This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json) Hash identifier: OUa0rO1ZM/LHDVp/mI8RGkUznKci2PvfIqMuTNL5Gp0= Subject key identifier: 07:DF:8E:4A:6A:72:A4:FF:77:FB:3E:16:10:50:DB:41:89:89:45:16 Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d Certificate serial: 019AF50BB20C4F5DE49EDC3FC472FEFA65A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:02:55 +0000 Manifest this update: Sat 06 Dec 2025 19:02:55 +0000 Manifest next update: Sun 07 Dec 2025 19:02:55 +0000 Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: xiAeILdJSP0gn0IWpJEDKsamfxLRjWRExK+AJ7tyh4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:b2:0c:4f:5d:e4:9e:dc:3f:c4:72:fe:fa:65:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d Validity Not Before: Dec 6 19:02:55 2025 GMT Not After : Dec 7 19:02:55 2025 GMT Subject: CN=07df8e4a6a72a4ff77fb3e161050db4189894516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:2a:12:4f:63:17:ff:7f:5d:d1:1a:18:f8: 33:ad:80:bb:87:1f:ef:a3:54:c5:b3:0c:eb:fa:d2: 7d:de:a0:4f:7c:77:90:a1:a0:cd:a4:03:87:98:fc: 2f:7c:ea:2f:ec:ee:b8:2e:ef:82:51:d0:d0:3d:e8: 6f:9d:99:de:a1:a5:c6:cb:39:1f:b3:08:7f:12:0d: 70:b4:4f:4a:fa:69:3d:25:a6:d1:2e:61:bc:b6:2e: 13:e7:b1:2c:17:29:64:9c:e0:8b:95:f6:71:f9:48: 42:89:11:03:d4:15:94:59:05:66:b9:cc:cc:44:01: 47:c5:99:c4:b1:36:97:53:e2:70:f2:51:fb:aa:3c: 20:c1:b3:a8:b6:c2:da:5d:13:aa:62:a1:d3:0a:0d: 15:86:25:4f:39:23:1b:53:5a:16:fa:87:6e:f1:ea: dc:c8:8a:40:53:be:98:c6:95:fb:61:85:a2:cb:4a: c9:fc:f6:d8:71:cc:56:c3:78:2c:d8:eb:8b:bf:28: 6c:a3:d6:ea:11:a8:c5:21:18:e5:5e:65:e3:f1:59: df:5e:be:af:36:e4:4b:c3:00:8b:ed:eb:34:36:46: 65:b9:01:a9:b9:fa:9f:4b:32:dc:73:55:9d:fa:51: 29:65:1c:be:4a:12:59:ea:c7:3b:0c:b0:7b:0f:80: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:8E:4A:6A:72:A4:FF:77:FB:3E:16:10:50:DB:41:89:89:45:16 X509v3 Authority Key Identifier: keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:14:d9:cd:3a:24:66:80:19:d1:cd:be:6e:66:25:ea:57:e1: 5c:f3:ee:a9:41:ef:03:87:26:f4:d5:24:32:f5:f2:61:be:ad: c0:d7:c0:bf:f7:d3:72:1f:cd:77:e4:d8:19:f8:87:0d:64:84: e7:53:74:89:ac:38:46:0c:9e:3f:0e:a2:5f:32:70:46:84:75: 83:c8:14:ce:d4:38:a9:b3:f3:00:6c:df:d0:db:3a:ee:a4:ec: 05:95:1a:4f:2a:f7:4d:bc:c4:3a:4a:d4:c4:b3:cf:3c:87:60: b6:c3:6a:f3:a7:64:45:c5:1b:93:f7:b6:34:ad:30:d2:6e:c0: 56:06:07:e9:21:eb:a5:10:6b:84:b0:37:34:77:b6:55:aa:c7: f6:b1:f0:aa:07:16:61:e2:c7:8c:3e:1e:ab:4f:00:74:ab:a9: b0:88:bf:99:85:14:26:9d:c7:4b:90:f6:d2:92:3a:26:0c:60: d1:0e:32:3a:63:9e:3e:7a:5a:37:de:d1:f7:99:14:6c:52:b7: 11:7c:88:b4:8b:d9:8d:47:1c:6a:08:48:80:8a:f9:7c:00:22: 1c:f8:65:06:9b:a1:1e:50:f2:01:48:55:e2:d2:db:de:a0:02: 9d:8a:22:62:9d:be:87:ac:6e:4d:0c:7f:db:a6:f1:ce:4d:57: 6f:44:5b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C7IMT13kntw/xHL++mWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDgyOTFjZmM3MjhkMDE3NjBlYzQyNzgxMDk2YWM2YjRj NzRhNWQwHhcNMjUxMjA2MTkwMjU1WhcNMjUxMjA3MTkwMjU1WjAzMTEwLwYDVQQD EygwN2RmOGU0YTZhNzJhNGZmNzdmYjNlMTYxMDUwZGI0MTg5ODk0NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F8qEk9jF/9/XdEaGPgzrYC7hx/v o1TFswzr+tJ93qBPfHeQoaDNpAOHmPwvfOov7O64Lu+CUdDQPehvnZneoaXGyzkf swh/Eg1wtE9K+mk9JabRLmG8ti4T57EsFylknOCLlfZx+UhCiRED1BWUWQVmuczM RAFHxZnEsTaXU+Jw8lH7qjwgwbOotsLaXROqYqHTCg0VhiVPOSMbU1oW+odu8erc yIpAU76YxpX7YYWiy0rJ/PbYccxWw3gs2OuLvyhso9bqEajFIRjlXmXj8VnfXr6v NuRLwwCL7es0NkZluQGpufqfSzLcc1Wd+lEpZRy+ShJZ6sc7DLB7D4DpuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAffjkpqcqT/d/s+FhBQ20GJiUUWMB8GA1UdIwQY MBaAFNoIKRz8co0Bdg7EJ4EJasa0x0pdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgt YjA1Y2ZmYjE4N2ZhLzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgtYjA1Y2ZmYjE4N2Zh LzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRTZzTok ZoAZ0c2+bmYl6lfhXPPuqUHvA4cm9NUkMvXyYb6twNfAv/fTch/Nd+TYGfiHDWSE 51N0iaw4RgyePw6iXzJwRoR1g8gUztQ4qbPzAGzf0Ns67qTsBZUaTyr3TbzEOkrU xLPPPIdgtsNq86dkRcUbk/e2NK0w0m7AVgYH6SHrpRBrhLA3NHe2VarH9rHwqgcW YeLHjD4eq08AdKupsIi/mYUUJp3HS5D20pI6Jgxg0Q4yOmOePnpaN97R95kUbFK3 EXyItIvZjUccaghIgIr5fAAiHPhlBpuhHlDyAUhV4tLb3qACnYoiYp2+h6xuTQx/ 26bxzk1Xb0Rbtw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:13 2025 by rpki-client