This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json) Hash identifier: KOSlbOpmb33D+PKm8Fl45h9UiG/895ZKXSnP1RBAIm4= Subject key identifier: B3:4B:6C:B9:59:95:B6:1C:61:71:78:E3:2D:5A:36:8E:EA:D3:9C:B7 Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77 Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577 Certificate serial: 019B262DCE1A9854CF8434C0E6B78F504BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft Manifest number: 0588 Signing time: Tue 16 Dec 2025 08:01:34 +0000 Manifest this update: Tue 16 Dec 2025 08:01:34 +0000 Manifest next update: Wed 17 Dec 2025 08:01:34 +0000 Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: LBRCwXtciYe41Zn4NZKqe5ckQH2zTYK84yTLS51+af0=) 2: kZsXR7fR0Ou_RuvSVexqd7WF5Zw.roa (hash: VeB6BvnRbCRLPDDkoYsxbMM4NdMeIicaUa0njjeL7mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:ce:1a:98:54:cf:84:34:c0:e6:b7:8f:50:4b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577 Validity Not Before: Dec 16 08:01:34 2025 GMT Not After : Dec 17 08:01:34 2025 GMT Subject: CN=b34b6cb95995b61c617178e32d5a368eead39cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:93:c2:55:26:68:b4:3f:dc:af:8d:4c:d6: b7:51:45:26:a8:d9:c5:54:6f:09:65:2d:67:8d:44: 59:6d:18:cb:f1:63:23:ce:c5:4f:c7:04:c5:b8:32: c7:1f:bd:a7:a1:ca:31:ba:bc:a0:ed:b6:12:c9:9e: ff:b7:b4:b2:a5:7a:9e:8b:85:69:13:d9:11:b7:f1: e2:49:f8:28:a1:b4:f4:0b:ba:c4:79:28:4c:8b:ac: 3e:96:fa:29:76:58:4b:6f:dd:a0:20:47:76:69:56: 28:29:0d:a8:7c:68:53:6d:24:b0:46:d6:d8:3c:7e: 13:db:50:aa:bc:65:da:2a:0d:85:4f:0a:b2:b0:9a: 7f:ea:c3:91:af:dc:74:6e:95:59:98:6a:48:35:d5: 37:29:f7:91:e0:19:6d:28:7d:be:b9:ca:cc:d6:00: 14:11:ab:d0:f0:e4:6b:bd:a7:dd:cf:1e:58:39:50: a1:8d:24:00:6a:7c:ff:54:8a:58:e1:a9:97:5d:a4: 99:78:bf:f6:5d:55:71:db:00:ba:b1:12:4d:d1:ed: 90:fd:0b:15:aa:af:7d:a4:40:6b:88:99:76:1c:ef: df:59:ca:a6:86:43:48:14:92:f4:41:80:c1:f5:b7: 70:c9:6a:72:bb:ad:77:bb:57:ca:63:09:b0:78:cb: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:6C:B9:59:95:B6:1C:61:71:78:E3:2D:5A:36:8E:EA:D3:9C:B7 X509v3 Authority Key Identifier: keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e0:2c:c2:5a:f6:51:44:5e:15:73:02:58:7e:66:3c:90:f4: d4:d3:cf:21:57:b8:b6:b1:59:c2:c8:cf:3b:72:3e:d9:ea:b2: b5:e2:ce:51:57:56:44:a0:ec:95:9c:e4:10:da:03:ba:75:ec: c9:b1:cf:4d:b8:a0:16:df:b1:fa:60:ac:25:cf:5b:a1:b9:d4: 0e:6d:d0:b4:18:56:c5:16:91:08:f2:94:5e:c1:52:83:d3:ac: 91:ec:f9:2a:38:52:f9:08:9e:ee:79:fb:e6:5f:b5:e9:66:b2: 30:f1:6d:e0:7e:db:76:48:0e:d7:41:82:5f:5a:0c:3e:a7:0f: 74:c9:62:d0:3b:12:28:d6:80:09:2c:9f:7c:8c:02:a9:0c:94: b2:bf:40:6f:48:76:f6:31:83:c7:2d:e4:be:11:2f:30:3a:e0: 42:fd:5a:27:96:8c:59:31:7f:83:3f:2a:69:bb:d4:fb:0a:3c: 30:3e:4e:1a:df:4a:38:07:6c:21:aa:6f:fa:86:8a:db:fa:50: 8d:1e:db:57:cd:5d:f3:fe:c2:4a:f4:be:53:62:5f:03:02:ea: 33:34:33:ac:1c:82:85:5a:2c:c0:83:d6:c8:2e:33:f8:c1:97: f3:16:7b:6c:d7:f7:1d:cf:54:60:59:b5:b7:98:93:1e:33:d8: f6:60:65:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLc4amFTPhDTA5rePUEvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0 YjI1NzcwHhcNMjUxMjE2MDgwMTM0WhcNMjUxMjE3MDgwMTM0WjAzMTEwLwYDVQQD EyhiMzRiNmNiOTU5OTViNjFjNjE3MTc4ZTMyZDVhMzY4ZWVhZDM5Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+STwlUmaLQ/3K+NTNa3UUUmqNnF VG8JZS1njURZbRjL8WMjzsVPxwTFuDLHH72nocoxuryg7bYSyZ7/t7SypXqei4Vp E9kRt/HiSfgoobT0C7rEeShMi6w+lvopdlhLb92gIEd2aVYoKQ2ofGhTbSSwRtbY PH4T21CqvGXaKg2FTwqysJp/6sORr9x0bpVZmGpINdU3KfeR4BltKH2+ucrM1gAU EavQ8ORrvafdzx5YOVChjSQAanz/VIpY4amXXaSZeL/2XVVx2wC6sRJN0e2Q/QsV qq99pEBriJl2HO/fWcqmhkNIFJL0QYDB9bdwyWpyu613u1fKYwmweMs3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNLbLlZlbYcYXF44y1aNo7q05y3MB8GA1UdIwQY MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt YTliMjc2Njc3M2FhLzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOAswlr2 UUReFXMCWH5mPJD01NPPIVe4trFZwsjPO3I+2eqyteLOUVdWRKDslZzkENoDunXs ybHPTbigFt+x+mCsJc9bobnUDm3QtBhWxRaRCPKUXsFSg9Oskez5KjhS+Qie7nn7 5l+16WayMPFt4H7bdkgO10GCX1oMPqcPdMli0DsSKNaACSyffIwCqQyUsr9Ab0h2 9jGDxy3kvhEvMDrgQv1aJ5aMWTF/gz8qabvU+wo8MD5OGt9KOAdsIapv+oaK2/pQ jR7bV81d8/7CSvS+U2JfAwLqMzQzrByChVoswIPWyC4z+MGX8xZ7bNf3Hc9UYFm1 t5iTHjPY9mBlfA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:18:59 2025 by rpki-client