This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json) Hash identifier: 8kuLoMbr4way6CNSUJ/OGAxCShe7woaMyJka4lnDSoI= Subject key identifier: B0:BC:DA:65:D0:08:BE:3D:A5:66:5E:ED:F3:C9:D7:63:AE:C4:E2:19 Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec Certificate serial: 019AF27710A7587D7887B289996F957B3F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: iR/hwTe+as4mWRrmWGKL+oUkIqVLhY2pzUEpdR02o+Q=) 2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=) 3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=) 4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=) 5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:10:a7:58:7d:78:87:b2:89:99:6f:95:7b:3f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d894365b28a082834a751a97771b791124524dec Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=b0bcda65d008be3da5665eedf3c9d763aec4e219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:6c:18:59:3e:df:a4:d6:35:a0:b8:d2:54: c0:ba:e9:94:c4:21:9d:90:c5:57:b7:7f:00:df:f5: 68:53:ee:d4:ec:51:99:32:96:5f:7c:c5:7c:66:16: 54:e3:2b:a2:cd:bc:a5:cf:81:fd:d0:af:79:82:47: 81:31:0f:b9:b2:79:0a:2c:8e:7c:18:12:8e:65:07: 21:b0:0c:8b:36:cb:e0:0d:83:4c:9a:6e:88:ad:c3: d1:4e:9e:8b:22:b8:bb:e6:cd:99:c7:e8:2a:bf:7a: 26:dc:b4:bd:4f:17:88:f7:43:c4:76:79:a8:90:5e: 74:40:1d:fa:2c:ec:db:72:df:9a:e3:b2:72:63:b0: ce:7f:8e:1c:57:54:da:31:f6:41:52:f7:45:c3:22: f0:f6:d0:09:8a:16:b8:5a:c0:dd:82:6f:7c:1c:68: 08:bb:ee:c0:18:bf:98:c3:83:48:04:d7:d8:dd:b5: fc:5c:76:22:e8:81:49:74:d3:ff:c6:ec:0a:18:eb: 84:0d:30:70:a7:55:a3:8c:04:ef:a3:23:32:16:c0: a8:57:4c:be:5f:e0:77:e6:02:69:10:cf:f9:a3:b6: 20:72:b5:94:ca:69:76:17:e6:d8:93:09:4c:7c:cd: 61:ef:05:68:fd:51:28:b5:f5:a4:f6:f0:bd:ca:0b: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:DA:65:D0:08:BE:3D:A5:66:5E:ED:F3:C9:D7:63:AE:C4:E2:19 X509v3 Authority Key Identifier: keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d7:36:ea:0f:92:b9:78:d9:02:b4:ea:f1:d4:53:42:fb:ae: 42:ba:42:3e:e5:b2:ef:fa:19:35:47:9e:93:9c:cf:74:e9:9a: 71:53:85:9b:d9:0b:c5:3c:ac:e9:f7:04:2e:57:d9:96:cf:cb: c1:d9:8c:a9:87:bd:00:d6:2a:65:bc:4d:c5:41:56:84:60:b5: 4c:87:0e:05:76:91:db:86:d9:20:ef:25:3a:fa:48:50:6f:2c: df:c1:a4:cd:ec:51:13:21:69:fb:f4:32:7c:ea:f9:3e:ce:cb: 61:ad:75:9f:e5:71:73:18:19:ee:7e:c0:dd:85:c9:db:7f:d5: 88:38:9e:d8:ff:fc:5d:a3:73:56:5d:f9:1d:b0:05:af:0e:61: 37:ff:e5:eb:09:23:4d:dd:56:2e:f6:f3:9e:63:da:b0:a5:49: 4c:12:96:ad:d7:b8:d5:20:2c:36:f9:3e:10:33:82:89:a0:5c: 1f:1a:2a:6d:7b:e5:da:e9:9e:e3:ce:0c:69:7d:7a:73:84:40: 75:7d:60:34:f3:17:25:fc:96:69:2a:a2:7d:1e:d6:ab:d4:80: 65:03:be:c0:05:36:4c:ca:36:1f:d5:cb:43:31:fc:33:53:0a: 38:9f:54:03:c8:9f:f6:a7:77:a1:73:53:bd:65:8b:dd:f7:c6: b1:44:e8:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxCnWH14h7KJmW+Vez8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4OTQzNjViMjhhMDgyODM0YTc1MWE5Nzc3MWI3OTExMjQ1 MjRkZWMwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhiMGJjZGE2NWQwMDhiZTNkYTU2NjVlZWRmM2M5ZDc2M2FlYzRlMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MRsGFk+36TWNaC40lTAuumUxCGd kMVXt38A3/VoU+7U7FGZMpZffMV8ZhZU4yuizbylz4H90K95gkeBMQ+5snkKLI58 GBKOZQchsAyLNsvgDYNMmm6IrcPRTp6LIri75s2Zx+gqv3om3LS9TxeI90PEdnmo kF50QB36LOzbct+a47JyY7DOf44cV1TaMfZBUvdFwyLw9tAJiha4WsDdgm98HGgI u+7AGL+Yw4NIBNfY3bX8XHYi6IFJdNP/xuwKGOuEDTBwp1WjjATvoyMyFsCoV0y+ X+B35gJpEM/5o7YgcrWUyml2F+bYkwlMfM1h7wVo/VEotfWk9vC9ygtzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC82mXQCL49pWZe7fPJ12OuxOIZMB8GA1UdIwQY MBaAFNiUNlsooIKDSnUal3cbeREkUk3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEt MjE0NjE3OWQ4ZTJiLzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNjA3ZjQtMTVkYy00ZGI1LTk2MDEtMjE0NjE3OWQ4ZTJi LzEvMkpRMld5aWdnb05LZFJxWGR4dDVFU1JTVGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItc26g+S uXjZArTq8dRTQvuuQrpCPuWy7/oZNUeek5zPdOmacVOFm9kLxTys6fcELlfZls/L wdmMqYe9ANYqZbxNxUFWhGC1TIcOBXaR24bZIO8lOvpIUG8s38GkzexREyFp+/Qy fOr5Ps7LYa11n+VxcxgZ7n7A3YXJ23/ViDie2P/8XaNzVl35HbAFrw5hN//l6wkj Td1WLvbznmPasKVJTBKWrde41SAsNvk+EDOCiaBcHxoqbXvl2ume484MaX16c4RA dX1gNPMXJfyWaSqifR7Wq9SAZQO+wAU2TMo2H9XLQzH8M1MKOJ9UA8if9qd3oXNT vWWL3ffGsUToGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:42 2025 by rpki-client