This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: PEUeJBtZx0nxPV/IR2vF7ETb3/a9h9iuMg0xnIsxHec= Subject key identifier: 78:E8:DA:8A:B8:FF:33:F9:D1:9A:87:5D:B1:6E:FF:D0:94:53:78:1F Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019B3231C6016DEFFB3AF17C210D59DCB566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 0367 Signing time: Thu 18 Dec 2025 16:01:21 +0000 Manifest this update: Thu 18 Dec 2025 16:01:21 +0000 Manifest next update: Fri 19 Dec 2025 16:01:21 +0000 Files and hashes: 1: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: 5KAditLNI6y3YV1W5yoccaiDYE+F89GyJ2mmDCxXCZc=) 2: 7YxrmczVFpaeBMBQOkdecPyU13g.roa (hash: ldyrR2pk0wwrAcATlluvhy35oOBdxvxckCQpFcLrUa0=) 3: IK6BLrV0EEpKCWmR8y07wOSk68U.roa (hash: 2f+csqFlNzMlLrmcJAwXYvsvPfVBQ0wkksbKjz0lRi0=) 4: Z7zYg0UKWOu3I7v4pemSPhkT-8Q.roa (hash: 2HDljRveeQxMYwclc1swW9g1JCkhHlo1eeNjxRkdL8I=) 5: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:c6:01:6d:ef:fb:3a:f1:7c:21:0d:59:dc:b5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Dec 18 16:01:21 2025 GMT Not After : Dec 19 16:01:21 2025 GMT Subject: CN=78e8da8ab8ff33f9d19a875db16effd09453781f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:0e:13:bb:84:5a:fb:ff:05:3d:09:ba:af: 34:48:f7:73:f1:3a:30:ce:72:40:ed:11:b0:f4:46: b6:7d:7a:28:c6:af:56:d6:1a:9c:f4:b0:55:7d:42: 22:ec:81:a6:74:28:53:a1:cf:d6:b7:a8:8f:60:b9: 73:c2:27:9a:cf:ce:6d:03:d9:39:2e:f6:9d:1c:f9: a2:f9:de:31:a2:63:62:d1:4f:36:ea:47:29:93:ff: 92:87:df:9b:89:6a:5b:16:66:b5:40:34:80:82:70: 46:f7:4e:8e:45:a7:a1:dc:c2:5b:ee:ce:ba:3a:81: 3f:e9:d0:02:4e:79:1f:f6:e1:88:dc:30:c4:9c:78: 4d:f8:4e:f0:d1:83:cc:9f:5c:10:09:87:7e:c4:de: 1b:7a:5c:c9:3a:01:b3:76:c5:0a:13:72:4f:cb:96: db:33:a2:8c:8d:df:c1:9b:a3:18:bb:bd:73:b5:7c: 95:da:3e:e1:11:fc:9e:59:05:8c:fd:cf:4f:10:a9: c9:b9:4a:10:03:1c:f6:ce:d2:3b:c9:d1:c3:4e:d8: 77:3c:9c:97:c8:6b:b2:64:96:63:c5:34:52:91:98: 1c:c2:9c:6c:0e:34:a8:c6:27:a7:74:c3:a3:1e:80: 10:0b:7e:71:36:79:aa:c0:bb:6a:00:59:0a:7e:73: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E8:DA:8A:B8:FF:33:F9:D1:9A:87:5D:B1:6E:FF:D0:94:53:78:1F X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0b:26:e6:ef:dd:a5:c7:3b:0b:e1:b1:2c:31:8d:6f:67:94: 55:ca:28:05:88:7d:ac:24:83:fd:b0:7e:80:72:8a:93:99:bc: 21:49:8a:35:b0:cc:2a:41:a1:e5:cd:6f:00:12:96:68:af:ca: f6:14:54:7d:3e:c2:3d:18:43:7a:bb:eb:21:e0:bc:d8:d3:49: 2e:0d:b4:e3:7c:ee:73:5c:37:5e:db:d9:dd:cb:67:d7:5d:a0: 67:bc:36:66:4b:2e:a5:5c:26:79:c4:30:9b:76:d0:a3:3a:fc: 90:6b:43:14:05:3f:88:91:84:54:00:78:ed:25:e8:b4:1f:78: af:35:fa:42:d6:6b:b2:84:ee:4d:ad:cd:0d:62:64:7d:da:76: 55:cd:e4:2d:aa:cc:8c:1b:e2:dc:54:64:59:58:99:59:2e:dc: 2a:3d:20:27:76:fc:1c:e3:c1:74:df:ad:e9:51:32:61:5a:29: 63:df:3c:7d:f9:50:a9:4e:22:a8:e4:6e:ce:94:1f:90:ba:7f: 96:00:0b:61:fe:3e:b6:07:74:86:94:ef:0d:23:07:22:cf:e1: 5f:54:09:1c:55:d8:96:0f:e1:90:77:9d:70:ea:69:8b:b3:f8: 42:01:ab:c1:1e:6e:5d:d8:a1:0f:b6:27:11:1d:a8:06:c8:58: bc:37:b1:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMcYBbe/7OvF8IQ1Z3LVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjUxMjE4MTYwMTIxWhcNMjUxMjE5MTYwMTIxWjAzMTEwLwYDVQQD Eyg3OGU4ZGE4YWI4ZmYzM2Y5ZDE5YTg3NWRiMTZlZmZkMDk0NTM3ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X4OE7uEWvv/BT0Juq80SPdz8Tow znJA7RGw9Ea2fXooxq9W1hqc9LBVfUIi7IGmdChToc/Wt6iPYLlzwieaz85tA9k5 LvadHPmi+d4xomNi0U826kcpk/+Sh9+biWpbFma1QDSAgnBG906ORaeh3MJb7s66 OoE/6dACTnkf9uGI3DDEnHhN+E7w0YPMn1wQCYd+xN4belzJOgGzdsUKE3JPy5bb M6KMjd/Bm6MYu71ztXyV2j7hEfyeWQWM/c9PEKnJuUoQAxz2ztI7ydHDTth3PJyX yGuyZJZjxTRSkZgcwpxsDjSoxiendMOjHoAQC35xNnmqwLtqAFkKfnPsdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjo2oq4/zP50ZqHXbFu/9CUU3gfMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQsm5u/d pcc7C+GxLDGNb2eUVcooBYh9rCSD/bB+gHKKk5m8IUmKNbDMKkGh5c1vABKWaK/K 9hRUfT7CPRhDervrIeC82NNJLg2043zuc1w3XtvZ3ctn112gZ7w2ZksupVwmecQw m3bQozr8kGtDFAU/iJGEVAB47SXotB94rzX6QtZrsoTuTa3NDWJkfdp2Vc3kLarM jBvi3FRkWViZWS7cKj0gJ3b8HOPBdN+t6VEyYVopY988fflQqU4iqORuzpQfkLp/ lgALYf4+tgd0hpTvDSMHIs/hX1QJHFXYlg/hkHedcOppi7P4QgGrwR5uXdihD7Yn ER2oBshYvDex4w== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:42 2025 by rpki-client