21:14:E7:09 Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68 Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68 Certificate serial: 019B300C51150CA1A187C9BED928614EBFCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 06:01:12 +0000 Manifest this update: Thu 18 Dec 2025 06:01:12 +0000 Manifest next update: Fri 19 Dec 2025 06:01:12 +0000 Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: yJ9FUGeFCmC0WZEUuTddYb9k6fqpbeUPdtepU6m8/CI=) 2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:51:15:0c:a1:a1:87:c9:be:d9:28:61:4e:bf:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68 Validity Not Before: Dec 18 06:01:12 2025 GMT Not After : Dec 19 06:01:12 2025 GMT Subject: CN=7417d2bc8f769027046fa995fd91149f2114e709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:fa:b1:f8:01:a2:c8:4f:cc:b9:f2:e1:f8: a7:9c:4a:32:e1:26:3e:58:00:34:95:05:50:cf:81: 0f:42:75:9f:ba:31:4d:22:d2:85:56:31:f8:cf:45: 28:7a:0c:24:c3:6d:67:be:6e:44:38:98:98:16:de: cb:f7:70:f0:f4:5d:35:87:65:ee:e5:77:88:3a:30: 25:3d:9a:f6:79:b8:98:a2:9c:ee:84:0b:dd:ff:dd: 70:74:03:14:61:b2:7f:44:39:70:da:09:3d:3b:24: cf:50:04:0f:87:d8:94:51:fa:1b:b3:6a:a9:18:71: 80:89:dd:02:ff:48:a8:89:8e:e0:eb:8e:ea:55:e7: b8:cc:41:c3:d5:ca:ac:72:72:44:3b:2f:b0:14:a8: 29:ef:08:dd:8a:35:33:2e:71:2a:22:0f:18:c1:d7: c6:1a:bb:53:12:5d:36:04:a0:e9:ce:17:db:93:96: bb:5d:4a:c2:56:97:b0:05:fa:d6:92:69:d7:29:2f: 63:15:3e:cc:c9:71:bc:16:4f:4f:e4:ec:62:dd:8c: 8a:aa:7a:d9:e4:b9:31:0a:e6:64:cc:12:3c:ab:a6: 5c:37:06:1c:d3:7c:be:f9:e3:f0:4a:f9:ba:2e:c3: 02:bb:62:a8:f2:c5:85:e9:0f:d5:3e:0d:54:a9:cf: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:17:D2:BC:8F:76:90:27:04:6F:A9:95:FD:91:14:9F:21:14:E7:09 X509v3 Authority Key Identifier: keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:12:23:7e:08:ee:b2:a1:df:af:c9:57:c1:d2:15:e0:82:b4: 92:4d:79:a1:60:23:67:e7:89:1d:86:1e:b8:90:ac:07:bd:36: 73:fb:75:e3:87:4a:a0:c1:9f:10:db:14:fe:e9:9d:71:bb:0a: 7c:6f:5b:55:fa:c0:2b:66:e4:ae:cf:58:e2:e0:34:35:c6:02: 74:c1:68:e9:01:94:38:b7:ed:fc:4d:bb:be:a7:56:bb:6d:93: 14:b1:5a:ad:b0:8a:23:37:dc:e7:2e:7c:13:fe:d2:63:1a:cf: 59:91:06:17:a7:18:9d:d3:2c:60:fc:14:d9:4f:1c:94:b9:6a: 53:ce:40:6b:84:e2:72:d4:a0:43:99:18:1f:45:69:a7:20:04: c5:13:83:ef:3b:30:24:fc:5c:49:65:09:cc:3a:e8:24:f1:16: 4a:0d:fc:26:61:cc:a7:26:4c:57:8c:11:cb:2e:3b:b7:50:97: da:61:26:4e:b8:0b:71:e2:83:94:5b:4c:12:27:93:50:0d:06: 63:57:bd:04:f8:26:78:f5:24:1d:5f:c5:ae:57:d3:45:7a:30: af:98:9f:5f:82:09:17:30:eb:65:b8:b3:72:88:f1:69:94:a2: b3:2a:3b:61:40:58:fe:59:6c:52:35:2a:b9:8d:2d:8b:e7:a2: 7d:85:34:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDFEVDKGhh8m+2ShhTr/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDczZDA2YjU4NjUyZjg0OWZhOGJjZjNjZWM2Yjk1MDkw OWJkNjgwHhcNMjUxMjE4MDYwMTEyWhcNMjUxMjE5MDYwMTEyWjAzMTEwLwYDVQQD Eyg3NDE3ZDJiYzhmNzY5MDI3MDQ2ZmE5OTVmZDkxMTQ5ZjIxMTRlNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCT6sfgBoshPzLny4finnEoy4SY+ WAA0lQVQz4EPQnWfujFNItKFVjH4z0Uoegwkw21nvm5EOJiYFt7L93Dw9F01h2Xu 5XeIOjAlPZr2ebiYopzuhAvd/91wdAMUYbJ/RDlw2gk9OyTPUAQPh9iUUfobs2qp GHGAid0C/0ioiY7g647qVee4zEHD1cqscnJEOy+wFKgp7wjdijUzLnEqIg8YwdfG GrtTEl02BKDpzhfbk5a7XUrCVpewBfrWkmnXKS9jFT7MyXG8Fk9P5Oxi3YyKqnrZ 5LkxCuZkzBI8q6ZcNwYc03y++ePwSvm6LsMCu2Ko8sWF6Q/VPg1Uqc+3uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQX0ryPdpAnBG+plf2RFJ8hFOcJMB8GA1UdIwQY MBaAFNgHPQa1hlL4SfqLzzzsa5UJCb1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUt MjMyOWQ3OWM0YWUzLzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MjE5MjAtOTM5Yi00MTJiLWEzYzUtMjMyOWQ3OWM0YWUz LzEvMkFjOUJyV0dVdmhKLW92UFBPeHJsUWtKdldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBIjfgju sqHfr8lXwdIV4IK0kk15oWAjZ+eJHYYeuJCsB702c/t144dKoMGfENsU/umdcbsK fG9bVfrAK2bkrs9Y4uA0NcYCdMFo6QGUOLft/E27vqdWu22TFLFarbCKIzfc5y58 E/7SYxrPWZEGF6cYndMsYPwU2U8clLlqU85Aa4TictSgQ5kYH0VppyAExROD7zsw JPxcSWUJzDroJPEWSg38JmHMpyZMV4wRyy47t1CX2mEmTrgLceKDlFtMEieTUA0G Y1e9BPgmePUkHV/FrlfTRXowr5ifX4IJFzDrZbizcojxaZSisyo7YUBY/llsUjUq uY0ti+eifYU0SQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:13:27 2025 by rpki-client